Skip to content
PHP2Shell: the critical PHP vulnerability and how to patch it
Black Shard

Popular

Black Shard
Talk to us24/7 incident line 1800 370 270
JetstoneLaunching 2027

AI cyber defence for Australian businesses.

For businesses on Microsoft 365 or Google Workspace. The waitlist is open now.

Join the waitlistExplore the platform

Console preview with sample data.

The Jetstone console fleet view with sample data: a health score, detections over 14 days, open incidents and a device list.

Capabilities

What Jetstone will do

Designed for Australian businesses with 1 to 200 devices.

  • No kernel driver

    A light agent that will run on Windows 10 and 11 and on macOS 13 and later.

  • Named attack techniques

    Rules will be mapped to MITRE ATT&CK, so each finding names the technique it matched.

  • Action on a published list

    It will end the process, quarantine the file, isolate the device or sign the user out.

  • Identity threat watch

    A risky sign-in will be matched to the managed device behind it, or marked unmanaged.

  • Alerts you can read

    Each will say what happened, what Jetstone did and what is waiting on you, in plain English.

  • Made for small teams

    A phone-sized console, a Monday summary and an incident export for a broker or insurer.

Detection and response

How Jetstone responds

One sample incident, from the rule match to the write-up.

Sample incidentContained
A Jetstone incident with sample data: credential theft attempt on HLA-LT-07, high confidence, technique OS credential dumping.

HLA-LT-07

Isolated 09:58:16

ConfidenceHigh, 09:57:52

  • Ended process tree

  • Quarantined 2 files

  • Isolated the device

Written 09:58:20

In this sample, a spreadsheet attached to a fake remittance email runs a script that tries to read sign-in secrets from memory. Jetstone will stop the script, quarantine its two files and isolate the laptop before anything leaves it.

  1. Detected

    09:57:51

    A detection rule will match the activity on the device and open an incident.

  2. Scored

    09:57:52

    The finding will be scored, and only a high-confidence score will act on its own.

  3. Process ended

    09:58:14

    The process tree behind the activity will be stopped on the device.

  4. File quarantined

    09:58:15

    The files it brought in will be locked away with their hashes recorded.

  5. Device isolated

    09:58:16

    The device will be cut off from the network, with updates still reaching it, until you release it.

  6. Written up

    09:58:20

    The incident will be written up in plain English, and anything left for you will arrive as an approve or dismiss card.

Every automatic action will be undoable in one tap.

Identity

Sign-ins watched beside the devices

  • Impossible travel, MFA fatigue, malicious inbox rules and risky OAuth consents will be flagged.
  • A flagged sign-in will be able to end the user’s session in Microsoft 365 or Google Workspace, with one tap to approve.
  • Each flag will name the user, where the sign-in came from and the device it used.
The Jetstone identity screen with sample data: a flagged sign-in, recent sign-ins and the connected Microsoft 365 and Google Workspace accounts.

Deployment

Built for the systems you already run

An agent on each Windows and Mac device, a connection to your sign-in platform, and detection in one Australian region.

Devices

Jetstone agent

  • Windows

    A signed user-mode service beside the built-in antivirus

  • macOS

    A system extension on the same agent core

Detection

Microsoft Azure

Australia East

  1. Rules
  2. Scoring
  3. Write-ups

Sign-ins

One consent by the owner

  • Microsoft 365

    Sign-ins, inbox rules and app consents

  • Google Workspace

    Sign-ins and session sign-out

Your console

Every incident, device and sign-in in one place

Jetstone will be sold per device per year as software.

Whitepaper: Jetstone: the agent, detection, response and undo model

Policy presets

Choose what runs on its own

Three policy presets, Watch, Guard and Lockdown, with fixed isolation guardrails.

Choose what runs on its own
ActionWatchGuard
End a process and quarantine the fileWaits for your tapOn its own at high confidence
Isolate a deviceWaits for your tapOn its own for ransomware or credential theft
Sign a user outWaits for your tapOn its own when compromise is confirmed
Medium-confidence detectionsWritten up and sentAn approve or dismiss card
Low-confidence detectionsWritten up and sentAn approve or dismiss card

Lockdown

The strictest of the three presets will join Watch and Guard at launch, with its settings published then.

Jetstone will never isolate more than half of a fleet. Under every preset, the device you enrolled from will never be isolated without a second confirmation.

A data hall at night, two rows of black server racks leading to a window over a city with a gum tree outside.

Data residency

Where your data will be held

Built in Australia. Data will be held in Microsoft Azure Australia East.

From the team that holds

CyberCert SMB1001:2026 Gold medallionSMB1001:2026 GoldEssential Eight Maturity Level 3 across all eight strategies
Recognition and credentials

Jetstone questions

Ask us anything else about Jetstone.

Talk to us
When does Jetstone launch?

In 2027. The waitlist is open now.

Will it act without asking us?

Only against threats on a published list, and only as far as your preset allows.

What will it cost?

Pricing will be published at launch.

Waitlist

Join the Jetstone waitlist

Tell us about your devices and your sign-in platform in the brief.

Join the waitlistExplore the platform