Abatis

Abatis is a cybersecurity company that provides a deterministic, kernel-level endpoint protection platform (EPP) designed to prevent cyberattacks rather than detect them. Their technology runs at ring 0 (kernel level) as a lightweight (~100KB) filter driver, making operating systems immutable - only pre-approved actions can execute. This means malware, ransomware, or unauthorized code is blocked before execution, without relying on signatures, heuristics, AI, or cloud telemetry. Key characteristics: - Deterministic prevention (not detection) – no heuristics, no false positives - Works in air-gapped and sovereign environments – no external data sharing - Endpoint-based deployment – protects every device individually across the network - Ultra-lightweight & compatible with legacy systems (even very old OS) - Central management / MSSP integration – can plug into managed security services and dashboards In practice, Abatis behaves like a hybrid of EPP + allowlisting + elements of SIEM/SOAR, but with a core focus on hard prevention at the OS level, not monitoring. They are typically used by large enterprises and critical infrastructure (e.g., industrial systems, government, aviation), especially where cyber sovereignty, offline operation, and high assurance security are required.