Nuri Anti-Ransom
Nuri Anti-Ransom (NAR) is Windows software that detects ransomware behavior and blocks attacks in real time.
What Nuri Anti-Ransom is
Nuri Anti-Ransom (NAR) is Windows software that detects ransomware behavior and blocks attacks in real time. It uses behavior-based detection rather than signature matching. Before encryption, it backs up important files, then can restore that backed-up data automatically after treatment. NAR also protects server and network shared folders, helps stop ransomware from removing its configuration files or ending its processes, and prevents changes to the boot sector (MBR). Its quarantine function holds cured or deleted files for possible restoration. Coverage is limited to major data files identified based on what ransomware encrypts; it does not protect every PC data file. Workstation editions list Windows 8, 8.1, 10, and 11, while server editions list Windows Server 2008 R2 SP1 or later, Server 2012, and Server 2016 or later. NAR can integrate with Nurilab’s NTMS central management solution, which may require a separate purchase. Pricing is available on request, and Nurilab offers a free 30-day personal trial delivered by email after application.
Good
- Detects ransomware behavior in real time.
- Backs up important files before encryption.
- Can automatically restore backed-up data after treatment.
- Protects server and network shared folders.
- Free 30-day personal trial is available.
Watch out
- Does not protect every PC data file.
- NTMS management software may require separate purchase.
- Pricing is available on request.
Who it suits
NAR may suit Windows workstation or server users who want behavior-based ransomware protection with backup and restoration. Its file coverage limit and possible separate cost for NTMS are worth considering.
Verdict
NAR combines behavior detection with backup and restoration, plus protection for shared folders and the boot sector. Check its coverage limits and request pricing before choosing it.
Plans and prices
From Nuri Anti-Ransom's own pricing page, checked 9 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Nuri Anti-Ransom (NAR) | Priced on request | Windows workstation and server editions; contact Nurilab for purchase details |
The facts
Each one read from Nuri Anti-Ransom's own pages, with the date it was checked.
What it does
- Backup and restore
- It backs up important data before ransomware encrypts files and can automatically restore backed-up data after treatment.checked 9 Oct 2026
- Behavior detection
- The product uses behavior-based detection rather than signature-based detection.checked 8 Oct 2026
- Certification
- Nurilab says Nuri Anti-Ransom received Korean GS certification level 1 from the Telecommunications Technology Association.checked 9 Oct 2026
- Coverage limit
- The maker says NAR does not protect every file on a PC and protects major data files based on ransomware-encrypted data.checked 9 Oct 2026
- Data backup and restore
- NAR backs up important files before encryption and can automatically restore backed-up data after treatment.checked 8 Oct 2026
- Integration
- NAR supports integration with central management solutions such as NTMS; the trial page says the management program is a separate purchase.checked 8 Oct 2026
- Management integration
- NAR supports integration with Nurilab’s NTMS central management solution, which the maker says may require separate purchase consultation.checked 9 Oct 2026
- MBR protection
- NAR prevents tampering with the boot sector (MBR) to maintain system stability.checked 9 Oct 2026
- Purpose
- NAR uses behavior-based detection to detect and block new and variant ransomware in real time.checked 9 Oct 2026
- Quarantine
- It quarantines cured or deleted files so they can be restored when needed.checked 9 Oct 2026
- Self-protection
- Its self-protection mechanism prevents ransomware from deleting configuration files or terminating NAR processes.checked 9 Oct 2026
- Server requirements
- The server version lists Windows Server 2008 R2 SP1 or later, Server 2012, and Server 2016 or later, with an Intel Xeon 2-core-or-higher CPU, at least 2 GB memory, and 5 GB free disk space.checked 8 Oct 2026
- Shared folders
- The product protects server and network shared folders from ransomware attacks.checked 9 Oct 2026
- Support
- Nurilab lists a technical support phone number of 02-2671-2888 and sales email [email protected].checked 9 Oct 2026
- Supported server systems
- The server edition lists Windows Server 2008 R2 SP1 or later, Windows Server 2012, and Windows Server 2016 or later.checked 9 Oct 2026
- Supported workstation systems
- The workstation edition lists Windows 8, Windows 8.1, Windows 10, and Windows 11.checked 9 Oct 2026
- Workstation requirements
- The workstation version lists Windows 8, 8.1, 10, and 11, an Intel Core processor at 1.5 GHz or higher, at least 2 GB memory, and 5 GB free disk space.checked 8 Oct 2026
The company
- Founded
- 2015checked 28 Sep 2026
- Headquarters
- Seoul, Republic of Koreachecked 28 Sep 2026
Money
- Trial
- Nurilab offers a personal trial version for 30 days, requested by email through its trial page.checked 9 Oct 2026
Alternatives to Nuri Anti-Ransom
- 1
AEGIS
Free planOpen sourceWebAPILinuxmacOS7.5Free plan - 2
AppCheck
Free planWebLinuxWindows7.5Free plan - 3
ManageEngine Ransomware Protection Plus
Free planWebSelf-hostedWindows7.4From $6.99 a year - 4
Rubrik Security Cloud
WebAPILinuxmacOS6.9 - 5
Sophos Intercept X for Mobile
AndroidiOS6.8 - 6
NeuShield Ransomware Protection
Free planWebWindows6.7From $24.99 a year