Zeq Antivirus — the HF threat spectrum

Zeq Antivirus protects endpoints without a central signature database. Traditional antivirus ships you a list of known-bad fingerprints and hopes it's current; Zeq Antivirus instead scores what a host claims through the same HF1–HF20 forensic operators that power the Forensic Dashboard, and derives detection from the mathematics.

Detection as a math gate

A per-device agent emits security claims, and the app scores them. The trigger is explicit and composable:

$$\text{trigger} = \text{composite} \;\wedge\; \text{protect001} \;\wedge\; \text{protect002}$$

A detection fires when the HF composite and both protect operators agree — math-derived, framework-native, not a lookup against a signature list. Because it's derived rather than listed, it isn't blind to threats that no one has fingerprinted yet.

Mesh, not a central authority

No signature DB

Nothing to download, nothing to fall out of date — detection comes from scoring, not matching.

Per-device agents

Each endpoint runs an agent that emits and scores security claims on the clock.

Mesh-replicated

Findings propagate across a mesh of trusted peers, so the fleet learns together — no central push required.

The result is protection with the framework's own properties: no central authority to trust, detections that are math-derived and auditable, and a threat picture that spreads peer-to-peer across your devices.

Open it

Open Zeq Antivirus →

See the HF threat spectrum and the mesh map.

Read next

• Forensic Dashboard — the HF operators this scores through.
• Post-quantum posture — the framework's broader threat model.
• Mesh & self-hosting — the mesh detections replicate over.