| Feature / Project | OpenEDR | WHIDS | Aurora Agent | GuardianAI | PlanqX EDR |
|---|---|---|---|---|---|
| Main Focus | Endpoint Detection & Response (EDR) | Host Intrusion Detection (HIDS) | EDR using Sigma & ETW | AI-based Antivirus | Full-spectrum EDR |
| Supported Platforms | Windows Linux: Planned macOS: ❌ iOS: ❌ Android: ❌ | Windows only | Windows only | Windows Linux: Partial macOS: ❌ iOS: ❌ Android: ❌ | Windows only |
| Detection Method | Telemetry, File Analysis, Logstash | ETW + Sysmon + Gene Rule Engine | Sigma Rules + ETW | AI (Neural Nets, Decision Trees, etc.) | Kernel Hooks, ETW, AMSI, ELAM, etc. |
| Extensibility / Custom Modules | Plugin architecture supported | Detection rules and logic are customizable | Configurable rules and actions | Custom AI models can be integrated | Custom callbacks, detection modules supported |
| Ease of Code Integration | Medium (C/C++ and Elastic integrations) | High (modular rule engine) | High (rule/config-based) | High (Python-based, easy to modify) | Medium to High (low-level Windows internals) |
| Programming Language(s) | C++, Elastic Stack integrations | C++, Gene (custom rule engine) | Go | Python | C, C++, Assembly |
| UI / Management | Basic interface + ELK stack | CLI, logs-based | CLI / config-based | GUI-based | CLI-based, logs |
| Data Privacy / Offline Capable | Requires network for cloud lookup | Fully offline capable | Fully on-premises | Fully offline capable | Fully offline capable |
| License | Open Source (varied components) | GPL | GPL-3.0 | MIT | GPL-3.0 |
| GitHub Link | OpenEDR | WHIDS | Aurora Agent | GuardianAI | PlanqX EDR |