Zero Lock

YOUR SOURCE FOR EARLY ACCESS TO ESXI SECURITY

With recent attacks occurring due to compromised ESXi hypervisors, creating effective protection for ESXi was a priority for us. We’re proud to introduce ZeroLock for ESXi. ZeroLock for ESXi is currently available for Early Access; contact us to learn more.
video
The urgent need for effective cybersecurity in healthcare

Read our blog post about the risks facing ESXi.

GET UP AND RUNNING FAST WITH ONE-LINE DEPLOYMENT.

ZeroLock leverages a containerized set-up, which works across all Linux distros and with no need for kernel modules, without compromising system stability. For ESXi, ZeroLock is designed for versions 6.7 and higher and ensures comprehensive security for most ESXi servers. No modification to the hypervisor itself is required and deployment is usually as simple as one line in the terminal, ensuring you can secure you ESXi instance quickly. Whether connected or disconnected, ZeroLock offers the same protection. Protect your:

  • Public, Private, or Hybrid Cloud (Bare Metal/VMs, Containers, Kubernetes)
  • On-premises / Private Data Center
  • Embedded Systems and Controllers
  • Air-gapped Environments
  • ESXi Hypervisors
linux cloud

ENSURE UPTIME WITH AI AND AUTOMATED FILE ROLLBACK.

ZeroLock’s patent-pending AI/ML-based behavioral capability detects malware by the actions it performs, not scanning for easily defeated file hashes. Our proprietary algorithms detect and stop traditional and fileless attacks in real-time with >98% efficacy and offer the ability to automatically remediate file damage with no user intervention required—helping you to ensure zero downtime.

  • Ransomware Protection
  • Wiperware Protection
  • Automated Attacker Persistence Removal
  • Real-time Threat Remediation
  • Automated file rollback
  • Fully Automated Process Tree Creation

PREVENT ATTACKS WITH REAL-TIME VIRTUAL PATCHING.

ZeroLock goes beyond traditional mandatory access control capabilities. In contrast to SELinux and AppArmor, ZeroLock offers easily configured and universally applied rules and policies that can be deployed across all your Linux and cloud environments from a single console. Examples of our control capabilities include:

  • SSH Multifactor Authentication (MFA)
  • Process Behavior Controls
  • Network Access Controls
  • File Access Controls
  • Canary Files
  • Tamper Protection

API-FIRST ARCHITECTURE FOR SIEM/SOAR INTEGRATIONS.

Swimlane Webinar

For teams that have existing platforms in place that they don’t want to disrupt—for their Windows endpoints for instance—ZeroLock has an API-first architecture with SIEM/SOAR integration capabilities to work into your environment, so you can have the best Linux security without sacrificing ease of management.

24-7 SUPPORT, EVERY STEP OF THE WAY.

Operationalization is no small lift. Vali Cyber’s support team is there for you every step of the way through deployment with our ZeroLock GO service offering.

TECH SPECS

ZeroLock® Endpoint Agent Requirements for ESXi

OS

ESXi Version 6.7+. Distribution agnostic.

Processor

x86-64, ARM-64 (coming soon)

Memory

50MB

Disk Space

100MB

Kernel Mods.

No kernel modification or modules required

Installation Methods

  • One-line, web-based deployment (Wget)
  • Filed-based deploy (Tar.gz or Bash)
ZeroLock® Server Requirements (only required for on-prem deployment)

RAM

8GB

Disk Space

100GB (dependent on number of endpoints and data retention duration)

CPU Cores

4 or more recommended

Installation Reqs.

Latest version of Docker installed.

ZeroLock® Bidirectional API-First Architecture

Documentation

Visit api.zerolock.com for a full call list.

Existing integrations

  • SEIM: Splunk
  • SOAR: Swimlane