Which version is being flagged? Whenever I create a redbean binary, I always ask Microsoft to whitelist it using this form https://www.microsoft.com/en-us/wdsi/filesubmission They told me the false positives on the 2.0.16 release had been removed. The thing that sucks though is if you change the binary, for example adding an .html file to it using PKZIP (rather than using -D DIR to serve a local directory) then you have to upload and report your modified redbean to Microsoft 'security intelligence' yet again because Microsoft's security tools aren't very smart, and they're biased against open source developers.

For sure :( We are at least v aware about it and basically need a person at Microsoft to be really chill

https://twitter.com/JustineTunney/status/1541801499210092544

A very narrow slice of what Justine said in Discord: "But yes, at least one employee at Microsoft has to vouch for the project, or else Windows support won't be able to continue."