PANGUARD AI
Disconnected
COMMUNITY
PROTECTED | -- rules active | Uptime: --
Overview
PROTECTED
Active
All detection layers are operational. PanGuard is monitoring AI agent activity in real time.
Rules Active
--
Threats Detected
0
TC Rules Synced
0
Endpoints Connected
1

### Detection Layers

Three layers operate in series. Pattern match runs first, heuristic correlation enriches matches, confidence verdict decides the response.
Layer A — Pattern match
Active
Layer B — Heuristic correlation
Active
Layer C — Confidence verdict
Active
Uptime
0s
Events Scanned
0
Mode
--
Memory (MB)
0
Recent Events
All clear. No events yet.
Detected events will appear here as they happen.
Threats
Every detected threat is logged here. Malicious events are auto-blocked. Use the severity filter chips to narrow the view.
Upgrade to Pilot — unlock SARIF + Evidence Pack

Timestamp | Rule ID | Severity | Matched Pattern | Action
--- | --- | --- | --- | ---

No threats detected.
Rules
All loaded ATR detection rules. Rules sync hourly from Threat Cloud. Use search and filters to find specific rules.
Total Rules
--
Critical
--
High
--
Last Sync
--
Loading rules...

ID | Title | Severity | Category | scan_target | Status
--- | --- | --- | --- | --- | ---

Skills
All MCP skills detected across your platforms. Whitelisted skills are trusted; unknown skills are tracked for behavior drift.
Total Installed
--
Whitelisted
--
Tracked
--
Blocked
0
All Installed Skills
Loading skills...

# | Name | Platform | Risk | Status | Last Audit
--- | --- | --- | --- | --- | ---

Threat Cloud
Threat Cloud is PanGuard's anonymous threat intelligence sharing network. Your endpoint can upload anonymized threat patterns and receive updated detection rules in return.
Loading Threat Cloud status...

### Connection Status --

--
Rules Received
0
Threats Uploaded
0
Queue
0
Last Sync
--
Flywheel
+----------------+ +----------------+ +----------------+ | Your Endpoint | ---> | Threat Cloud | ---> | Community | | threats in | | aggregation | | rules out | +----------------+ +----------------+ +----------------+ ^ | | | +----------- rules synced hourly ---------------+

### Anonymous Upload

When enabled, anonymized threat patterns are uploaded to Threat Cloud. No personal data, file contents, or source code is sent.
--
Settings
Configure how Guard runs on this endpoint.

### Guard Mode

Learning mode builds a baseline of normal activity. Protection mode actively blocks detected threats.
Learning

### Threat Cloud Endpoint

URL of the Threat Cloud relay. Leave empty for the default panguard.ai endpoint, or specify your own air-gapped relay.
Endpoint
Upload
--

### Dashboard Port

The TCP port this dashboard listens on (localhost-only).
Port

### Language

Choose the display language. Setting is stored locally.
Language
License Tier: --
Community is free and unlimited. Pilot unlocks SARIF + Evidence Pack export and priority Threat Cloud routing.
View pricing →