NeuraWall · AI-assisted network security
A firewall that never blocks on its own.
Claude proposes the rule. You see what it would have blocked in your own traffic. A person approves it, and it rolls out in stages.
Free for one node. Sign in with your NEXORA account.
Watch. Propose. Approve.
Three tiers of inference raise the alert. Only a rule a person approved can ever block.
Watch
Statistics, machine learning and traffic classifiers read flow metadata. Nothing is decrypted, and payloads are never stored.
Propose
Claude triages the alert and drafts a narrow rule that starts alert-only. Without a Claude key, an offline advisor drafts it on your own host.
Approve and roll out
The draft is replayed against recent legitimate traffic first. A signed bundle goes to 5% of nodes, then 25%, then all, and rolls back if blocking jumps.
No black box
See the blast radius before you ship.
Every draft shows how much of your legitimate traffic it would have matched. Every drop maps to a rule id you approved. Models can raise an alert, never a block.
- Replay against recent traffic before approval
- Optional four-eyes: the author cannot approve their own rule
- Downgrading a plan never changes what your nodes enforce
Built to be trusted.
The parts a security team asks about first.
Works on encrypted traffic
Flow metadata, TLS fingerprints and DNS behaviour. NeuraWall never intercepts TLS.
Tamper-evident history
A hash-chained audit trail you can verify, and signed bundles that nodes check for themselves.
Keeps enforcing offline
If the control plane goes away, nodes keep running their last signed bundle.
Staged rollout
5%, 25%, then everything, with automatic rollback if blocking jumps.
Alerts where your team is
Signed JSON webhooks for Slack, Teams or any receiver, plus CSV export.
Roles and sign-in
Viewer to admin roles, optional four-eyes, and Sign in with your NEXORA account.
Choose how you start.
Free for one node. Add nodes and history as you grow.
Pro Popular
- 5 enforcement nodes
- 7-day retention
- Claude with your own key
Business
- 25 enforcement nodes
- 30-day retention
- Monthly Claude budget included
Enterprise
- 100 enforcement nodes
- 90-day retention
- Monthly Claude budget included
Questions, answered.
Does it decrypt my traffic?
No. It analyses metadata and never intercepts TLS. That is a design decision, not a missing feature.
Can the AI block my traffic by itself?
No. A model can only raise an alert or draft an alert-only rule. A person approves any rule that enforces.
What if Claude is unavailable, or I don't want to use it?
An offline advisor does the same jobs deterministically, and nothing leaves your host.
What happens if the control plane goes down?
Nodes keep enforcing their last signed bundle. The console being down does not change what nodes enforce.
What data does Claude see?
Flow metadata, passed as delimited untrusted data under a call budget. Every drafted rule is schema-checked, forced to alert-only and simulated before a person sees it.
Can I import my current rules?
Not yet.
Is it open source?
No. NeuraWall is proprietary software.
Look at it before you trust it.
Start on the free plan and run the quickstart on your own machine.