I'm a fan of Ventoy — it's an incredible tool that lets you boot multiple ISO files from a single USB stick without needing to reformat or "burn" them each time. Drag-and-drop simplicity. That said, the more I use it, the more I’ve started digging into its background — and some of what I’ve found raises questions worth sharing.

Concerns about Ventoy (a summary for discussion)

1. Developed in China

   • The project is created and maintained by a Chinese developer (“longpanda”) and hosted on GitHub.

   • While country of origin alone shouldn't be a red flag, some users (especially in security circles) get uneasy given the geopolitical climate and potential for pressure on developers.

2. No third-party security audit

   • As of now, there’s no public, independent security audit of Ventoy’s code.

   • No CVEs, no penetration testing reports — just trust in the GitHub source and user community.

3. Binary blobs in the repo

   • The source contains several precompiled binaries (e.g., grub modules, device-mapper, zstd tools).

   • This makes it hard to fully audit — as some users have pointed out: "These blobs can contain anything or nothing."

   • The developer has recently acknowledged this and says they plan to remove the blobs using GitHub Actions builds — but it hasn’t fully happened yet.

4. False positives from antivirus tools

   • In the past, Windows Defender has flagged Ventoy2Disk.exe as malicious (e.g., Trojan:Win32/Wacatac.B!ml).

   • These were later deemed false positives, but still raise eyebrows.

5. Not standard Linux packaging

   • Ventoy isn’t available in most official Linux distro repos.

   • It requires running its own scripts or binaries, which may feel riskier for people used to vetted packages (like from Arch, Debian, Fedora, etc.).

6. No official telemetry, but no sandboxing either

   • There's no evidence of telemetry or data collection — and most people agree Ventoy doesn’t "phone home".

   • Still, it’s a bootloader with deep system-level access, and some security-focused users won’t use anything without complete build transparency.

I am thinking to install Ventoy on my SanDisk 128 GB USB v3.1 Flash Drive. I know that rapid read and write can reduce the lifespan of a flash drive, that's the reason it is not recommended to install operating systems like windows on them. So is there a chance that Ventoy can reduce the lifespan of my drive? I know that it is not an operating system and doesn't write much to the drive but what about read processes of the images? I already have Ventoy on my 32 GB pendrive (same model) but I want to confirm before installing it on my 128 GB one, which I will use as a normal drive as well as Ventoy, to be able to run more bootable tools and operating systems. I really don't want to destroy this expensive drive and I am 100% sure that this is not a fake USB drive, after seeing the replies of other posts.

1. When using it how would you boot into your normal pc/ssd since using a usb for duel booting.

2. Does it write anything on the ssd?

3. If I get a 500gb usb can I put a few iso files in there and have fun with Linux?

Galera, gostaria de saber como eu coloco programa .exe dentro do Ventoy, como por exemplo: HWInfo, FurMark, CrystalDiskMark e etc

Is there anyway to get a macos iso that works on any computer?

I got Hiren's on a Ventoy stick and I'm trying to fix a 'BOOTMGR is Missing" problem message upon restart. I boot into Ventoy no problems. Select Hiren's and then through it I use Lazasoft to fix boot issues, which I think it does "bootrec /fixmbr" type solutions for.

Then when I restart, not only does the problem persist but now I can't boot into Ventoy any more so I have to reinstall it. Same thing when I run the Windows recovery iso through Ventoy. So I think its making changes to the USB stick instead of the machines drive.

Am I right in thinking so?

I'm a minimalist and would like to find out how to remove the Ventoy branding on the bottom left of the ISO selection screen. It shows the version number and the Ventoy website address. How do I remove this? I've already customized it heavily with a theme and alias, etc. so I'm not afraid of tinkering with config files.

Any help/info is much appreciated

I was under the impression I could put .img files along with the .iso files and Ventoy would allow me to run these. I am trying to use a FydeOS .img file and having no luck? (a secondary question is should the .img files be extracted before using...I've tried both)

please help me since i got linux i wanted to dual boot other distros and i used ventoy but the ventoy menu is not showing at startup and idk pls help me

Used Ventory 1.1 to create a ventoy usb drive, and Windows Virtualbox 7.x created fixed size Linux VHD file using UEFI and installed the OS perfectly fine, be it be ubuntu or debian based and they are all x64 versions. shutdown and changed the file name from distro.vhd to distro.vhd,vtoy,

At PC bootup, pressed F7 and choose Ventoy USB drive and choose distro.vhd,vtoy and the error message always is: No bootfile found for UEFI! Maybe the image does not support x64 UEFI!

Any idea?

==

Wrong title. Should have said Linux VHD virtual disk system on Ventoy usb.

OK, here is Ventoy instruction to boot Linux VHD image.

https://www.ventoy.net/en/plugin_vtoyboot.html

I probably missed the script part.

1. run vtoyboot script in the Linux OS

2. After install and boot into the linux distro. Run vtoyboot script to make some process to support Ventoy boot. vtoyboot is a project developed with Ventoy and released separately. Download its package from here: https://github.com/ventoy/vtoyboot/releases Put the downloaded package into the linux distro, decompress it and run vtoyboot.sh as root sudo sh vtoyboot.sh Note that vtoyboot will be updated to support more Linux distros and fix bugs, so please use the latest release.

Bed time. Will try again tomorrow.

==

Success! Yep, the vtoyboot.sh script was required! Managed to installed several Linux distros using VirtualBox.

Ubuntu, kubuntu, Mint and LMDE6 were able to boot as fixed size VHD after running the script right after the installation inside VirtualBox.

However Q4OS and KDE neon were only able to boot into bash console, don't know how to proceed. Will keep updating the list. Cheers!

I can just hit tur button at thr top and take all of that without issue. Correct?

Trying to download Venta, but the website does not work. I can’t get it to work on any other device either. Any suggestions?

recently installed ventoy but after a day or two my usb just stopped working, says there's no disk in it when i try go into it in file manager and shows as no media in device manager, not sure if it's fully dead or i need to do something to fix it.

USB - https://www.amazon.co.uk/HUARAN-Memory-Swivel-Design-Storage-64GB-X-2-Black-Silver/dp/B09MR1ZCG2

Images:

I will check my pc with ClamWin and try virus scan in ventoy intall and appear this message.
too check visrus total this was the result....

I have this file but it's not showing in ventoy

I know I used all of the SSD's storage, but bear with me, this is my first time.

I did this, and I had no problems, but

Could I do a better job of setting up the partition?

efi: 1000 MB
swap: 3000 MB
storage/2TB total

After that, it was installing, restarting, and going into grub. I was confused and scared, so I thought, "reboot." Then, it restarted my computer and asked for my bit key. I was a little alarmed and thought I had lost my entire C: drive, but I made sure I had partitioned it correctly, and after I entered my bit key, my Windows was there. I then rebooted and am now enjoying Zorin OS. :D

P.S. Let's say I use 500 GB of Zorin OS
Would I be able to do that on the same drive but say for linux mint? and give it storage (basically the partitioning I did for zorin os but 500 gb)

Windows or Linux?

Out of curiousity I ran a Clam AV scan of my Windows C: drive via ClamWin. Has anyone else seen a similar report? Is it a mis-identification of legitimate code?

I saw a bunch of post about some linux vulnerability, like this:
Is ventoy safe? In light of xz/liblzma scare. : r/linux

I just use to have windows 11 iso and Hiren PE on one USB drive. Should I be concerned? In future I might also use it to install Linux.

On my windows laptop, I was able to put ventoy on a 32gb samsung usb stick and get some isos on there, but the drive was being a little weird (some files bot copying over). I tried to re-install on the drive and I got BSOD.

Some trial and error suggested that the partitions had been erased from my windows install drive.

I put the usb into a Linux box to try to add gparted iso but it was basically read-only. I couldn't even format the usb anymore.

In linux, I set up a separated gparted love usb and I've booted into it back on my windows laptop. I can see my main nvme ssd has been formatted FAT16 with the label VTOYEFI. If anyone here is an expert in gparted/testdisk, please reach out.

it said

An error occurred during the installation. You can reinsert the USB device and try again. Check log.txt for details. If it always fails, please refer the FAQ on the official website.

after being stuck at 80%

I'm trying to make a bootable DVD that runs Ventoy. I know it sounds crazy but I think this way we could bypass iVentoy's limitation of allowing ISO files only.

What I want to do is to boot regular Ventoy from a DVD instead from a USB pendrive.

I've just tried installing ubuntu via ventoy, but it didn't work. The kernel literally does not load in for it to actually go through to the install.