Hexceos
Sentinel.
Our detection and response engine, designed and developed in France by our R&D team, operated by our 24/7 SOC. One stack, one team, from collector to decision.
Four functions,
one agent.
Endpoints, cloud, identity, network.
A single agent collects workstation, server, cloud workload (AWS, Azure, GCP), identity directory (Entra ID, Okta) and network flow activity. No more silos, no more blind spots.
Beyond signatures.
Sentinel recognises attack patterns (LOLBins, persistence, lateral movement, exfiltration) rather than hashes. MITRE ATT&CK techniques are mapped in real time.
Contain before alerting.
Endpoint isolation, session disabling, IOC blocking, AD/IdP account suspension — executed without human intervention when confidence is high. The SOC takes over for the rest.
Proactive search over historised telemetry.
Free-form search across 90 days of telemetry by default, up to 1 year on request. Pre-written hunting queries for common TTPs.
Designed, hosted,
operated in France.
Sentinel and its telemetry data never leave our sovereign datacenters (Île-de-France and Occitanie, HDS-certified). No transfer outside the EU, no dependency on a non-European vendor.
Where your systems are.
30-minute demo,
on your perimeter.
A SOC engineer walks you through the console, the real-time telemetry and an automated response — on an attack you choose.