Honesty builds trust. These are written down deliberately rather than left for you to discover at a bad moment.
snapper undochange) works, as long as no
kernel update happened in between — see Snapshots & Rollback.A security tool that states its limits is more trustworthy than one that does not. Maze does not protect you from:
| Out of scope | Why | What does help |
|---|---|---|
| Phishing — entering your password on a fake site | It is ordinary HTTPS traffic to a real server | Browser warnings, and a password manager (it will not fill on the wrong domain) |
| Malware already running | Maze Guard watches the network, not processes | Qlam scans, Firejail sandboxing |
| A service you use getting breached | Nothing to do with your machine | Unique passwords, two-factor authentication |
| Physical access to a powered-off machine | Not a network event | LUKS full-disk encryption + Secure Boot |
Maze Guard is very good at what it does cover: on the network you are connected to. In a café, hotel or airport it will tell you the MAC address, vendor, operating system and behaviour of a device attacking you. Outside that lane, other tools are the right answer.
Two applications are not installed by default because they can send data off the machine. Both warn you on first use:
The built-in Maze AI assistant is fully local (Ollama) and sends nothing. See Privacy Reference.
See also: Security Reference · FAQ