Request Demo
AIStorm CloudGuard

One CWPP for Every Cloud

home > products & solutions > AIStorm CloudGuard
Product Overview

Driven by the evolution of Cloud Computing and AI technologies, CloudGuard is designed to meet the security demands of cloud workloads (primarily hosts). It comprehensively covers the requirements of the Cloud Workload Protection Platform (CWPP) framework. It delivers full-stack security capabilities ranging from asset discovery and vulnerability management to threat protection, building a proactive, intelligent, and defense-in-depth host security system.

Core Capabilities
  • Anti-Virus & Ransomware Protection:
    • Multi-Engine Fusion: Leverages signatures, heuristics, machine learning, and cloud-based scanning technologies to achieve a high detection rate for brand-new, unknown samples.
    • Deep Inspection: Supports parsing of over 300 file formats, equipped with 20+ unpacking and 30+ decompression technologies to identify deeply camouflaged threats.
    • Specialized Ransomware Countermeasures: Provides targeted defense against hundreds of ransomware families and RaaS (Ransomware-as-a-Service) attack chains.
  • Virtual Patching & Vulnerability Management:
    • Virtual Patching Technology: Delivers temporary protection for high-risk vulnerabilities within hours, eliminating the need for immediate reboots or applying official patches.
    • Extensive Rule Coverage: Includes over 9,000 virtual patch rules, covering trending high-risk RCE vulnerabilities from the past three years.
    • Closed-Loop Management: Establishes a complete cycle of "Temporary Protection → Impact Assessment → Permanent Remediation."
  • Lightweight "N-in-One" Agent Architecture:
    • High Integration: A single agent integrates Firewall, IPS, File Protection, Account Security, and Process Control capabilities.
    • Superior Performance: Configurable CPU usage peak (e.g., <5%) with adaptive circuit-breaking mechanisms to ensure zero impact on business operations.
    • Strong Scalability: Plugin-based architecture allows for feature expansion without upgrading the underlying base agent.
  • Intelligent Risk Governance:
    • Granular Asset Inventory: Collects information on over 1,300 types of software assets.
    • Integrated Intelligence: Built-in massive threat intelligence supporting one-click searches and anomalous change analysis.
Product Versions
There are 3 versions of the product: CloudGuard Standard, CloudGuard Advanced, and CloudGuard Enterprise. Feature differentiation is as follows:
  • Included in All Versions (Standard / Advanced / Enterprise):
    • Host Asset Management
    • Host Security Health Check (Vulnerabilities, Patches, Weak Passwords)
    • Host Baseline Configuration Inspection
    • Host Virus & Trojan Detection/Protection
  • Added in Advanced & Enterprise Versions:
    • Host Security Threat Monitoring & Response
    • Host Process Whitelisting
    • Host File & Registry Protection
    • Host Account Security Protection
  • Exclusive to Enterprise Version:
    • Host Firewall
    • Virtual Patching
Product Features

  • Threat Protection
    Offers multi-engine malicious code inspection, behavior-based anomaly detection, and intrusion prevention.
  • Asset Management
    Enables automated asset discovery and inventory, real-time monitoring of asset changes, and minute-level localization of risky assets.
  • Vulnerability Lifecycle Management
    Provides full-scale vulnerability scanning assessment and a closed-loop virtual patching mechanism.
Customer Use Cases

Unified Security Management For Hybrid Cloud
Solution:
  • Pre-attack Prevention: Vulnerability hardening + Least privilege control.
  • During-attack Blocking: Behavioral detection + Real-time interception.
  • Post-attack Recovery: Attack tracing/forensics + Rapid remediation.
Specialized Ransomware Protection

Pain Point: Resolving issues of unclear assets and inconsistent policies across mixed environments (VMware, Huawei, H3C, ZTE, etc.).

Solution: Provides a unified asset view, centralized management of cross-cloud hosts, and one-click synchronization of standardized security policies.

Vulnerability Defense & Virtual Patching

Pain Point: Lengthy patching cycles (exposure window risks), difficulty scheduling downtime for critical services, and unpatched End-of-Support (EOS) systems.

Solution:

  • Reboot-free Protection: Intercepts exploit the network layer without requiring server reboots.
  • Automated Adaptation: Automatically matches policies to the environment to achieve "Protection upon Discovery."
  • Post-attack Recovery: Attack tracing/forensics + Rapid remediation.