
Halcyon Anti-Ransomware & Cyber Resilience Platform
Halcyon Anti-Ransomware & Cyber Resilience Platform is security software designed to protect against ransomware across the attack chain, from before executio…
What Halcyon Anti-Ransomware & Cyber Resilience Platform is
Halcyon Anti-Ransomware & Cyber Resilience Platform is security software designed to protect against ransomware across the attack chain, from before execution through data exfiltration and encryption. Its AI models use ransomware-related signals, samples, tactics, techniques, procedures, playbooks, and incident-response experience to identify threats. A behavioral engine applies threat modeling, anti-detonation, and deception exploitation to detect ransomware activity. Halcyon can capture symmetric encryption keys and decrypt affected data to restore files. Its exfiltration protection looks for unusual data movement, including unauthorized file-sharing services, cloud tunneling, and known malicious command-and-control infrastructure. EDR Tamper Detection watches for efforts to evade or disable endpoint detection and response tools. Each deployment includes a 24/7/365 Ransomware Operations Center to investigate alerts, respond to threats, and lead recovery. If an attack gets through its defenses, the warranty includes expert-led response and recovery with a minimum stated value of $50,000. Pricing is on request; there is no free plan.
Good
- Captures encryption keys and can restore impacted files.
- Includes 24/7/365 ransomware operations monitoring.
- Warranty includes response and recovery services.
- Integrates with several named endpoint security products.
- Streams alerts to SIEM, SOAR, or XDR products.
Watch out
- Pricing is available only on request.
- No free plan is listed.
- EDR is not included.
Who it suits
Halcyon is positioned for mid-market and enterprise customers, with a deployment option for small and midsize businesses. It suits organizations seeking ransomware protection across Windows and Linux environments that can work alongside existing endpoint products.
Verdict
Halcyon combines ransomware detection and recovery capabilities with ongoing operations support. Its pricing is quote-based, and the entry does not include EDR.
Plans and prices
From Halcyon Anti-Ransomware & Cyber Resilience Platform's own pricing page, checked 1 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Complete Platform Access | Priced on request | pre-execution ransomware prevention · 24/7 Ransomware Operations Center · data exfiltration detection and prevention · ransomware warranty |
The facts
Each one read from Halcyon Anti-Ransomware & Cyber Resilience Platform's own pages, with the date it was checked.
What it does
- AI detection
- Its AI models are trained on ransomware signals, samples, tactics, techniques and procedures, playbooks, and real-world incident-response engagements.checked 1 Oct 2026
- Behavioral engine
- The behavioral engine uses threat modeling, anti-detonation, and deception exploitation to detect ransomware activity.checked 1 Oct 2026
- Compliance
- Halcyon's Trust Center lists SOC 2 Type 2 and participation in the EU-U.S., UK Extension, and Swiss-U.S. Data Privacy Frameworks.checked 1 Oct 2026
- EDR protection
- EDR Tamper Detection monitors for attempts to evade or disable endpoint detection and response tools.checked 1 Oct 2026
- Exfiltration protection
- Data Exfiltration Protection detects unusual data movements, including unauthorized file-sharing services, cloud tunneling, and known malicious command-and-control infrastructure.checked 1 Oct 2026
- Integrations
- Halcyon works alongside Microsoft Defender, CrowdStrike Falcon, SentinelOne Singularity, Palo Alto Cortex XDR, and other endpoint products.checked 1 Oct 2026
- Key capture
- Halcyon captures symmetric encryption keys and can decrypt impacted data to restore files.checked 1 Oct 2026
- Managed monitoring
- Every deployment includes a 24/7/365 Ransomware Operations Center that investigates alerts, responds to threats, and leads recovery at no additional cost.checked 1 Oct 2026
- Pricing model
- Pricing is based on environment size, protected endpoint count, and required ransomware resiliency, with annual and multi-year agreements typically available.checked 1 Oct 2026
- Purpose
- Halcyon is a dedicated anti-ransomware platform covering the attack chain from pre-execution through data exfiltration and encryption.checked 1 Oct 2026
- SIEM API
- A universal API streams Halcyon alerts into SIEM, SOAR, or XDR products; listed examples include Google SecOps, Microsoft Sentinel, Sumo Logic, Splunk, and Exabeam.checked 1 Oct 2026
- Supported systems
- The agent supports Windows Server 2012 x64, 2016, 2019, 2022, 2025 and Windows 10/11, plus x86_64 Linux distributions including RHEL, Debian, Ubuntu, AWS Linux, and SLES.checked 1 Oct 2026
- Target customers
- Halcyon says it builds products and solutions for mid-market and enterprise customers and also offers a small- and midsize-business deployment.checked 1 Oct 2026
- Warranty
- If an attack breaches Halcyon's defenses, its warranty provides expert-led incident response and recovery services at no additional cost with a minimum value of $50,000.checked 1 Oct 2026
The company
- Founded
- 2021checked 28 Sep 2026
- Headquarters
- San Diego, California, USAchecked 28 Sep 2026
Alternatives to Halcyon Anti-Ransomware & Cyber Resilience Platform
- 1
AEGIS
Free planOpen sourceWebAPILinuxmacOS7.5Free plan - 2

AppCheck
Free planWebLinuxWindows7.5Free plan - 3

ManageEngine Ransomware Protection Plus
Free planWebSelf-hostedWindows7.4From $6.99 a year - 4
Rubrik Security Cloud
WebAPILinuxmacOS6.9 - 5
Sophos Intercept X for Mobile
AndroidiOS6.8 - 6

NeuShield Ransomware Protection
Free planWebWindows6.7From $24.99 a year
