Defendrix
Defendrix release notes

Changelog.

Every version shipped. Newest first. Security fixes are always called out.

v1.8.5

FEATURE
  • —New: image-bake tool (deploy.exe) for Enterprise plans — Sysprep-friendly zero-touch activation on every clone.
  • —New: customer dashboard with per-device seat reset (retire a PC before you wipe it and the seat comes back automatically).
  • —New: unattended activation flag — pre-seed the license key in HKLM, the agent auto-activates on first launch with no wizard.
Notes

License server: input bounds on IssueKey (days ≤ 100 years, seats ≤ 10 000), admin-action audit logging, per-key abuse monitor (log-only by default).

License server hardening does not go live until the running instance is restarted — this is intentional; we don't kill live tenants without ops approval.

v1.8.4

IMPROVEMENT
  • —Deploy stack: fleet-wide silent install pipeline (Defendrix.Deploy.Core + Discover + WinRm).
  • —LAN protections: ArpWatch + BruteForceGuard added. Threat-IP persistence between reboots.
  • —False-positive guards: safelist gate + IsProtectedProcess check on every heuristic kill/suspend. WinVerifyTrust signature check before any Microsoft-signed binary is touched.
Notes

Protections tab: toggles now route through EngineControl (single source of truth). Fleet-push drift fixed — pushing a policy no longer diverges between the source device and its receivers.

121-test suite passing across the LAN + firewall protection layer.

v1.8.3

FEATURE
  • —Seat lifecycle: Freed tombstone + stale reaper for the recycling-fleet workflow. A retired seat auto-returns to the pool after 90 days offline.
  • —Chassis-stable HWID: motherboard + CPU + disk serials (volatile fallback) — survives Windows reinstalls, so the same physical machine reclaims its seat.
  • —'All seats in use' no longer terminates local state — pool exhaustion is transient, so wiping the client's settings would be an over-reaction.

v1.8.2

IMPROVEMENT
  • —Remote-support pipeline revamp: dirty-tile streaming (RemoteTileFrame 0x84) over the existing Seal transport. Reduced idle bandwidth by 80% on typical desks.
  • —Protocol registry: every custom Defendrix frame ID lives in one place, so a new engine plugging into remote support just registers its frame type.

v1.8.1

FIX
  • —Setup Wizard: sized to 780x560 to keep every step readable without scrolling. Do not grow the window — compact the content instead.

v1.8.0

FEATURE
  • —First public release with the fleet mesh + LAN protection story wired end-to-end.
  • —13 core protection engines available at launch: real-time, firewall, USB, honeypot, behavior, execution gate, fileless detector, ransomware correlator, boot guard, live patch guard, self-healing, self-defense, LAN protection.
  • —Local license server (WPF) for on-prem / air-gapped fleets.

Following along?

The download page always ships the current stable version. Sign in on the dashboard to see the auto-update status for every device you have deployed.