Antivirus for the endpoint.
Security context for the whole LAN.
Defendrix combines endpoint protection with bounded LAN and fleet context: confirmed detection evidence can move between eligible peers in bounded, authenticated, replay-resistant messages, while each device keeps authority over its own verdict.
One confirmed incident informs the fleet.
A confirmed incident can distribute an authenticated, bounded observation to eligible LAN peers. Receiving devices validate and log the signal while keeping every protection and remediation decision local.
Endpoint + LAN in one
File scanning, behavior heuristics, self-defense, ARP-poisoning detection, ransomware decoys, and fileless-attack tracing run on each machine. LAN discovery stays local; licensed fleet sync sends documented bounded state to the configured service, and separately enabled remote features use authenticated encrypted transport.
Remote support, built in
Every install gets a 9-digit Defendrix ID. Remote support is off by default, requires an authenticated admin identity plus local opt-in and consent, and expires automatically. Approved sessions use end-to-end encrypted transport.
Identity-bound remediation
Protected OS and Defendrix targets fail closed, while every other file is judged on evidence rather than directory or certificate presence. Quarantine commits authenticated recovery data before an exact file or process identity can be removed.
This is what Defendrix looks like when it works.
The fleet mesh (left) demonstrates authenticated evidence propagation between LAN peers. The activity feed (right) previews how the customer dashboard presents security events.
Both are UX previews. Real detections show in your dashboard once you have Defendrix running.
One Enterprise key covers up to 50 PCs.
Enterprise includes deploy.exe. Run it once on your reference PC, then Sysprep and clone as usual. Each eligible machine claims one licensed seat on first boot while capacity is available, so keys do not need to be typed on every PC.
View activated devices and release eligible non-admin seats from the dashboard after a fresh password check.
Install, activate, and verify protection.
Choose a plan and follow release status
Join the release list while validation completes. When purchases open, a key is issued only after the payment provider confirms the exact subscription.
Install the verified Windows release
After signed artifacts are published, run the standard installer and enter the key in Setup Wizard. Enterprise deploy.exe can preload protected provisioning for unattended first-boot activation. Windows Defender stays untouched.
Review devices and eligible seats
Sign in with the purchasing email to review activated PCs. The dashboard can release eligible customer-managed, non-admin seats after a fresh password check. Permanent self-deletion is a separate irreversible action inside Defendrix and is never presented as a routine dashboard action.
33 user-facing protection controls.
The current client groups 33 explicit controls across core, advanced, system, and network protection. They include Real-time, Firewall, Behavior, USB, Honeypot, Execution Gate, Fileless Detector, Ransomware Correlator, Boot Guard, Self-Healing, Self-Defense, LAN Protection, Zero-Trust Execution, File Provenance, Predictive Propagation, Distributed Deception, LLM Adversary, and Network Graph Anomaly.
Review selected capabilitiesPlanning a Defendrix rollout?
Published plans include the customer dashboard. Enterprise adds the image-bake tool for deploying Defendrix to up to 50 licensed PCs from a prepared Sysprep image.