Contact →

Services

Engineered infrastructure services for mission-critical environments. Zero-trust orchestration and deterministic performance across every deployment.

Solutions

Deployable solutions for mobile, off-grid, and high-urgency environments. Designed for practical operations and delivered by experienced engineers.

Company

Veteran-owned and mission-driven. ETHRX builds technology that restores confidence in critical infrastructure.

Support

Product documentation and a direct line to the engineers who built it — no ticket queue between you and an answer.

Blog
Contact Us →
● Limited releaseDRAGON // LIMITED RELEASEDIST · BUILD

The network ends.The mission doesn't.

› LOCAL SESSION ESTABLISHED · UPLINK: NONE · EGRESS: BLOCKED_

An on-device AI copilot for network and infrastructure operators — grounded in your own documentation, built for air-gapped and offline environments, and always under your command.

Download Free Trial →
DRAGON running on a ruggedized laptop in a network equipment room
› Runs on the operator’s machine
› Answers cite your own documents
› Nothing leaves the room
[ PROVE IT ]

Pull the plug.

Hosted assistants stop the moment the link does — and send your questions off the machine while it's up. DRAGON runs on the operator's own hardware. Cut the network and see.

Typical cloud assistantconnected ›
Why is BGP flapping on core-01?
BGP sessions commonly flap because of mismatched hold timers, an unstable link, or MTU problems. Check the neighbor logs and compare timer settings on both peers.
Sent off this machine48 KB ↑
DRAGON · on-deviceuplink: none
Why is BGP flapping on core-01?
✓retrievebaselines / core-01.conf
✓retrievesession-history / 14d
↳Neighbor 10.0.0.2 resets on hold-timer expiry. Your baseline sets timers 10/30, but the running config shows 3/9. Reconcile the timers to baseline.
Sent off this machine0 B

Illustrative demo with scripted answers. The data-sent figure is simulated for the cloud side; DRAGON runs inference on-device.

Both assistants answered.
[ SEE IT WORK · LOCALLY ]

Watch it hunt.

A live fault, tracked to root cause — retrieval, reasoning, and a staged action you approve, all on the operator's machine. Pick a scenario. Nothing leaves the room.

● LOCAL · NO EGRESSDRAGON · OPERATOR CONSOLE
Sessions⮜
▾ LAB
● core-01 ×+open session…
· connected · core-01 · ssh · uplink: none
▍
copilot› TYPE // OR CTRL+; TO ASK THE COPILOT
DRAGON assistantgrounded · local ›
why is bgp flapping on core-01?
✓retrievedevice-docs / core-01
retrieving…
>Ask DRAGON…⏎
Suggested ↦awaiting AI response…

On your machine. Off the grid.
Under your command.

[ THREE IDEAS, ONE TOOL ]

Local. Grounded.
Flexible.

On-device

Local AI

The model runs on the operator's machine. No cloud, no telemetry, no egress — fully functional disconnected.

Evidence-first

Grounded · RAG

Answers come from your own documentation, baselines, and session history. Retrieval first, answer second.

Runs anywhere

Flexible

Air-gapped or connected. SSH or serial console. Windows, macOS, Linux. It meets the gear where it lives.

[ PLATFORMS / FREE TRIAL ]

Built for your platform.

Native desktop application — connected or fully offline. A standalone installer supports air-gapped deployment with no external dependencies.

Offline-capable

Limited release — current builds, served from updates.ethrx.io.

[ CAPABILITIES ]

What it does.

Local AIA language model runs on the operator's own machine — no cloud, no telemetry, no data egress.
Grounded retrievalAnswers are drawn from your own documentation, configuration baselines, and session history — retrieval first, not the open internet.
Operator in commandDRAGON suggests commands; you review and run them. It never acts on a system on its own.
Secrets stripped at the boundaryCredentials, keys, and secrets are removed before anything reaches the model, verified by a regression-tested redaction engine.
Accountable by defaultEvery session, retrieval, and model call is written to a tamper-evident, hash-chained audit log you can export.

Questions about a specific deployment? Get in touch ↗

[ SHOWN · SECRETS NEVER REACH THE MODEL ]

Device output is full of credentials. DRAGON strips them at the boundary, before anything is sent to the model. Flip the view to see what the model actually receives, or click the text and paste your own.

6 secrets stripped
hostname core-01
!
enable secret 5 [REDACTED · password]
username netadmin privilege 15 secret [REDACTED · password]
snmp-server community [REDACTED · snmp community] RO
tacacs-server host 10.0.0.9 key [REDACTED · shared key]
!
interface GigabitEthernet0/1
 description uplink to edge-fw
 ip address 10.0.0.1 255.255.255.0
!
router bgp 65001
 neighbor 10.0.0.2 remote-as 65002
 neighbor 10.0.0.2 password [REDACTED · password]
!
api_token = [REDACTED · api token]
This is all the model ever receivesRuns in your browser · nothing is sent · simplified demo of the idea
[ AND ANOTHER · EVERY ACTION LOGGED ]

Every retrieval, model call, and approved action lands in a hash-chained audit log. Select any entry and reconstruct exactly what DRAGON read — which files, when, down to the millisecond. Accreditors ask; the log answers.

AUDIT · TAMPER-EVIDENT LOG● LOCAL
#TimeKindHash
34414:31:11acceptance52a53e1c3a76…
34314:31:09suggestion2b08f2b7a7f7…
34214:31:05fs_accessa03bb34c3193…
34114:31:02session_open944e276d9e7b…
select an entry▊
every retrieval is reconstructable

It suggests.
You decide.

● Limited Release UnderwayFILE / DRAGON · ACCESS: REQUEST
STATUS      LIMITED RELEASE · ACTIVE
OPERATORS   deployed
AVAILABILITY
THE REST     — request access to view

DRAGON is in the hands of a first group of operators. The rest is best shown, not described.

Download Free Trial →
[ PRICING · SELF-SERVE ]

One tier.
No surprises.

DRAGON Pro
$149 / year
$149 / year · per seat
  • › Full license — local AI terminal, grounded retrieval, audit trail
  • › Windows, macOS, and Linux
  • › All updates during your subscription
  • › Online or fully offline (air-gap) activation
Pricing →

By purchasing you agree to the Terms of Service and Privacy Policy.

Secure checkout and tax handled by Paddle, our merchant of record. License key delivered by email, instantly. 14-day refunds.

Teams · Federal · Air-gap

Seat bundles over 25, perpetual licensing with maintenance, offline activation at scale, and direct procurement. Quoted per environment.

[ REQUEST EARLY ACCESS ]

Start the conversation.

Tell us where you operate and what you're trying to do. We'll be in touch about the limited-release program and briefings.

DRAGON by ETHRX — contained intelligence for operators. Edge AI · RAG terminal · mission ready.

ETHRX builds operational software for the environments where reliability, discretion, and accountability are not optional. DRAGON is native desktop for Windows, macOS, and Linux, offline-capable — part of the ETHRX product line.

© 2026 ETHRX LLC. All rights reserved.
DRAGON is in limited release. Features and pricing may change before general availability.