Ask any machine what it’s doing
An AI security analyst for macOS, Windows and Linux. A read‑only agent runs the checks, and every answer comes with the evidence attached.
Free for 2 machines100 welcome creditsNo card
- list_processesunsigned_only=true
- outbound_connections
- list_autorunssuspicious_only=true
- recent_changeshours=24 executable_only=true
- event_log
One process stands out. nodeh (pid 4312) is unsigned, runs from /tmp/.cache/nodeh and holds a connection to 203.0.113.5:443. A launch agent written at 01:23 starts it at every login.
Not checked: the event log, because the agent on this machine is not elevated.
Illustrative data: fictional machines, people and addresses.
read-only checks, compiled into the agent
platforms: macOS, Windows and Linux
inbound ports opened on your machines
to install, enrol and connect the agent
Every answer shows its evidence
The checks run on the machine, and the answer quotes what came back and says what it could not see.
Checks run in parallel
One question can start several checks at once: processes, sockets, autoruns, logons and recent changes.
Gaps are reported
If a check needs root, a list is cut short or the machine goes offline, the answer says so.
You set the severity
Save an answer as a finding, set its severity, assign it, and close it when it’s handled.
| Process | Remote | Signed |
|---|---|---|
| nodeh 4312 | 203.0.113.5:443 | unsigned |
| Safari 811 | 198.51.100.24:443 | system |
| nsurlsessiond 402 | 198.51.100.77:443 | system |
| Mail 790 | 192.0.2.41:993 | system |
Unsigned binary in /tmp holding an outbound connection
pid 4312 runs /tmp/.cache/nodeh and holds 203.0.113.5:443. The launch agent that starts it was written 40 minutes before the process started.
Illustrative data: fictional machines, people and addresses.
Running in about a minute
Install one binary, enrol it with a token from your console, and ask.
Install and enrol
One download for macOS, Windows or Linux; the installer checks its published SHA‑256. Enrolling needs a token from your console, so a leaked install command can’t add machines.
Connect it
It connects out to guardyn.dev and stays connected. Nothing on the machine listens for connections.
Ask
Pick a machine and a model, and ask in plain language.
Read-only by design
The checks are built into the agent, and our server can only ask it to run one of them.
What the agent can never do
- Run a commandThere is no shell, script or command tool.
- Change anythingNothing writes, deletes, moves, kills or quarantines.
- Listen on a portIt only connects out.
- Read any file it likesFile contents come back only from a short list of forensic paths, and keys,
.envfiles and credential stores are always refused.
It keeps its own record
Every run is written to an audit log on the machine, so the endpoint has its own account of what was looked at.
A breached server can only read
If our server were compromised, the most an attacker could do to your machines is read from them.
What it can check
33 read-only checks in 8 groups; each machine offers the ones its operating system supports.
What is running
Processes, their ancestry, their signatures and the files they hold open; services, kernel modules and drivers; and one frame of the screen itself.
list_processes process_tree process_open_files list_services loaded_modules screenshot
What is reachable
Listening ports, live connections, where they go, and what resolves them.
list_sockets outbound_connections resolve_host
What is using the machine
CPU and memory by process and by program, the database queries behind a spike, who sent them, and why one app is slow.
resource_usage database_activity app_activity
What survives a reboot
The persistence surface: launchd, Run keys, services, cron, WMI and shell profiles, plus recently installed software and containers.
list_autoruns installed_packages list_containers
Who can get in
Local accounts, administrator membership, recent logons and failed attempts, and certificates someone added to the trust store.
list_users recent_logons list_certificates
What changed
Recent filesystem activity, executables in writable places and file hashes, and the files themselves: find one, inspect it, list a folder, read a config file.
recent_changes find_files hash_files inspect_path list_dir read_text
What the defences say
Antivirus, firewall, disk encryption, SIP, Gatekeeper and Secure Boot; integrity checks, a CIS-aligned benchmark, the event log, and one scan that runs them all.
security_posture cis_benchmark check_integrity event_log full_scan
What the browser has been doing
History, downloads, cookie hosts, and installed extensions with the permissions they hold. Metadata only, never a cookie value.
browsing_history browser_downloads browser_cookies list_browser_extensions
checks in all, up to 32 on any one machine.
screenshot stays off until someone turns it on at the machine itself, and the model never receives the image.
Choose a model, set spending limits
Pick the model for each conversation, and cap what each workspace and person can spend.
Pick the model
Higher plans unlock more capable models: fast on Free, balanced on Starter and frontier on Team.
- Claude Sonnet 5Recommendedbalanced
- Claude Opus 5Deepestfrontier
- Claude Haiku 4.5fast
OpenAI, Google and OpenAI-compatible models will be listed once we turn them on.
Cap the spend
Each question is checked against your balance before it starts, and each model call is charged at its exact cost. One credit is one US cent at retail model prices: the provider’s list price × 3.
A typical question on the balanced tier uses 8 to 25 credits.
Free for two machines, paid plans for more
Every plan has the full read-only tool set; plans differ in credits, machines, seats and model tiers.
Showing monthly prices
Free
Try it on your own machines
+100 welcome credits
Start free- 200 credits a month
- 2 machines, 2 seats
- Fast models
- 1 investigation at a time
Starter
For a small fleet
or $470 a year
Choose Starter- 5,000 credits a month
- 15 machines, 5 seats
- Balanced models
- 2 investigations at once
- 2 API keys
TeamPopular
For a security team
or $1,910 a year
Choose Team- 25,000 credits a month
- 100 machines, 20 seats
- Frontier models
- 5 investigations at once
- 10 API keys
- Audit-log export
Enterprise
For large fleets
Terms agreed with you
Contact sales- 150,000 credits a month
- 5,000 machines, 500 seats
- 20 investigations at once
- 50 API keys
- Audit-log export
Questions
Can the agent be used to attack my machines?
It has no tool that takes a command and none that changes anything. The tool set is built into the binary, so our server can only ask for one of those tools by name. The most a compromised server could do is read from your machines.
Do you train on my data?
No. Evidence from your machines goes to the model provider you selected, to answer your question, and nowhere else. Nothing is used to train anything.
What happens when I run out of credits?
Investigations stop with a message saying how many credits the next one needs. Nothing is deleted, and your agents stay connected.
Is there a minimum term?
No. You pay for a month or a year at a time through PayPal. Nothing renews automatically; three days after paid time ends, the workspace moves to Free and nothing is deleted.
Where does it run?
guardyn.dev is a hosted service. You install the agent; everything else runs on our infrastructure, so there is nothing for you to operate, patch or back up.
Which operating systems are supported?
macOS, Windows and Linux, with one agent binary per platform.
See what’s running on your machines
Free for 2 machines. No card required.