Prevent and Recover from Ransomware

Don't rely on backups or advanced threat hunting to stop ransomware. Get protected with the first ransomware resilience platform.

Technical Features

Recover at the System Level

Halcyon intercepts and captures the key material generated during a ransomware attack. When combined with a sample of the encrypted data we're able to recreate the keys in minutes, package those keys into an decryptor tailored to the specific ransomware actor, and autonomously decrypt the files across the impacted fleet of endpoints saving you weeks of recovery time.

Powered by AI/ML

We’ve built a series of machine learning engines trained entirely on ransomware to make highly accurate decisions in near-real time. Instead of simply looking at a binary, the platform observes the context and behavior of the entire system and applies a "suspiciousness score" that follows each child process spawned.

Multiple Protection Layers

Prevention starts with detection but doesn't stop there. Our ransomware engine is trained on the behaviors and tactics of over 120 active ransomware groups.

Easy on SOC and IT Teams

Our agent is lightweight and built to run alongside your existing security stack without issue or performance degradation. We provide API access alongside an elegant web console to fit into your workflow, not the other way around.

Supported Systems

Windows Server: 2012 R2, 2016, 2019, 2022
Windows 10 & 11

Future Support

Linux (Debian, Ubuntu)
MacOS (El Capitan+)
Other legacy Windows by request

Here's How It Works

Ransomware protection requires multiple layers of defense, the risk of letting ransomware run rampant through an organization is too large to leave to a single AI or behavioral model. Halcyon uses several unique layers to stop the process of ransomware from completing its task, if any one layer doesn't trigger a protection mechanism, Halcyon is able to respond accordingly. Even the best defenses can be breached by a persistent actor which is why Halcyon designed an autonomous recovery feature to stop the damage of any zero-day ransomware attack.


Ransomware Attempts to Execute

Deconfliction Checks

Owns the Asset

Completes Execution

Defense Layer

Defense Layer

Behavioral &
Deception Defense

Recovery or
Autonomous Isolation


The Halcyon Platform

Halcyon is the industry’s first dedicated, adaptive security platform focused specifically on stopping ransomware attacks. Halcyon is built by attackers to stop attackers. The solution is a lightweight agent that combines multiple proprietary advanced prevention engines along with AI models trained solely on ransomware.

Interested in getting a demo? Fill out the form and let’s talk!

Get a Demo

Meet with a Halcyon Anti-Ransomware Expert

Cookie Consent

By clicking “Accept”, you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts. View our Privacy Policy for more information.