HarfangLab

EDR/EPP for Windows, Linux and macOS with on-device AI and YARA/SIGMA rules

Paris, France · Founded 2018 · Paid
A European alternative to Norton McAfee CrowdStrike Falcon SentinelOne Trend Micro Sophos Kaspersky

About HarfangLab

HarfangLab is a French cybersecurity vendor that builds an Endpoint Detection and Response (EDR) and Endpoint Protection Platform (EPP) for Windows, Linux and macOS. The agent runs AI models (Ashley, Kio) directly on endpoints for malware classification and PowerShell-attack detection, and supports user-written YARA and SIGMA rules. The product can be deployed in the cloud or fully on-premises with the same feature set, is CSPN-certified by France's ANSSI, and is sold to enterprises and public-sector buyers on a per-endpoint subscription.

Quick facts

Pricing model Paid
Free trial
Open source
Self-hostable No
Public API No
Target audience B2B
Company size fit All
DPA available Yes
Data stored in EU Yes
Last verified by eubuilt.eu on 26 Apr 2026 — re-checks every 6 months Flag listing → Read our criteria →