In short: Halcyon is a security company dedicated to defeating ransomware. Its Anti-Ransomware Platform adds an agent beside your existing EDR or antivirus that blocks ransomware, protects security tools from tampering and captures encryption keys so files can be recovered, with optional data theft blocking (DXP). Forever Systems licenses it per endpoint, billed monthly.
What Halcyon does
Halcyon concentrates on one problem: ransomware. Rather than replacing your endpoint protection, it adds a dedicated anti-ransomware agent that runs alongside it and targets the steps ransomware groups rely on: disabling security tools, abusing vulnerable drivers, living off the land with built-in tools such as PowerShell, moving laterally, deleting recovery points, stealing data and encrypting files.
Its AI engine is built specifically to detect and block ransomware files, applications and processes before they run, including new variants. If an attack does get as far as encryption, Halcyon is designed to capture the key material the ransomware uses, so affected data can be recovered without paying a ransom or relying entirely on backups. What one endpoint learns is shared across the rest of your estate.
Halcyon's 24/7 Ransomware Operations Center (ROC) provides expert-led detection, response and recovery, and Halcyon includes it at no extra charge. Halcyon also offers a ransomware warranty; we share its current terms with you before you order.
The Halcyon product we supply
We supply the Halcyon Anti-Ransomware Platform in two editions, Halcyon Pro Platform and Halcyon Pro Platform Plus DXP. The difference is data theft: the Plus DXP edition adds Halcyon's double extortion prevention, which detects and blocks data being taken out of your network to be used for extortion.
That matters because many ransomware groups now steal data before they encrypt it, so the threat is publication as well as lost files. If your organisation holds data that would be valuable to an extortionist, such as client files, health information or pupil records, the DXP edition is usually the better choice. A trial of the Plus DXP edition is available through us.
The product page sets out what each edition includes, how it is licensed and how we deploy it. To compare other approaches, see anti-ransomware and endpoint protection products.
How Halcyon is licensed
- Unit: per protected endpoint, covering the workstations and servers you install the agent on.
- Term: billed monthly through Forever Systems, so you can add endpoints as you grow.
- Edition: Pro Platform or Pro Platform Plus DXP. You can start with Pro and move to Plus DXP later.
- Included: Halcyon's 24/7 ROC comes with the platform at no extra charge.
Prices depend on endpoint numbers and edition, so ask us for a quote. See per-user vs per-device licensing for how endpoint licensing compares with per-user models.
Buying Halcyon through Forever Systems
- Review: we look at your current endpoint protection, backup and server estate, and agree which machines need cover.
- Pilot: we deploy the agent to a group of machines and confirm it runs cleanly beside your existing EDR or antivirus.
- Roll out: the agent goes to the rest of the estate through your usual software deployment tools.
- Operate: alerts are worked by Halcyon's ROC and by us, and we tell you what happened in plain English.
- Changes and renewals: endpoint numbers and edition changes are handled on your Forever Systems account, with one invoice for all your subscriptions.
Who Halcyon suits
Halcyon suits organisations that already have endpoint protection but want a dedicated layer for the attack that does most damage. It is a strong fit where recovery time matters: manufacturers, professional services firms, schools and multi-academy trusts, healthcare suppliers and any business holding personal data that could be published. Because it complements rather than replaces EDR, you do not need to rip out existing tools. Pair it with good cloud backup and endpoint security and XDR for defence in depth.
Explore Halcyon
How Forever Systems supplies your software licences
Forever Systems Ltd supplies business software subscriptions to UK organisations from one account, with one monthly invoice and a UK team who know the products.
- The right edition first time: we check what you need before you buy, so you are not paying for features you will never use
- Monthly or annual terms where the vendor offers them, and help timing renewals and commitments
- Licence changes handled for you: add or remove users, upgrade editions and true-up without starting a new contract
- Deployment and support from engineers who run these products every day, not just a reseller account
- Consolidated billing and renewal reminders so nothing lapses unexpectedly
We work with businesses, schools, charities and public sector organisations of all sizes.
Need a licence quote or a second opinion on your renewal?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
Does Halcyon replace my antivirus or EDR?
No. Halcyon is designed to run alongside your existing EDR or antivirus as a dedicated anti-ransomware layer, and it also protects those tools from being tampered with or switched off.
Who sells Halcyon in the UK?
Forever Systems supplies Halcyon to UK organisations, deploys the agent beside your current security tools and handles licence changes and renewals on one account.
What is Halcyon DXP?
DXP is Halcyon's double extortion prevention, available in the Pro Platform Plus DXP edition. It blocks connections to known-bad infrastructure and flags devices that send unusually large volumes of data, to stop data being stolen for extortion.
Is the Halcyon Ransomware Operations Center included?
Yes. Halcyon includes its 24/7 Ransomware Operations Center (ROC) with the platform at no extra charge.
Can I trial Halcyon?
Yes, a trial of the Pro Platform Plus DXP edition is available. Contact us and we will set one up on a group of your machines.