Stop Ransomware Now

Halcyon is the first dedicated anti-ransomware engine built for the enterprise.

Halcyon Product Dashboard UI

68.5% of companies have experienced some form of a ransomware attack in 2021. Ransomware is no longer considered just a technical threat, it's the largest single risk to any organization.

Pre Execution Icon

Pre-Execution Defense

Stopping ransomware before it can execute on a target system is critical. Halcyon combines industry-leading intelligence sources with the first pre-execution convolutional neural network trained solely on ransomware.

Virtual Machine/Sandbox Icon

Deception & Anti-Detonation

Modern ransomware knows when it's being examined in a virtualized environment and by security products. Halcyon has developed an industry-first semi-virtual deception container to trick ransomware into always thinking it’s being analyzed by these tools or is installing on a computer it's not supposed to be on.

Machine Learning Icon

Beyond Behavioral

EDR and XDR solutions were born from the inability for AV and EPP products to stop all threats. The Halcyon engine moves beyond simple behavior analysis of a program and analyzes malicious processes in context of the entire environment via industry-first applications of next-generation machine learning. Allowing enhanced visibility with decreased system overhead.

4 Layers of Protection Icon

Resilient Protection

Even with all these layers of protection, attackers still have an advantage against defenders. Halcyon is designed with the idea that layers will fail and is the first solution to incorporate host isolation, to prevent data exfiltration and lateralization. Bolstered by the industry's first ransomware key and file recovery baked into our engine, Halcyon mitigates the risk from ransomware and ensures quick recovery if all layers fail.

Pre Execution IconVirtual Machine/Sandbox IconMachine Learning Icon4 Layers of Protection Icon

Why Ransomware Gets Missed


EPP and NGAV vendors train their detection ML models based on generic malware behavior like:

Enumeration and exfiltration of system credentials
Modifying systems for persistence
Shutting down protection services
Loading code remotely
Instrumenting the web browser
Taking control of peripherals
Connecting to remote servers
Launching DoS attacks
Creating new executables
Hiding malware resources
Launching new processes
Keystroke logging
Process Injection
Mining cryptocurrency


Ransomware behaves different from malware. Halcyon trains models based on harder-to-discern behavior like:

Opening files
Writing files
Deleting files
Encrypting files
Elevation of privileges
Transferring of files and data
Exfiltration of key material

Read our blog

Read all posts

The Halcyon Platform

Halcyon is the industry’s first dedicated, adaptive security platform focused specifically on stopping ransomware attacks. Halcyon is built by offensive security experts to stop attackers. Our platform is a lightweight agent that combines multiple proprietary advanced prevention engines along with AI models trained solely on ransomware.

Ready to get a demo? Fill out the form and let’s talk!

Get a Demo

Meet with a Halcyon Anti-Ransomware Expert

Cookie Consent

By clicking “Accept”, you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts. View our Privacy Policy for more information.