# FireAI Pilot Now Learns Each Network: Home, Café and Jobsite Get Their Own Answers

> FireAI 0.1.8 teaches FireAI Pilot the difference between networks and security modes: a connection allowed at home can stay blocked on café or jobsite Wi-Fi.

FireAI Security & Research Team (HisnLabs) · Published 2026-09-30
Canonical: https://hisnlabs.com/en/blog/fireai-pilot-learns-every-network

A reader who watched the FireAI demo on Reddit asked the question this release answers. They expected to live in Paranoid mode, “given how many random devices show up on jobsite wifi”, and wanted to know whether FireAI Pilot learns per network or builds one profile for everything.

> Does the autopilot actually learn per-network or is it one global profile it builds over time?
>
> — A Reddit commenter on the FireAI demo

Until FireAI 0.1.8 the honest answer was: one profile for the whole Mac. From 0.1.8 it is both. [FireAI Pilot](https://hisnlabs.com/en/docs/autopilot) keeps the lessons that hold everywhere and adds lessons that belong to one network, to open Wi-Fi in general, and to each security mode.

## Why one profile was the wrong model for a laptop

A laptop changes networks several times a day, and the right answer for the same connection changes with it. A photo-sync client is fine at home. On a café hotspot or a shared jobsite network, the same traffic tells everyone on that network which service you use and when, and you may prefer it to wait. The U.S. Federal Trade Commission notes that public hotspots are safer than they used to be because most sites now encrypt their traffic; encryption protects what is sent, not the fact that an app is talking to a given server.

With one global profile, FireAI Pilot saw those choices as contradictions: blocked on Monday, allowed on Tuesday. It either asked every time or settled on whichever answer came last. Neither is what a person who moves between places means.

## How the lessons are separated

FireAI Pilot is a small decision model that runs on the Mac. It is a logistic regression over named signals, such as the app, its signature, the destination’s company, the kind of traffic and whether the app has used that destination before, and each of your answers nudges the weight of the signals involved. Release 0.1.8 adds signals that combine the network or the security mode with those facts:

| Signal | What it captures | Carries over to |
| --- | --- | --- |
| This network | Your answers on this Wi-Fi, per app, destination and kind of traffic | This Wi-Fi, or every Wi-Fi of a saved place |
| Open Wi-Fi | Your answers on networks without a password or with weak security | The next open network, even one never seen |
| Security mode | Your answers while Home, Coffee shop, Paranoid or Under attack is on | Every network where that mode is on |
| Everywhere | The signals FireAI Pilot already used | All networks |

*Every answer trains the global signals and the network and mode signals at the same time.*

Because the signals add up, a lesson that holds everywhere (“this user blocks telemetry”) still applies on a network FireAI has never seen, while a lesson that only holds in one place (“allowed at home, blocked on the jobsite”) is learned by the network signals and stays there.

> FireAI Pilot learns from your own answers, on your Mac. Try it on your networks. [Download FireAI for Mac](https://hisnlabs.com/en/download)

## Four places, four answers

- Jobsite Wi-Fi in Paranoid mode: unknown devices share the network, so you block the sync client and the chat app’s file previews once. FireAI Pilot blocks them there from then on, and asks again only for something new.
- An open café network: [Coffee Shop Armor](https://hisnlabs.com/en/docs/coffee-shop-armor) switches to Coffee shop mode as you join. What you blocked at the last open café counts here too, before you answer anything.
- A hotel or airport you have never visited: nothing specific is known about the network, so the open-Wi-Fi and security-mode lessons do the work, together with the lessons that hold everywhere.
- Home: the same apps connect freely, because your answers at home trained the home network’s signals. Blocks you chose elsewhere are a hint here, never the deciding vote.

## Your past decisions are weighed by network

Before the model, FireAI Pilot looks at your own similar past decisions. In 0.1.8 a decision made on another network counts for about a third of one made on this network. Two blocks on the jobsite Wi-Fi are therefore enough to act on at the jobsite, but not at home. When your choices on different networks disagree, FireAI Pilot asks you instead of guessing, and learns from that answer.

## What stays on the Mac

To tell networks apart, FireAI reads the current Wi-Fi name through Apple’s CoreWLAN framework. macOS reveals that name only to apps with Location permission, which FireAI already asks for to [switch profiles by Wi-Fi](https://hisnlabs.com/en/docs/switch-profiles-by-wifi). FireAI stores a short fingerprint of the name, or of the saved place it belongs to, never the name itself, and only on your Mac. “Forget What FireAI Learned” erases it with the rest of what FireAI Pilot has learned.

## Limitations

- Without Location permission, or on a wired connection, FireAI cannot tell networks apart, and FireAI Pilot learns one profile for the whole Mac as before.
- Two different networks with the same name are one network to FireAI Pilot. The separate [Trusted Wi-Fi check](https://hisnlabs.com/en/docs/coffee-shop-armor) is what warns when a known name appears with a different access point or weaker security.
- Renaming a saved place starts its network lessons again; the lessons that hold everywhere are kept.
- Network lessons change what FireAI Pilot decides and suggests. They never override your own rules, the security mode’s blocks or the kill switch.

## Also in FireAI 0.1.8, build 3

This build also lowers FireAI’s own CPU use. Home now redraws only the part that changed, the World map globe draws at 24 frames per second and pauses while FireAI is in the background, and the 3D mascot stops drawing once its entrance ends. The full list is on the [release page](https://hisnlabs.com/en/whats-new). FireAI updates itself from Settings, or you can [download it](https://hisnlabs.com/en/download) and try it free for 17 days.

## How FireAI and HisnLabs fit in

Decide once per place. FireAI Pilot remembers the rest, on your Mac.

FireAI is HisnLabs’ own product: an on-device AI firewall for Mac. It shows every connection your apps make, in plain language, and lets you decide what leaves your Mac — its AI runs locally, so your traffic is never sent to us or anyone else. HisnLabs’ security research team is the group that keeps that decision-making accurate: cataloguing which domains are ordinary telemetry versus a real product, tracking the country and network behind a connection, and training the on-device model (its FireAI Pilot feature) on real traffic patterns, all without any of it leaving your Mac.

You can read the technical decisions behind it, or try FireAI for 17 days, at [FireAI, by HisnLabs](https://hisnlabs.com/en/download).

## Sources

- [FireAI docs: FireAI Pilot learns each Wi-Fi network and each security mode](https://hisnlabs.com/en/docs/fireai-pilot-learns-per-network)
- [FireAI docs: FireAI Pilot](https://hisnlabs.com/en/docs/autopilot)
- [FireAI docs: Coffee Shop Armor](https://hisnlabs.com/en/docs/coffee-shop-armor)
- [FireAI docs: Switch profiles by Wi-Fi](https://hisnlabs.com/en/docs/switch-profiles-by-wifi)
- [U.S. Federal Trade Commission: Are Public Wi-Fi Networks Safe? What You Need To Know](https://consumer.ftc.gov/articles/are-public-wi-fi-networks-safe-what-you-need-know)
- [Apple Developer: CWInterface ssid()](https://developer.apple.com/documentation/corewlan/cwinterface/ssid())
- [Wikipedia: Logistic regression](https://en.wikipedia.org/wiki/Logistic_regression)