Halcyon — anti-ransomware, implemented and operated by Passeca
Purpose-built ransomware protection: pre-execution prevention, exfiltration blocking, encryption-key capture with automated decryption, and EDR tamper protection — alongside Passeca's incident response.
Halcyon is an anti-ransomware platform purpose-built to stop ransomware that conventional EDR misses: pre-execution prevention, exfiltration and extortion protection, encryption-key capture with automated decryption, and EDR tamper protection. Passeca implements, tunes and operates Halcyon around the clock, integrating it with PassIRP and PassAI-Guard and backing it with Passeca's incident response.
What does Halcyon do?
Four ransomware-specific capabilities that general-purpose EDR does not deliver.
Pre-execution prevention
Halcyon stops ransomware before it executes — intercepting the loader and encryption chain earlier than conventional EDR, which typically catches ransomware only once it is already running.
Exfiltration & extortion protection
Ransomware today is as much about data theft as encryption. Halcyon blocks the exfiltration that fuels double-extortion demands, protecting against the threat that pays even when backups are good.
Encryption-key capture & automated decryption
If encryption does occur, Halcyon captures the keys and can automatically decrypt affected files — recovering data without paying the ransom.
EDR tamper protection
Ransomware operators routinely try to disable or blind security tooling first. Halcyon resists tampering so the protection stays in place when it matters most.
What Passeca adds
Implementation, tuning, managed operation, and integration with the Passeca stack.
A licence gets you the agent; Passeca makes Halcyon a working defence. Passeca deploys Halcyon across the endpoint estate, tunes the prevention and detection configuration to the environment, and monitors and responds 24/7. Halcyon detections flow into PassIRP as incident cases, and PassAI-Guard can run automated response playbooks on them.
Crucially, Halcyon pairs with Passeca's incident-response capability: prevention is Halcyon's job, but if an incident occurs, Passeca's IR team handles containment, recovery, and — if it comes to it — ransomware negotiation.
Who is Halcyon + Passeca for?
Where ransomware is the primary threat and downtime is unacceptable.
- Healthcare — where encryption of clinical systems is patient-safety critical.
- Manufacturing — where OT and production downtime is measured in millions per day.
- Financial services — where DORA demands operational resilience against ransomware.
- Any organisation that has decided ransomware is the threat most worth paying to prevent.
How to buy Halcyon through Passeca
From endpoint scoping to a 24/7 managed defence.
Request a demo through /contact/demo. Passeca scopes the endpoint estate, deploys Halcyon, tunes the configuration, and offers managed operation as part of SOC-as-a-Service or as a standalone managed anti-ransomware service. An incident-response retainer can be bundled so prevention and recovery come from one team.
Halcyon and Passeca, answered
The questions security leaders ask when evaluating dedicated ransomware protection.
What is Halcyon?
How is Halcyon different from standard EDR?
What does Passeca add to Halcyon?
Can Halcyon recover files if encryption happens?
Who is Halcyon + Passeca for?
How does Halcyon fit with Passeca's incident response?
How do I buy Halcyon through Passeca?
Stop ransomware before it executes
Request a Halcyon demo and Passeca will scope your endpoint estate, show the pre-execution prevention and key-capture recovery, and plan the integration with your incident-response capability.
Related