AI-powered endpoint detection & response
Enterprise-grade security.
Cyber-café prices.
SHERIFF-AI EDR protects every computer in your business — built for SMEs and cyber cafés across Kenya and East Africa. It explains each threat in plain English and never acts without your approval. From KES 200 per device per month.
Linux and Windows, both fully supported · installs in one command
product preview
What SHERIFF-AI actually looks like
Styled mockups of the real admin console and device agent — illustrative UI, not a live data feed.
Learning period
Complete
Threats handled
5,295
False alarms
0%
Active threats
215
Threat radar
Trust score
Tier 1 — Automatic response
- Quarantine file
- Block malicious addresses
- Reduce device access
- Stop the program
Tier 2 — Cut off network · 0/24h
- Ongoing suspicious activity
- Low-trust device
- Repeated risky behaviour
Protected
Your device is trusted and has full network access.
- Network access active
- AI protection active
- Disk encryption not detected
215
Active threats
1
Device protected
<0.5%
CPU impact
88%
Avg trust
One connected workflow, not five disconnected tools.
Monitoring, trust, and response — one connected system that watches your devices, explains every alert in plain English, and guides you through fixing it.
You decide how much it handles
Start with recommendations only, then let SHERIFF take care of routine responses on its own as your confidence grows. Every automated action is logged, explained, and reversible.
Every device earns its trust
Each device carries a live 0–100 trust score that controls its network access automatically. Risky behaviour tightens access; good behaviour opens it back up.
It watches before it acts
New installations start in a quiet learning period: SHERIFF observes real activity and proves its accuracy to you before anything is ever blocked. You flip the switch when you're ready.
Five layers of defence
Five independent detection layers, each covering the others' blind spots — if one layer misses a threat, the next one catches it. Every alert is explained in plain English.
Blocks malicious sites and addresses
Dangerous sites and addresses are blocked automatically, system-wide — across every browser and app, including private windows — with no extra hardware to buy. Threats are enriched with global reputation intelligence as they appear.
Your whole fleet, on one screen.
Trust scores, active threats, and device health, all in one view — no refresh, no digging. Threats never reach your devices; they get pulled in and absorbed before they can do harm. Below is an illustrative mockup of the admin console, not a live feed.
Priced for a cyber café. Built for an enterprise.
Cyber Café
Shared machines, tight margins, full protection.
- Up to 20 devices
- 5-layer detection
- Trust-based network isolation
- Plain-English alerts
SME
Growing teams that need a real SOC without the headcount.
- Up to 200 devices
- Everything in Cyber Café
- Auto Mode playbooks
- AI threat analyst + hunting
- Compliance reporting
Enterprise
Fleet-scale deployments with your own controls.
- Unlimited devices
- Everything in SME
- Dedicated onboarding
- SLA + priority support
- On-prem / air-gapped options
We're holding SHERIFF-AI back — on purpose.
Here's the honest reason: we're currently raising the funds needed for two things — proper hosting infrastructure, and full compliance with Kenya's Data Protection Act, including ODPC registration. Both cost real money, and we'd rather raise it properly than cut corners to launch faster.
While we do that, the version we launch first will be fully local — it runs entirely on your own device and network, nothing hosted by us, nothing phoning home. Two honest exceptions: if the app crashes, an anonymized crash report goes to our error-monitoring vendor so we can fix it; and if you use the optional AI Assistant, that one query goes to our AI provider — only when you trigger it, never automatically.
Once funding is secured and hosting + compliance are both in place, we'll also offer a hosted version — running from our own platform, for businesses that would rather not manage anything themselves. The local version isn't a stopgap; it stays available after that too. Our core belief driving all of this: privacy should be respected, period — that's why the local version exists at all, and why we won't launch the hosted one before compliance is real.
Questions business owners ask us.
What is SHERIFF-AI EDR?
SHERIFF-AI EDR is an AI-powered endpoint detection and response platform that protects the computers in your business. It watches every protected device, explains threats in plain English, and never takes an action without your approval unless you explicitly allow it to.
How much does endpoint protection cost in Kenya?
SHERIFF-AI starts at KES 200 per device per month on the Cyber Café plan. The SME plan runs KES 500–670 per device per month, and Enterprise pricing is custom. There are no hardware costs — it is software only.
Do I need an IT team to use it?
No. SHERIFF-AI is built for non-technical business owners. Every alert is written in plain English with numbered steps to fix the problem, and the admin dashboard opens in your web browser — no terminal, no jargon.
Does it work on Windows?
Yes. The agent is tested and validated on Windows 10 and 11, and installs with a self-elevating installer — no manual configuration. Linux (Debian, Ubuntu) is fully supported too.
Will it slow down my computers?
No. The agent is engineered for low-spec machines: under 0.5% CPU when idle and roughly 40MB of memory — lighter than a single browser tab. Cyber café machines keep serving customers.
What happens when a threat is found?
The suspicious file is quarantined so it cannot run or spread, the device's network access can be tightened automatically, and you get a plain-English explanation with Approve and Dismiss buttons. Nothing is deleted without your say-so.
Can I try it before paying?
Not yet — we're raising funds for hosting infrastructure and full ODPC compliance before any release, and would rather do that properly than launch early. The version we launch first will be fully local, running on your own device with nothing hosted by us; a hosted version follows once funding and compliance are both in place. Join the waiting list to be notified the moment it's available — every new installation will still start in a learning period where SHERIFF-AI observes and reports without blocking anything, so you can judge its accuracy before it acts.
What makes it different from antivirus?
Traditional antivirus only matches known virus signatures. SHERIFF-AI layers five independent detection methods, scores each device's trustworthiness continuously, blocks malicious sites system-wide, and explains every decision — then lets you stay in command of the response.
about us
Pisoque Technologies
Pisoque Technologies is an independent Kenyan technology business, currently registered as a business name. It is founded and led by Daniel Mutuku Ntheketha, a self-trained offensive-security practitioner working as founder and lead engineer. SHERIFF-AI EDR is its flagship product.
The problem is not theoretical: Kenya's National KE-CIRT/CC recorded 3.37 billion cyber threat events in January–March 2026 alone, after a 441% surge to 4.56 billion the quarter before (Communications Authority of Kenya, Q3 2025/26 sector report). Most of that lands on businesses with no security team — the businesses we build for.
Our Strategic Pillars
Securing the Backbone of Kenya's Economy: Protecting local SMEs by engineering elite, AI-driven cybersecurity systems that shield businesses from modern threats.
Pioneering Next-Generation Defense: Breaking today's technological barriers to deliver future-proof security infrastructure, living our core mission to Evolve into the Future.
Democratizing Enterprise-Grade Security: Eliminating the need for dedicated IT staff through plug-and-play, simplicity-focused AI systems designed for non-technical founders.
Hyper-Tailored and Commercially Viable: Bridging the market gap with compliant, robust device and platform protection built specifically around SME budgets and operational realities.
Learning period
Complete
Threats handled
5,295
False alarms
0%
Active threats
215
Threat radar
Trust score
Tier 1 — Automatic response
- Quarantine file
- Block malicious addresses
- Reduce device access
- Stop the program
Tier 2 — Cut off network · 0/24h
- Ongoing suspicious activity
- Low-trust device
- Repeated risky behaviour