GATEWATCHER

Company profile

GATEWATCHER company profile

Gatewatcher is the first platform for digital breach detection (Intrustion Detection System) to be developed in France. Our Trackwatch technology detects the most advanced threats, made with the most crafted exploitation methods (polymorphism, obfuscation, encoding, ROPchain…) and the threats based on all types of malicious files (ransomware, cryptolocker…). Our platform was made for all types of organizations wishing to be equipped with the most efficient detection tools. Gatewatcher also meets the ANSSI hardening requirements for the Military Planning Act in order to protect all sensitive and strategic organizations. With over two hundred probes deployed worldwide, Gatewatcher offers unrivalled detection capabilities to its customers by analysing the most complex cyberattacks. The project was started in 2015 by engineer, Jacques de La Rivière, and security expert, Philippe Gillet. Gatewatcher’s team is composed of experts in security, networks, systems, encryption and machine learning. During the 2016 edition of the FIC (Forum International Cybersecurity), Gatewatcher was awarded the French Cybersecurity accreditation rewarding innovation in the cyber defence field. It’s also being certified by ANSSI (French Cybersecurity Agency) and meets the requirement of the Military Planning Act. Gatewatcher is based on unique technology in weak signal analysis and machine learning, targeting abnormal behaviours by running a dynamic analysis of weak signals from inside network flows. Gatewatcher is the only product on the market with a dual approach to the threat in the exploration phase, with deep data capture and optimal analysis: it auto-adapts to polymorphic threats, in order to guarantee a strong accuracy. Our technology, Trackwatch, uses four next-generation engines: - Sigflow: formal and statistical analysis, anomaly detection. - Codebreaker: recognises APTs stemming from encoded Shellcodes / ROP (Return Oriented Programming) and JOP (Jump Oriented Programming) - Malcore: real-time heuristic and static multi-engine malware analysis. Malcore is able to analyse more than 6 million files every 24 hours. - Retroact: enables the empirical re-analysis of potentially malicious files, several days after their appearance, with new signatures and heuristic methods.