OpenWrt + AI Real-time defense

Intelligent network defense, right at the edge.

RouterGuardAI is a security-first OpenWrt router that actively monitors traffic, detects threats in real time, and blocks suspicious behavior before it spreads — with predictive analysis that learns your network’s normal.

Zero-trust LAN Intrusion + anomaly Self-healing rules
routerguard@edge:~$ rg status
Model: Sentinel-Edge v0.9
WAN: 1.2 Gbps • LAN: 38 devices
Threats blocked (24h): 128
Anomalies (score>0.8): 3
Active signatures: Zeek + Suricata + ML scorer

routerguard@edge:~$ rg explain last
DNS tunneling pattern detected from IoT-Cam-07
Auto-isolated to guest VLAN, rules hardened
Suggested firmware update available

What RouterGuardAI does

Built for serious security, not gimmicks.
[01]

Active Threat Monitoring

Continuous inspection of wired and wireless traffic with high-fidelity telemetry at the edge.

[02]

Predictive Anomaly Detection

ML models learn your network’s baseline so outliers surface instantly — even without signatures.

[03]

Automatic Containment

Dynamic policy updates isolate rogue clients, quarantine VLANs, or rate-limit suspicious flows.

[04]

Local-First Privacy

Analysis runs on-box. No traffic export, no cloud dependency, no selling your data.

[05]

Self-Healing Firewall

Risk-aware nftables rulesets evolve automatically and roll back safely if needed.

[06]

Home + Pro Modes

Simple defaults for consumers, deep controls for power users and small orgs.

How it works

A layered defense stack designed for the real world.

  • Packet and flow visibility via Zeek and Suricata.
  • Feature extraction to a lightweight on-device scoring engine.
  • Adaptive countermeasures pushed to OpenWrt’s firewall + VLAN controls.
  • Readable alerts: what happened, why it matters, what to do next.
routerguard@edge:~$ rg pipeline
ingest → flows
flows → features
features → score (0.00–1.00)
score → action (allow / limit / isolate / block)

latest score: 0.93 (auto-isolate)
reason: beaconing + rare ASN + payload entropy

Roadmap

Shipping in practical, secure increments.
v0.9

Edge Sentinel Core

Threat scoring, automated containment, early UI, and safe update rails.

v1.0

Queryable Timeline

Natural-language “what happened?” with retention controls and export.

v1.1

Multi-Site Fleet

Optional private controller for small businesses and MSP deployments.

Get early access

Want to pilot RouterGuardAI in a home, lab, or small-business environment? Drop your email and a short note. You’ll be first in line for hardware + beta.