Desktop application · Pre-release project
We see what
you don't.
Quiet, local-first defense for Windows. Every alert explained. Every action yours to confirm.
Illustrative dashboard preview · demo data
- documented security detectors
- 14
- where the optional AI model runs
- 127.0.0.1
- fingerprints for critical files
- SHA-256
- confirm every destructive action
- You
Capabilities
Visibility, with the reasons attached.
Process lineage
Who spawned whom — with common command obfuscation unwrapped.
Beacon-like patterns
Call-home timing that is too tidy — reported as a pattern, not a verdict.
Persistence inspection
Unreadable locations are marked incomplete, never clean.
PINDAI offline scan
SHA-256 fingerprints and a reversible quarantine.
AEGIS analyst
Read-only investigation that explains itself. Its proposals wait for you.
Attack-chain cases
Related events, one timeline, written reasons.
Controlled response
Nothing destructive runs until you confirm it.
System & process visibility
Sign-ins, processes, services, drives and startup entries — each one explained.
Illustrations use demo data
How it works
From a signal to your decision.
Six steps. The last one is always a person — never an automatic destructive action.
01
Observe
Local system signals
02
Detect
Detectors & correlation
03
Explain
Evidence and reasons
04
Investigate
Controlled, read-only tools
05
Recommend
A proposal, with its limits
06
Confirm
A person approves
AEGIS · AI Security Analyst & Defense Agent
An analyst, not just a chatbot.
It reads this machine's telemetry through read-only tools, explains every finding, and proposes — never silently performs — a response.
Rules decide
Risk, confidence, verdicts and proposed actions come from readable, deterministic rules.
Local model narrates
Optional. It may narrate a decided report or pick one read-only tool. It never executes actions.
You confirm
A proposal is not an action. Nothing destructive runs until you approve it.
The AEGIS loop: Detect → Understand → Investigate → Recommend → Respond → Learn
Illustrative AEGIS panel · demo data · mockup control
Privacy
Local-first, by design.
AEGIS sends no telemetry to a cloud AI and makes no remote reputation lookups. Optional integrations only run when you turn them on.
Clear boundaries
What we won't claim.
A tool that hides its limits teaches you to trust it too much.
- 01Detection is not proof of malicious intent.
- 02Regular network patterns can be legitimate.
- 03Sampling can miss some fast activity.
- 04Access restrictions can leave results incomplete.
- 05Detecting every threat is not guaranteed.
- 06Pre-release until readiness is verified.