HarfangLab

EDR/EPP for Windows, Linux and macOS with on-device AI and YARA/SIGMA rules

Paris, France · Founded 2018 · Paid
A European alternative to ↓ Norton → McAfee → CrowdStrike Falcon → SentinelOne → Trend Micro → Sophos → Kaspersky →

About HarfangLab

HarfangLab is a French cybersecurity vendor that builds an Endpoint Detection and Response (EDR) and Endpoint Protection Platform (EPP) for Windows, Linux and macOS. The agent runs AI models (Ashley, Kio) directly on endpoints for malware classification and PowerShell-attack detection, and supports user-written YARA and SIGMA rules. The product can be deployed in the cloud or fully on-premises with the same feature set, is CSPN-certified by France's ANSSI, and is sold to enterprises and public-sector buyers on a per-endpoint subscription.

Quick facts

Pricing model Paid
Free trial —
Open source —
Self-hostable No
Public API No
Target audience B2B
Company size fit All
DPA available Yes
Data stored in EU Yes
Last verified by eubuilt.eu on 26 Apr 2026 — re-checks every 6 months Flag listing → Read our criteria →