# AI Malware Guardian — extended product summary > AI Malware Guardian is a Windows 11 (x64) desktop application that detects novel and AI-assisted malware using local ETW telemetry, behavioral machine learning (Layer 1b), and structural ONNX models (Layer 1a). Detection runs on-device; the only routine outbound call is subscription verification (email + machine id). ## What it does - Monitors process and system activity via ETW with a low-overhead background service. - Learns a per-machine behavioral baseline during an initial recording period. - Scores live activity against baseline and structural models; quarantines high-confidence threats locally. - Complements signature-based antivirus (e.g. Windows Defender) for unknown threats. ## Privacy posture - No upload of file contents, ETW payloads, or behavioral feature vectors to the vendor cloud. - Subscription verify endpoint checks license status only. ## Plans (display pricing on site; confirm at checkout) - Monthly and annual subscriptions; device limits per plan (see homepage FAQ). - Activation via email + token after Stripe checkout. ## Key URLs - https://aimalwareguardian.com/ - https://aimalwareguardian.com/nerds - https://aimalwareguardian.com/UserManual - https://aimalwareguardian.com/support - https://aimalwareguardian.com/affiliates - https://aimalwareguardian.com/llms.txt ## Glossary - **ETW**: Event Tracing for Windows — kernel/user telemetry used for monitoring. - **Layer 1a**: Structural ONNX model on process images. - **Layer 1b**: Behavioral ML on ETW-derived feature vectors vs baseline. - **Baseline**: Initial recording window establishing normal activity for this PC. Last updated: 2026-05-19