A regional start. A global direction.

No. Keep Microsoft Defender and other built-in protections enabled. XiGuard adds complementary evidence and decision workflows.

No. Unknown, not-run, partial and error states remain explicit. A changed or unsigned file is not sufficient reason to quarantine it.

Audit records relevant events. Blocking requires an authorized enforcement policy and confirmation of the effective Windows state.

Recovery applies to revisions already retained under the selected storage, key and retention policy. Vault remains planned and its restore workflow needs proof.

No. Analysis of file contents uses local, private AI only. Coming reputation answers send a cloud AI model fingerprints only (never file contents or paths) and are labelled advisory. No AI answer can run an action or change a verdict; an action requires its own authorized workflow.

No. Network observations are collected on the endpoint; customer router configuration or port mirroring is not required.

Configured checks are current and no qualified finding requires attention. Missing or stale required evidence cannot become healthy. No indicator proves every possible threat is absent.

XiGuard Endpoints focuses on device security; XiCenter on management; XiVault on selected-file protection and recovery; XiCompression on exact lossless storage and transfer.

No. They show the platform and architecture roadmap. Release coverage, Linux distributions and Android minimum versions will have their own compatibility matrix.

It identifies the planned intelligence integration for evidence-linked explanations, investigation context and recovery guidance. That integration is not presented as a shipped malware detector or autonomous response engine.

Coming in the next early-access build: yes, one item at a time and only after administrator confirmation. A stopped item can be started again, Disable keeps the original setting so you can undo it, Remove moves the file to quarantine, and Uninstall uses Windows' own uninstaller. Microsoft Defender, XiGuard itself and critical Windows components cannot be changed, and drivers cannot be stopped or disabled.

When community sharing arrives in the app, it will be on by default, with a notice on first run and a one-click Off in Settings. It shares fingerprints only: hash, signer, version, OS and architecture, local verdict and "I trust this" votes. It never shares file contents, paths, user or device names, hardware serials or IP addresses. You can ask us to delete past contributions.