All Articles
CybersecurityOmniGuard

Introducing OmniGuard: AI Endpoint Security for Windows, Linux, and the Restaurant Floor

By Chad Lozano·July 10, 2026· 6 min read

We built OmniGuard because small and mid-size businesses deserve real endpoint security — the kind large enterprises pay a fortune for — without the telemetry, the lock-in, or the price tag. Today it's live: a hardened desktop agent for Windows 10+ and Linux, a complete subscription-and-licensing backend, and a feature set purpose-built for one of the most-targeted industries there is — hospitality.

The application — Windows 10+ and Linux

OmniGuard is AI-driven endpoint security that runs quietly on the machines your business depends on. It combines real firewall visibility, multi-engine malware scanning, and self-healing into one agent you own.

What it does

  • AI firewall — GlassWire-style visibility into every connection, with one-click block rules and learned defaults.
  • VirusTotal + learned defense — files and domains checked against 70+ engines, then remembered locally so the endpoint keeps defending itself offline.
  • Self-healing — continuous health checks, restore points, and cache/update automation that keep a machine in a known-good state.
  • Yours, offline — no telemetry, no phone-home. Your keys, your machine.

The backend — subscribe, license, and manage devices

Every OmniGuard install is backed by a licensing server we built and run. The installer is free to download for anyone; the app activates with a cryptographically signed license.key tied to your subscription. From a self-service dashboard you subscribe ($36/year per device), download the build for your OS, link each machine to a seat, and mint your license — all without a support ticket.

How the licensing works

  • Free installers — download OmniGuard for Windows or Linux with no account required.
  • Offline-verified licenses — each license.key is Ed25519-signed and verified on the device against a bundled public key, so activation works with no internet and can't be forged.
  • Per-device seats — one subscription protects one endpoint; link and unlink devices anytime from the dashboard.
  • Self-service — accounts, secure Stripe checkout, license downloads, and device management, all in one portal.

Purpose-built for hospitality

Restaurants, bars, and hotels run on point-of-sale terminals that process card data all day — which makes them a prime target for RAM-scraping malware and network attacks, and puts them squarely under PCI-DSS. OmniGuard ships with defenses and workflows designed for exactly that environment, so a non-technical operator can roll it out during a slow shift without ever risking the register.

The hospitality toolkit

  • POS protection — RAM-scraper detection tuned for card-data theft, plus a one-click POS Safe Preset that hardens a register in seconds.
  • PCI-DSS evidence — a compliance report you can hand to an assessor or a processor as proof of endpoint controls.
  • DNS firewall — VirusTotal-backed domain blocking (pairs cleanly with a free AdGuard Home) that stops malicious lookups before they connect.
  • Back-office fleet management — a master console on the back-office PC shows every terminal's security posture in real time, with critical POS hosts sorted to the top.
  • Turnkey enrollment — each terminal joins the fleet with a URL and a token from inside the app; no reinstalls, no environment variables.
  • Observe-first and reversible — roll out in monitor mode so it can't take down a transaction, and a leave-no-trace uninstall removes every artifact if you ever walk it back.

Why it matters

A single compromised register can leak thousands of cards and trigger a PCI penalty that dwarfs the cost of protection. OmniGuard gives a small operator enterprise-grade EDR — detection, a DNS firewall, fleet visibility, and audit-ready evidence — that installs in minutes and is designed to be invisible to guests and staff.

Get OmniGuard

The Windows 10+ and Linux installers are free to download now. Grab the build for your OS, then subscribe ($36/year per device) to activate it with your license.key — and if you run a restaurant, bar, or hotel, turn on the POS Safe Preset and pull your first PCI-DSS report the same day. Questions or an on-site rollout? Reach us at chad@nsite.tech.

Ready to get started?

nsite.tech serves businesses across Whatcom County. Let's talk about your project.