Built on
Built for modern security teams
Flux empowers every role in your security org to stay ahead of AI-automated threats.
Threat Intel Researchers
- Pivot from a single sample to an entire mutated family using TLSH fingerprinting
- Cluster thousands of polymorphic variants under one VibeID automatically
- Track distribution shift in AI-generated malware over time
Incident Responders
- Triage batch uploads with visual feature importance charts
- Understand exactly why a file was flagged — not just that it was
- Real-time SSE feed keeps the whole team in sync during active incidents
DevSecOps
- Integrate into CI/CD pipelines via REST API to scan build artifacts
- Catch accidental or malicious LLM-generated code before it ships
- Prometheus metrics and structured JSON logs for full observability
Detection that catches
what others miss
A 3-layer pipeline processes every file through fuzzy hashing, heuristic rules, and machine learning. Each layer catches threats the others can't.
Fuzzy Hashing
Locality-sensitive hashing clusters polymorphic variants into vibe families. Sub-millisecond deduplication at scale.
Heuristic Rules
Pattern-matching rules catch known vibeware signatures, entropy anomalies, and structural red flags.
CatBoost Classifier
Gradient-boosted model scores PE features, section entropy, and import patterns for final verdict.
Upload, scan, and get
verdicts instantly
Drag and drop any binary. The scan engine runs it through all three pipeline stages and returns a detailed verdict with YARA hits, ML confidence scores, and vibe cluster assignment.
Launch ScannerElevate detection with
intelligent features
Every component is designed to work together. From custom YARA rules to Prometheus metrics, Flux integrates into your existing workflow.
DDoD Mitigation
Rate-limited scanning with SHA-256 deduplication prevents denial-of-detection flooding attacks.
Real-time Streaming
Server-Sent Events push scan results to your dashboard the instant analysis completes.
REST API
Clean JSON endpoints for scan submission, vibe cluster lookup, statistics, and health checks.
Vibe Clustering
Automatically groups polymorphic mutations into families using configurable TLSH distance thresholds.
YARA Rule Engine
Write custom detection rules with full YARA syntax support. Hot-reload rules without downtime.
Prometheus Metrics
Built-in instrumentation exports scan latency, throughput, and verdict distribution metrics.
Team Collaboration
Share vibe clusters, annotate scan results, and coordinate threat response across your team.
Docker Ready
Single docker compose command spins up the full stack. Production-ready container images included.
The detection platform you
need, available today
Start scanning files in under a minute. No configuration needed — just upload and get verdicts.