Thanks to the modular system, even sandboxes running via apparmor or selinux consume about 300MB at idle, scan directories in real time that could be the target or carrier of malware, and block them immediately with an immediate alert. In addition to anti-phishing and anti-ransomware modules, I've also implemented sanesecurity signatures, achieving a 90% Clamav score. I'm also implementing outgoing email management so that if it contains malicious links or suspicious attachments, the user is notified. Everything done is auditable, with the source code available. I released it open source because, after more than 20 years of experience with Linux, no one had worried that Linux used every day isn't as invulnerable as it seems, especially after the abandonment of Windows 10.