become a partner

NEXT RELEASE: CELESTIA, the only AI agent that anticipates cybercriminals’ intentions.

The LECS Platform software module that analyzes behavior, context, and identity in real time to detect credential abuse, lateral movement, and insider threats before they become operational damage.

FIND OUT HOW IT ANTICIPATES THREATS
LECS Celestia AI Agent diagram: detection of an out-of-context action with valid credentials between endpoints and the domain controllerLECS // CELESTIA AI AGENTIDENTITY · HOST · BEHAVIORNEXT RELEASEVALID CREDENTIALSLAPTOPWORKSTATIONSERVERFILE SERVERDOMAIN CONTROLLEROUT-OF-CONTEXT ACTIONLATERAL MOVEMENT · FLAGGEDLECSSPECTO ENGINEIDENTITYHOSTNETWORKPROTECTION LAYERSCELESTIA AGENT

SCROLL THE DIAGRAM →

Why is traditional EDR no longer sufficient?

More and more attacks use valid credentials, not malware. With a stolen password, the attacker becomes an authorized user.

  • The new riskNot the infected file, but the anomalous action in the wrong context.
  • What CELESTIA doesDetects out-of-context actions, behavioural anomalies and signs of compromise on the host.
GET MORE INFO
  • The problem isn’t just “what gets in”—it’s who is acting, and how.

EDR looks at the attack artifact. CELESTIA watches identity, behaviour and context: it tells whether an authorized action is really consistent.

  • Today’s attacks leverage legitimate tools to stay invisible.

Stolen credentials, admin tools, remote access, lateral movement: no obvious malware. CELESTIA spots them by behaviour, in real time.

  • You need an intelligence layer, not yet another replacement.

Nothing to remove: CELESTIA plugs into your stack and adds the missing layer, stopping the anomaly before the damage.

A new layer of protection for identity, hosts, and networks.

CELESTIA brings behavioural analysis and host-based NDR directly to the endpoint. It doesn’t replace antivirus or EDR: it completes them, looking for out-of-context signals, identity abuse and lateral movement.

SPECTO engine: Continuous, invisible, real-time detection

Analyses events, logs and connections discreetly, without weighing on the host. It cuts the noise: your team works only on truly investigable events.

RAISES engine: autonomous, graded response

When it detects a threat, it triggers a response proportionate to severity: automatic containment and rapid endpoint isolation, to reduce attacker dwell time.

Intelligence that turns data into operational certainty.

Morphological analysis and immutable traceability for uncompromising defense.

BECOME A PARTNER
Identity
intelligence

Flags authorized access and actions that don’t fit the context.

Host-based
visibility

NDR on the endpoint: network and system signals the perimeter can’t see.

Lightness and compatibility

No invasive file scans. Coexists with the tools already installed.

Autonomous
Response

Immediate countermeasures, proportionate to the risk level.

Compliance and
audit support

Traceable events and quality data for investigations, audits and compliance.

Rapid deployment, immediate integration

Simple, fast, non-invasive installation.

Zero-Friction Deployment: from installation to operation.

DELVE INTO THE PLATFORM RANGE
  • 01 | Scalable Distribution

Centralized deployment on single hosts or entire fleets.

  • 02 | Zero-friction startup

Fast activation, without disrupting existing workflows.

  • 03 | Context learning

CELESTIA learns the context and quickly tells normal from anomalous.

Frequently asked questions about CELESTIA.

Everything you need to know about the LECS AI Agent.

How does CELESTIA differ from a traditional antivirus or EDR?
  • Antivirus and EDRFocus on malware, suspicious files, signatures and known processes.
  • CELESTIAObserves identity, behaviour, context and host-based network signals to detect anomalous access, credential abuse and lateral movement.

No. CELESTIA was created to be complementary. It integrates with existing protection and adds a layer of behavioral intelligence and host-based visibility without requiring replacement of the stack already adopted.

Yes. CELESTIA is designed precisely to detect scenarios in which the attacker uses legitimate tools, stolen credentials, remote access, or fileless techniques. In these cases, the useful signal is not the file, but the out-of-context behavior.

Yes. One of the product’s strengths is coexistence with existing security software, thanks to a lightweight approach that is not focused on file scanning.

For the end customer it means more visibility, better anomaly detection and complementary protection to the tools already in place. For partners it means offering a new level of value, easier to propose because it does not replace existing solutions but enhances them.