In build — first units 2027

Meet Bruno.
He guards the house.

Bruno sits on your network, learns every device in it, and asks before he changes anything. If a change doesn’t work out, he puts it back — by himself, while you’re still reading the message.

One email when there’s something real to buy. No cloud account, no dashboard, no subscription to be watched over your own house.

What he actually does

Three things, done properly.

Most home security products are a dashboard that tells you something happened. Bruno is a guard with a short leash — he watches, he asks, and he can undo.

01 / WATCH

He learns the house

Bruno listens to the network passively — he never sends a probe, never pokes a device, never changes a setting to find out what something is. Every device gets a real name from a 40,493-entry vendor registry, not a MAC address and a shrug.

02 / ASK

One card at a time

When something needs a decision you get a single card in plain English: what he found, what he wants to do, what happens if he’s wrong. No dashboards to learn, no logs to read. Yes or not now.

03 / UNDO

He puts it back

Every change is verified within 30 seconds. If it doesn’t work, Bruno reverts it automatically and tells you what happened — in one sentence, not an error code. Destructive actions are never offered as a card at all.

40,493Vendor prefixes known
0Packets sent by discovery
30sVerify window, then revert
1Binary, both products
The gates

He won’t run on junk.

Bruno is sold as software you run on hardware you already own, or pre-installed on an appliance. Either way it checks the machine before it will protect anything — every boot, and again every week.

  • G1Real siliconx86-64, version 1 only. No emulation, no ARM guessing, no “close enough”.
  • G2Two physical network portsBoth gigabit or better. One to the house, one to the line — that’s what makes the bypass test possible.
  • G3Minimum muscle4 GB RAM, 32 GB of storage that passes SMART, and a working TPM 2.0.
  • G4Bypass under loadIf Bruno dies, the internet keeps working. Tested with real traffic, not a checklist.
  • G5Re-certify, alwaysEvery boot, and a full re-check weekly. A machine that stops qualifying stops being trusted.

CERTIFIED

All five gates pass. Bruno protects, and says so plainly.

DEGRADED

Something slipped — a disk warning, a port down. Bruno keeps watching and tells you exactly what’s wrong.

REFUSED

The hardware can’t be trusted to do the job. Bruno won’t pretend. It refuses, and tells you why.

A security product that runs on anything is a security product that works on nothing. Refusing bad hardware is the feature.
Build notes

Built in the open, because it’s easier to trust.

This is where Bruno is, today. Not a roadmap written by a marketing team — the actual board.

M1Hardware gate — the five checks and three verdictsBUILT
M2Approval cards — apply, verify, auto-revertBUILT
M3Passive discovery — full inventory, zero writesBUILT
M4Packet capture — dependency-free, live-provenBUILT
M5Vendor registry — full IEEE table, 40,493 prefixesBUILT
M6Console — the phone page you see aboveBUILT
M7Data plane — DNS filtering and firewall rulesIN BUILD
M8Licensing, OTA updates with rollback, weekly digestNEXT
M9Appliance certification and 30-day burn-inNEXT
Shipping status

The software works today.
The box is next.

Bruno Guard runs on hardware you already own, today. The appliance — a small, quiet x86 box that arrives certified and pre-installed — is the next milestone, and it ships when it passes the burn-in, not before.

One email when there’s something real to buy. No drip campaign.