PRX-SD
openprx.dev
Spec sheet
- Purpose
- PRX-SD is an open-source antivirus engine for scanning files and directories.Read 12 Oct 2026 · openprx.dev
- Intended users
- The documentation describes PRX-SD as designed for security engineers, system administrators, and incident responders.Read 12 Oct 2026 · docs.openprx.dev
- Platforms
- The product page lists native support for Linux, macOS, and Windows; the documentation specifies Windows WSL2.Read 12 Oct 2026 · docs.openprx.dev
- Free plan
- YesRead 22 Sep 2026 · github.com
- Integrations
- Optional integrations include VirusTotal lookups, ClamAV signature database imports, and custom WebAssembly plugins.Read 11 Oct 2026 · docs.openprx.dev
- Privacy
- The documentation states that PRX-SD requires no cloud dependency and has no hidden telemetry.Read 12 Oct 2026 · docs.openprx.dev
- License
- The product page identifies the license as Apache-2.0.Read 12 Oct 2026 · openprx.dev
- Detection
- Its detection pipeline combines hash matching, YARA rules, heuristic analysis, optional machine-learning inference, and optional VirusTotal lookups.Read 12 Oct 2026 · docs.openprx.dev
- Extensibility
- A WebAssembly plugin system can extend detection logic, add scanners, or integrate proprietary threat feeds.Read 12 Oct 2026 · docs.openprx.dev
- Hash matching
- It uses LMDB for O(1) lookups of SHA-256 and MD5 hashes from threat-intelligence sources.Read 12 Oct 2026 · docs.openprx.dev
- Heuristic analysis
- Its heuristic analysis uses file-type-aware checks including entropy, suspicious APIs, packing, and timestamps.Read 12 Oct 2026 · docs.openprx.dev
- Linux security
- Linux-specific features include process-memory scanning, kernel rootkit detection, eBPF syscall tracing, and fanotify pre-execution blocking.Read 12 Oct 2026 · docs.openprx.dev
- Plugin security
- WebAssembly plugins run in a Wasmtime sandbox with configurable memory and execution limits, while network and filesystem access are disabled by default.Read 11 Oct 2026 · docs.openprx.dev
- Protection scope
- complete securityRead 22 Sep 2026 · github.com
- Quarantine
- A built-in quarantine vault can isolate, list, and restore detected threats.Read 12 Oct 2026 · openprx.dev
- Ransomware defense
- The documentation says dedicated YARA rules and heuristics detect ransomware families including WannaCry, LockBit, Conti, REvil, and BlackCat.Read 12 Oct 2026 · docs.openprx.dev
- Ransomware protection
- YesRead 22 Sep 2026 · github.com
- Real-time monitoring
- The daemon monitors directories for new or modified files and scans them automatically.Read 12 Oct 2026 · openprx.dev
- Supported platforms
- Linux,macOS,WindowsRead 22 Sep 2026 · github.com
- Threat intelligence
- The engine aggregates hash signatures, YARA rules, and indicators from community and open-source threat intelligence sources.Read 11 Oct 2026 · docs.openprx.dev
- YARA rules
- The documentation describes more than 38,800 YARA rules aggregated from community and commercial-grade sources.Read 12 Oct 2026 · docs.openprx.dev
Where Specifiction places it
- Antivirus software#100 of 1207.1