> ## Documentation Index
> Fetch the complete documentation index at: https://docs.panguard.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Product Overview

> Panguard AI -- the open standard for AI agent security. Three pillars: ATR (the standard), Threat Cloud (collective immunity), Guard (the engine).

## What is Panguard AI?

Panguard AI is an open-source security platform purpose-built for the AI agent era. As AI agents (Claude Code, Cursor, QClaw, OpenClaw, Codex CLI, WorkBuddy, NemoClaw, ArkClaw, Windsurf, Cline, VS Code Copilot, Zed, Gemini CLI, Continue, Roo Code) gain root access to production systems, Panguard provides the first open standard for detecting and blocking agent-level threats.

**Three pillars. One mission: secure every AI agent.**

1. **ATR (Agent Threat Rules)** -- The open standard for AI agent threat detection (768 rules, 10 categories, OWASP 10/10)
2. **Threat Cloud** -- Collective immunity network that gets stronger with every install (11 intel sources, hourly sync)
3. **Guard** -- The enforcement engine with Skill Auditor, threat blocking, and auto-response (768 ATR rules)

## Three Pillars

<CardGroup cols={3}>
  <Card title="ATR -- The Standard" icon="file-code">
    **768 rules across 10 threat categories. OWASP 10/10.** The first open standard for AI agent threats --
    purpose-built for prompt injection, tool poisoning, skill compromise, and agent manipulation.
    YAML-based, human-readable, machine-enforceable.
  </Card>

  <Card title="Threat Cloud -- The Network" icon="globe">
    **Collective immunity.** Every Panguard install contributes anonymized threat signals. The
    pipeline auto-generates ATR rules from real-world attacks via Claude Sonnet 4 LLM review. 11
    threat intel sources, 5,000+ validated IoC records, synced every hour.
  </Card>

  <Card title="Guard -- The Engine" icon="shield-halved">
    **768 ATR detection rules.** A 4-agent AI pipeline (Detect, Analyze, Respond, Report) processes
    OS-level events through ATR rules. Built-in Skill Auditor gates every AI skill before install.
    Auto-response blocks IPs, kills processes, quarantines files.
  </Card>
</CardGroup>

## Additional Tools

<CardGroup cols={2}>
  <Card title="Panguard Scan" icon="magnifying-glass">
    **60-second security audit.** One-time scan producing a risk score (0-100, grades A-F), PDF
    report, and compliance reports (ISO 27001, SOC 2, TCSA). Covers ports, services, firewall,
    SSL/TLS, password policy, and CVE lookup. MIT licensed.
  </Card>

  <Card title="MCP Server" icon="plug">
    **AI assistant integration.** 12 MCP tools let Claude Desktop, Cursor, and Claude Code control
    Panguard directly through natural language.
  </Card>

  <Card title="Skill Auditor" icon="clipboard-check">
    **Pre-install security gate.** 8-check analysis of AI skill manifests for prompt injection, tool
    poisoning, secrets, and unsafe dependencies before installation.
  </Card>
</CardGroup>

## Three-Layer AI Architecture

Panguard uses a layered AI funnel that balances speed, cost, and accuracy. Each layer handles progressively fewer -- but more complex -- events.

| Layer       | Technology                 | Handles       | Latency | Cost           |
| ----------- | -------------------------- | ------------- | ------- | -------------- |
| **Layer 1** | ATR rules engine           | 90% of events | \< 50ms | \$0            |
| **Layer 2** | Local AI (Ollama)          | 7% of events  | \~2s    | \$0            |
| **Layer 3** | Cloud AI (Claude / OpenAI) | 3% of events  | \~5s    | \~\$0.008/call |

<Info>
  **Resilient by design.** If Cloud AI is unavailable, Local AI takes over. If Local AI is down, the
  rules engine keeps running. Protection never stops.
</Info>

For a deep dive into the AI architecture, see [Three-Layer AI](/concepts/three-layer-ai).

## Technology Stack

| Category             | Technology                               |
| -------------------- | ---------------------------------------- |
| Language             | TypeScript 5.7 (strict mode)             |
| Runtime              | Node.js 20+                              |
| Monorepo             | pnpm 10 workspaces                       |
| Testing              | Vitest 3 (3,583 tests / 165 files)       |
| Detection Rules      | ATR (768) -- OWASP Agentic Top 10: 10/10 |
| AI Providers         | Ollama (local) + Claude / OpenAI (cloud) |
| Internationalization | English + Traditional Chinese            |
| Encryption           | AES-256-GCM                              |
| License              | MIT                                      |

## Platform Support

Panguard integrates with 17 AI agent platforms via MCP or native Skill protocol:

| Platform            | Protocol     | Config Path                                |
| ------------------- | ------------ | ------------------------------------------ |
| **Claude Code**     | MCP          | `~/.claude/settings.local.json`            |
| **Claude Desktop**  | MCP          | `~/Library/.../claude_desktop_config.json` |
| **Cursor**          | MCP          | `~/.cursor/mcp.json`                       |
| **Hermes Agent**    | MCP          | `~/.hermes/config.yaml`                    |
| **OpenClaw**        | Native Skill | `~/.openclaw/skills/panguard/SKILL.md`     |
| **Codex CLI**       | MCP          | `~/.codex/mcp.json`                        |
| **WorkBuddy**       | MCP          | `~/.workbuddy/.mcp.json`                   |
| **NemoClaw**        | MCP          | `~/.nemoclaw/mcp.json`                     |
| **ArkClaw**         | MCP          | `~/.arkclaw/mcp.json`                      |
| **Windsurf**        | MCP          | `~/.windsurf/mcp.json`                     |
| **QClaw**           | MCP          | `~/.qclaw/mcp.json`                        |
| **Cline**           | MCP          | `~/.cline/mcp.json`                        |
| **VS Code Copilot** | MCP          | `~/.vscode/mcp.json`                       |
| **Zed**             | MCP          | `~/.zed/mcp.json`                          |
| **Gemini CLI**      | MCP          | `~/.gemini/mcp.json`                       |
| **Continue**        | MCP          | `~/.continue/mcp.json`                     |
| **Roo Code**        | MCP          | `~/.roo-code/mcp.json`                     |

All platforms are auto-configured with a single `panguard setup` command.

<h2 id="open-source">
  100% Open Source
</h2>

Panguard AI Community is released under the [MIT License](https://github.com/panguard-ai/panguard-ai/blob/main/LICENSE) -- full source, unlimited self-host, no signup required. Every line is auditable. For production deployments at F500 scale, Enterprise ($150K-500K / year), Migrator Pro ($500K-2M / year), and Sovereign (\$5-20M / nation) tiers add signed, continuously re-scanned compliance evidence, airgap deployment, and SLA. See [pricing](https://panguard.ai/pricing).

<CardGroup cols={2}>
  <Card title="View on GitHub" icon="github" href="https://github.com/panguard-ai/panguard-ai">
    Browse the source code, report issues, or contribute to the project.
  </Card>

  <Card title="ATR Rules on GitHub" icon="file-code" href="https://github.com/Agent-Threat-Rule/agent-threat-rules">
    Contribute ATR rules -- every new rule strengthens collective immunity for all users.
  </Card>
</CardGroup>