We launched ReflexAI™, the final component of the adam:ONE® security ecosystem. ReflexAI adds AI-driven dynamic allowlisting, so a protected network can run in a default-deny-all state: every connection is verified in real time before the device is allowed to reach its destination.
Why default deny-all
Phishing remains one of the most common techniques threat actors use, and it continues to rise. In its 2023 Internet Crime Report, the FBI’s Internet Crime Complaint Center (IC3) recorded 21,489 Business Email Compromise (BEC) complaints with adjusted losses over $2.9 billion, the second-costliest type of crime it tracked. Users find it harder and harder to tell a legitimate source from a malicious one, so many click harmful links.
adam:ONE treats every connection as malicious by default instead of trying to detect the threat first. Because it does not rely on detection, detection evasion is practically neutralized. With ReflexAI, adam:ONE can:
- Defeat phishing attacks before the IP or domains are detected to be malicious.
- Neutralize advanced threats that would evade detection on traditional systems.
- Stop data exfiltration before detection.
- Prevent access to Command and Control (C2) servers without the need to detect the threat.
The deny-all state is invisible to the user. ReflexAI makes allowlisting decisions within milliseconds, and the user does not have to request access to new destinations or wait for a decision.
“ReflexAI enables users to operate uninterrupted in a true Zero Trust environment, protecting every internet connection without causing any disruption to daily operations,” said David Redekop, Founder and CEO of ADAMnetworks. “Our mission has always been to protect people, and with this product launch, the adam:ONE® ecosystem can now deliver near-instant AI-driven decision-making while ensuring network safety. Over the course of the last 10 years, we systematically overcame every hurdle to make default deny-all practical and ReflexAI is the final piece of the puzzle needed to give users that critical, seamless experience.”
How ReflexAI decides
Before a connection request arrives, ReflexAI sends multiple AI-driven inspectors across fully qualified domain names (FQDNs) to establish their trust level and category. The results come back as category-based tags. The security administrator arranges those tags in a matrix and sets how conflicts are resolved when two tags call for different outcomes. For a protected device, an allowlist decision is more than 20x faster than the blink of a human eye.
The complete adam:ONE ecosystem
With ReflexAI integrated, adam:ONE consists of:
- DNSharmony® for threat intelligence and resolver aggregation
- DTTS® for Zero Trust egress control
- ZTc Adaptive AI for dynamic allowlisting
- ZTc ReflexAI for real-time AI-driven security decisions
- adam:UBA™ for user-based authentication
- adam:GO™ or adam:OSN™ for securing high-value mobile devices
adam:ONE does not rely on endpoint agents, so it fits environments that mix IoT, IT and OT devices. See how adam:ONE works for the full architecture.
