Protective DNS

Protective DNS for the Corporate Environment

Built on the underpinning technology of HYAS Insight threat intelligence, HYAS Protect is a protective DNS solution that combines authoritative knowledge of attacker infrastructure and unrivaled domain-based intelligence to proactively enforce security and block the command and control (C2) communication used by malware, ransomware, phishing, and other forms of cyber attacks.

Even if an attack has bypassed a network’s perimeter defenses - and regardless of how the breach occurred, it still must “beacon out” for instructions – for lateral motion, privilege escalation, data exfiltration, and even encryption. And they need to beacon out to infrastructure, commonly called command-and-control (C2), that by definition must be created and established prior to launching the attack.

If an organization can be alerted to adversary infrastructure, then not only can they do a better job detecting attacks in real time, but they can prevent attacks before they get started. HYAS detects and blocks the beaconing requests typical of malicious command and control communication, letting users cut off these attacks before they cause harm, whether in an IT or OT environment.

See HYAS Protect in Action

Deployment Options

DNS Resolver
HYAS Protect blocks bad domains, IPs, and nameservers with superior security, reliability, and performance. Deploy in minutes across your entire infrastructure; built-in support for Domain Generation Algorithm (DGA) detection, DNSSEC, DNS over HTTPS, and DNS over TLS.

EDR Integration
Utilize your existing investment in Microsoft Defender for Endpoint or SentinelOne Singularity to drastically increase the efficacy of detecting malicious traffic. HYAS Protect can parse the logs of the endpoint agents to detect communications with threat actor infrastructure and optionally block subsequent communication attempts.

HYAS Agent
Extends HYAS Protect to devices that roam off the corporate network. Always on, providing protection 24/7. Our intelligent agent will reactivate itself when the user leaves the coffee shop or exits the airplane, providing peace of mind knowing your devices are secure.

Benefits

A New Level of Visibility
We’ve collected years of historical domain data. This often exclusive information combined with real-time analysis of communication patterns, gives you an unrivaled visibility into risk before communicating to any domain.

Block Before You Get Hit
We stop connections to malicious infrastructure before adversaries can use it. You will confidently mitigate against future attacks without the labor of maintaining legacy block and allow lists. As attackers adapt their infrastructure, HYAS also adapts in realtime, safeguarding you from advanced mechanisms such as DGA.

Real Time Domain Truth
HYAS eliminates confidence scores and minimizes false positives and false negatives. You finally have an instant source of truth to help you focus less on bad actors and more on where your business is headed.

Deploy Anywhere Anytime
Time is not a luxury that businesses can afford. HYAS Protect is a cloud-native infrastructure-as-a-service that scales infinitely and deploys in minutes.

Revolutionize Existing Security Investments
Our API driven flexibility amplifies the intelligence of your existing security stack through a new layer of protective DNS. Easy-to-use APIs allow you to seamlessly leverage SIEM, SOAR, firewalls, endpoints, or other security components.

Get Free Protective DNS for Your Home Network