Watch Cortex
Autonomous Linux Security Monitoring & AI Threat Detection·watch.alsopss.com
Watch Cortex is an autonomous Linux security platform built by AL'S-OPS LLC. A lightweight agent (under 8 MB) deploys on Linux servers in under 60 seconds and continuously monitors processes, network connections, file integrity, and SSH authentication events. Its on-agent Cortex AI reasoning engine classifies threats in under 8 milliseconds without a cloud round-trip and can autonomously respond by banning attacker IPs, killing unauthorized processes, reverting file changes, and initiating server lockdown. Every action is reversible, logged, and protected by a cryptographic chain-of-custody.
What it's for
Features 20
- AES-256-GCM hardware-backed secret vault with CVE-keyed secrets
- Autonomous threat response: IP ban, process kill, server lockdown, file revert
- Compliance automation (CIS, SOC2 Type II, PCI-DSS v4, HIPAA, ISO27001, GDPR, NIST 800-207)
- Cryptominer detection and immediate process kill
- CVE scanning and scoring (Business plan and above)
- File integrity monitoring (configs, SSH authorized_keys, crontab mutations)
- Fleet immune memory via Cortex Hive broadcasting threats across agents
- Four automation modes: Watch, Assist, Autopilot, Sovereign
- Ghost mode attacker-invisible hardening (Empire tier)
- Legal-grade chain-of-custody evidence packaging
- Network connection tracking (ports, outbound connections, DNS queries)
- Offline operation with cached contingency plans and policies
- On-agent Cortex AI threat classification in under 8ms with no cloud round-trip
- Override learning that improves fleet-wide AI decisions from operator corrections
- Persistence technique detection (cron, systemd units, startup scripts)
- Plain-language AI investigation summaries
- Real-time Linux process monitoring with full ancestry trees
- SSH authentication monitoring with brute-force and geo-impossible login detection
- Sub-60-second agent installation via a single curl command
- Zero-trust policy engine enforced locally
At a glance
Integrations
Complianceself-reported
Pricing
Enterprise and Empire plans are quote-based (contact sales@alsopss.com / empire@alsopss.com); no listed numeric price for those tiers.
14-day free trial, no credit card required.
5 servers, 3 users, 30-day log retention
14-day free trial.
25 servers, 20 users, 90-day log retention
Custom pricing — contact sales@alsopss.com.
Unlimited servers and users, custom log retention and legal hold
Custom pricing — contact empire@alsopss.com.