HarfangLab

This feature is designed to continuously detect and prioritize known vulnerabilities across the IT infrastructure using a constantly updated list of public CVEs. HarfangLab compares these CVEs against deployed applications without requiring heavy scanning, using only a single lightweight agent. Users can quickly prioritize remediation actions to improve IT hygiene and anticipate threat exploitation.

The software strengthens control over the information system by identifying unprotected IT assets and controlling associated network risks. The HarfangLab agent maps all endpoints and detects unknown devices by inferring characteristics like operating system and device type. Users can define specific networks to scan or exclude, maintaining continuous visibility over connected assets and detecting protection gaps.

HarfangLab provides a professional firewall that applies tailored network protection policies directly on the endpoints, filtering connections based on IP, port, and protocol. Users can define dynamic network zones to apply different firewall profiles dynamically based on the endpoint’s connection context (e.g., corporate network vs. VPN). This allows analysts to centralize configuration management and automate threat neutralization.

This feature is a core component of the EDR platform, dedicated to identifying and automatically blocking malicious behavior associated with ransomware attacks. The platform combines multiple complementary detection methods, including the detection of Canary file modification or deletion, and OS activity heuristics. This engine provides effective detection and automated response capabilities against sophisticated ransomware encryption attempts.

HarfangLab incorporates the IKARUS antivirus engine, which uses signature, heuristics, and multi-stage behavioral analysis, regardless of the operating system. The software automatically blocks known threats, significantly reducing alert fatigue for analysts. This centralized engine is managed entirely from the HarfangLab dashboard, ensuring effortless configuration and maintaining detection capabilities even when operating offline in closed environments.