Pro

Production-grade protection for all of your AI agents.

PoisonZero Pro gives teams real-time monitoring and automatic rollback of poisoned memory entries - on up to 15 devices, with a Cloud or Private install, starting from the very first device.

Up to 15 devicesCloud or Private installLinux · macOS · Windows
What you get

What Pro includes

  1. Real-time rollback.

    The poison0 agent watches your agents' memory files and reverts poisoned entries before they influence the agent.

    How the poison0 agent protects

  2. Full audit trail.

    Every decision is logged in the console with time, danger score and outcome.

    Incidents and audit

  3. Per-agent configuration.

    Set thresholds, protected paths and profiles from the console, with no config files to edit.

    Profiles

  4. Cloud or Private.

    Run cloud-managed or fully private with a zero-egress option, at no extra cost.

    Cloud or private

  5. Linux, macOS and Windows.

    One install flow with OS-native paths and service manager.

    System requirements

Detection and security

Built for one job, locked down while it does it.

  1. Purpose-built model.

    Melira is trained for one job, spotting poisoned memory writes, in many languages.

    About Melira

  2. Feedback with a re-check.

    Your verdict on an incident can become a training candidate, only after an independent re-check; nothing trains automatically.

    Feedback becomes a training candidate

  3. Sandboxed engine.

    The engine reads only the model file, answers only on localhost and spawns no processes.

    The engine sandbox

  4. Fail-closed.

    If the engine crashes, hangs or answers oddly, the change is recorded and surfaced, never waved through.

    Why fail-closed

Read the docs

Technical specs

What it asks of your devices.

The on-device detection engine runs on the hardware your team already has - quietly, on demand, without a GPU. These specs apply to Private-mode devices; Cloud-mode devices send only redacted diffs for scoring and have a lower local footprint.

PropertyDetail
Footprint (Private mode) A little over 300 MB - and only for a few seconds during a memory check. At rest, just a few MB.
Hardware CPU-only, ordinary hardware - no GPU required. GPU acceleration is an optional, opt-in add-on.
Analysis latency A few seconds per memory check, started on demand.
Network footprint (Private) One optional request per month - credentials and version only. Cloud-mode devices also send redacted diffs; that egress is documented in the whitepaper.
Updates Signed artifacts, SHA-256-verified before every start.

GPU acceleration: what changes

IT-friendly. The full egress allowlist is documented: two vendor-owned domains, port 443, outbound only, no inbound listener. Filtering by IP instead of domain? Pinning single IPs isn't advised, because both hosts run on provider anycast, so the addresses shift. Allow-list by domain, or use the providers' published IP ranges (documented in the whitepaper). Write the firewall rule once. See the allowlist in the whitepaper →

Protected in under a minute.

Create an app in the console, connect your device with an enrollment code - and your first Memory Files are guarded.

Sign me up