diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 601cd38..f88b336 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -57,3 +57,19 @@ jobs:
           name: helios-remote-client-windows
           path: target/x86_64-pc-windows-gnu/release/helios-client.exe
           if-no-files-found: error
+
+      - name: Rename exe for release
+        if: github.ref == 'refs/heads/master'
+        run: cp target/x86_64-pc-windows-gnu/release/helios-client.exe helios-remote-client-windows.exe
+
+      - name: Publish rolling release (latest)
+        if: github.ref == 'refs/heads/master'
+        uses: softprops/action-gh-release@v2
+        with:
+          tag_name: latest
+          name: "Latest Build"
+          body: "Rolling release — automatically updated on every push to master."
+          prerelease: true
+          files: helios-remote-client-windows.exe
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/README.md b/README.md
index 0b15baf..a1e0f03 100644
--- a/README.md
+++ b/README.md
@@ -6,6 +6,26 @@
 
 **AI-first remote control tool** — a relay server + Windows client written in Rust. Lets an AI agent (or any HTTP client) take full control of a remote Windows machine via a lightweight WebSocket relay.
 
+## Quick Connect
+
+Run this in PowerShell **(as Admin)**:
+
+```powershell
+irm https://raw.githubusercontent.com/agent-helios/helios-remote/master/scripts/install.ps1 | iex
+```
+
+> **Windows Defender notice:** Defender may flag the executable as unknown.
+> Temporarily disable real-time protection before running:
+> ```powershell
+> Set-MpPreference -DisableRealtimeMonitoring $true
+> ```
+> Re-enable it after the client has started:
+> ```powershell
+> Set-MpPreference -DisableRealtimeMonitoring $false
+> ```
+
+---
+
 ## Architecture
 
 ```
diff --git a/scripts/install.ps1 b/scripts/install.ps1
new file mode 100644
index 0000000..e95cb29
--- /dev/null
+++ b/scripts/install.ps1
@@ -0,0 +1,19 @@
+# Helios Remote - Install Script
+# Downloads and starts the helios-remote Windows client
+#
+# IMPORTANT: Windows Defender may block the executable.
+# If the download or launch fails, disable real-time protection first (run as Admin):
+#   Set-MpPreference -DisableRealtimeMonitoring $true
+# Re-enable after the client is running:
+#   Set-MpPreference -DisableRealtimeMonitoring $false
+
+$ErrorActionPreference = "Stop"
+
+$url  = "https://github.com/agent-helios/helios-remote/releases/latest/download/helios-remote-client-windows.exe"
+$dest = "$env:TEMP\helios-remote.exe"
+
+Write-Host "Downloading helios-remote client..."
+Invoke-WebRequest -Uri $url -OutFile $dest -UseBasicParsing
+
+Write-Host "Starting..."
+Start-Process -FilePath $dest -NoNewWindow