Skip to main content
Perseus is the endpoint specialist among the Myrmex AI agents. When something needs to happen on a host — a deeper look at what’s running, or a response to contain a threat — Perseus is the specialist that does it, operating the Myrmex software agent installed on the device.
Perseus is an AI agent. The software agent is the program installed on the host. Perseus drives that software agent to investigate and act — the two share the word “agent” but are not the same thing.

​
Investigating a Host

Perseus can look closely at a single machine to understand what’s really happening on it — the running processes and their relationships, network connections, files, and the events the host has recorded. This is the detail you need to confirm whether an alert is real and to understand its scope before you respond.

​
Response Actions

Perseus works on Windows, Linux and macOS. Once you know what you’re dealing with, it carries out the response — always with your approval:

Isolate the host

Cut a device off from the network to contain an incident while you work it.

Quarantine

Contain a malicious or suspicious file so it can no longer run.

Kill a process

Terminate a running process on the host.

Run scripts and commands

Clean up and apply fixes on the host — commands and scripts, services and users.

Patch management

Apply approved operating-system updates — see Patch & updates.

Intune-managed devices

Reach devices managed through Microsoft Intune MDM, via its integration.
Hardening is a module, not a response action. The host-hardening audit that feeds Security Posture is switched on per target — see Frameworks & scanning.

​
AI Proposes, You Approve

Anything Perseus does that changes a host is proposed for your approval first. You ask in chat — scoping to the machine with an @-mention — Perseus explains what it intends to do, and nothing runs on your device until you say so.

​
Perseus vs. Brontes

Perseus and Brontes both work with endpoints, but they do different jobs:
  • Perseus acts — investigates a host in depth and runs response actions on it.
  • Brontes administers — it runs the Myrmex platform itself: records, roles and policies, integrations, and agent tokens.
Use Brontes to understand your fleet; Centurion brings in Perseus when it’s time to do something to a specific host.

​
Where to Go Next

Agent capabilities

The telemetry and response actions the software agent provides.

Device details & actions

Where you run and review actions on a single host.

Brontes

The platform administrator that runs Myrmex itself.

Centurion

The orchestrator that brings Perseus in.
During an investigation, ask Centurion to investigate an alert and it will bring Perseus in automatically to inspect the affected host.