Add organization card

README.md

@@ -1,10 +1,37 @@
 ---
 title: README
-emoji: 🐨
-colorFrom: purple
-colorTo: yellow
+emoji: 🛡️
+colorFrom: indigo
+colorTo: gray
 sdk: static
 pinned: false
 ---
 
-Check out the configuration reference at https://huggingface.co/docs/hub/spaces-config-reference
+# 🛡️ Patronus Protect
+
+An on-device AI firewall. It runs on your own machine, quietly watching the AI traffic going in and out of your apps and blocking what you'd rather not see leave: prompt injections, leaked secrets, the shadow AI that nobody signed off on. None of it is sent to a cloud to work, because a security tool that phones home never sat right with us.
+
+It covers the places people actually use AI (browsers, IDEs, native apps, MCP servers) and doesn't mind which provider is behind it, whether that's Claude, OpenAI, Gemini, Copilot, Ollama or a local Mistral.
+
+## The open-source library
+
+Underneath the app is a scanning library written in Rust with Python bindings, and it's open for anyone to use. It's the part we're proudest to give back.
+
+The way it scans is layered, so it stays fast without cutting corners. A request first hits L1, plain rule-based checks that need no models and run in microseconds. If something looks worth a closer look it moves to L2, small classifiers that share a single encoder and answer in milliseconds. Only the genuinely uncertain cases reach L3, the full transformer models, loaded lazily and run by a background worker that schedules the heavy work. Most traffic never needs L3, so you get real detection without paying for it on every request.
+
+Across those layers it catches prompt injection and jailbreaks, PII, secrets and other DLP leaks, sensitive documents, risky agentic tool use and MCP policy violations, plus routing and threat classification. Everything happens on the endpoint, and because the core is Rust it stays quick and light enough to sit in the request path without anyone noticing.
+
+The library is open source (AGPL-3.0, with a commercial license if you're shipping something closed). Issues and pull requests are welcome, and so is a note telling us it broke on your setup.
+
+## The models 🤗
+
+We had to train our own detectors to build the firewall, and honestly it felt wrong to keep them to ourselves. Open detectors make everyone's AI a little safer, and we've leaned on plenty of open work to get this far. So here they are, with our thanks: use them, fine-tune them, benchmark against them, and please tell us where they fall short.
+
+- **Wolf-Defender**, our prompt-injection detector (English and German).
+- **Orca-Sonar**, a document classifier for DLP and sensitive-document routing.
+- A **unified multi-task model** with seven heads: injection, sensitive documents, tool class, tool action, tool tags, routing, threat.
+- **GLiNER Edge** for PII extraction.
+
+They're deliberately small. ModernBERT under the hood, quantized to ONNX (int8 and int4), a few hundred MB of RAM so they run happily on a laptop instead of a GPU rack.
+
+The app itself, and downloads for macOS and Windows, live at [patronus.studio](https://patronus.studio). Come say hi.