Windows User-Mode Protection
True Protection watches files and processes on Windows in user-mode. The engine is free to use. JagAI threat intelligence is a paid upgrade. Powered by JagAI, not a third-party brand.
Real-Time Protection
User-mode file watching scans new and modified files. This is not a kernel minifilter.
Behavioral Analysis
JagAI (paid) reviews process behavior that signatures miss. The free engine still scans with community signatures.
Network Controls
Windows Firewall (user-mode) rules and host blocks. Not DPI. Not WFP. Not a WAF or ModSecurity product.
JagAI Intelligence
Paid JagAI classification and reports. Branded JagAI only. Extra seats and org features are paid. There is no File Security, Mail Security, or WAF/ModSecurity SKU.
Ransomware Watch
User-mode process monitoring looks for encryption-like behavior. Not kernel anti-rootkit.
Signature Updates
Community and curated signatures delivered over the API. We do not publish a fake definition count.
Real-Time Malware Protection
The Windows agent watches file changes in user-mode and scans with signatures plus heuristics. Threats can be quarantined from the desktop app. This is not kernel on-access scanning.
- User-mode file change watching
- Signature and heuristic detection
- Quarantine with restore from the desktop app
- Scheduled, on-demand, and quick scans
- Scan exclusion lists
[SHIELD] User-mode protection active
[SCAN] Watching file changes on Windows
[SIG] Signature set loaded from the API
[ALERT] Suspicious file queued for scan
[ACTION] File quarantined
[OK] Desktop app shows the result
[JAGAI] Paid behavioral review
[TRACK] User-mode process watch
[DETECT] Unusual file encryption pattern
[ANALYZE] Behavior flagged for JagAI
[BLOCK] Process stop requested
[OK] Result shown in the desktop app
JagAI Behavioral Analysis
JagAI reviews process behavior on top of the free signature engine. It is a paid upgrade. It is not kernel anti-rootkit, not DPI, and not a third-party AI brand.
- User-mode process behavior review
- Helps catch threats signatures miss
- Encryption-like behavior watch
- Reports in the desktop app and customer dashboard
Windows Firewall Controls
Manage Windows Firewall rules in user-mode and block listed hosts. This is not deep packet inspection, not a WFP callout driver, and not a WAF or ModSecurity product. There is no Mail Security or anti-spam engine.
- Windows Firewall (user-mode) allow and block rules
- Host and domain block lists
- Connection list in the desktop app
[NET] Windows Firewall (user-mode)
[CONN] Live connections in the desktop app
[BLOCK] Rule applied through Windows Firewall
[HOST] Block list match
[SKIP] No DPI, no WFP driver
[JAGAI] Paid threat intelligence
[IOC] Indicators loaded for your plan
[COMMUNITY] Signature review queue
[REPORT] JagAI summary in the dashboard
Telemetry is opt-in. See the privacy policy.
JagAI Threat Intelligence
JagAI adds classification, reports, and extra seats. Org billing is on the customer dashboard, not the operator admin panel. A server counts as one device.
- JagAI threat scanning on paid plans
- Extra seats for more devices
- Community signature submissions
- Customer dashboard for keys and devices
Customer Dashboard
Your account dashboard on this site shows license keys, activated devices, and billing. That is not the operator admin panel. Activate protection in the desktop app with a license key.
- License keys and device list
- Download the Windows MSI
- Paid billing for JagAI and extra seats
- A server counts as one device
Windows first
The public cut is the Windows MSI in user-mode. A Windows Server box uses the same MSI and counts as one device. macOS, Linux, iOS, and Android are not Supported launch platforms.
Windows MSI
Supported (user-mode)
Ready to protect a Windows PC?
Download the Windows MSI. The engine is free to use, proprietary, no trial clock. Upgrade for JagAI and extra seats.