Schutzhund is German for “protection dog.” Keisen Schutzhund is a tool we are building to show you who else has control of a computer you own: what an employer, a vendor or anyone else has installed or switched on, what each of those things can do, and what is new since the last time you looked. It is in development and not available yet.
Software that an employer or vendor controls on your own computer can change what that computer may do, sometimes without telling you. Schutzhund is designed to look for the places where that control lives and to say, in plain words, what each finding can do: a capability, not an accusation.
Enrollment in device management and the configuration profiles installed on the computer, and what each profile is allowed to set or restrict.
Extensions that run with the operating system, including network extensions that can see or filter the computer's traffic.
Certificates someone added to the computer's trust store. One of these can let a proxy holding its key read encrypted web traffic from this computer.
Policies that set what your browser may do: forced extensions, proxies, home pages, blocked settings.
Agents, daemons and login items that start without you opening anything, and which developer signed them.
Which apps hold Screen Recording, Accessibility and Full Disk Access: the permissions that let software watch the screen, drive the keyboard or read your files.
Each finding will come with a plain-words line on what it is able to do on this computer.
Each check will be compared with the last one, so a profile, certificate or permission that appeared since then will be marked new.
Every finding will show the standard operating-system command behind it, so you can run it yourself instead of trusting us.
It will help you remove or contain what you find: revoke a permission, remove a profile, move software into a separate account. Your choice. If something looks employer-required, such as a managed profile, Schutzhund will say so before you remove it and suggest asking your employer first.
It is designed to report what it found and how it looked. It will not certify a computer as clean, and it does not promise protection.
It will never remove anything on its own. It will explain, alert and help; what happens next is up to you.
It will not bypass, disable or defeat a control that is running. If your employer's software blocks screen capture in its window, Schutzhund will tell you it can, and since when; it will not switch it off. That is a feature: knowing is what was missing.
It is designed to run on your computer and report to you, not to us.
Keisen Schutzhund is not available yet, and there is no release date. Like KeisenVPA, its status is “request access”: tell us what computer you use and what worries you, and it will shape what we build first. The reason we are building it is in Hostage Employees and Corporate Malware.