1stProtect Emerges From Stealth With $20 Million in Funding

"We built this company around a simple idea: by the time most existing security tools detect an attack, the data is already gone. Instead of trying to identify malware after the fact, we verify every critical data access in real time and stop unauthorized activity before it becomes a breach."

"1stProtect has built an endpoint security platform that monitors system behavior and user intent to prevent cyberattacks in real time. The pre-emptive solution enforces security policies at runtime, blocking malicious behavior at the operating system level, instead of relying on a cloud architecture for decision-making."

"The platform includes nearly two dozen protection modules covering credential and session theft, ransomware, data exfiltration, application and browser security, runtime behavior, and identity and Active Directory attacks. The unified architecture enables organizations to monitor and enforce policies across access, systems, and data flows."

1stProtect, a San Francisco-based endpoint security startup, emerged from stealth with $20 million in funding from Andra Capital and All Blue Capital. The platform monitors system behavior and user intent to prevent cyberattacks in real time by enforcing security policies at the operating system level rather than relying on cloud-based decision-making. It analyzes attack destinations and intent, functioning as a self-defending system even in disconnected environments. The platform includes nearly two dozen protection modules covering credential theft, ransomware, data exfiltration, application security, and identity attacks. It features an AI investigator for local forensic analysis and remediation without requiring internet connectivity. Leadership includes CEO Kervin Pillay, formerly Cisco's CTO, and CTO Rafel Ivgi, with experience at SentinelOne, CrowdStrike, Symantec, and Forcepoint.

Read at SecurityWeek