Al-LLM powered eBPF based security platform

5 pointsgaurav10865 comments

There’s a growing need for a lightweight, AI-LLM + eBPF-powered EDR/XDR solution that works for both large and small enterprises — and is actually affordable.

We’ve built a self-managed EDR/XDR platform that combines real-time intrusion detection, enhanced user activity logging, and sensitive file monitoring, all driven by eBPF for deep system visibility. It’s designed to be efficient enough for thousands of endpoints, and comes with a clean, dual-dashboard UI (main + per-server) for managing everything at scale.

Works seamlessly across 1000s of servers Detects file access/modifications (e.g. /etc/passwd) Logs detailed user behavior and suspicious command activity Blocks malicious IPs across server groups with 1 click AI-assisted alert classification and risk scoring

Here’s a quick 2-minute demo: https://youtu.be/16BvgmfiYzQ — would love your thoughts!

View on HN

- technological advantage (ebpf + AI/LLM) - lightweight, uses very less resouces than other heavy/bloated solutions - seamless installation. - highly customizable and fast shipping compared to existing solutions. - can create custom rules to raise alerts on any file, commands, uid, gid, port, ip etc. - XDR: automated response/blocking of malicious ip/port.

- technological advantage (ebpf + AI/LLM) - lightweight, uses very less resouces than other heavy/bloated solutions - seamless installation. - highly customizable and fast shipping compared to existing solutions like splunk, wazuh, sentinel one etc. - can create custom rules to raise alerts on any file, commands, uid, gid, port, ip etc. - XDR: automated response/blocking of malicious ip/port.