Open Source. Agentic. Transparent.

Tholian Guard

Remote EDR Agent - Coming Soon

Coming Soon...

Tholian® Guard is the remote EDR agent of the Tholian Network. It is currently in active development and is not yet available for deployment.

Guard is being built to close the loop between observation and enforcement. It will enroll once, stay connected, collect incidents continuously, and execute defensive actions under strict control.

What Guard Will Do

  • Enroll with tholian-watchtower using a dedicated enrollment token
  • Maintain a persistent WebSocket connection to the control plane
  • Collect incidents incrementally instead of shipping blind snapshots
  • Execute a whitelisted catalog of Tholian Scout and Tholian Firewall actions
  • Require signed capability tokens before any action is executed

The design keeps the agent powerful enough to defend at machine speed, and constrained enough that remote control remains explicit and auditable.

Open Source. Transparent. Verifiable.

Tholian is the only Agentic Cyber Defense solution that is built Open Source and remains transparent about what it can do. Guard will follow the same model as the rest of the platform. Documented capabilities, inspectable code, and no hidden control paths.

Stay Tuned

Guard will be announced here when it is ready for release. In the meantime, explore the rest of the platform and see how the agents already work together.

Explore the Tholian Platform