Checks and coverage
An engine that did not run is not-run. Partial work stays partial; failures are errors. Product evidence names the build, environment and contrary control.
Trust & evidence
Know what supports the promise.
Architecture is an explanation. Product control cases, effective settings and verified outcomes are the evidence.
XG / EVIDENCEConceptual architecture · not a live dashboard
Evidence path
XG / TRUST
Detection, protection and recovery have separate prerequisites. Unknown is never treated as clean.
Explore the product, its layered checks and their actual prerequisites. Planned recovery, intelligence and wider platform coverage are qualified separately.
Explore capabilitiesPrivate processing
File contents and private AI stay inside the approved private environment, and files are sent automatically only to XiGuard's own analysis service. Public reputation receives hashes or URLs. Coming community sharing sends anonymous fingerprints only; it is on by default with a one-click Off. Optional analysis transfer must disclose consent and custody.
Control stays explicit
No automatic process killing or network blocking. Changes to startup items and services are user-initiated, confirmed by an administrator, audited and reversible. Community votes and AI output have no command authority. Privileged remote actions use their own pinned offline-key channel and guardrails.
Honest residual risk
A user-mode agent can be stopped by an administrator-level attacker. Independently enforced native policies and suitably protected retained storage define the remaining backstops.
Alongside your antivirus
Microsoft Defender stays the Windows real-time antivirus. XiGuard never registers as its replacement, weakens it or adds exclusions — it adds a second layer of evidence and review. Compare real outcomes against a Defender-on baseline.
Protect what you can't afford to lose.
XiGuard adds a detection-and-review layer on top of the antivirus you already have. Windows is the first platform.
Download