​
Advanced Protection for Individual Devices

The Myrmex Endpoint is the central local security component of Myrmex, designed to protect individual devices, such as computers and servers, against cyber threats. It is compatible with major operating systems, including Windows, Linux, and macOS.
It operates continuously, even in environments disconnected from the network.
This solution ensures real-time event collection and analysis, offering a robust defense layer against malware, ransomware, spyware, and other malicious activities. Its operation combines advanced data interception technologies at different operating system layers, such as Kernel Mode and User Mode, ensuring broad and effective coverage. The Myrmex Endpoint continuously monitors device behavior through native APIs and interception layers. It records critical interactions, such as syscalls, system calls, process events, network logs, and changes to sensitive files, standardizing all data into a structured and understandable model. This model is then processed locally by behavioral analysis and machine learning engines, which enrich events with additional context, such as geographical origin, hierarchical relationships between processes, and historical usage patterns. This information is fundamental for identifying anomalies and classifying events based on criticality and risk. In addition to collection and analysis, the Myrmex Endpoint implements active protection, offering proactive blocking against threats. It can:
  • Isolate malicious processes.
  • Quarantine suspicious files.
  • Disconnect the compromised device from the network to prevent attack propagation.
Additional features, such as USB device control and monitoring of unauthorized data transfers, further strengthen device security. When connected, encrypted events are transmitted to the Myrmex Security Platform via secure connections (TLS 1.3), where advanced analysis and large-scale response actions are performed. The Myrmex Endpoint thus represents a cutting-edge solution that combines local protection with a cloud security infrastructure, ensuring maximum security for corporate devices of all sizes.
Myrmex Endpoint Security incorporates hyper-personalization technology to adapt to users’ daily routines, ensuring smarter and more effective protection. This approach allows the agent to recognize unique behavioral patterns for different roles and departments within an organization, minimizing false positives and blocking only real threats.