Orbitron EDR: Endpoint detection, investigation and response, including container isolation.

See the process chain behind every event, detect suspicious behavior with real-time rules and respond on the endpoint. Isolate a compromised host, or isolate a single container while the rest of the host keeps serving.

Book a Demo How it's licensed
  • Security Operations
  • On-premise deployment
  • One Orbitron agent
The process chain behind an event: processes, file activity and network activity on one timeline.
The process chain behind an event: processes, file activity and network activity on one timeline.

Capabilities

What Orbitron EDR does

Process chain investigation

Processes, related file activity and network connections on the same timeline, linked to response commands.

Real-time detection

Process, authentication, network and file integrity telemetry evaluated by correlation rules with MITRE ATT&CK tagging.

Host isolation

Cut a host off the network in one action while the Orbitron management channel stays open for investigation.

Container isolation

Isolate a single container on a host without taking the host or its other workloads offline.

Behavior baselines

Expected ranges from historical behavior highlight unusual process, file, network and system activity.

File integrity monitoring

Track creation, deletion, modification and access on critical files and directories.

In the console

More of Orbitron EDR

Deviations from normal become visible: expected ranges from historical behavior.
Deviations from normal become visible: expected ranges from historical behavior.

Built from Orbitron modules

Included modules

Every Orbitron product is a set of platform modules on the same agent. Products you add later reuse the modules you already have.

  • Endpoint VisibilityVisibility · EVIS
  • Endpoint SecuritySecurity · ESEC
  • Rule Engine (Correlation)Security · CORR
  • Alert ManagementSecurity · ALERT
  • Command EngineAutomation · CMD

Optional add-ons

  • Container Visibility
  • Endpoint Automation
  • Application Control
  • Device Control
  • Vulnerability Management
  • Log Collector
  • Remote Connection

Licensing

How it's licensed

Per protected endpoint (client, server and POS/kiosk/IoT classes).

Annual subscription, priced for your environment. Products bought together share the modules they have in common.

Request pricing

Included with every subscription

  • On-premise installation in your data center
  • Product updates
  • Technical support

See Orbitron EDR in your environment.

Book a demo and we will show it on infrastructure like yours.