Zedmos

Capabilities

What is in the box, and what state it is in

Fourteen capabilities, each with a status we are willing to be held to. Anything still being built is labelled as such rather than described in the present tense.

14
Capabilities
200+
Protocols classified
26
Threat categories
16
Policy actions

What the platform does

Seeing the traffic

Protocol and application classification across more than two hundred protocols, TLS fingerprinting with selective inspection, device recognition, and control over QUIC, DNS-over-TLS and DNS-over-HTTPS rather than pretending they are not there.

Deciding on it

One policy engine with sixteen actions, twenty-six threat categories, curated intelligence with confidence scoring, and inline file inspection. Policy changes take effect without dropping sessions.

Moving it

Per-application routing across uplinks, encrypted overlays between sites built into the engine itself, and health scoring that moves a flow off a failing link on the next probe cycle.

Proving it happened

A log plane that speaks the formats a SOC already ingests, with the verdict and the reason for it attached to each record: not just that a session was blocked, but which rule and which finding blocked it.