Desktop Protection
Unified Orthalon desktop app for macOS, Windows, and Linux. Protects local model traffic, inventories MCP configurations, and enforces DLP policy.
Plan requirement: Desktop discovery is available on all plans. Active policy enforcement requires Protect or higher.
The Orthalon desktop app is a lightweight Rust application that lives in your menu bar or system tray. It is engineered for high performance with a minimal memory footprint (under 30 MB RAM) and sub-millisecond evaluation latency.
It combines Desktop Agent protection, MCP tool discovery, and AI Gateway routing into a single native package.
1. Downloads
| Platform | Package | Status |
|---|---|---|
| Windows 10 / 11 (x64) | Download MSI | SHA-256 |
| macOS (Apple Silicon) | Coming soon | In development |
| macOS (Intel) | Coming soon | In development |
| Debian / Ubuntu (x64) | Coming soon | In development |
| Fedora / RHEL / openSUSE (x64) | Coming soon | In development |
| Linux (AppImage x64) | Coming soon | In development |
[!NOTE] For this MVP release, the unified desktop suite is available for Windows 10 / 11 (x64). Native desktop applications for macOS and Linux are coming soon.
2. Installation & Quickstart
Install the application
- Windows: Double-click the
.msiinstaller and complete the setup wizard. - macOS & Linux: Native builds are coming soon.
Connect with Browser (PKCE Enrollment)
- Launch Orthalon from your Applications menu or tray.
- Click Connect with browser.
- Sign in to your Orthalon dashboard and authorize the endpoint for your organization.
- The desktop app securely stores device credentials in the native OS credential manager (Keychain on macOS, Credential Manager on Windows, Secret Service on Linux) and synchronizes your organization's policy bundle.
3. Configure AI Clients & Developer Tools
The desktop app runs a high-speed local proxy on 127.0.0.1:4110. Configure compatible developer tools, IDEs, and CLI clients to route requests through Orthalon:
OpenAI-Compatible Clients (Cursor, Claude Code, LangChain, LiteLLM)
export OPENAI_BASE_URL="http://127.0.0.1:4110/v1"
export OPENAI_API_KEY="your-provider-api-key"Anthropic-Compatible Clients
export ANTHROPIC_BASE_URL="http://127.0.0.1:4110"
export ANTHROPIC_API_KEY="your-provider-api-key"Requests routed through the local proxy are automatically scanned in memory against your active DLP policies before reaching upstream AI providers.
4. MCP Discovery & Security
The desktop app automatically scans and monitors Model Context Protocol (MCP) server configurations across supported clients:
- Cursor:
~/.cursor/mcp.json - Claude Desktop:
~/Library/Application Support/Claude/claude_desktop_config.json - Windsurf:
~/.codeium/windsurf/mcp_config.json - VS Code:
~/.vscode/mcp.json - Claude Code:
~/.claude.json - Codex:
~/.codex/config.toml
Discovered MCP servers and tool definitions are reported directly to your Orthalon console. For active tool-call parameter redaction and execution blocking, deploy the MCP Agent.
5. Enterprise Fleet Deployment (MDM)
For automated silent deployment across your organization, deploy the installer alongside a managed.json configuration file:
- macOS:
/Library/Application Support/Orthalon/managed.json - Windows:
C:\ProgramData\Orthalon\managed.json - Linux:
/etc/orthalon/managed.json
When present, managed.json provisions the organization settings automatically without requiring individual interactive browser logins.