K-Guard NGAV
An antivirus that explains what it does
K-Guard scans files on demand, on a schedule and as soon as they are downloaded, using several complementary engines. Suspicious files are placed in encrypted quarantine and can be restored.
The problem
Signatures alone are no longer enough against variants produced in bulk. Several approaches must be combined, without turning the computer into a slow machine or drowning the user in alerts.
What the module does
Multi-layer scanning
Known fingerprints, YARA rules, a machine learning model on executables and cloud reputation.
Download monitoring
At-risk folders (Downloads, Desktop, temporary files) are monitored continuously.
Encrypted quarantine
Isolated files are encrypted on the computer and can be restored by a signed command from the console.
Controlled exclusions
Exclusions by path, fingerprint or signed publisher, managed and logged in the console.
Script analysis
Windows AMSI interface to inspect PowerShell, VBA or JScript at the time they run.
How it works
Detection
The file is examined by the local engines, then by cloud reputation if necessary.
Decision
A file judged malicious is quarantined, and the alert explains why.
Restoration
In case of error, the administrator restores the file with a signed command.
What you should know
- The module is in development and is not yet certified by an independent laboratory.
- No detection rate is published before independent testing.
- To begin with, K-Guard works alongside Microsoft Defender, which stays active.
Frequently asked questions
Questions about this module
Why not replace Defender straight away?
Becoming the main antivirus on Windows requires validations and membership of Microsoft programmes. In the meantime, the complementary mode avoids any gap in protection.
Are my files sent to the cloud?
Not by default: only an anonymous fingerprint is checked. Sending a sample requires the organisation's explicit consent.
Is K-Guard available on iPhone?
No. iOS does not allow files from other apps to be scanned; the iPhone app will offer web, DNS and SMS protection, without being an antivirus.
Want to try this module?
The pilot programme gives you access to modules as they are delivered, free of charge and with no commitment.