Monitor
Watches what runs and who connects, right on the server.
Autonomous OS-level cyber defense
WhiteQubit lives on your Linux servers, spots an attack as it starts and contains it on its own. Every action can be undone, and every action leaves a record you can check.
What it does
The same four steps run on every protected server, with nobody on call.
Watches what runs and who connects, right on the server.
Recognises attack behaviour as it begins, before the damage.
Contains the threat in seconds. Every action is time-limited and reversible.
Signs a record of each action, so the history can be checked later.
Live model
A group of servers. One gets attacked. WhiteQubit spots it, walls it off, then lifts the block on a timer and signs the record.
to spot a brute-force attack inside 20,000 noise events
privilege-escalation attempts caught in testing
records survived a real power cut
automated tests run on the code
Recognised and supported by






Journey
An honest view of the build: what already runs on real hardware, what we're working on now, and the research we want to take on next.
The build
Each part is marked by what's true right now, not by what we hope.
Watches activity on the machine itself
Blocks an attacker, then lifts it on a timer
Hard to switch off once it's running
Edits to the history show up
Traps that record how attackers work
AI that explains what happened, locally
One place to see every server
Real-world testing with a partner
Research ahead
The open problems we're exploring beyond the prototype. Exploring, not shipping, yet.
Post-quantum
Preparing the system's cryptography for a world where today's keys can be broken.
AI on the device
Local models that tell a person what happened and why, without sending data away.
Deception
Traps that change their behaviour to keep an attacker busy and visible.
Evidence
Records that a third party can verify independently.
Footprint
Published benchmarks for running 24/7 on small machines.
Small details
Milestones
Funded under the Student Startup and Innovation Policy, with support from KIIF.
Core protection and automatic response built and tested outside the lab.
Presented at the Gandhinagar edition poster exhibition.
Talk accepted at India's security and hacking conference.
Founders
Two cybersecurity students from Karnavati University building the defender they wished small teams already had.
Co-founder · Strategy and security research
Cybersecurity student at Karnavati University (UIT). Sumit leads WhiteQubit's research direction, partnerships and the business side, and is active in Ahmedabad's security community as a volunteer with The Hackers Meetup and Open Source Weekend.
Highlights
Co-founder · Lead developer
Cybersecurity student at Karnavati University (UIT) who writes most of WhiteQubit's code. Outside WhiteQubit he built RSBP, an eBPF-based reverse-shell detector for Linux, and Project IRIS, a threat-intelligence aggregator that maps findings to MITRE ATT&CK.
Highlights
How we build
A defender that breaks your systems is just another attacker. Every action can be undone.
If we claim it works, there's a test that proves it, run on real hardware.
Colleges, clinics and small businesses deserve real protection without a security department.
Investors, partners, early users or fellow researchers: we read everything.
whitequbit2026@gmail.comBlog
Plain-language writing on attacks, response and keeping servers safe when nobody is watching.