Halcyon

Threats like ransomware are designed to evade modern security tools, and just one miss can have a catastrophic impact on your organization. Halcyon is the first Anti-Ransomware and Cyber Resilience Platform with automated encryption key capture and autonomous decryption capabilities to keep your operations running 24/7/365.

Most security vendors are quick to update their solutions once a threat is seen in the real world. But what if you are one of the first victims? Without a dedicated anti-ransomware engine, the protection gap can range from 24 hours to several days or even weeks. Traditional rules-based EDR and other endpoint protection products rely on convolutional neural network AI models for detection that are generally too complex to quickly train on emerging threats. In contrast, Halcyon leverages Capsule Networks (CapsNets) AI micro-models that allow us to rapidly train, test and deploy new protection mechanisms to address novel and emerging threats exponentially faster than traditional endpoint tools.

After gaining initial access to a system, attackers will routinely target security tools active on an endpoint. Bypassing and unhooking these products has a lower resource cost than attempting to sneak malicious binaries or scripts past automated detection tools. With countless real-world bypasses published, it is clear that security products also need to be hardened against attacks. The Halcyon agent specifically prevents leading endpoint tools from being disabled, bypassed or unhooked.

Ransomware events can seriously disrupt business operations, that is why our resilience engine was designed to recover infected systems as quickly as possible. Once a ransomware incident occurs, the remediation clock starts ticking. While Halcyon delivers the most advanced detection and prevention capabilities in the market, we also provide the only automated resilience layer to assure a ransomware attack never slips by your defenses. Halcyon is enabled with automated encryption key capture and autonomous decryption capabilities that immediately decrypt any infected devices.