Vorpcel / Solutions / Protect endpoints
Machines are where most attacks land: a malicious attachment, a stolen password used on a server, a program downloaded from the wrong place. Vorpcel scans for malware, watches what runs and lets your team respond on any machine without logging in to it.
At a glance
Signatures stop known malware, and that still matters. But attackers also use tools already present on the machine, or programs no one has seen before. Protection needs both: catching the known, and noticing behavior that does not belong.
And when something is found, the team needs to act fast on that machine, wherever it is, without waiting for someone to log in to it or take it to the office.
The program is fingerprinted as it starts and compared with known malware. A match raises a critical alert at once.
Detection rules look at behavior, such as an office document starting a command shell, and raise an alert even without a signature.
Connections to addresses and domains known to be used by attackers raise an alert with the program that made them.
Isolate it from the network from the console. It keeps talking only to Vorpcel, so the investigation continues.
Restore it from the quarantine with its original owner and permissions. The restore is recorded with who did it.
The same small agent also handles vulnerability management and log collection, so there is one thing to install and maintain.
Antivirus catches what is already known. Endpoint detection catches what behaves wrong. You get both, from the same agent and the same console.
Files are checked against signatures that Vorpcel keeps up to date, on a schedule you set per group of machines.
Every program that starts is fingerprinted and compared with public lists of known malware, so a known threat raises a critical alert the moment it runs.
Programs started, network connections and changes to important files are recorded and checked by detection rules, and stay searchable for your investigations.
When an alert needs action, your team acts on the machine without logging in to it. Every action is signed and recorded with who did it, and the containment ones can be undone.
Move a malicious file to a protected quarantine, and restore it with its owner and permissions if it was blocked by mistake.
Stop a program that is still running on the machine.
Cut a machine off from the network while keeping its connection to Vorpcel, so your team can still investigate it.
Start a malware scan on a machine right away when an alert needs it.
It covers malware scanning, detection at launch and response from the console. Whether it can replace your current product depends on what you use today and on your compliance requirements; during a trial you can run both side by side and compare.
No. An isolated machine can only talk to Vorpcel, so your team can still investigate it and release it when it is safe.
Your team, in the console and in the channels you configure, such as e-mail, Slack, Microsoft Teams or a webhook. If you want help reading them, our incident response team can step in.
Install with one command per system and see every machine on the board within minutes.