CyberIndexBeta

Product

Antiy Intelligent Endpoint Protection (安天智甲终端防御系统) is an enterprise endpoint protection product built on Antiy's AVL SDK anti-virus engine, centrally managing Windows, Linux, Android and Chinese domestic operating systems. Among the capabilities recorded for it are behavioral detection, central management console, cloud-assisted scanning and device control. Its record also notes malware detection and ransomware protection. The stated market is Enterprise. It is sold on a quoted basis rather than at a published price.

Current Version
9.0.215018.819
Market
Enterprise
Licence
Paid
Price
Quote
Record Created
2026-08-20
Last Updated
2026-10-10

Vendor

Antiy Labs is a Chinese security research company based in Harbin, and its most significant product is one most people will never see: the AVL SDK, a detection engine licensed to other manufacturers. It has been embedded in mobile security products, network appliances and handset firmware across Asia for years, which means Antiy's detection has reached far more devices than its own brand ever has. The engine is sold in several forms — Antiy AVL SDK Base, AVL SDK for Network, AVL SDK for Mobile and AVL SDK Lite — and the company sells finished products alongside them: Antiy IEP, its intelligent endpoint protection system, and the Antiy PTD and PTA systems for detecting and analysing persistent threats, with a situational awareness platform above them. Antiy is also known for its analysis of state-sponsored campaigns, publishing detailed reports on operations aimed at Chinese targets. For readers of this index, the licensing business is the important context: an Antiy engine may be behind a product listed here under another name. Vendor page →

Website
antiy.net
Country
China
Headquarters
Harbin, China
Year Established
2000
Customers
2,000 organisations
Users
1B devices protected
Revenue
≈ $20.5M (2023)

Platforms

Androidnative
Linuxnative
Windowsnative

Target Market

Enterprise primary

Capabilities

Malware Detectionkeynative
Ransomware Protectionkeynative
Behavioral Detectionkeynative
Web ProtectionkeyNot known
Email ProtectionNot known
Host FirewallNot known
Sandbox AnalysisNot known
Cloud-Assisted Scanningnative
Heuristic DetectionNot known
Device Controlnative
Vulnerability ShieldingNot known
Central Management Consolenative

6 of 12 not yet known — not recorded, which is not the same as not supported.

Pricing

PlanLicencePriced perBilledPrice
SummaryPrice on requestnot statedno recurring chargeQuote

Versions

  • 9.0.215018.819Windows

The newest release each source names per platform, not every release the vendor has shipped. A release date is shown only where one is recorded.

Independent Tests

Not tested This product does not appear in any test run CSI holds. That is not a low score.

Certifications

OESIS Framework SupportSupported1 activeSupported

Change History

This record was created 2026-08-20. Everything below is what has changed since.

  • 2026-09-23Capability addedCentral Management Console: built inevidence
  • 2026-09-23Capability addedCloud-Assisted Scanning: built inevidence
  • 2026-09-23Capability addedDevice Control: built inevidence
  • 2026-09-23Capability addedBehavioral Detection: built inevidence
  • 2026-09-23Capability addedRansomware Protection: built inevidence
  • 2026-09-22Product updatedListed in Enterprise Antimalwareevidence
  • 2026-09-19Platform addedRuns on Androidevidence
  • 2026-09-19Platform addedRuns on Linuxevidence
  • 2026-09-19Pricing plan addedPrice: price on requestevidence
  • 2026-09-09New versionNew version: 9.0.215018.819 (Windows)evidence
  • 2026-08-20Certification addedCertified: OESIS Framework Support (Supported)evidence
  • 2026-08-20Capability addedMalware Detection: built inevidence
  • 2026-08-20Pricing plan addedPrice: paidevidence
  • 2026-08-20Product updatedSold to: Enterpriseevidence
  • 2026-08-20New versionNew version: 9.0.215018.819evidence
  • 2026-08-20Platform addedRuns on Windowsevidence
  • 2026-08-20Product createdNew product listedevidence

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.