Real-time endpoint detection and response for Windows. No US cloud telemetry. No data leaving the EU. MITRE ATT&CK aligned threat detection with automated response playbooks.
Most EDR vendors — CrowdStrike, SentinelOne, Microsoft Defender for Endpoint — process your endpoint telemetry in US-based cloud infrastructure. That means detailed information about your employee devices, running processes, and network connections flows to servers subject to US law and potential CLOUD Act requests.
Vigilante processes all telemetry in EU data centres. The agent is lightweight, the console is EU-hosted, and not a single byte of your security data is sent to America.
Continuous monitoring of all running processes, parent-child relationships, and memory activity. Anomalous process behaviour triggers instant alerts.
Track changes to critical system files, registry keys, and application binaries. Detect unauthorized modifications in real time.
Monitor outbound and inbound connections per process. Detect beaconing, unusual remote endpoints, and lateral movement attempts.
EU-hosted threat intelligence feeds. IOC matching against known malware hashes, malicious domains, and attacker infrastructure — with zero US data exposure.
Configurable response actions: isolate endpoint, kill process, quarantine file, block IP. Playbooks trigger automatically on rule match or require manual approval.
Immutable event log of all endpoint activity. Timeline reconstruction for incident investigation. Export evidence for legal or compliance purposes.
The Vigilante agent installs silently via MSI or GPO policy. It connects back to the EU-hosted Vigilante cloud console where your security team sees all alerts, manages playbooks, and investigates incidents.
For MSPs, Vigilante integrates with Altovar PULSE. You manage endpoint security for all your clients from the same dashboard as your monitoring alerts and patch management.
For enterprises requiring full data control, Vigilante supports self-hosted deployment on your own EU infrastructure.
MSI installer or GPO push to Windows endpoints. Under 5 minutes per machine.
Encrypted telemetry sent to EU-hosted Vigilante backend. Real-time event processing.
Anomalies and rule matches appear in the console. Classified by MITRE ATT&CK tactic.
Execute playbook actions: isolate, quarantine, kill process — from the console or automatically.
Vigilante provides the continuous monitoring and incident detection capabilities required by NIS2 Article 21 security measures. Full audit trail for regulatory reporting.
Agent telemetry processed exclusively in EU data centres. No personal data leaves the EU. Data minimisation — only security-relevant events are collected.
Vigilante supports ISO 27001 Annex A controls: A.12.4 (logging), A.12.6 (technical vulnerability management), A.16 (incident management).
Endpoint detection agent for Windows. Real-time process monitoring. MITRE ATT&CK aligned.
EU-hosted endpoint detection and response. MITRE ATT&CK aligned. NIS2 and GDPR compliant from day one.
Contact security team →