Beta · Windows, macOS, LinuxDownload the latest Beta
XiGuard.
العربيةDownload

The XiGuard product

Device security that works with Defender.

Start with XiGuard Endpoints on Windows: file and download checks, device evidence and a clear review, with Microsoft Defender still your real-time antivirus. XiCenter is the management view; XiVault and XiCompression are planned.

The XiGuard ecosystem

Four products. One connected experience.

Device security, management, file protection and lossless compression — with a clear role for every product.

Windows first

Device security

XiGuard Endpoints

Inspect incoming files, understand suspicious activity and keep your platform’s native protection working alongside XiGuard.

  • File and download checks
  • Endpoint evidence and protection health
  • Review and authorized response

Platforms

  • Windows

    x64 · x86 (32-bit) · ARM

    x64 first · x86 / ARM planned
  • Mac

    Intel · Apple silicon

    Planned adapters
  • Linux

    Across Linux distributions

    Distribution / version matrix planned
  • Android

    Older and current devices

    Version requirements to be announced
  • Apple iPad

    iPadOS companion

    Planned companion
  • Apple iPhone

    iOS companion

    Planned companion
  • Chrome OS

    Android app · managed in XiCenter web

    Planned companion
Explore product — XiGuard Endpoints
Web-first management roadmap

Security management

XiCenter

Bring devices, protection status and review decisions into a clear management experience for households and businesses.

  • Device overview and attention
  • Policy, permissions and action history
  • Separate household and business experiences

Platforms

  • Web

    Browser-based management

    Release-specific web experience
  • Mobile

    Manage from your phone or tablet

    Planned mobile experience
Explore product — XiCenter
Planned file-protection workflow

File protection & recovery

XiVault

Keep selected document history, inspect retained versions and restore verified files when you need a way back.

  • Selected-file revision history
  • Authorized restore and read-back
  • Local and approved storage choices

Platforms

  • Windows

    Protected folders and document history

    Planned integration
  • Mac

    Authorized files and document history

    Planned integration
Explore product — XiVault
Candidate technology · integration planned

Lossless storage & transfer

XiCompression

Make selected archives, revision histories and approved transfers more efficient while preserving the original bytes.

  • Scriptable archive workflows
  • Exact lossless reconstruction
  • Measured profiles for the workload

Platforms

  • CLI

    Command-line workflows

    Release-specific candidate
  • Windows

    Desktop and CLI direction

    Windows candidate
  • Mac

    Desktop and CLI direction

    Planned qualification
Explore product — XiCompression

Platform icons show release direction, not a promise of support for every OS version.

Endpoint protection · architecture coverage

Every device family. Every architecture.

XiGuard Endpoints targets these platforms and CPU architectures. Windows x64 is first; everything else is a planned or upcoming target with its own release and qualification.

Every device family. Every architecture.
Platformx8632-bitx6464-bitARMARM64
WindowsDesktop & laptopx86 — Plannedx64 — FirstARM — Planned
Windows ServerServer editionsx86 — Plannedx64 — PlannedARM — Planned
Mac · IntelIntel-based Macx86 — Not a targetx64 — PlannedARM — Not a target
Mac · Apple SiliconM-series SoCx86 — Not a targetx64 — Not a targetARM — Planned
LinuxDesktop distributionsx86 — Plannedx64 — PlannedARM — Planned
Linux ServerServer distributionsx86 — Plannedx64 — PlannedARM — Planned
Raspberry PiARM single-boardx86 — Not a targetx64 — Not a targetARM — Planned
NAS storageNetwork storage appliancesx86 — Not a targetx64 — Coming soonARM — Coming soon
AndroidPhones & tabletsx86 — Not a targetx64 — PlannedARM — Planned
iPhone & iPadCompanion appx86 — Not a targetx64 — Not a targetARM — Planned
Chrome OSAndroid app · webx86 — Not a targetx64 — PlannedARM — Planned
Command-line (CLI)Scriptable buildsx86 — Not a targetx64 — PlannedARM — Planned
  • First
  • Planned
  • Coming soon
  • Not a target

Windows x64 ships first. Other cells are planned directions or coming soon — not a promise of support for every OS version or device.

01

Files & downloads

Understand what arrives.

We run several checks on a file or link and give you one clear result — and tell you if a check couldn't run.

Release-specific coverage
Scope & prerequisites

Windows implementation; engine placement and coverage depend on the release and selected analysis service. External reputation receives hashes or URLs.

What earns this promise?

A planted safe test plus a normal signed-file control, honest failure states, and byte-verified quarantine restoration.

02

Endpoint activity

Connect the important changes.

Startup items, services, drivers, browser extensions, process-linked connections and causal observations help explain activity after installation. Each startup item and service gets a review-priority score, which is not a safety verdict.

Release-specific coverage
Scope & prerequisites

Some protections stay off until we have tuned them for everyday use — we switch them on only when they are ready. The startup, services and drivers lists, and the reversible actions you can take on them, are coming in the next early-access build.

What earns this promise?

Planted persistence and extension cases, normal updates, reliable process attribution and a named false-positive corpus.

03

Documents & recovery

Protect work. Preserve a way back.

Native folder controls complement XiVault’s planned selected-document history and verified restore. Recovery concerns versions already retained.

Native controls · audit-first
Scope & prerequisites

CFA and the ransomware ASR rule default to audit. Enforcement needs authorized policy and read-back. Ransomware-behaviour detection is alert-only today; pausing a process and XiVault are separate planned work.

What earns this promise?

Effective OS mode, proven attribution, independently protected retention and hash-verified revision restore.

04

Protection health & integrity

Check the state. Verify the repair.

Make effective protection mode and freshness visible. Planned system integrity uses scoped comparison and Windows-native repair.

Planned capability
Scope & prerequisites

Protection-state visibility exists; broader posture and system-file integrity are roadmap work. Repair never copies system files from peers.

What earns this promise?

Version-aware controls, authorized SFC/DISM, recorded result and re-hashing.

05

Isolated deep analysis

Look beneath an uncertain file.

A bounded isolated environment can gather additional evidence about a selected suspicious file. Unpacking expansion remains planned.

Release-specific coverage
Scope & prerequisites

The lab has VM/sandbox drivers. This is an optional service with isolation and authorization requirements, not a capability on every consumer device.

What earns this promise?

Disposable-environment execution only, bounded analysis budgets and explicit incomplete results.

06

OmegaBrain intelligence

An explanation you can inspect.

The OmegaBrain integration roadmap brings evidence-linked explanations, incident context and recovery guidance to XiGuard.

Planned capability
Scope & prerequisites

This intelligence integration is planned. Detection, native protection and action permissions keep their own responsibilities.

What earns this promise?

Supported facts link to observations; unrelated events stay separate; AI cannot execute or create a malware verdict.

07

Community reputation network

Shared fingerprints. Advisory answers.

lookup.xiguard.com is XiGuard's own reputation service, with a public status page and a live threat map. In upcoming app releases, devices can look up a file's reputation and share anonymous fingerprints instead of file contents.

Release-specific coverage
Scope & prerequisites

The status page and threat map are live. Sharing from the app is coming: on by default, with a first-run notice and a one-click Off. Only fingerprints are shared (hash, signer, version, OS and local verdict), never file contents, paths, user or device names, or IP addresses. Counts and votes are advisory and never change a verdict on their own. Update packages are signed; there is no internet peer-to-peer.

What earns this promise?

Contributions use unlinkable single-use tokens, a count is published only after enough distinct devices report it, and a known-bad file can never be marked trusted. A vote does not prove a file is safe.

08

Platforms & editions

The right coverage for each device.

A shared Rust core with OS-specific adapters and separate individual and business deployments.

Release-specific coverage
Scope & prerequisites

Windows first. macOS/Linux need their own qualification. Mobile uses platform-limited capabilities; iOS is a companion model. Multi-tenant SMB remains a target.

What earns this promise?

Platform permission and lifecycle checks, tenant isolation, accessible EN/AR interfaces and measured overhead.

Network, web & extensions

The other systems XiGuard watches.

Detection-only layers that sit beside file scanning. Each one observes and explains; none of them blocks, rewrites or removes on its own.

01

Your built-in antivirus

Defender stays the real-time AV.

XiGuard runs on top of Microsoft Defender and each OS's native protection. It adds evidence and review; it never replaces, weakens or excludes the built-in antivirus.

Native controls · audit-first
Scope & prerequisites

XiGuard does not register as the system AV or turn protection off. It surfaces effective protection state and, by authorized policy, enables native controls in audit first.

What earns this promise?

Compared against a Defender-on baseline; effective OS mode is read back, not assumed.

02

Browser extension protection

See every extension and its risk.

Inventory browser extensions across Chrome, Edge, Brave and Firefox and flag risky permissions, remote code and known-bad IDs.

Release-specific coverage
Scope & prerequisites

Shipped default-off; enable per device. Inventory and detection only — XiGuard never removes or disables an extension on its own.

What earns this promise?

Planted over-permissioned and known-bad test extensions fire; an ordinary developer or unpacked extension is not called malware.

03

Network activity detection

Link a connection to the app behind it.

Host-based, per-process connection observations with IP reputation, so an unexpected outbound connection is tied to the responsible application.

Release-specific coverage
Scope & prerequisites

Observe-only on the endpoint; relevant detectors are default-off and qualified per release. No router, port mirroring or network appliance, and no traffic blocking.

What earns this promise?

A planted beacon is attributed to its process; ordinary update and sync traffic is not treated as a threat.

04

DNS & proxy posture

Notice when name resolution drifts.

Audit the hosts file, system proxy and PAC, NRPT and adapter DNS against a signed baseline, with canary resolution through a trusted resolver.

Planned capability
Scope & prerequisites

Detection-only posture audit. XiGuard does not rewrite the resolver, sinkhole DNS or block connections.

What earns this promise?

A planted hosts, proxy or DNS change is detected as drift; an ordinary VPN or corporate resolver is explained, not flagged as malware.

05

Web & phishing-URL warning

A warning before a risky page.

Resolve requested domains from on-device events and check URL reputation to warn on likely phishing or malware links.

Planned capability
Scope & prerequisites

Warn-only and URL-only. An optional companion browser extension reports the page; it never silently blocks, sinkholes DNS or drops the connection. A lookalike-domain check is in development and will ship switched off.

What earns this promise?

A known-bad test URL raises a warning; a normal site is not blocked. Only the URL, never page content, is sent to a reputation provider.

Powered by OmegaBrain.aiPlanned intelligence layer

Evidence into understanding

A clearer answer. A traceable reason.

The OmegaBrain integration roadmap brings evidence-linked explanations, incident context and recovery guidance to XiGuard.

  • Explain supported alerts
  • Connect incident evidence
  • Guide recovery reviews

This intelligence integration is planned. Detection, native protection and action permissions keep their own responsibilities.

Explore the intelligence layerVisit Omega Brain

Protect what you can't afford to lose.

XiGuard adds a detection-and-review layer on top of the antivirus you already have. Windows is the first platform.

Download