SysWatch Server is a server infrastructure security software suite designed to prevent intrusions and maintain the integrity of server operating systems and software. It operates without antivirus signature databases or regular updates, making it effective in air-gapped environments and against zero-day threats and targeted attacks using custom malware. The product is built on a proactive application control technology comprising three core protection layers: - **DIC (Dynamic Integrity Control):** Monitors and controls the launch of executable processes, blocking unauthorized process execution before harm can occur. Hidden or unrecognized application launches can be suspended pending administrator approval. - **DSE (Dynamic Sandbox Execution):** Runs potentially dangerous or vulnerable applications (e.g., browsers) in an isolated sandbox environment, preventing them from affecting other processes or the system. - **DRC (Dynamic Resource Control):** Controls application access to the file system, registry keys, external devices, and network resources. Administrators can define custom rules to align with company security policy. Additional capabilities include an antivirus scanner for detecting and remediating known malicious code, automatic scanning of connected USB media, and pre-launch scanning of unknown applications. The product supports centralized administration via a management console that enables remote installation/uninstallation, configuration changes, incident handling (blocking or allowing applications), and status notifications. It also supports a local update server for distributing client component updates. The product is registered in the Russian Software Registry.