Prevent and Recover from Ransomware
Don't rely on backups or advanced threat hunting to stop ransomware. Get protected with the first ransomware resilience platform.
Technical Features
Recover at the System Level
Halcyon intercepts and captures the key material generated during a ransomware attack. When combined with a sample of the encrypted data we're able to recreate the keys in minutes, package those keys into an decryptor tailored to the specific ransomware actor, and autonomously decrypt the files across the impacted fleet of endpoints saving you weeks of recovery time.
Powered by AI/ML
We’ve built a series of machine learning engines trained entirely on ransomware to make highly accurate decisions in near-real time. Instead of simply looking at a binary, the Halcyon.ai platform observes the context and behavior of the entire system and applies a "suspiciousness score" that follows each child process spawned.
Multiple Protection Layers
Prevention starts with detection but doesn't stop there. Our ransomware engine is trained on the behaviors and tactics of over 120 active ransomware groups.
Easy on SOC and IT Teams
Our agent is lightweight and built to run alongside your existing security stack without issue or performance degradation. We provide API access alongside an elegant web console to fit into your workflow, not the other way around.
Supported Systems
Future Support
Here's How It Works
Ransomware protection requires multiple layers of defense, the risk of letting ransomware run rampant through an organization is too large to leave to a single AI or behavioral model. Halcyon uses several unique layers to stop the process of ransomware from completing its task, if any one layer doesn't trigger a protection mechanism, Halcyon is able to respond accordingly. Even the best defenses can be breached by a persistent actor which is why Halcyon designed an autonomous recovery feature to stop the damage of any zero-day ransomware attack.
Ransomware Attempts to Execute
Ransomware
Deconfliction Checks
Ransomware
Owns the Asset
Ransomware
Completes Execution
Pre-Execution
Defense Layer
Anti-Detonation
Defense Layer
Behavioral &
Deception Defense
