Open-source EDR for small teams and home labs

Your endpoints.
Your data.

Radegast EDR brings device management, detection packs, and alert review into one straightforward console. End-to-end encrypted, keeping privacy at the heart of your setup.

Built and hosted in the European Union
The console

Your devices, in one place

See your enrolled devices and recent alerts, then move from overview to investigation without maintaining a separate management server.

Radegast EDR dashboard showing enrolled devices and recent alerts
Device status and recent alerts at a glance.Explore the console →
Built around your environment

Security without giving up privacy

01 / PRIVATE

Privacy by design

End-to-end encrypted. Alert details are encrypted on your endpoints and decrypted in your browser, keeping sensitive security data out of the service’s view.

02 / PRACTICAL

Made for smaller setups

Use the hosted console or spin up the Podman compose infrastructure. Radegast is shaped for small teams, families, and home labs.

03 / MANAGED

Devices and detections

Organize devices into groups, assign detection packs, and review alerts from one focused device management console.

Getting started

From account to protected endpoint

01

Add a device

Create an account, name your device, and place it in a group.

02

Install the agent

Follow the operating-system-specific instructions provided by the console.

03

Choose detections

Assign detection packs to the group and review encrypted alerts as they arrive.

Detection engine

Endpoint detection powered by Rustinel. Rustinel is the independent open-source engine that evaluates endpoint activity with Sigma, YARA, and IOC matching. Explore Rustinel on GitHub →