RANSOStop guessing. Watch what ransomware does.
RansoJaga watches your Windows computers for the behaviour ransomware can't hide, scores the risk from 0 to 100, and alerts you on a live dashboard and on Telegram, in seconds.
How it works
The first minute of an attack, caught.
Ransomware works fast, but it behaves in ways normal software doesn't. Here is how RansoJaga reacts as one unfolds.
Something starts touching files
An unfamiliar process begins opening and rewriting files in a user folder. The agent on that PC sees it.
The rate crosses your limit
Files are changing faster than the file-rate limit you set. The monitor reports it and the risk score climbs. Severity: WARNING.
CPU spikes, more files change
The signs stack up and the score passes your threshold. Severity: DANGER.
You're told, right away
The dashboard turns red and linked users get a Telegram message, without anyone having to be watching the screen.
A person decides
An admin reviews the alert, acts on the machine, and acknowledges it. The log keeps the record for later.
Features
Everything you need to see it and respond.
A live picture of every endpoint
The admin dashboard shows your whole network at a glance and refreshes every few seconds. The closer a dot is to the middle of the radar, the higher its risk.
- Radar, network map and risk timeline
- Click a device on the map to jump to its details
- Online and offline status for every device
Alerts that find you
Link your Telegram once, and a message arrives the moment an alert fires, even when the dashboard is closed and you're away from your desk.
- Per-user linking, so only the right people are told
- Browser and phone alerts set up from the client dashboard
- Every alert is also kept in the activity log
Tune it without touching code
Admins set the risk threshold, the file-rate limit and the CPU limit from the dashboard. Change a number, and the agents pick it up.
- Filter the activity log by device, severity and date
- Export logs to CSV for reports or evidence
- Each device authenticates with its own key
Example controls. Drag them to see how the Detection Rules page feels.
Reading the score
Drag it. See what each level means.
Every alert carries a risk score from 0 to 100 and one of three severities.
Normal activity, or something minor that doesn't need action.
Bands shown are the default scale: 0–29 Calm, 30–69 Watch closely, 70–100 Danger. Admins can change the alert threshold.
Two dashboards
One for administrators. One for everyone else.
You land on the right one automatically when you log in.
See everything. Control the rules.
Built for the person responsible for the whole network.
- Live threat overview with radar, map and timeline
- Every connected endpoint, with online status and risk
- All alerts across the network, with acknowledge
- Detection rules, notifications and activity logs with CSV export
"Is my device safe right now?"
Built for people who aren't security experts. Plain words, big text, clear next steps.
- A simple threat meter: Calm, Watch closely or Danger
- Step-by-step guidance when something needs attention
- Phone alerts setup, history and a help section
- Adjustable text size and a light or dark theme
The project
Built by students, for a real problem.
RansoJaga is a final year project for the Diploma in Cyber Security Technology at GMI.
Ar-Rayyan Bin Alfadino Akbar
BACKEND / SERVER LEAD
Muhammad Zaim Bin Mohd Zarhamdy
DETECTION ENGINE LEAD
Batrisyia Aliah Binti Hasli
FRONTEND / DASHBOARD LEAD