CyberIndexBeta

Product

Hurukai is the endpoint agent of HarfangLab EDR, which detects and blocks cyberattacks on monitored workstations and servers. Supported platforms are Linux, macOS and Windows. It is recorded as supporting behavioral detection, heuristic detection, host firewall and malware detection. Its record also notes ransomware protection. It is aimed at Critical Infrastructure, Enterprise and Government buyers.

Current Version
6.0.11
Product Page
harfanglab.io/edr
Market
Critical InfrastructureEnterpriseGovernment
Licence
Paid
Price
Paid · price unknown
Record Created
2026-08-20
Last Updated
2026-10-10

Vendor

HarfangLab is a French endpoint detection and response vendor based in Paris, and the reason it exists is sovereignty: European organisations, particularly French public bodies and critical infrastructure operators, increasingly want a detection product that is developed, owned and hosted in Europe. It holds an ANSSI security visa, the French state certification, which few EDR products have. Its platform is sold as EDR and EPP with attack surface management, identity threat detection and email security around them, deployed in the cloud or on the customer's own infrastructure — the on-premise option matters to buyers who may not send telemetry abroad. Its agent is the Hurukai component listed in this index. It is a comparatively young company and its record in the public test cycles is short, but it has been assessed in European evaluations that most of the vendors here have not. Vendor page →

Country
France
Headquarters
Paris, France
Year Established
2018
Customers
1,000 organisations
Users
3M devices protected
Revenue
≈ $2.4M (2022)

Platforms

Linuxnative
macOSnative
Windowsnative

Target Market

Critical Infrastructure secondaryEnterprise primaryGovernment secondary

Capabilities

Malware Detectionkeynative
Ransomware Protectionkeynative
Behavioral Detectionkeynative
Web ProtectionkeyNot known
Email ProtectionNot known
Host Firewallnative
Sandbox AnalysisNot known
Cloud-Assisted ScanningNot known
Heuristic Detectionnative
Device ControlNot known
Vulnerability ShieldingNot known
Central Management ConsoleNot known

7 of 12 not yet known — not recorded, which is not the same as not supported.

Pricing

PlanLicencePriced perBilledPrice
SummaryPaidnot statedno recurring chargeNot known

Versions

  • 6.0.11Windows

The newest release each source names per platform, not every release the vendor has shipped. A release date is shown only where one is recorded.

Independent Tests

At a glance — latest result per lab test

MITRE ATT&CK Evaluations (Enterprise)

2024-12-11lab report ↗

Each bar is one lab’s own figure on that lab’s own scale. Labs test different models at different times, so the figures are not combined into one score.

MITRE ATT&CK Evaluations (Enterprise)MITRE ATT&CK Evaluations — Enterprise 20242024-12-11
Technique-level detection: 26.2%Any detection: 37.5%Benign activity not alerted: 95%Attack sub-steps evaluated: 80

Certifications

OESIS Framework SupportSupported1 activeSupported
OPSWAT Certified Security ApplicationGold1 activeGold

Change History

This record was created 2026-08-20. Everything below is what has changed since.

  • 2026-10-10Product updatedNo longer sold to: Consumerevidence
  • 2026-10-10Product updatedSold to: Enterpriseevidence
  • 2026-10-07Test result addedNew MITRE ATT&CK Evaluations (Enterprise) resultevidence
  • 2026-10-05New versionNew version: 6.0.11 (Windows)evidence
  • 2026-09-23Capability addedHeuristic Detection: built inevidence
  • 2026-09-23Capability addedHost Firewall: built inevidence
  • 2026-09-23Capability addedBehavioral Detection: built inevidence
  • 2026-09-23Capability addedRansomware Protection: built inevidence
  • 2026-09-23Platform addedRuns on macOSevidence
  • 2026-09-23Platform addedRuns on Linuxevidence
  • 2026-09-23Product updatedAlso sold to: Critical Infrastructureevidence
  • 2026-09-23Product updatedAlso sold to: Governmentevidence
  • 2026-09-22Product updatedListed in Enterprise Antimalwareevidence
  • 2026-09-22Product updatedListed in Home Antimalwareevidence
  • 2026-09-09New versionNew version: 5.0.17 (Windows)evidence
  • 2026-08-20Certification addedCertified: OESIS Framework Support (Supported)evidence
  • 2026-08-20Capability addedMalware Detection: built inevidence
  • 2026-08-20Pricing plan addedPrice: paidevidence
  • 2026-08-20Product updatedAlso sold to: Enterpriseevidence
  • 2026-08-20Product updatedAlso sold to: Consumerevidence
  • 2026-08-20New versionNew version: 5.0.17evidence
  • 2026-08-20Platform addedRuns on Windowsevidence
  • 2026-08-20Certification addedCertified: OPSWAT Certified Security Application (Gold)evidence
  • 2026-08-20Product createdNew product listedevidence

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.