Your endpoints, our protection!

Empower your analysts, overcome the threats 

Home
icon-40-grey-shield

A robust, high-performance cybersecurity platform to protect workstations and servers against cyber threats, from basic to the most sophisticated.

icon-40-grey-fast

Exceptional technical performance and first-class support: a 100% European, API-ready solution that integrates seamlessly with leading security tools.

icon-40-grey-rules

Open the (white)box: access and customize all rules in open standardized formats (YARA, Sigma) to facilitate detection, investigation, and remediation.

icon-40-grey-radar

Automatically block threats with ease: HarfangLab’s EPP includes an antivirus powered by a continuously updated malware database, and fully customizable firewall and device control features.

icon-40-grey-is

Protect your IT assets regardless of OS or environment – Cloud and On-Premises alike with full feature parity.

icon-40-grey-brain-AI

Enhance analyst investigations with Artificial Intelligence. 

What our customers say

Cyber Architect – Manufacturing Industry Annual Sales 1-3B USD

“Tailor-made, easy On-Premises deployment. Agents consume few resources and the tool supports a wide range of OSes. Detection, investigation and remediation features are powerful, and integration with third-party services is planned. Friendly user interface.”

Cyber Architect – Manufacturing Industry Annual Sales 1-3B USD
IT Manager – IT Services Annual Sales 250-500M USD

“We like the ease of use and performance of this EDR. Deployment is very simple. The administration interface allows perfect control of the solution. Analysis and follow-up of detected alerts are very effective.”

IT Manager – IT Services Annual Sales 250-500M USD
Security and Risk Manager – Services Industry Annual Sales 250-500M USD

“HarfangLab’s EDR is constantly evolving and adding new features 2 times faster than the competition. Support and communication are excellent, open and completely transparent.”

Security and Risk Manager – Services Industry Annual Sales 250-500M USD
COO - Services Industry Annual Sales < 50M USD

“On HarfangLab, everything is simple, the product is easy to handle, the platform is powerful and the interface ergonomic, the solution is powerful, and the detection engines work perfectly.”

COO - Services Industry Annual Sales < 50M USD
Analyst – Industry Annual Sales 10-30B USD

“Great team and great solution. State-of-the-art in terms of data management. Modern, resilient and scalable technologies. Teams always available to help and improve the product. A true partner.”

Analyst – Industry Annual Sales 10-30B USD
4.9/5

Why they choose us

icon-certification
Recognized detection capabilities
icon-window
Transparency
icon-eu
Data hosted in Europe
icon-eye
Data availability

Empower your analysts

Safeguard your IT assets and gain valuable insights from incidents. We believe that cybersecurity experts are irreplaceable.

That’s why HarfangLab equips you with all the tools and data necessary to contextualise, aggregate and correlate security events, helping identify attacker techniques and prioritise responses.

This empowers analysts to make the right decisions during both the monitoring and remediation phases.

Enhance your detection and investigation capabilities with AI

Our vision for Artificial Intelligence is a precise response to advanced cyber threats and the needs of the experts on the frontlines.

Our AI models, Ashley and Kio, enable us to deal with the constant emergence of new threats, and meet the needs of security teams in the detection and investigation phases.

For optimal reactivity – even when the agents are disconnected from the console – our AI models are deployed directly in the agents on the endpoints. They are also designed to preserve workstation and server performance.

 

  • Ashley predicts the malicious nature of files and identifies malware unknown from virus databases, detects malicious PowerShell scripts as soon as they start running, and enriches Cyber Threat Intelligence.
  • Kio (Know it Owl) is your analysts’ personal assistant integrated natively into the console. It responds to requests for documentation and data, using natural language to ease and accelerate the use of the solution.

Balance security with productivity

By protecting your IT assets against cyber threats, you guarantee business continuity and help preserve your productivity. HarfangLab’s powerful but lightweight agents are thus engineered to provide robust protection without compromising the user experience:

  • ~170 MB RAM
  • 1% CPU
  • Updates without rebooting terminals

The same protection, whether Cloud or On-Prem

HarfangLab offers the same detection capabilities in the Cloud as On-Premises, operating directly on endpoints to keep threats at bay at the source.

This means we can meet the requirements of organizations that need to deploy cybersecurity solutions in isolated environments due to compliance or data confidentiality… without compromising on analyst efficiency or detection performance.

On-Premises deployment and management remain straightforward, with flexible options for remote or fully isolated updates.

Easily build your own cyber stack

We help CISOs deploy their strategies while maintaining their independence. With HarfangLab, teams have:

  • The flexibility to build their own stack by selecting the most suitable components from cybersecurity pure players
  • Integration with the leading cyber solutions on the market
  • A 100% API-enabled solution for minimal disruption of existing processes

Leverage a network of specialist partners close to you

Our network of partners throughout Europe ensures you get the best protection tailored to your IT assets.

  • Enjoy comprehensive protection, however big or small your organization, from players who understand the intricacies of your market
  • Enhance your cybersecurity expertise with the support of seasoned experts
  • Proactively manage and optimize incident response with up to 24/7 support

Our latest posts

Cybersecurity Platform

[Report] Cybersecurity: European businesses are increasingly concerned about sovereignty

HarfangLab 2025 report based on research by Sapio Research reveals that 83% of French and 81% of German business leaders…

Read more
3min
Cyber strategy
Cybersecurity Crisis Management

How cybersecurity solutions manage their own vulnerabilities

Vulnerabilities have increased by 38% in just one year, according to a 2024 report by Advens CERT. While organizations are…

Read more
6min
Cyber strategy
Cybersecurity - Workspace Security Platform Setup

Methodologies and tools for mapping an information system

Information system mapping is as essential a task as it is overwhelming, because it is often a tedious, long-term undertaking.…

Read more
4min
Methodology
Cybersecurity - Workspace Security Platform

Air-gapped EDR: how does it work?

Air-gap: definition   An air-gapped infrastructure is a computer system that is totally cut off from external networks to guarantee maximum…

Read more
4min
Product
xdspy_1

SadFuture: Mapping XDSpy latest evolution

Identifier: TRR250601. Summary This report examines recent activities we attribute to the XDSpy threat actor, focusing on an ongoing campaign targeting Eastern European and Russian governmental entities using the XDigo malware, dating back to March 2025. Our investigation stemmed from…

Read more
56min
CYBER THREAT INTELLIGENCE
Cybersecurity - Insurance - Protection

DLL Sideloading: solutions to protect your workspace

From detecting the loading of suspicious libraries to blocking threats, how can you protect your workspace against DLL Sideloading attacks?

Read more
4min
Product
Cybersecurity - Workspace Security Platform

Cloud, On-Premises, Air-gapped: The impact of infrastructure on choosing your cybersecurity solution

The choice of cybersecurity tools, such as an EDR, must be consistent with the technical context, depending on whether an…

Read more
6min
Methodology

Want to find out more?