AIAV Antivirus
A cross-platform antivirus that combines signature detection, structural analysis, an optional AI second opinion and live behaviour monitoring — for Windows, macOS and Linux. Currently in beta testing.
- Windows, macOS & Linux
- Real-time protection
- AI second opinion
- Reversible quarantine
Four layers, one engine
Most scanners answer one question: does this file match something we have seen before? AIAV asks four. A signature layer matches known threats by hash and byte pattern. A structural layer scores unknown files on how they are built. An optional AI layer gives a second opinion on the genuinely ambiguous ones. And a behaviour monitor watches what happens on disk after a file runs.
Each layer feeds a single risk aggregator, so a verdict is the product of all the evidence rather than any one test. Every verdict shows its reasoning — you can see exactly why a file was flagged.
The same engine everywhere
Detection logic is written once and shared across Windows, macOS and Linux; only the system hooks differ per platform. A background service does the work, and three front-ends talk to it over a local API: a native Windows desktop app, a browser control panel, and a command-line client for headless servers. None of them contain detection logic, so there is one set of rules to trust rather than three.
Private by design
The API listens on loopback only — nothing is exposed to your network. The AI layer is opt-in and receives derived features, never file contents, so your documents and source code never leave the machine. Third-party keys live in the operating system’s secret store rather than in a config file, and diagnostic reports are aggressively redacted so they are safe to share.
Four layers of detection, one shared engine
Signature detection
Hash and byte-pattern matching, with support for industry-standard definition formats and rule packs, kept current by live threat-intelligence updates.
Structural analysis
Entropy and executable-structure heuristics score files on how they are built — catching packed or malformed binaries with no signature.
AI second opinion
Genuinely ambiguous cases get an advisory triage that can lower a verdict as well as raise it, cutting false positives. Opt-in, and it fails open.
Behaviour monitoring
Watches for ransomware-style write bursts and tampering with canary files, keeping a rolling risk score rather than judging any single event.
Real-time and scheduled
On-access scanning as files are written or opened, plus scheduled sweeps that are jittered and survive a reboot instead of being skipped.
Reversible quarantine
Nothing is deleted. Threats are moved out of harm’s way and stored encrypted, restorable later with their original bytes intact.
Desktop, browser or terminal
A Windows desktop app, a browser control panel and a command-line client — three front-ends over one local API and one set of rules.
Secrets kept properly
API keys are held in the operating system’s secret store, never in plaintext, and are never included in a diagnostics report.
A look inside
Click any screen to enlarge.
Why we built it this way
- One set of detection rules shared across Windows, macOS and Linux — not three implementations to keep in step
- The AI layer never sees your files: it receives derived features only, and if it is unavailable the scan simply continues
- Suspicious files are reported, never removed — only a confident malicious verdict is quarantined
- Allowlist entries are keyed by content hash, so an exemption stops applying the moment the file changes
- Diagnostic reports strip paths, usernames and secrets, so they are safe to paste into a public issue tracker
- Built with 163 automated tests, using harmless standard test artefacts only — never live malware
Test it on your own machines
Tell us a little about your setup and we will get you onto the AIAV Antivirus beta — we install it with you, help you tune it to your environment, and stay close while you test.
- 1We get in touch
Usually within one working day, to understand your environment and what you want to put it through.
- 2We install it with you
A guided install on a machine you choose, with real-time and scheduled scanning tuned to how you actually work.
- 3You test, we listen
Anything it flags wrongly, you can allowlist yourself in seconds — then send us a redacted report so we fix the detection.
- 4You keep the build
Free for the whole beta, with updates as they land, and an uninstaller that leaves your quarantined files alone.
Apply to join the beta
Frequently asked questions
Can it replace my current antivirus?
Not yet, and we would rather say so plainly. AIAV is in beta, has no machine-learning model yet and is not code-signed, so it will miss things a mature product catches. Run it alongside your existing protection while it matures.
Which systems does it run on?
Windows, macOS and Linux. Windows gets a native desktop application; every platform has the browser control panel and the command-line client. Structural analysis currently covers Windows binaries only, so detection of brand-new threats is weaker on macOS and Linux.
Does anything leave my machine?
Your files never do. The optional AI layer sends derived characteristics only — never file contents — and the service listens on the loopback interface, so nothing is reachable from your network.
What happens to a file it flags?
A malicious verdict is quarantined: moved, encrypted, and fully restorable. A suspicious verdict is only reported, so nothing disappears on a maybe. Purging an item from quarantine is the only action in AIAV that destroys a file.
Why does Windows warn me during installation?
The binaries are not code-signed yet, so Windows shows a warning when you install it. Signing certificates are being procured — it is the main thing standing between the beta and a public release. Until then we give you a SHA-256 checksum to verify the installer against.
What does the beta cost?
Nothing. We install it with you and support you throughout. What we want in return is your feedback — particularly anything it flags that it should not, which is the single most useful thing you can report.