Your apps are connecting to Anthropic, OpenAI, Google, and more — right now, in the background. Nocturn shows you exactly which processes, where they're sending data, and lets you block anything that shouldn't be there.
Installs in under a minute. Lives in your system tray. Never phones home.
Nocturn runs quietly in your tray and only speaks up when something needs your attention.
A live process table showing every AI tool, agent, and script running on your machine — and every outbound LLM connection it's making. Trust what you know; flag everything else.
One click cuts a process's network access or terminates it entirely. Auto-kill mode handles anything unauthorized automatically — with a safety guard that prevents it fighting a respawn loop.
The most common crypto theft method is clipboard hijacking — malware swaps your wallet address between copy and paste. Nocturn detects the swap instantly and offers to restore what you actually copied. Covers BTC, ETH, XRP, LTC, DOGE and more.
Quick, full, and targeted scans with multi-layer detection. Suspicious files go into an encrypted quarantine vault — locked away but recoverable if it turns out to be a false positive.
Run the installer, paste your licence key from your purchase email, and click Activate. Nocturn starts with Windows and lives in your tray.
Open AI Watch. You'll see every AI process and connection on your machine. Anything you recognise — allowlist it, or trust the whole publisher.
Once your known tools are trusted, anything new stands out immediately. Block with one click. Get on with your day.
Countdown hasn't started yet — check back soon.
Secure checkout via Lemon Squeezy. Licence key delivered by email. Windows 10 & 11 · 64-bit only.
Early access pricing. Price increases after launch window closes.
No. Nocturn reads the process and connection lists Windows already maintains — it doesn't add its own scanning loop. Typical CPU usage is under 0.1%, RAM around 40 MB. It's designed to be quieter than a browser tab.
Generally no. If your AV is aggressive, add an exclusion for Nocturn's install folder so it doesn't flag Nocturn's own signatures. Windows Defender doesn't usually need this.
Deactivate on your old machine via Settings, then activate on the new one with the same key. One seat per licence. If you lose access to the old machine, contact support@swordwright.net.
Yes — all V1.x updates are free. If a V2 subscription tier launches in future, V1 Founding Members keep their V1 licence for life at no extra cost. We'll be transparent about what that means before it happens.
No. Nocturn monitors which processes are running and which network connections they make — the same information Windows Task Manager shows you. It does not intercept, decrypt, or log the content of any traffic.
Clipboard hijacking — malware that watches your clipboard and silently replaces a copied crypto wallet address with the attacker's address. When you paste, you paste the attacker's address and funds go to them. Nocturn monitors clipboard changes, detects address substitutions, and alerts you instantly. It covers the major wallet formats: BTC, ETH/EVM, XRP, LTC, TRX, DOGE. Sophisticated kernel-level malware could bypass this, but it defeats the vast majority of commodity clipboard hijackers used in the wild.