Operational Coverage
The eleven applications cover prevention, detection, response, documentation, and evidence preservation through focused Windows desktop tools.
Detailed Product Brief
CyberDefender Security Suite Information
Stay alert. Stay prepared. Be a CyberDefender.
CyberDefender is a practical desktop security portfolio built around detection, credential protection, data sanitization, infrastructure visibility, hardening, threat intelligence, notifications, hidden-data handling, active defense, and incident documentation.
Executive Overview
A connected Windows security workflow, not eleven random utilities.
The suite is built around a clear operational idea: security teams and individual operators need tools that are small enough to run locally, specific enough to solve real problems, and connected enough to support a complete defensive workflow.
Standalone Engineering
Each application is represented as a standalone PyQt6 utility with local-state handling, operator workflows, documentation/legal screens, and defined integration points.
Product Breadth
For buyers, the suite shows a coherent security platform roadmap with practical tools for privacy, monitoring, analysis, protection, and response.
Latest App Inventory
Current suite roles and versions.
The inventory below summarizes the eleven-app portfolio and the primary security role each application fills inside the CyberDefender workflow.
| Application | Latest | Suite Role |
|---|---|---|
| CyberDefender Anti-Phishing Suite | 1.0.45 | URL, file, and phishing intelligence |
| CyberDefender Data Sanitizer | 1.0.88 | Data cleanup, secure erase, and privacy operations |
| CyberDefender Password Manager | 1.0.88 | Credential vault and access control |
| CyberDefender AntiVirus Pro | V3.0.55 | Endpoint scanning, monitoring, and containment |
| PlainSight Hidden Image | 1.0.36 | Steganography, hidden data, and file encryption |
| CyberDefender Infrastructure Guard | 1.0.35 | Network asset visibility and response |
| CyberDefender Notifier | Version 15 | Notification scheduling and API result capture |
| CyberDefender Security News Scraper | 1.0.31 | Threat intelligence collection and IoC export |
| CyberDefender Fortify | 1.0.21 | System hardening and posture audit |
| CyberDefender Incident Response Tool | 1.0.30 | Incident tracking, evidence, standards, and reporting |
| CyberDefender IronWall | 1.0.18 | Real-time active defense across network, web, password, and AD attack surfaces |
How The Apps Work Together
A defensive lifecycle from intelligence through evidence.
CyberDefender is strongest when presented as a defensive workflow. Intelligence feeds awareness, prevention reduces risk, detection identifies suspicious activity, response organizes action, and evidence preserves proof.
Intelligence
Apps: Security News Scraper
Collects news, CVSS context, IoCs, bookmarks, and exports feeds for defensive awareness.
Prevention
Apps: Password Manager, Fortify, Data Sanitizer, IronWall
Reduces credential risk, hardens the endpoint, removes sensitive data exposure, and actively defends against live attack behavior.
Detection
Apps: Anti-Phish, AntiVirus Pro, Infrastructure Guard
Finds suspicious URLs, malware signals, endpoint changes, and unknown infrastructure.
Response
Apps: AntiVirus Pro, Infrastructure Guard, Incident Response
Quarantines, isolates, documents, and tracks response activity.
Evidence
Apps: Notifier, Data Sanitizer, Incident Response
Captures output, certificates, reports, timelines, standards, and exportable records.
Full App Briefs
Detailed role, workflow, and engineering notes for all eleven apps.
Each brief explains the application’s pitch value, operational purpose, expected user workflows, and technical framing.
01 / Version 1.0.45
CyberDefender Anti-Phishing Suite
Stops link-based attacks before they become credential theft, malware delivery, or business email compromise.
What It Does
A focused phishing-defense application for checking suspicious links and files, reviewing scan logs, using local heuristics, optional VirusTotal enrichment, AI assistance, model training, and threat-feed input from the News Scraper.
Why It Exists
Phishing is usually the first step in a compromise. This app gives an operator a fast, repeatable way to inspect risky URLs, capture verdicts, and build evidence without relying on a browser alone.
Expected Workflows
- Scan a URL or suspicious input and receive a clear verdict.
- Use optional VirusTotal API settings and controlled file-upload consent for deeper reputation checks.
- Review scan logs, print reports, export PDF evidence, and feed new samples into training and visualization workflows.
- Consume threat-feed data exported by the Security News Scraper.
Engineering: PyQt6 desktop UI with QThread workers for startup, scanning, training, visualization, VirusTotal upload, and AI requests; combines deterministic URL heuristics, model-backed classification assets, optional external reputation lookup, and user-managed logs.
02 / Version 1.0.88
CyberDefender Data Sanitizer
Turns data cleanup into a defensible workflow with secure erase, certificates, model-card documentation, and operator evidence.
What It Does
A multi-tab privacy and secure-deletion tool covering dashboard metrics, data sanitization, secure erase, model-card generation, AI chat, network operations, and common cyber utilities.
Why It Exists
Organizations need proof that sensitive material was scrubbed or destroyed. The app gives that process structure: target selection, execution, reporting, and certificate-style documentation.
Expected Workflows
- Load raw data, run a scrub protocol, format cleaned output to JSONL, and save or copy sanitized results.
- Select files or folders for secure deletion and issue a certificate after the destruction workflow.
- Run privacy cleanup tasks such as recycle-bin emptying, temp-folder cleanup, shadow-copy deletion, hibernation disablement, and pagefile encryption.
- Use supporting tools for hashing, Base64 conversion, password generation, OTP key generation, network checks, and AI-assisted review.
Engineering: PyQt6 QMainWindow with dedicated tabs, worker tasks for long-running operations, local configuration, documentation, library import/read mode, AI engine settings, print/PDF support, and license/privacy controls.
03 / Version 1.0.88
CyberDefender Password Manager
Protects credentials with a local vault experience that supports strong generation, review, lock controls, MFA, recovery, and secure documents.
What It Does
A standalone password vault for storing, generating, searching, backing up, restoring, importing, and reviewing password records, with a secure document import area and user manual support.
Why It Exists
Credentials remain one of the highest-value targets. This app concentrates password storage and review into a controlled local utility instead of scattered files, browser exports, and reused weak passwords.
Expected Workflows
- Add, edit, delete, search, copy, and reveal credentials through the vault UI.
- Generate strong passwords with policy and entropy guidance.
- Use master-password controls, auto-lock settings, 2FA codes, recovery codes, and FIDO2/security-key registration flows.
- Import documents into a secure vault area and use backup, restore, CSV import, and security review actions.
Engineering: PyQt6 QMainWindow with security-oriented dialogs, worker threads for FIDO2 login and registration, structured menus, local configuration, EULA/privacy state, documentation, print/manual workflows, and export/import controls.
04 / Version V3.0.55
CyberDefender AntiVirus Pro
Anchors the suite with endpoint malware scanning, real-time watching, quarantine, firewall controls, ransomware indicators, and tamper protection.
What It Does
A full endpoint security application with scan engine, secondary scanner, VirusTotal support, real-time watcher, ransomware indicators, registry persistence monitoring, process baselining, traffic controls, firewall integration, quarantine, exclusions, and scheduled scans.
Why It Exists
The suite needs a central protection layer that can detect, isolate, record, and respond to endpoint threats across files, processes, network behavior, and ransomware-style activity.
Expected Workflows
- Run manual or scheduled scans and route suspicious results into quarantine or reporting.
- Use real-time monitoring, ransomware IoC monitoring, registry persistence monitoring, process baselines, first-seen connection detection, and RDP brute-force monitoring.
- Configure VirusTotal, exclusions, advanced traffic control, Windows firewall bridge, tamper protection, and OTP/MFA settings.
- Review logs, documentation, license state, scan results, and recover or permanently delete quarantined items.
Engineering: Dedicated worker threads for scanning, definition updates, packet interception, network isolation, firewall emergency actions, and monitoring; combines local detection, reputation services, quarantine state, firewall commands, network snapshots, and user-facing reporting.
05 / Version 1.0.36
PlainSight Hidden Image
Gives the suite a covert-data and privacy tool for hiding, revealing, encrypting, and controlling sensitive information.
What It Does
A hidden-data utility for image steganography, text steganography, emoji encoding, hidden folders, honeypot monitoring, RSA-4096 file encryption, OTP provisioning, and master-password protection.
Why It Exists
Some security workflows require private transport, controlled disclosure, or investigation of hidden payloads. PlainSight provides practical tools for concealment, discovery, and encrypted handling of sensitive files.
Expected Workflows
- Create or extract hidden image payloads and hidden ZIP content.
- Generate RSA-4096 keys, encrypt files, and decrypt files through the crypto engine.
- Use emoji and zero-width text steganography tools to encode or reveal hidden messages.
- Manage hidden folders, honeypot monitoring, master-password settings, OTP provisioning, documentation, legal status, and Windows integration.
Engineering: PyQt6 worker objects for secret-image creation, hidden-ZIP extraction, RSA operations, and honeypot monitoring, with local configuration and layered utility dialogs instead of cloud-service dependency.
06 / Version 1.0.35
CyberDefender Infrastructure Guard
Maps infrastructure, highlights risky devices, and gives operators response actions such as isolation, quarantine, automation, and lockdown.
What It Does
A network and infrastructure monitoring tool for scanning devices, visualizing topology, managing asset labels and criticality, exporting reports, and driving response actions.
Why It Exists
Teams cannot defend assets they cannot see. Infrastructure Guard creates a desktop view of the environment and turns discoveries into actionable operations for known, unknown, critical, or suspicious devices.
Expected Workflows
- Scan the network, review asset results, and export findings.
- Refresh topology views, zoom or pop out the network map, and inspect device relationships.
- Mark devices with nicknames, tags, known status, and critical status.
- Use response controls for isolate, quarantine, auto response, and lockdown.
Engineering: PyQt6 QMainWindow with NetworkScanner QThread, topology graphics items, zoomable topology view, report/documentation dialogs, local scan records, app settings, legal acceptance, and visual topology data.
07 / Version 15
CyberDefender Notifier
Provides a compact operator tool for scheduling notification runs, calling APIs, and preserving returned results as evidence.
What It Does
A small desktop notification and results-capture utility for choosing schedule details, saving API keys/base URLs, running notification checks, displaying returned output, and exporting or printing the results.
Why It Exists
Simple operational checks often become scattered across browser tabs, notes, and screenshots. Notifier gives those checks a consistent schedule, result log, and export workflow.
Expected Workflows
- Select weekday, calendar date, hour, minute, and AM/PM/UTC, then run Schedule Now.
- Save and manage API keys or base URLs in an app-local JSON file.
- Call saved endpoints or a default public API sample and write output or errors into the Results panel.
- Export or print result evidence as PDF, Excel, Word, Markdown, or printer output.
Engineering: Focused PyQt6 QMainWindow with schedule controls, results QTextEdit, API-key management dialogs, documentation/print support, and explicit endpoint construction rather than background service architecture.
08 / Version 1.0.31
CyberDefender Security News Scraper
Turns cybersecurity news into usable threat intelligence by tracking articles, extracting IoCs, and feeding the rest of the suite.
What It Does
A security news collection tool for RSS and web-scraping modes, article database storage, CVSS lookup, bookmarking/read state, notifications, CSV export, and IoC export into threat-feed paths.
Why It Exists
Threat intelligence is useful only when it becomes searchable, exportable, and connected to action. This app converts incoming security news into operator-readable articles and IoCs that other CyberDefender apps can consume.
Expected Workflows
- Refresh RSS feeds or use web scraping mode for configured sources.
- Open, bookmark, mark read, search, export CSV, and auto-refresh article data.
- Extract indicators of compromise and export them to Anti-Phish and AntiVirus feed paths.
- Manage feeds, refresh intervals, notification settings, article database state, and IoC export logs.
Engineering: PyQt6 QMainWindow backed by an ArticleDB, RSS fetch worker, web scrape worker, CVSS lookup worker, HTML link extractor, settings dialogs, and operational detection workflow integration.
09 / Version 1.0.21
CyberDefender Fortify
Shows whether the workstation is hardened at boot, firmware, OS, hardware, and supply-chain layers before attackers exploit weak configuration.
What It Does
A hardening audit tool that checks Secure Boot, TPM, BIOS/UEFI version, OS integrity, hardware hardening, boot-loader defense, driver signing, firmware integrity, and full audit results.
Why It Exists
Malware defense is weaker when the platform itself is misconfigured. Fortify gives operators a quick hardening posture view and makes platform risks visible before they become incident conditions.
Expected Workflows
- Run individual checks from hardening cards or run a full audit.
- Review result dialogs for Secure Boot, TPM, BIOS/UEFI, OS integrity, hardware hardening, boot loader, supply chain/driver signing, and firmware integrity.
- Open previous audits, scan logs, documentation, privacy/EULA screens, and settings.
- Use score gauges and audit summaries to communicate posture quickly.
Engineering: PyQt6 HardenCard components, result dialogs, ScoreGauge, AuditWorker QThread, previous-audit storage, documentation/print support, and Windows system query patterns for TPM, BIOS, and Device Guard inspection.
10 / Version 1.0.30
CyberDefender Incident Response Tool
Turns security events into organized response records with timeline, evidence, status, notes, standards mapping, and exportable reports.
What It Does
An incident-management desktop tool for creating incidents, tracking evidence, adding timeline events, updating status, mapping standards, and exporting incident reports.
Why It Exists
Detection alone is not enough; teams need a record of what happened, when it happened, what evidence was collected, and which response steps were taken.
Expected Workflows
- Create, open, save, edit, delete, copy, and export incident records.
- Add timeline events, attach evidence, update status, and review selected incident details.
- Use tabs for overview, timeline, evidence, standards, and notes.
- Select standards for incidents, generate standards summary reports, open source guidance, and print compliance guides.
Engineering: PyQt6 QMainWindow with incident, evidence, timeline, standards selection, standards report, source, and manual dialogs; local save/open flows, documentation, import files, legal, and privacy menus.
11 / Version 1.0.18
CyberDefender IronWall
An active defense layer that watches network, web, password, and Active Directory attack behavior in real time and responds with alerts, blocks, and recorded evidence.
What It Does
A PyQt6 active defense application covering Network Defense, Web App Defense, Password Defense, and Windows/AD Defense, with a Threat Coverage Matrix, live event log, documentation, and attack simulation test mode.
Why It Exists
IronWall gives the operator a live, behavior-based active defense layer that recognizes shared signatures of common offensive tooling and reacts while activity is happening.
Expected Workflows
- Monitor the Dashboard, then drill into Network, Web App, Password, or Windows/AD Defense tabs.
- Review the Threat Coverage Matrix to see tool families, behaviors, detection source, and block action.
- Use Simulate Attack test mode to verify alerts and detection wiring without running real offensive tools.
- Review the Live Log, export or print evidence, and consult Documentation and About tabs for guidance.
Engineering: Maintains a TOOL_SIGNATURES catalog for process names, command-line markers, default ports, user agents, URL patterns, and Windows Security event IDs including 4625, 4740, 4662, 4768, 4769, 4624, 4688, and 7045 for behaviors associated with SQLMap, Nuclei, Nmap, Responder, Hydra, BloodHound, Mimikatz, Rubeus, and common C2 frameworks.
Engineering Framing
A shared technical posture across the suite.
The eleven apps share local desktop execution, explicit versioned builds, PyQt6 interfaces, worker-thread patterns for long operations, exportable evidence, documentation/help dialogs, license/privacy handling, and operator-first controls.
Each app can remain standalone while sharing support conventions, legal screens, iconography, and integration paths, giving the suite resilience without making every workflow depend on one cloud platform.
Productization Priorities
Clear roadmap for suite consistency.
- Normalize Help, EULA, Privacy, About, print/PDF, support, and AI menu patterns.
- Create a common suite launcher that detects current builds and displays version and status.
- Standardize local storage, export naming, audit logs, and report metadata.
- Define integration contracts between intelligence, detection, response, sanitization, and incident evidence.
- Keep apps independent while aligning branding, licensing state, update flow, and documentation.
Pitch Takeaway
CyberDefender is not a single feature.
It is a portfolio of eleven working Windows security utilities that cover the defensive lifecycle from threat intelligence and phishing review through endpoint protection, infrastructure visibility, hardening, credential protection, data sanitization, hidden-data handling, notification capture, and incident response documentation, with IronWall adding real-time active defense.
Contact Sales