Frequently Asked Questions

Is Tamandua production-ready?

No. Core EDR has available code at advanced alpha, while the generated authority still reports product_ready=false and external_claim_allowed=false.

Is all of Tamandua open source?

No. Open source is component-scoped. Identified Core EDR agent, server and community mirrors may be published under Apache 2.0 or another documented license. That does not make the whole portfolio open source. Managed App Guard is closed commercial scope.

What is AutoXDR?

AutoXDR is Tamandua’s shared correlation, investigation and supervised-response plane. It is currently a pilot/roadmap lane. Autonomous response is not a current production claim.

Is AIDR a separate Tamandua product?

No. AI Runtime Security is the capability name and AIDR is a market category term. Tamandua implements it as an experimental subordinate AutoXDR profile for AI sessions, tools, MCP chains and artifacts.

Can I upload an APK and download a protected app?

No. This site has no operational uploader, no-code wrapping pipeline, automatic SDK injection or protected APK download. App Guard is planned as a qualified, app-specific managed service.

Is App Guard open source?

No. The intended App Guard service is closed and commercial, with no current intention to open-source it.

What must happen before App Guard makes stronger claims?

All five evidence gates must pass:

1. G1 signed physical ingestion and live anti-replay;
2. G2 hostile and clean/goodware efficacy;
3. G3 native iOS XCFramework/binding evidence;
4. G4 release protection packet;
5. G5 classification of 100% of scenario/platform pairs as detected, degraded, unsupported or bypassed, with no omitted failures and no vendor-parity inference.

Does Tamandua match Appdome, Verimatrix or Guardsquare?

No parity claim is made. Vendor names may describe the market category, but current local/static evidence does not prove equivalent shielding, bypass resistance, no-code delivery or production efficacy.

Is Tamandua free forever?

No such promise is made. Community access exists for identified components. A limited Free managed mode is planned with quotas and eligibility TBD; Pro is planned; Enterprise is negotiated.

Can I buy or deploy from this website?

Not currently. The site provides product scope, documentation and qualification guidance. It does not expose checkout, an operational order form, a production deployment endpoint or an App Guard build-upload workflow.

Where should I start?

Read Current Scope, then choose the relevant portfolio lane. For App Guard, review the managed-service gates before discussing an enterprise engagement.