Halonex 2026 Threat Report — a year of telemetry, and the six shifts that should change your controls.Get the report
Why Halonex

Defence that holds
without recognising you.

A detection engine has to identify an attack before it can stop one, which is exactly why the novel ones land. Halonex enforces at ring 0 and isolates every process, so an exploit nobody has catalogued yet still finds no route out of its box.

6

Systems in Production

200+

CTI Feeds Aggregated

10B+

Credentials Indexed

Ring 0

Enforcement Depth

<3s

Asset Isolation Time

🇮🇳

Built and Hosted In

Our Approach

Six decisions we made early
and have not walked back

Absolute Process Isolation

Each process runs inside its own virtualised environment. A compromise stays in the box it started in — there is no neighbour to reach and no host to pivot onto.

Kernel-Level Enforcement

Zmatrix™ operates at ring 0, the deepest hardware privilege level. Policy is applied before an instruction is permitted to run, not evaluated after it already has.

Intelligence Scored Against You

Indicators from 200+ feeds are normalised, enriched, and matched to your assets — so the alerts you see are the ones with a path to something you own.

No Measurable Overhead

Isolation happens below the layer users interact with. Benchmarks show no meaningful cost, and nobody files a ticket asking why their machine got slower.

Sovereign by Construction

Engine, telemetry pipeline, and Argon hosting are built and operated in India. Nothing crosses a border because of where a vendor happened to put its region.

Containment Over Detection

A detection tool has to recognise an attack to stop it, which is why novel ones get through. A boundary does not, which is why we invested in the boundary.

Our Vision

Security whose guarantees survive the night shift. A system that holds because of how it is constructed, not because an analyst noticed an alert in time — and one whose defence does not weaken against an attack it has never seen before.

Our Mission

Build the hard parts of the stack in India: kernel enforcement, process isolation, automated containment. These are the components nobody exports and everybody depends on, and a country that licenses them inherits every assumption inside them.

Our Journey

Two engineers in Tirunelveli,
and what came after

JUNE 2025

Halonex Labs Founded

Started in Tirunelveli, Tamil Nadu , on the premise that the enforcement layer had to be built here rather than licensed.

AUGUST 2025

Vanta for Browsers

Vanta for Browsers is your always-on bodyguard at the tab - blocking malicious websites before they load. Phishing kits, malware hosts, drive-by downloads: stopped in time.

SEPTEMBER 2025

Introducing AmIHacked

AmIHacked.net is just the beginning. Together with our Breach Intelligence Suite, we’re reshaping how individuals and enterprises understand and respond to cyber risk.

MARCH 2026

Anna University MoU

A formal research agreement with Anna University covering joint work on isolation primitives, and a hiring pipeline out of the department.

MAY 2026

Zmatrix™ Development

The process isolation and ring 0 enforcement engine enters active development — the component every other product eventually sits on top of.

JUNE 2026

Halonex Labs Global Threat Intelligence Live Operations Stream

Our team has built a proprietary data pipeline to aggregate massive amounts of real-time telemetry from across the globe, feeding directly into a sophisticated visualization platform. We are streaming this continuous intelligence feed 24/7 on YouTube, democratizing access to high-level threat data for security professionals and organizations worldwide.

Who We Protect

Four threat models.
One enforcement layer.

A student checking a leaked password and a ministry defending citizen records need very different things from us. What they share is the layer underneath.

Students & Individuals

Your credentials are already sitting in someone's dataset. Checking them should not cost money or require an account, so with us it does neither.

  • Free AmIHacked.net credential checks
  • Vanta Extension browser guard
  • Alerts the hour a dump lands

Startups & SMBs

You do not have eighteen months to rebuild customer trust, and you do not have a security team to spare. Kernel enforcement that runs without one.

  • Credential monitoring across the whole team
  • Kernel-level endpoint enforcement
  • Priced for pre-Series A budgets

Enterprises

Your adversaries rehearse. Process isolation across the fleet, plus agents that attack your own stack continuously so the rehearsal happens on your side too.

  • Zmatrix™ isolation across the fleet
  • Graphene continuous adversary simulation
  • HackNotifier monitoring on every domain

Governments & Defence

Citizen data should not transit infrastructure you cannot audit. Deploy on your own hardware, inside your own jurisdiction, with no telemetry leaving it.

  • Fully air-gapped on-premise deployment
  • Project Amber for systems that cannot be replaced
  • Free tier upgrade during declared emergencies
Leadership

Small team.
Deep specialities.

DW

Dominic Walter T

Founder

VJ

Vijay J

Co-Founder

Board of Directors

Named directors.
Nothing behind a proxy.

DW

Denis Walter T

Director

SN

Sweety Nirmala R

Director

Work With Us

Come build the layer
nobody wants to own.

Kernel work, ML on messy telemetry, and offensive engineering against our own stack. The problems are unglamorous, the feedback loop is brutal, and the people who enjoy that tend to stay.