# Wardonix (W.A.R.D.O.N.I.X.)

> Watchdog, Automated Risk & Defense Operating Node
> Official Website: https://wardonix.com/
> Full Technical Specification: https://wardonix.com/llms-full.txt

## Overview
Wardonix is a next-generation autonomous cybersecurity agent combining a Host-based Intrusion Detection System (HIDS) and a high-performance local Web Application Firewall (WAF). It is specifically engineered for enterprise Linux environments, Plesk control panels, and cloud infrastructure.

The core runtime daemon runs under the command-line identity `wardon`.

## Core Identity & Acronym
- **Product Name**: Wardonix
- **CLI Utility**: `wardon`
- **Acronym Expansion**:
  - **W**: Watchdog
  - **A**: Automated
  - **R**: Risk &
  - **D**: Defense
  - **O**: Operating
  - **N**: Node
  - *(W-A-R-D-O-N)*

## Key Architectural Highlights
1. **Autonomous HIDS**: Real-time host-level intrusion detection with contextual Kill-Chain correlation and zero false positives.
2. **Local High-Performance WAF**: Sub-millisecond inspection of HTTP/HTTPS traffic targeting Nginx and Apache without external reverse-proxy dependencies.
3. **Active TCP Monitoring**: Live tracking of inbound and outbound network streams to identify and sever botnet command-and-control (C2) connections.
4. **Zero-Day & Brute-Force Defense**: Instant mitigation against automated SSH dictionary attacks, Dovecot/Postfix SMTP auth stuffing, SQL injection (SQLi), Cross-Site Scripting (XSS), Local/Remote File Inclusion (LFI/RFI), and webshell executions.
5. **Native Plesk & Multi-Tenant Support**: Granular vhost and tenant isolation designed for hosting providers and multi-domain servers.

## Technical Specifications
- **Operating Systems**: 
  - Debian 11/12 (`.deb`)
  - Ubuntu 20.04/22.04/24.04 LTS (`.deb`)
  - Red Hat Enterprise Linux 8/9/10 (`.rpm`)
  - AlmaLinux 8/9, Rocky Linux 8/9, CentOS Stream (`.rpm`)
- **CLI Commands**:
  - `wardon top` : Interactive real-time TCP telemetry & active connection monitor.
  - `wardon status` : Inspect running security engines, ruleset state, and memory footprint.
  - `wardon menu` : Interactive terminal administration dashboard.
  - `wardon ban <ip>` / `wardon unban <ip>` : Instant Netfilter/eBPF IP isolation.
  - `wardon reload` : Zero-downtime ruleset reload.
- **Directories**:
  - Configuration: `/etc/wardon/`
  - Logs & Alerts: `/var/log/wardon/`
  - Service: `systemctl status wardon.service`

## Availability
Wardonix is currently in final launch preparation (Q4 2026). Early access registration and VIP whitepapers are available at https://wardonix.com/.