Cyber Security Stack provides the Resonance Protocol, a ransomware‑focused layer that augments existing endpoint solutions for SMEs and small IT teams. It continuously scores security posture, offers automated hardening quick‑fixes, detects encryption‑in‑progress via file‑change and entropy analysis, and enables fast, low‑disruption or decisive containment responses while protecting local recovery points. The lightweight agents run on Windows 7+ and macOS, delivering a complete prevent‑contain‑recover workflow without replacing current EDR tools.
Funding
Funding not disclosed
Founders
Product
Problem
Small and medium-sized organisations often rely on generic endpoint detection and response (EDR) tools that do not provide a complete ransomware prevention‑contain‑recover loop. Gaps in readiness checks, early encryption detection, and low‑disruption response increase the risk of ransomware spread and data loss, especially for teams without dedicated security staff.
Solution
Cyber Security Stack offers the Resonance Protocol, a ransomware‑focused layer that complements existing endpoint solutions. It continuously assesses a device’s security posture, providing a readiness score and automated quick‑fix actions for hardening controls such as Defender baseline, Controlled Folder Access, and system restore configuration. The platform detects encryption‑in‑progress by monitoring file‑change patterns and entropy‑based signals, enabling rapid identification of ransomware activity before full encryption occurs. Once a threat is detected, operators can choose an availability‑first mode that throttles processes and protects critical folders, or a containment‑first mode that isolates the host, kills the offending process tree, and quarantines files, all with built‑in TTL safeguards. The solution also validates local recovery points and protects backup directories to preserve restore capabilities, delivering a complete prevent‑contain‑recover workflow that is lightweight, fast, and easy for small security teams to operate.
Target Audience
Primary customers are SMEs and small IT teams that need a practical ransomware resilience layer, as well as larger enterprises, OT and IoT operators seeking integrity‑first protection for complex infrastructures.
Features
- Automated ransomware posture scoring with quick‑fix actions for Windows hardening, firewall, SMBv1, RDP NLA, and system restore settings
- Real‑time encryption‑in‑progress detection using integrity burst patterns and entropy‑driven content analysis
- Dual response modes: low‑disruption availability‑first (per‑process throttling, folder protection) and decisive containment‑first (process tree kill, host isolation, file quarantine) with TTL‑based safety rails
- Protection of local recovery points and backup directories during suspected ransomware activity
- Lightweight agents for Windows 7+ and macOS (Apple Silicon), with Linux support forthcoming
- Integration‑ready design that complements existing EDR stacks without requiring replacement