Avai Leverages LLMs for Mac/Linux Host Security
TL;DR. iklobato released Avai, an open-source tool applying LLMs to host security telemetry for threat detection. - Avai collects system data from macOS and Linux, enriching findings with 17 threat intelligence sources. - A Claude-class LLM judges findings, classifying threats and suggesting remediations. - The tool offers a read-only web dashboard and operates without agents or cloud control planes.
- Open-source host security tool uses LLMs for threat classification.
- Collects telemetry from macOS and Linux, integrating 17 threat intelligence sources.
- LLM assigns malicious, suspicious, unknown, or benign verdicts with remediation advice.
- Features a web dashboard and no cloud control plane.
Sources
- Avai – your first AI antivirus — github.com