Qingteng product system:
1. Qingteng Wanxiang · Host Adaptive Security Platform
2. Qingteng Hive · Cloud Native Security Platform
3. Qingteng Zero Domain · Micro Isolation Security Platform
4. Qingteng Falcon: Threatening Hunting Platform
5. Qingteng Cloud Screen · NPatch Vulnerability Invalidation
6. Qingteng Thunder Fire · AI Webshell Detection System
1. Qingteng Wanxiang · Host Adaptive Security Platform
Qingteng Wanxiang · Host Adaptive Security Platform adopts an adaptive security architecture, effectively solving the passive situation of traditional defense methods, adding powerful real-time monitoring and response capabilities to the system, helping enterprises effectively predict risks, accurately perceive threats, improve response efficiency, and ensure the last mile of enterprise security. The five major modules of asset inventory, risk discovery, intrusion detection, compliance baseline, and virus killing create a secure closed loop for enterprises that integrates prediction, defense, monitoring, and response.
2. Qingteng Hive · Cloud Native Security Platform
Qingteng Honeycomb Cloud Native Security Platform focuses on the field of container security. Through continuous monitoring and analysis of container security status, it visualizes enterprise risk scenarios, dynamically displays changes in enterprise container environment security indicators and security trend analysis for security decision-makers, and protects container environment security throughout the entire lifecycle (construction, distribution, operation) of container applications. Qingteng Honeycomb provides powerful real-time monitoring and response capabilities to help businesses identify and address risks, ensuring the safety of their container environment.
3. Qingteng Zero Domain · Micro Isolation Security Platform
The Qingteng Zero Domain · Micro Isolation Security Platform can be deployed in a hybrid data center architecture to achieve unified security management across platforms. Through self-learning analysis and visualization of business access relationships, fine-grained and adaptive security policy management can be achieved. The product can quickly isolate compromised host networks in real threats, block horizontal penetration behavior, and truly implement the zero trust concept.
4. Qingteng Falcon: Threatening Hunting Platform
The Qingteng Falcon Threat Hunting Platform is based on the ATT&CK framework, helping users solve various problems such as secure data collection, data mining, event tracing, and security capability integration. This product provides over a hundred types of ATT&CK attack scenarios, allowing users to directly conduct deep data mining. In addition, users can use the self-developed QSL language by Aoto to track abnormal activities and discover potential threats in a timely manner
5. Qingteng Cloud Screen · NPatch Vulnerability Invalidation
The Qingteng Cloud Curtain NPatch vulnerability invalidation product connects to user networks through bypass image traffic, detecting malicious detection and attack behaviors targeting vulnerabilities in network traffic. Once NPAtch discovers exploit behavior, it can simulate a block message to forcibly disconnect the session, rendering the exploit behavior invalid.
6. Qingteng Thunder Fire · AI Webshell Detection System
The Qingteng Thunder Fire Engine is a self-developed Webshell detection engine by Qingteng. It does not rely on regular matching, but instead regresses complex deformations and obfuscations into equivalent simplest forms, and then uses AI inference to discover suspicious content in the Webshell. After multiple rounds of public adversarial testing, the Thunderfire engine can effectively detect various Webshells attempting to bypass general detection engines in strong adversarial environments. Widely applicable, whether it is PHP or JSP type backdoors, malicious features hidden in their content can be discovered.