Protection · QUANTOM DOM · AEGIS-Q architecture

The loop that has to finish on the box.

Real-time antivirus, scan, quarantine, a ransomware kill-switch, and tamper protection. QUANTOM DOM is the product; AEGIS-Q is the sovereign post-quantum EDR/XDR architecture underneath. Dual-rail evidence (Algorand nullifier + QRL Merkle) is how you later prove what it did — not how it stops a payload at 02:14.

Get protection See the console

Capabilities

What the agent is for.

01 · On-access

Real-time antivirus

On-access inspection of executables, scripts, documents with active content, and common archive types. Verdicts are local. A cloud reputation lookup is an enrichment, never a hard dependency.

02 · On-demand + scheduled

Scan

Full, quick, and path-scoped scans. Operators can pin a baseline scan after imaging and a deeper pass after a suspected incident. Air-gapped hosts use the last signed definition pack they were given — not a silent empty set.

03 · Contain, do not wish

Quarantine

Suspect objects are isolated with a local evidence record: hash, path, parent process, policy that fired. Restoration is dual-control in managed fleets. There is no 'trust us, it's gone' toast.

04 · Stop the write storm

Ransomware kill-switch

Mass encryption, shadow-copy tampering, and backup-target spraying trip a local kill-switch: suspend the offending tree, freeze further writes to protected volumes, and raise the console. It is a containment action, not a magic decryptor.

05 · The agent guards itself

Tamper protection

Service stop, definition wipe, policy rollback, and clock games are treated as hostile. Uninstall and policy change in managed mode require dual-control. Offline hosts keep the last known-good policy.

06 · No SATCOM required

Air-gap autonomy

Definitions, policies, and kill-switch rules ship as signed packs. The agent continues to protect when every rail is dark. Evidence queues and dual-rails when a path exists. Isolation is a deployment mode, not an apology.

What this is not

Scope, said plainly.

Not a browser antivirus toolbar and not a consumer 'scan now' affiliate funnel.
Not a replacement for backups. The kill-switch buys time; it does not reconstruct what was already overwritten.
Not a claim that every novel payload is caught. Detection efficacy will be published only when a named lab or a reproducible private corpus says so.
Not a cryptocurrency miner, wallet, or token client sitting beside the agent.