Device-local assessment
Local inspection evaluates available structure, signature and trust signals. Coverage must disclose which engines and services actually ran.
Product privacy stance
Know where processing happens.
Distinguish device-local checks, a customer-approved private analysis service, external hash or URL reputation, and XiGuard's own community reputation service.
Optional private service
A customer-approved private analysis service is a separate processing location, not a public sample service. Define file transfer, retention, deletion and key custody before enabling it.
External reputation
Hash and URL providers may receive a SHA-256 value or source URL under the product data policy. Files are not sent to them; the only automatic file transfer is to XiGuard's own analysis service.
Community reputation (coming)
lookup.xiguard.com is XiGuard's own reputation service. When sharing arrives in the app it is on by default, with a first-run notice and a one-click Off. Only anonymous fingerprints are shared, never file contents, paths, user or device names, hardware serials or IP addresses. A count is published only above a minimum number of devices, and you can ask us to delete past contributions. Hosting in Saudi Arabia for Saudi customers is planned.
Device identity (coming)
Each installation creates its own key pair. The device ID is the fingerprint of its public key, not a hardware serial or Windows identifier. Licence checks and reputation questions are signed with that key; shared fingerprints travel with anonymous single-use tokens that cannot be linked back to the device.
Live threat map
lookup.xiguard.com/map shows the hosting countries of known malicious servers, taken from public threat feeds. It shows the countries of XiGuard devices only where 5 or more devices are counted, and it never stores device IP addresses.