HarfangLab Guard feat. IKARUS

HarfangLab Guard feat. IKARUS is an endpoint security platform combining Endpoint Protection (EPP), Endpoint Detection & Response (EDR), and optional Attack Surface Management (ASM) in a single agent. It integrates the IKARUS Malware Scan Engine for multi-layered malware detection and pre-execution blocking with HarfangLab's EDR technology for endpoint telemetry, anomaly detection, and incident response.

The platform is structured around three modules:

EPP (powered by IKARUS Malware Scan Engine): Provides real-time malware detection before execution, cross-platform coverage, and operates in offline/air-gapped environments.

EDR (HarfangLab technology): Collects real-time endpoint telemetry (processes, network, events), correlates signals into attack chains, supports threat hunting, remote incident response, forensic timelines, and threat intelligence enrichment with IOC context. The agent includes self-protection against tampering or deactivation.

ASM (optional add-on): Delivers continuous CVE and exposure visibility per endpoint, detects shadow IT and unmanaged assets, and prioritizes risk based on exploitability — using the same agent telemetry without additional network scanning.

Deployment options include EU cloud (hosted in Austria/Germany, GDPR-compliant), on-premises, and air-gapped/offline environments. The platform features white-box transparency with open, editable detection rules and traceable alert logic. It integrates into SOC workflows via SIEM, SOAR, NDR, and CTI connectors, with API access for custom analytics.

The HarfangLab EDR agent holds ANSSI CSPN certification, BSI certification (BSI-DSZ-BSZ-0021-2025), and has been evaluated in MITRE ATT&CK Evaluations (2023 & 2024). The solution is developed and operated entirely in Europe.