Releases: AutomataNexus/NexusShield
v0.4.4
NexusShield v0.4.4
Adaptive zero-trust security gateway + real-time endpoint protection. Pure Rust.
Binary
nexus-shield-v0.4.4-linux-x86_64(linux/x86_64)
Verification
SHA-256:
03a1316c820cb27137b455c35ada803a91b5c4de0e460d7905c90b6532264c8f nexus-shield-v0.4.4-linux-x86_64
SLSA Provenance:
This release includes SLSA Level 3 provenance attestation.
Verify with:
slsa-verifier verify-artifact \
nexus-shield-v0.4.4-linux-x86_64 \
--provenance-path nexus-shield.intoto.jsonl \
--source-uri github.com/AutomataNexus/NexusShield \
--source-tag v0.4.4Install
chmod +x nexus-shield-v0.4.4-linux-x86_64
sudo mv nexus-shield-v0.4.4-linux-x86_64 /usr/local/bin/nexus-shieldFull Changelog: v0.4.2...v0.4.4
v0.4.3
NexusShield v0.4.3
Adaptive zero-trust security gateway + real-time endpoint protection. Pure Rust.
Binary
nexus-shield-v0.4.3-linux-x86_64(linux/x86_64)
Verification
SHA-256:
7b048de439a3ed9fe56ae7683d4e2ee54ec4df208bd9aeb8d3d52da94ed1768d nexus-shield-v0.4.3-linux-x86_64
SLSA Provenance:
This release includes SLSA Level 3 provenance attestation.
Verify with:
slsa-verifier verify-artifact \
nexus-shield-v0.4.3-linux-x86_64 \
--provenance-path nexus-shield.intoto.jsonl \
--source-uri github.com/AutomataNexus/NexusShield \
--source-tag v0.4.3Install
chmod +x nexus-shield-v0.4.3-linux-x86_64
sudo mv nexus-shield-v0.4.3-linux-x86_64 /usr/local/bin/nexus-shieldFull Changelog: v0.4.2...v0.4.3
v0.4.2
NexusShield v0.4.2
Adaptive zero-trust security gateway + real-time endpoint protection. Pure Rust.
Binary
nexus-shield-v0.4.2-linux-x86_64(linux/x86_64)
Verification
SHA-256:
d47dbfdcf1a503357f1edd8ece731492ed1f06306a69f4d2ace64da3265121b9 nexus-shield-v0.4.2-linux-x86_64
SLSA Provenance:
This release includes SLSA Level 3 provenance attestation.
Verify with:
slsa-verifier verify-artifact \
nexus-shield-v0.4.2-linux-x86_64 \
--provenance-path nexus-shield.intoto.jsonl \
--source-uri github.com/AutomataNexus/NexusShield \
--source-tag v0.4.2Install
chmod +x nexus-shield-v0.4.2-linux-x86_64
sudo mv nexus-shield-v0.4.2-linux-x86_64 /usr/local/bin/nexus-shieldFull Changelog: v0.4.0...v0.4.2
v0.4.1
NexusShield v0.4.1
Adaptive zero-trust security gateway + real-time endpoint protection. Pure Rust.
Binary
nexus-shield-v0.4.1-linux-x86_64(linux/x86_64)
Verification
SHA-256:
80580d78d9188ac7b3e6820d1a8ad61b226043e51cc6fc468434bb3b66bffcdf nexus-shield-v0.4.1-linux-x86_64
SLSA Provenance:
This release includes SLSA Level 3 provenance attestation.
Verify with:
slsa-verifier verify-artifact \
nexus-shield-v0.4.1-linux-x86_64 \
--provenance-path nexus-shield.intoto.jsonl \
--source-uri github.com/AutomataNexus/NexusShield \
--source-tag v0.4.1Install
chmod +x nexus-shield-v0.4.1-linux-x86_64
sudo mv nexus-shield-v0.4.1-linux-x86_64 /usr/local/bin/nexus-shieldFull Changelog: v0.4.0...v0.4.1
v0.4.0
NexusShield v0.4.0
Adaptive zero-trust security gateway + real-time endpoint protection. Pure Rust.
Binary
nexus-shield-v0.4.0-linux-x86_64(linux/x86_64)
Verification
SHA-256:
54ab927c75634a795b74c09de33cae155b0649f3eafc3f410ff37a4ac7020551 nexus-shield-v0.4.0-linux-x86_64
SLSA Provenance:
This release includes SLSA Level 3 provenance attestation.
Verify with:
slsa-verifier verify-artifact \
nexus-shield-v0.4.0-linux-x86_64 \
--provenance-path nexus-shield.intoto.jsonl \
--source-uri github.com/AutomataNexus/NexusShield \
--source-tag v0.4.0Install
chmod +x nexus-shield-v0.4.0-linux-x86_64
sudo mv nexus-shield-v0.4.0-linux-x86_64 /usr/local/bin/nexus-shieldFull Changelog: v0.3.2...v0.4.0
v0.3.1
NexusShield v0.3.1 — SLSA Level 3 provenance release
NexusShield v0.3.0 — Real-Time Endpoint Protection
NexusShield v0.3.0
Adaptive zero-trust security gateway + real-time endpoint protection. Pure Rust. Developer-aware.
What's New: Endpoint Protection Engine
12 new modules (5,055 lines) that replace McAfee/Kaspersky/ClamAV:
| Engine | Description |
|---|---|
| Signature Engine | SHA-256 exact match with 12 built-in signatures |
| Heuristic Engine | Shannon entropy, ELF analysis, file type mismatch, script obfuscation |
| YARA Engine | Pure-Rust pattern matching (5 built-in rules) |
| Process Monitor | 19 reverse shell + 17 miner patterns via /proc |
| Network Monitor | /proc/net/tcp parsing, malicious IP, C2 beaconing |
| Memory Scanner | RWX regions, 7 shellcode patterns, Meterpreter/Cobalt Strike |
| Rootkit Detector | System binary integrity, 20 rootkit modules, LD_PRELOAD |
| File Quarantine | Encrypted vault with chain of custody |
| Threat Intel | IOC database (IPs, domains, hashes) |
| Developer Allowlist | Auto-detects 10+ toolchains — zero false positives |
| File Watcher | inotify real-time monitoring |
| EndpointEngine | Orchestrator with broadcast channel |
Stats
- 275 tests, 0 failures
- 10,635 lines of Rust across 24 modules
- 14 MB release binary
Usage
# Gateway + endpoint protection
./nexus-shield --standalone --endpoint --port 8080
# One-shot file scan
./nexus-shield --scan-file /tmp/suspicious.exe
# Directory scan
./nexus-shield --scan /tmp/downloads/API Endpoints
GET /endpoint/status— engine statsGET /endpoint/detections— recent detectionsGET /endpoint/quarantine— quarantined filesPOST /endpoint/scan— on-demand scan
Checksum
b410e2a674947946b66f521fe8424cbbe9377c6c0a0a94e1c273c8e3760ab363 nexus-shield-v0.3.0-linux-x86_64
NexusShield v0.2.2
NexusShield v0.2.2
Adaptive zero-trust security gateway for developer environments.
Features
- AST-level SQL injection firewall (not regex)
- SSRF prevention with cloud metadata blocking
- Email header injection protection
- Behavioral bot fingerprinting
- Adaptive rate limiting with 5-level escalation
- Data quarantine for CSV/JSON imports
- AES-256-GCM credential vault
- SHA-256 hash-chained tamper-evident audit log
- Multi-signal threat scoring (0.0-1.0)
Binary
nexus-shield-v0.2.2-linux-x86_64(11 MB)
Checksum
0303745743a7df9766891217fbc81f4767dd97e4ee36f033b89c245a5a5f87cf nexus-shield-v0.2.2-linux-x86_64