Containment over detection
A boundary doesn’t need to recognise an attack to stop it.
00 Why Halonex
Most endpoint tools make exploitation harder.
We remove the attack path instead — a different conversation than another point of detection rate.
01The difference
Six things that follow from one decision.
Each follows from choosing a boundary over a classifier.
Process isolation, per process
Every process in its own box — nothing to pivot onto.
Enforcement at ring 0
Policy applied before an instruction ever runs.
Intelligence scored against you
200+ feeds matched to your assets — only what can reach you.
Nothing users notice
Apps behave normally. Nobody notices a slowdown.
Sovereign by construction
Engine, telemetry and hosting built and run in India.
02Who it is for
The same engine, four very different budgets.
Same enforcement layer — you choose how much to run.
Students & individuals
Free credential checks. No account, no cost.
- Free AmIHacked.net credential checks
- Vanta Extension browser guard
- Alerted the hour a dump lands
Startups & SMBs
Kernel enforcement without needing a security team.
- Credential monitoring across the team
- Kernel-level endpoint enforcement
- Priced for pre-Series A budgets
Enterprises
Fleet-wide isolation plus continuous adversary simulation.
- Zmatrix™ isolation across the fleet
- Continuous adversary simulation
- Credential monitoring on every domain
Government & defence
Your hardware, your jurisdiction, no telemetry out.
- Fully air-gapped on-premise deployment
- Project Amber for systems that cannot be replaced
- Free tier during declared emergencies
03Figures
Only what we can measure about our own systems.
No adoption counts or efficacy claims — only numbers we can produce.
6Systems in production
200+Intelligence feeds aggregated
10B+Credential records indexed
Ring 0Enforcement depth
<3sAsset isolation time
IndiaBuilt and hosted in
04Standards
Built against published standards.
Formats we interoperate with — not certifications.
MITRE ATT&CK
Findings mapped to tactics and techniques
STIX / TAXII
Threat feed interchange
CVSS v3.1
Severity scoring
05Limits
What this does not do.
Questions worth asking before a trial.
Isolation is not identity
Isolation doesn’t stop phishing — the browser layer and credential monitoring do.
Silence is not safety
A device that stops reporting isn’t shown as safe.
Absence is not a verdict
Unlisted doesn’t mean safe — we report it as unknown.
Old agents report less
Older agents show a gap, never a guessed result.
06 Next
Test it against something you already worry about.
Bring the estate you worry about. We’ll show where enforcement lands and what the first 90 days look like.