Horus — Own Your Local AI
Local-first • Autonomous workflows • You own it

Your AI. Your hardware.
From conversation to execution.

Horus combines local AI with configurable autonomy, coding, terminal control, OSINT, and red-team tools. Give it a goal, let it work through multiple steps, and review the results — with models, task records, and local inference on hardware you control.

Runs via Ollama Workspace jail Audit logs Local inference Configurable autonomy OSINT + Red Team Staged approvals
Built by a cybersecurity operator

Built by a CISSP-certified cybersecurity engineer with 20+ years of real-world operational experience.

CISSP 20+ yrs cyber DoD

See Horus run

~2 min · No signup

Live browser UI, real PTY terminal, real tool calls. Local inference without a cloud AI API key.

Inside the UI

Real desktop · not mockups

Local browser UI running on owned hardware — chat, model routing, and a real terminal in the same window.

Autonomy that carries the task forward

Multi-step execution · Persistent task state

Horus can work through a goal across successive reasoning and tool rounds: inspect the workspace, plan the work, execute actions, check the results, and continue with the next step. Enable autonomy when you want sustained execution within the scope you have provided.

An operator that follows through
  • Chain tool calls across multiple rounds
  • Track progress in a persistent task ledger and checkpoints
  • Keep a dedicated autonomous run slot protected from ordinary job preemption
  • Continue background work when the browser tab closes
Execution with practical controls
  • Configurable execution limits and loop/failure guards
  • Persist large tool results for later inspection
  • Load additional tool packs as the task requires
  • Use staged edits when a change needs review before deployment
Multi-round tool chaining Task ledger + checkpoints Protected run slot On-demand tool packs

Autonomy controls how Horus carries work forward. Available tools, workspace permissions, and approval requirements depend on your configuration. Changes submitted through the staged deployment workflow still require human approval.

Keep longer tasks in context

Context condensation · Local memory

Long conversations and tool-heavy jobs can fill a model’s context window. Horus includes context-pressure assessment and condensation to make room for continued work, alongside persistent notes, task state, and local document retrieval.

Manage the working context
  • Condense prior context when configured pressure thresholds are reached
  • Configure context and response budgets for the selected model
  • Keep recent exchanges available alongside a condensed history
  • Load relevant tool schemas instead of every tool at once
Recall information beyond a single turn
  • Save findings and plans in persistent local memos
  • Keep conversation history on your machine
  • Index documents and retrieve relevant passages with local RAG
  • Inspect saved task records and tool results when reviewing a run

Effective context capacity depends on the model, runtime settings, RAM, and VRAM. Condensation is a summary and may omit details; saved files and original records remain useful for verification.

Red-team operations from the same console

Reconnaissance · Assessment · Forensics

Bring local AI, security tools, and an interactive terminal into one workflow. Horus can help plan and run authorized assessments, inspect tool output, and organize findings against the targets you specify.

Reconnaissance & vulnerability assessment
  • Nmap for host discovery, ports, and service inspection
  • WhatWeb for web technology fingerprinting
  • Nikto for web server checks
  • Nuclei for template-based vulnerability checks
Payload tooling & evidence analysis
  • msfvenom payload listing and separately gated generation
  • A real PTY terminal for installed interactive security utilities
  • Strings, Binwalk, ExifTool, and Volatility integrations
  • SIEM-style summaries and correlation across logs
Nmap Nikto + Nuclei WhatWeb Gated payload generation Artifact + memory forensics

Security tools require the corresponding utilities and configuration. Offensive modules are separately gated; assessments follow the operator’s specified targets and scope.

OSINT organized into persistent cases

Collect · Persist · Review

Horus now includes a dedicated OSINT case workflow. Run a case through the configured source pipeline, keep the collected records, and return to a report with case details, statistics, and findings.

Case-based collection
  • Create and run cases through the OSINT workflow
  • Use the initial pipeline of 11 source integrations
  • Persist case data and collected records locally
  • List saved cases and inspect reports after collection
Research tools around the case
  • SearXNG search through a configured instance
  • Browser automation and rendered-page extraction
  • HTTP requests, contact extraction, and document analysis
  • Optional HIBP Pwned Passwords integration for password exposure checks
run_osint_case list_osint_cases osint_case_report

Public-source collection and breach checks require network access. Source coverage depends on availability and configuration; collected matches need review before being treated as confirmed findings. Password exposure checks are separate from email breach lookups.

Installation

Linux
bash horus-installer.sh

Follow the prompts. Everything installs automatically.

Windows — via WSL2
1

Open PowerShell as Administrator and run:

wsl --install

Reboot when prompted. Set a username and password when Ubuntu opens.

2

Open WSL (Ubuntu) and run:

bash /mnt/c/Users/YOUR-USERNAME/Downloads/horus-installer.sh

Replace YOUR-USERNAME with your Windows username.

3

When installation finishes, open your browser and go to:

http://localhost:8080
Optional — Vision input: To attach images to conversations, pull a vision-capable model after install: ollama pull <vision-model>

Local Operator Tool Suite

Explore the documented tool catalog: files, terminal control, SSH, containers, model management, automation, red-team operations, OSINT cases, and staged edits. Tap any tool to read what it does. Available tools depend on the enabled packs, installed dependencies, and deployment configuration.

Tools execute through your Horus host; network tools contact the selected services or targets. The staged edit workflow follows a disciplined pattern — stage → finalize → review → deploy — with approval handled by a human over HTTP, never by the model itself.

Approval-Aware Editing Workflow

Horus does not have to edit production files directly. It can stage changes, validate them, and wait for approval before deployment.
  • Stage a file change without touching the live target
  • Finalize the staged edit and inspect the result
  • Approve only after review
  • Deploy to production when ready
  • Discard safely when a change is not wanted
stage_file_edit finalize_staged_edit POST /api/staging/:id/approve ← human approval deploy_staged_edit

This is one of the biggest differences between Horus and “blind edit” local agents. It supports a disciplined human-in-the-loop workflow instead of assuming every generated change should go live.

Background Job System

Horus runs long tasks independently of the browser tab. Submit a job, close the tab, and reconnect to inspect progress. Server-sent events replay retained output from a bounded buffer, while autonomous jobs also maintain persistent task state and checkpoints. Concurrency and retention limits are configurable; event replay covers the history still retained in the buffer.

Browser-independent jobs Reconnect-safe SSE replay Cancel any time Conversation persistence Configurable retention

Text & Image → 3D

Generate 3D models locally — no cloud render farm, no per-asset fees. Describe an object in text or hand Horus a single image, and it produces a generated mesh exported as .glb, .3mf, or .stl, powered by a local Hunyuan3D-2 pipeline on your own GPU.

Text → 3D
  • Prompt an object in natural language
  • Generates geometry and a textured mesh
  • Exports GLB, 3MF, or STL for Blender, Unity, slicers, or the web
Image → 3D
  • Drop in a single reference image
  • Reconstructs a 3D mesh from the source
  • Exports GLB, 3MF, or STL — stays on your disk
Local Hunyuan3D-2 GLB / 3MF / STL export GPU-accelerated Local mesh generation

Mesh quality and generation time depend on your GPU/VRAM and pipeline configuration. Generated meshes may need cleanup, dimensional checks, and slicer review before printing. Optional pipeline — enable based on hardware.

Why run locally

Privacy, cost, control, and reliability.
Local (Horus)
  • Local inference processes prompts on your machine
  • No rented cloud inference layer for local workflows
  • You choose models, routing, and tool rules
  • Core local chat, tools, files, and automation continue after installation and model download
Cloud
  • Data may leave your environment depending on provider and configuration
  • Rate limits, usage caps, and pricing changes happen
  • Model behavior changes outside your control
  • Outages and downtime still happen

What “own it” actually means

Horus runs locally with a security baseline that makes sense: workspace jail by default, audited tools, staged approvals, and upgrades you control.

  • Your local models live on your disk
  • Configure workspace restrictions and review tool activity
  • Switch models without changing the whole system
  • Conversation history stays on your machine
  • Approval-aware edits reduce accidental breakage

Fully Customizable Model Stack

After installation, you control which Ollama models are installed, routed, or removed.

  • Add or remove models anytime
  • Switch primary reasoning engine
  • Add vision models if hardware allows
  • Upgrade models without reinstalling
Runs on your hardware No cloud AI APIs required Works with Ollama

Model availability depends on your machine’s RAM, VRAM, and storage — not artificial product limitations.

Who it’s for

Power users who want a local AI operator: developers, cybersecurity and red-team operators, researchers, IT / homelab users, small teams, and creators who want an assistant that runs on their own machine — with tools, memory, terminal access, and real system visibility.

Developers Homelab / IT Creators Small teams

Typical uses

• Autonomous multi-step coding and codebase audits
• Authorized red-team reconnaissance and vulnerability assessment
• OSINT case collection and persistent reports
• Long-running automation jobs (background, reconnect-safe)
• Interactive terminal + AI in the same UI
• UI / screenshot understanding with a compatible vision model
• A private assistant that doesn’t depend on cloud AI services

What you actually get

  • A broad tool catalog covering files, code, Git, terminal, SSH, PM2, models, media, memory, red-team assessments, OSINT cases, and staged edits
  • Configurable autonomy with persistent task tracking and checkpoints
  • Context-pressure condensation and on-demand tool packs
  • Background jobs with buffered SSE replay and cancellation controls
  • Live PTY terminal in the browser UI
  • Workspace jail, blocked extensions, auth middleware, and reviewable edit flow

A model stack you choose

Choose an Ollama model suited to the job. Tool calling, vision, and thinking support depend on the selected model and runtime configuration.

RoleModel selectionSizingWhen to use
Primary Agent Compatible tool-capable model Hardware-dependent Main agentic operator — chat, reasoning, tool orchestration, background jobs.
Vision Compatible vision-capable model Hardware-dependent Image understanding, screenshots, and UI analysis.

Configure models and behavior for chat, code, reasoning, and vision according to the capabilities of your installed stack.

Model size, quantization, context length, and output budget all affect RAM and VRAM use. Thinking mode requires a model that supports it.

Horus

Notes

Horus runs local inference on customer-owned hardware. Web search, OSINT, SSH, email, model downloads, and other network-enabled tools contact external systems when used. For remote access, use secure networking and restrict access appropriately.

Recommended remote access

  • Use a VPN (zerotier-one) rather than exposing ports
  • Enable Basic Auth for the UI if accessed beyond localhost
  • Keep tool execution workspace-jailed for remote sessions

Large 70B+ reasoning models are not included by default — available as optional additions based on your hardware.