◈
Primary endpoint protection
One customer-approved real-time antivirus/EDR provider is responsible for local blocking and remediation.
PREMIUM MULTI-ENGINE SECURITY · DESIGN PREVIEWOne command center.
One command center.
Many security engines.
ONE Shield Enterprise is being designed as a unified security console for authorized antivirus, malware-scanning and endpoint-detection providers across Windows, Android and servers.
Integration framework built · Commercial connectors pending◈ Engine OrchestrationEngineering Preview
1
15Integration targets
0Live connectors
0Active scans
Illustrative design data. No customer file processing or threat detections have occurred.
SAFE SECURITY ARCHITECTURE
Designed to avoid engine conflicts
Multiple active antivirus kernel drivers are not our strategy. ONE will coordinate a primary protective engine with permission-based secondary analysis.
⌕
Licensed multi-scanning
Use a licensed multi-engine scanner for selected file analysis; engine count is determined by purchased entitlements.
◇
Threat intelligence
Optional hash, URL and reputation enrichment. No automatic sensitive-file uploads.
▣
Client isolation
Tenant-specific authorization, device enrollment, audit logs and role-based administration.
⚑
Manual incident review
Conflicting results go to review; zero antivirus detections cannot establish that a file is safe.
◎
Cross-platform roadmap
Windows and server integration first. Android capabilities follow Android enterprise management constraints.
PROPOSED INTEGRATION CATALOG
15 integration targets
Each vendor requires a compatible API, license and authorized customer account where applicable. These are targets, not partnerships or live protection engines.
Microsoft Defender AntivirusLocal monitor
Microsoft Defender for EndpointAPI planned
OPSWAT MetaDefender CoreLicense needed
OPSWAT MetaDefender CloudLicense needed
VirusTotal PremiumLicense needed
ClamAVGPL review
Bitdefender GravityZoneAPI planned
ESET PROTECTAPI planned
Sophos CentralAPI planned
CrowdStrike FalconAPI planned
SentinelOne SingularityAPI planned
Trend Micro Vision OneAPI planned
TrellixAPI planned
Malwarebytes ThreatDownAPI planned
Kaspersky enterpriseLegal review
An integration may provide endpoint alerts rather than an independent file-scanning engine. The number of vendors is not the same as the number of licensed detection engines.
Current technical status: We have a local provider catalog, policy validator, normalized-result model and automated tests. None of the listed commercial connectors is activated. The design does not upload customer files, scan endpoints, quarantine malware, or claim virus protection.