What is HQ-Lite?
HQ-Lite is a local-first defensive edge appliance that sits inline between WAN and LAN. It combines network services, edge visibility, device context, Guardian and controlled defensive functions in one local system.
Is HQ-Lite just a router or firewall?
No. It includes routing and firewall functions, but the wider system also provides network visibility, device context, defensive event handling, system-health monitoring and Guardian's bounded decision process.
Does HQ-Lite require endpoint agents?
No endpoint agents are required for core edge visibility. HQ-Lite works from its position in the network.
Does HQ-Lite require a public cloud dashboard?
No. Core management is local and the operator dashboard remains LAN-only. Future verification services are designed as controlled supporting services, not as a public SaaS control plane for the customer network.
Can HQ-Lite operate if the verification service is unavailable?
The core local appliance is designed to remain operational at the edge. External verification should improve intelligence quality, not turn the local network into a cloud-dependent system.
Does HQ-Lite read my passwords, private messages or banking information?
HQ-Lite is not designed to collect or export passwords, login credentials, authentication tokens, session secrets, private message/email contents, banking credentials or payment-card details. Its defensive model is based on network and security context rather than collecting private application content.
Does HQ-Lite perform TLS interception?
TLS interception is not a normal requirement of the HQ-Lite core operating model.
What is Guardian?
Guardian is HQ-Lite's bounded local decision and response engine. It observes relevant activity, uses local context and verified intelligence, assesses risk, explains decisions and coordinates controlled action when policy permits.
Is Guardian an AI chatbot?
No. Guardian is not an LLM, chatbot or prompt-driven generative AI assistant. ChiRi Studio uses Digital Brain as an architectural term for its bounded observation, context, assessment, decision and response process.
What is an IOC?
An Indicator of Compromise is a security indicator such as an IP, domain or URL that can contribute to a defensive decision. HQ-Lite distinguishes observations and candidates from stronger verified intelligence.
What is Blackhole?
Blackhole is HQ-Lite’s dynamic containment layer within the firewall path. Approved hostile-source entries are maintained through the local firewall policy and synchronised with the XDP/eBPF edge blocking map, allowing matching traffic to be dropped earlier at the network edge. When an entry expires or is removed, the corresponding edge block is removed as well.
What is a Threat Candidate Event?
A Threat Candidate Event is a security-relevant observation that may deserve verification. It may be a suspicious URL, domain, DNS observation or scanning source. A candidate is not automatic proof of malicious intent.
What are Watchdog, Echo-Probe and Noctilux?
Watchdog monitors the integrity and operational state of the appliance. Echo-Probe provides local network identity and device context. Noctilux provides system-health visibility including resources, storage activity, temperatures and process information.
Does ChiRi Studio see my entire network?
Core management remains local. Planned external communication is purpose-limited: minimal service health/heartbeat information and sanitised security candidates for verification rather than a copy of the customer's full network activity.
Does HQ-Lite block every TOR connection or every country on a list?
No. Region, ASN and TOR information are context. They are not automatic proof of malicious intent and should only influence action through explicit policy and evidence.
Can HQ-Lite stop every cyberattack?
No security appliance can guarantee that. HQ-Lite is designed to improve local visibility, context, verified intelligence and controlled defensive response.
