diff --git a/main/packages.nix b/main/packages.nix
index 91467d9..6de9060 100644
--- a/main/packages.nix
+++ b/main/packages.nix
@@ -164,6 +164,7 @@ in
         srv
 
         # security
+        yar
         yubikey-manager
 
       ] ++ lib.optionals stdenv.isLinux ([
diff --git a/overlays/default.nix b/overlays/default.nix
index 6b28c82..69274ee 100644
--- a/overlays/default.nix
+++ b/overlays/default.nix
@@ -2,9 +2,10 @@ final: prev: {
 
   aws-connect = prev.callPackage ./aws-connect { };
   lpass = prev.callPackage ./lastpass { };
+  changedetection.io = prev.callPackage ./changedetection.io { };
   rfd = prev.callPackage ./rfd { };
   srv = prev.callPackage ./srv { };
   vpngate = prev.callPackage ./vpngate { };
-  changedetection.io = prev.callPackage ./changedetection.io { };
+  yar = prev.callPackage ./yar { };
 
 }
diff --git a/overlays/yar/default.nix b/overlays/yar/default.nix
new file mode 100644
index 0000000..5b8b2f7
--- /dev/null
+++ b/overlays/yar/default.nix
@@ -0,0 +1,22 @@
+{ lib, fetchFromGitHub, buildGoModule }:
+
+buildGoModule rec {
+  pname = "yar";
+  version = "master";
+
+  vendorSha256 = "sha256-bBaAP9HQ1fG6gPtoYg9HXnv53DueAFnT4OHE4rwlxvA=";
+
+  src = fetchFromGitHub {
+    owner = "nielsing";
+    repo = "yar";
+    rev = version;
+    sha256 = "sha256-f7pTS5Ur8ImbIkPkyunyQEgpeF79CIQFEodg69VxA9I=";
+  };
+
+  meta = with lib; {
+    description = "Yar is a tool for plunderin' organizations, users and/or repositories.";
+    license = licenses.gpl3;
+    maintainers = with maintainers; [ davegallant ];
+    platforms = platforms.linux ++ platforms.darwin;
+  };
+}