Azerbaijan, Georgia, Uzbekistan
XcitiumRequest a demo
MenuClose
A software file contained within a transparent capsule

Unknown software. Already contained while it is checked.

ZeroDwell runs unknown software in containment while it is checked. Choose a solution and operating model for your needs, from device protection to network and cloud risks.

How containment works

How Xcitium protection works

Xcitium adds containment and analysis of unknown software to the blocking of known threats.

Industry Standard

A known threat stopped at an optical barrier

Known threats are blocked

Before execution

Known malicious code is stopped before it starts running.

  • NextGen EDR
  • Host Intrusion Prevention (HIPS)
  • Host Firewall
  • VirusScope Static Analysis
  • Application Control

Xcitium

An unknown file running inside a transparent ZeroDwell containment cube

Unknown software runs in containment

At execution

Unknown programs execute in a virtual environment, separate from the original system resources.

Optical analysis examining the contained file inside the cube

Contained files: analysis and verdict

After execution

  • Trusted — added to the whitelist
  • Malicious — added to the blacklist

Automated analysis and work by human analysts.

Detection ≠ protection

What happens to unknown code before the verdict?

Industry Standard

An unknown file sharing the same space as original documents and system resources

Recognize first. Then stop.

A new threat is not recognized immediately. Before detection, unknown code works directly with the original resources.

Xcitium

The same unknown file contained inside a glass capsule, with original documents and system resources outside

Contain first. Then deliver a verdict.

Execution, analysis and the verdict take place in a virtual environment. Original resources are separated from unknown code.

Analysis and the verdict — with minimal impact on the user’s work.

Review your device estate at a glance

Use the Endpoint overview to review devices, security signals and contained files.

Xcitium console for device and event management
Xcitium console: devices, alerts and contained files overview
  1. Device overview

    Review the device count in Total Devices.

  2. Security signals

    Review Total Alerts, Malware Detections and the Alerts By Type chart.

  3. Contained files

    The Contained Files counter summarizes files in containment.

View readable console details

Scroll horizontally to read the counters.

Xcitium console for device and event management
Open the console screen at full size

What do you need to address?

Explore protection for devices, networks and cloud alongside everyday operations. Each area leads to the relevant solution and its capabilities.

Device protection

ZeroDwell directs unknown software into a virtual environment during analysis.

ZeroDwell

Investigation and response

EDR supports investigation through device telemetry; XDR connects signals from supported sources.

EDR / XDR

Network and access

SASE, ZTNA and SD-WAN capabilities support access and connectivity for distributed users and sites.

SASE / ZTNA

Cloud risk

CNAPP brings application, cloud configuration and workload security posture into view.

CNAPP

Everyday IT operations

RMM centralizes device status, resource use and alerts; patch management helps organize updates.

RMM / ITSM

AI usage visibility

Shadow AI discovers AI services through DNS requests passing Secure Internet Gateway and helps apply policy.

Shadow AI

Deployment experiences

Social services · US · 2023 case study

Evergreen Life Services · US

130 locations · 8 IT staff

The unified platform simplified security management.

Read the customer story

Municipal government · Malaysia · 2025

MBSJ · Subang Jaya

Panda → Xcitium AEP

Centralized endpoint threat management and response.

Read the customer story

Healthcare · Canada · 2023

Grand Bend Area CHC

112+ endpoints · 17,000+ patients

Xcitium AEP protects the community health centre’s endpoints.

Read the customer story

Manufacturing · Germany · 2015 · Comodo ESM 3.4

Scheurich

Centralized endpoint protection and containment of unknown programs.

Deployment story · PDF

Who will operate and respond?

Alongside the technology, define daily oversight and responsibility for response.

  1. Your own IT and security team

    Your team owns policies, exceptions and investigations. Compare ZeroDwell, EDR and XDR with your existing workflows.

    Explore EDR
  2. Managed or co-managed service

    With Xcitium managed SOC, analysts investigate alerts and respond to incidents. They support daily security operations in a fully managed model or alongside your team.

    Explore service models
  3. MSP and MSSP partners

    Bring device management and security into your client service. Xcitium supports offering SOC capabilities under your brand; your team manages customer onboarding and service delivery.

    Solutions for MSPs and MSSPs

Frequently asked questions

We already use antivirus or Microsoft Defender. What does Xcitium add?

Xcitium contains programs that have not yet been classified while they run, restricting their access to business files. If you plan to keep your existing protection, we’ll check agent compatibility before deployment.

Will our accounting, banking and other critical applications work?

We configure execution rules and exceptions for your business applications. During the pilot, we’ll test everyday accounting, banking and other critical workflows.

How does protection affect computer performance?

Trusted programs run in the normal environment; unknown programs run in containment. A pilot will show how the selected components affect performance on your devices and everyday workflows.

Can we use Xcitium without an in-house IT or security specialist?

You can add Xcitium’s managed MDR service when needed. A single console lets you manage protection across your devices. We’ll help identify who handles initial configuration, alerts and incident response.

How does migration from our current protection work?

We’ll start with a list of devices, critical applications and protection requirements. We’ll test compatibility in a pilot, then agree with you on agent replacement and rollout stages.

What data is sent to the cloud, and how is this configured?

We’ll show you what telemetry the selected solution collects, its rules for submitting file samples, the cloud region and retention periods. We’ll help you choose from the available settings to suit your organization’s requirements.

Do we still need backups when using Xcitium?

Yes. Backups help you recover data, while containment restricts unknown programs’ access to business files. These measures complement each other.

What determines the price, and what is needed for a proposal?

Pricing depends on the number of computers and servers, selected protection components and support services. An approximate device count, details of current protection and the company’s main requirements provide a starting point for a proposal.

Let’s discuss protection for your organization

We can help you choose a solution and discuss deployment or a move from your current protection. Choose how to contact you.

* — required fields

Discuss your needs
How should we contact you?
More about your needsOptional