Beta · Windows, macOS, LinuxDownload the latest Beta

How it works

The product, its shapes, and how it adds up.

An interface illustration of XiGuard Endpoints and the XiCenter console, the deployment architectures we support, and how separate security systems and enrolled devices combine into one accountable assessment.

Three states, always honest

Looks safe. Needs review. Needs attention.

XiGuard sorts what it sees into three clear states — and never hides a gap behind a single green badge.

  1. 01Looks safe

    Looks safe

    Your checks are current and nothing needs you right now. No security tool can promise zero risk — this means no finding needs your attention today.

  2. 02Needs review

    Needs review

    Something is unknown, unsigned or new. That is not proof of malware — XiGuard shows what it found so you can decide the next step.

  3. 03Needs attention

    Protection needs attention

    A native protection is off or stale, or a check could not run. XiGuard tells you what is missing instead of assuming everything is fine.

A look at the product

The endpoint app and the XiCenter console.

Two surfaces, one security core. XiGuard Endpoints explains what happened on a single device; the XiCenter console gives a household or business a scoped view across many of them.

XG / ENDPOINT

On the device

The local app shows effective protection state, recent file checks and important changes — with not-run and partial kept visible, never hidden behind a single green badge.

XiGuard EndpointsOverview
Microsoft DefenderReal-time protection on
Active
  • invoice_2043.pdfDownloads · signed · engines agreed
    No finding
  • setup_tool.exeUnknown publisher · reputation not found
    Review
  • New browser extensionBroad permissions · Chrome profile
    Review
  • Outbound connectionAttributed to UpdaterService.exe
    Explained
  • DNS & proxy postureBaseline check unavailable
    Not run
  • Protected folders (CFA)Audit mode · 7 folders
    Native
XG / XICENTER

Across your devices

XiCenter brings signed evidence from enrolled devices into one scoped list — attention first, with policy, permissions and action history kept with an accountable administrator. No customer router.

XiCenterDevices
Workspace9 devices · 1 needs attention
Scoped
  • RECEPTION-01Windows · policy pinned · seen 2m ago
    Healthy
  • SALES-LAPTOP-04File needs review · 1 item
    Attention
  • OWNER-PCFullControl off · managed
    Healthy
  • Signed policyCFA + ASR · audit · read back
    Verified
  • Pending enrollmentWORKSHOP-PC · token issued
    Pending

Interface illustration with synthetic sample data. No real device, file, finding, address or customer is shown.

Architectures we support

From a single device to a managed fleet.

The same host-based agent runs in every shape. A server and the XiCenter console are optional conveniences for visibility and policy — never a requirement, and never a customer router.

01Windows today

Standalone endpoint

  1. Device
  2. Built-in AV
  3. XiGuard agent
  4. Local evidence

One device, no server. Local file, extension and network checks run beside the built-in antivirus. Files stay on the device; only hash or URL lookups and, once available, anonymous fingerprint sharing go out. Sharing is on by default and can be switched off in one click.

02Owned devices

Endpoint + XiCenter

  1. Owned devices
  2. Enroll (signed)
  3. XiCenter
  4. Shared view

A person or household enrolls owned devices to XiCenter for shared visibility. Enrollment is explicit and consented; local protection never depends on it.

03Business target

Multi-tenant business

  1. Org devices
  2. Roles & policy
  3. Tenant console
  4. Audit & recovery

A business gets an organization-scoped XiCenter with roles, signed policy, audit and recovery responsibility — regional-hosted or customer-operated.

04Optional add-on

Optional network sensor

  1. Mirror / sensor
  2. Passive observe
  3. Console view
  4. Alerts only

Host-based detection is the default everywhere. A passive network sensor is only a possible business add-on; it observes, never blocks, and still needs no router change.

How it adds up

We accumulate protection, not replace it.

XiGuard layers on top of what already guards the device, then combines independent security systems into one assessment. XiCenter does the same for devices: many endpoints, one accountable view.

Many systems → one assessment

  • Built-in antivirusMicrosoft Defender stays the real-time AV
    Kept on
  • File scanningClamAV, YARA-X rules and static checks
    Contributes
  • ReputationHash & URL lookups — never the file
    Hash / URL only
  • Browser extensionsInventory + risk across browsers
    Detect-only
  • DNS, proxy & webPosture audit and URL warnings
    Observe / warn
  • Isolated analysisOptional, for an uncertain file
    Optional
  • Community reputationlookup.xiguard.com: anonymous fingerprints, advisory
    Coming
One assessment — gaps stay visible

A single verdict rule combines what ran. Unknown, not-run, partial and error remain real states; a missing engine never becomes a green pass, and nothing is blocked automatically.

Many endpoints → one console

ReceptionSales laptopOwner PC+ more
Scoped and accountable

Each device sends signed evidence over an authenticated channel. XiCenter aggregates it per household or organization with signed policy and audit. Devices pull; no inbound port, no customer router.

Protect what you can't afford to lose.

XiGuard adds a detection-and-review layer on top of the antivirus you already have. Windows is the first platform.

Download