IntelliSystems technology
Technology that acts for you
We add two independent modules of our own software to reliable storage. Ransomware Guard stops an attack before it spreads. The deduplication engine backs up fast even where standard backup can't keep up.
- Attack detection
- 50 ms
- Of automatic defense
- 5 steps
- No waiting for a human
- 24/7
- Only changes transferred
- Blocks
Why passive protection isn't enough
Snapshots and backups help you after an attack. But while the attack is running, every second means more encrypted files.
Snapshots are passive
They protect a past state but don't stop an attack in progress.
Encryption spreads over the network
One infected PC encrypts everything it can reach through shared folders.
Humans react slowly
Attacks come at night and on weekends. Hours pass before anyone notices.
Every minute counts
The longer an attack runs, the more data must be restored and the longer the outage.
Active Ransomware Guard & Auto-Isolator
If an attacker or an encrypted PC starts mass-modifying files, Guard detects it within 50 milliseconds and launches the defense on its own. Standard storage offers no such active kill switch by itself.
Similar protection is offered by enterprise systems such as NetApp (Autonomous Ransomware Protection) in solutions costing tens of thousands of euros. Ransomware Guard also blocks the attacker and disconnects shares on its own.
- 01
Detection
Catches suspicious file changes within 50 milliseconds.
- 02
IP block
Immediately blocks the attacker's IP address via API.
- 03
Shares disconnected
Disconnects SMB/NFS shares so encryption can't spread.
- 04
Emergency snapshot
Takes an instant snapshot of the last clean state.
- 05
Urgent alert
Notifies you and us via Telegram or SMS.
An attack at 3 a.m.
The same attack, two different outcomes.
Without active protection
- Encryption runs all night unnoticed
- It gradually hits every shared folder
- You find out in the morning when no one can work
- Restoring large volumes of data takes hours to days
With Ransomware Guard
- The attack is detected within milliseconds
- The attacker is blocked and shares disconnected
- An emergency snapshot preserves a clean data state
- An alert arrives instantly - to you and to us
What Guard watches
It continuously evaluates storage activity and reacts to patterns typical of ransomware.
Mass changes
Unnaturally fast overwriting and renaming of files.
Suspicious extensions
Files suddenly getting unknown extensions.
Source of changes
Which computer or IP address is causing the changes.
Network shares
Activity on SMB and NFS shares through which encryption spreads.
Our own deduplication engine
Fast, efficient backup of specific applications. Instead of whole files we transfer only changed data blocks - no need to push tens of gigabytes over the network for every small change.
Enterprise storage such as NetApp ONTAP and Dell PowerStore is built on the same block-level deduplication principle - without the enterprise price tag.
- 01
Splitting
Data is split into small blocks.
- 02
Fingerprint
Each block gets a unique fingerprint (hash).
- 03
Comparison
Fingerprints are compared with blocks we already store.
- 04
Transfer changes
Only new or changed blocks travel over the network.
- 05
Backup version
A complete, restorable version is assembled from blocks.
Illustrative example
A 50 GB database file in which about 200 MB changes during the day.
Actual savings depend on the data type and the extent of changes.
Where we deploy the engine
It delivers the most where large files change only in small parts.
Databases
SQL and other database files that grow and change constantly.
ERP and accounting
Business systems with large data files and frequent changes.
Virtual disks
Virtual server images where only a fraction of the content changes.
Branches on slow links
Backup to headquarters or off-site without flooding the network.
Which packages include them
Ransomware Guard and the deduplication engine are part of Ransomware Shield Pro. Smart Processor includes them too and adds custom automation.
Data Shield
Everything Synology offers
For businesses that want their data safely backed up and the NIS2 basics covered.
View packageRansomware Shield Pro
Active attack protection
For businesses that cannot afford downtime or data loss.
View packageSmart Processor
Protection + custom automation
For businesses that want to automate routine work on top of protecting their data.
View packageFAQ
Can Guard block normal work by mistake?
We tune the rules to your company's normal operations so they distinguish an attack from legitimate work such as bulk copying. If an intervention ever blocked legitimate activity, we release it remotely after verification.
Does Ransomware Guard replace antivirus?
No, it complements it. Antivirus protects computers; Guard protects storage. When an attack gets past antivirus, Guard stops it at the data level.
Does Guard work on our existing Synology?
In most cases, yes. Before deployment we review the model and system version and advise whether any changes are needed.
Why a custom deduplication engine when Synology already deduplicates?
For everyday data we use the built-in tools. We deploy our own engine for specific applications where large files change only in small parts and standard backup would needlessly transfer whole files.
Want to see how Guard would protect your business?
In a free audit we review your storage and show where active protection and deduplication would help.
Contact us