Twenty years on the front line of ransomware. The same single behaviour appears in every case. No EDR we have tested closes it.
Terrain is in active development. It is being tested in live engagements now, alongside our IR work. The full product is targeted for release in 2027.
Across two decades of ransomware investigations, the same single behaviour appears in every engagement we have worked. In every detection product we have tested it against, it goes uncaught.
We are not publishing the detail here. The right people see the working under NDA. What we will say: this is a repeatable behaviour, observable on the wire and at the host, and the gap is in how the industry currently looks for it.
We have run Terrain against the EDR and XDR platforms most organisations rely on, and the AI-led products marketed as their replacement. The result has been the same in every test.
The platforms anchoring most enterprise estates today.
The new wave being sold as a replacement.
SaaS-native and identity-first detection products.
Terrain is built to be deployed across an insurance carrier's book. Each deployment plugs the gap, drops the carrier's incident rate, and creates room to bring premiums down for the end client.
If you place cyber risk, we want to hear from you.
Request an introduction →Standard NDA, technical walk-through, real data. Full product targeted for 2027.