Frequently Asked Questions

RISe is currently free to use, allowing organizations of any size access to appraise individual systems in an ad-hoc manner.  

RISe runs on any physical or virtual environment, including AWS, GCP, and Azure VMs.

Invary can run on resource constrained systems or IoT devices, please contact us at [email protected] for more information.

RISe currently supports the following x86-64 distributions:

RISe supports most kernels. Invary advocates you stay up to date on installing the latest kernels, and typically adds support for new kernel releases the same day.  Invary is continually adding support for new distributions and kernels.

Typically measurements take less than 10 seconds, and your appraisal is ready seconds after that.  Times may vary depending on the size and load of your system.

RISe utilizes sophisticated algorithms to generate a detailed graph that accurately represents the current state of your system, including kernel data structures and their interdependencies. It's important to note that RISe is designed as a read-only service and does not modify, collect or store any of your personal data.

RISe is designed for seamless operation with minimal performance impact on virtual and physical machines, across cloud-native, hybrid, and on-premises environments.

To ensure the accuracy and reliability of its appraisals, RISe compares each measurement against a baseline stored in our inventory of pre-captured baselines. These baselines are generated from a wide range of distributions and kernel versions. By drawing on this diverse inventory, RISe can identify even subtle deviations from the norm and provide you with a more thorough and comprehensive appraisal of your system's integrity.

Not yet, however Invary is currently working on a version that supports Windows. For more information contact us at [email protected]

Prevailing security solutions assume trust in operating systems, yet are unable to verify their integrity, allowing malware hidden in the OS to deceive them (Drovorub for example).  Invary believes that Zero Trust should be expanded to include the OS as an entity, and removing assumptions about it are vital to a comprehensive Zero Trust Architecture.  

Invary’s approach to Runtime Integrity closes this Zero Trust gap and is based on IP invented by the US DoD. Utilizing this foundation, Invary’s Runtime Integrity service validates that operating systems are behaving according to the invariants defined in their code. In essence, Invary validates that an entire system is “good”, instead of employing techniques used by prevailing XDR and EDR solutions that inspect individual aspects of a system for the presence of “bad”.   By re-establishing faith in the operating system, we enable our customers to regain confidence in their security posture.

Invary's approach to Runtime Integrity is built on unique intellectual property developed by the US Department of Defense, which enables our technology to provide a higher level of assurance than traditional runtime integrity services that use simple techniques like hashing. Unlike these services, Invary's technology is designed to understand the complex structure and interactions of a kernel at runtime, and to validate that the system is behaving within its intended invariance as defined by its underlying code.

What's more, our approach is non-intrusive and does not require the installation of any extraneous kernel modules or customized kernels. We recognize that your systems are performing critical tasks with demanding performance requirements, so our software is designed to operate with minimal impact on your workloads.

With Invary, you can be confident that your system is functioning exactly as intended, and that it's protected from a wide range of potential threats, without compromising your system's performance or stability.

Invary was established through a collaboration between seasoned security researchers and operators of internet-scale software platforms. With decades of combined experience in both the operational aspects of security at scale and research in the field of secure computing, our team brings a wealth of expertise and insight to the development of our innovative security solutions.

Our unique blend of practical experience and cutting-edge research enables us to deliver highly effective solutions that address the real-world challenges faced by organizations today. By combining our extensive knowledge of the security landscape with our deep understanding of secure computing technologies, we're able to provide our customers with the confidence and peace of mind they need to protect their critical assets in a constantly evolving threat environment.

For additional questions please contact us at [email protected]