Sovereign XDR · built in Montréal

Protect what you have built.

Detection and response installed on your infrastructure. Your logs stay with you; AI analysis is hosted in your country, under your laws.

Book a demoThe platform
  • Logs on site
  • AI in your country
  • Linux and Windows
  • Canadian code
Appollon sovereign architecture Talos agents and the NOX console run in your infrastructure, where your logs and events stay. Only the alerts to analyze leave, encrypted, for Pythie, hosted in your country under your laws. Nothing goes to a foreign cloud. Foreign cloud outside your jurisdiction Nothing leaves the country Your country · your laws Your infrastructure Talos · on every machine Linux host Windows host Server Controller Isolated hostthreat contained encrypted NOX Detection, response logs stay on site order: isolate the host encrypted Pythie AI analysis hosted in your country Receives only the alerts to analyze, under your laws. Logs: on site AI analysis: in country Abroad: nothing Appollon sovereign architecture Talos and NOX run in your infrastructure, where your logs stay. Only the alerts to analyze leave, encrypted, for Pythie, hosted in your country under your laws. Nothing goes to a foreign cloud. Foreign cloud outside jurisdiction Nothing leaves the country Your country · your laws Your infrastructure Talos · on every machine Linux endpoint Windows endpoint Server Controller NOX Detection, response logs stay on site Isolated host threat contained encrypted link Talos ↔ NOX encrypted · alerts to analyze Pythie AI analysis, hosted in your country under your laws Logs: on site Analysis: in country Abroad: nothing

Our products

Talos

The agent on every endpoint and server. It blocks on the spot, even offline.

Talos

NOX

The console: detection, alerts and response for your whole fleet.

NOX

Pythie

The AI that rebuilds the attack and explains its verdict.

Pythie
How it works

From the first trace to the response.

The three products work together: an attack is seen, understood and contained within seconds.

Talos01 · seeswinword.exe→ powershell.exe -encPC-ACCT-04NOX02 · detectsT1059.001Encoded PowerShellhigh severityPythie03 · explains3 linked eventsOffice → PowerShell → C2verdict: attackTalos04 · respondshost isolatedNOX link keptthreat contained Talos01 · seeswinword.exe→ powershell.exe -encPC-ACCT-04NOX02 · detectsT1059.001Encoded PowerShellhigh severityPythie03 · explains3 linked eventsOffice → PowerShell → C2verdict: attackTalos04 · respondshost isolatedNOX link keptthreat contained
Illustrative example: an attack, from the first trace to the response.
2
operating systemsLinux and Windows
3
products built togetherTalos, NOX, Pythie
0
telemetry to usyour logs stay with you
48 h
for a free auditwhat an attacker sees of you
Talos · agent

It sees everything. It acts on the spot.

  • Processes, files, network, chains of events
  • Local reflex, even cut off from NOX
  • Linux and Windows
Discover Talos
Workstation Talos captures Processes launched Sensitive files Network connections Suspicious chains Local reflex: block, isolate encrypted NOXconsole Network outage:Talos keeps protecting
Pythie · analysis

An AI that explains what it sees.

  • Events linked together
  • Verdict justified step by step
  • Hosted in your country
Discover Pythie
example · incident reconstruction WS-ACC-14 outlook.exe chrome.exe winword.exe powershell.exe 203.0.113.42 SRV-FILES-02 attempt Pythie verdict Malicious · Office document launching encoded PowerShell · connection to a never-seen address · attempt to reach a file server
Defence · sovereignty

Protected, even when the network goes down.

  • Detection and response without the Internet
  • Updates in your windows
  • Dedicated Pythie instance
Defence page
Appollonsigned updates Internetneeded for updates outage Link downprotection continues Your network Signatureverified NOX Detection rules Endpoints Servers protection active
NOX · console

Your whole fleet, one console.

  • Alerts mapped to MITRE ATT&CK
  • Automatic or approved response
  • Reports with your branding
Discover NOX
NOX dashboard: open alerts, incidents, agents and active MITRE techniques
NOX dashboard
Ferhat Abbas, founder of Appollon, giving a presentation
From the founder
“Those who protect sensitive data must be able to control their tools. We build those tools for them.”

Ferhat AbbasFounder and President, Appollon Inc.

See the platform in your own environment.

30 minutes with an engineer, or a free surface audit.

Book a demoAssess my risks