-
-
Notifications
You must be signed in to change notification settings - Fork 42
Quick Start Guide
Akshay Sharma edited this page Mar 14, 2026
·
1 revision
Deploy your tactical firewall and secure your local workspace in under 60 seconds.
Kavach is a portable, high-performance binary. There are zero cloud dependencies and no registry bloat.
- Download: Go to the Releases page and grab the version for your OS.
-
Launch: Run
Kavach.exe(Windows) orKavach.dmg(macOS). -
Bypass OS Warnings: * Windows: Click
More Info->Run Anyway.-
macOS: Open
System Settings>Privacy & Securityand clickOpen Anyway.
-
macOS: Open
Once the dashboard boots up, you need to tell Kavach what to protect.
- Select Workspace: Click the Target icon in the side navigation.
- Choose Directory: Select the folder where your AI agents are currently working.
-
Set Trust Level: *
GHOST: Enables the Phantom Workspace (Full redirection).-
SENTRY: Log only mode (Observation). -
VETO: Strict mode (Requires manual approval for every change).
-
To ensure the Rust backend is successfully hooking into your OS, run a simple test:
- Open your terminal and attempt to run a script that modifies a file in your protected workspace.
- Watch the Kavach Dashboard. You should see a Radioactive Amber alert flash instantly.
- Select Veto to block the change, or Phantom to let the agent think it succeeded while saving your original file.
If an agent makes an unauthorized change before you can stop it, use the Temporal Rollback:
- Navigate to the Audit Log tab.
- Find the unauthorized modification entry.
- Hover over the entry and click the Rewind icon.
- Kavach will instantly swap the mangled file with the cryptographic cache version.
- Admin Rights: On Windows, run Kavach as Administrator to ensure the backend can hook into system-level process spawns.
- Turing Mode: Keep the UI visible on your screen; the Adversarial Noise only works if the window is active!
Important
Kavach is a local-first tool. If you close the application, the firewall is disarmed. Ensure it is running in the background whenever you are using autonomous agents.
Status: PERIMETER SECURED