Real-time protection
Watches your folders and scans new files as they land, with YARA-X signatures, PE/script heuristics and local threat indicators. High-confidence threats are moved to an encrypted, reversible quarantine.
An antivirus that runs entirely on your PC. Signatures, heuristics and ransomware behavior detection, an encrypted quarantine, and a local AI analyst that explains what it found and why. No cloud, no account, no telemetry.
The installer is not code-signed yet, so Windows SmartScreen may say “Windows protected your PC”. Check the SHA-256 below, then choose More info → Run anyway.
Watches your folders and scans new files as they land, with YARA-X signatures, PE/script heuristics and local threat indicators. High-confidence threats are moved to an encrypted, reversible quarantine.
Correlates bulk file changes, renamed and re-encrypted documents, ransom notes, shadow-copy deletion and optional decoy files into clear, evidence-backed alerts.
An optional on-device language model (any GGUF model) explains detections in plain language, citing only real evidence. It never decides on its own and never sends anything anywhere.
Flags suspicious process chains, encoded PowerShell, new startup entries and unusual connection bursts, with reversible remediation for persistence.
Everything runs on your PC. No file, hash, path or prompt ever leaves it. Optional update checks fetch only a signed list of updates from this site.
Rule updates and new versions are signed with an Ed25519 release key and verified before anything is installed. Tampered or unsigned files are refused.
Compare the installer's SHA-256 with the value below before running it:
Get-FileHash .\AEGIS-AI-Setup.exe -Algorithm SHA256Loading…