Home Products Protect GLIMPS Malware for Network Security

GLIMPS Malware for Network Security

Use AI to analyze every file moving through your network before it reaches employee endpoints.

Request a demo

Stop threats at the heart of your network infrastructure

Real-time proxy filtering

Every file downloaded from the internet is intercepted and analyzed by more than 25 detection engines, including around ten AI-based engines, before it reaches the end user device.

Automatic validation of NDR alerts

When your NDR detects an anomaly and flags a file, GLIMPS automatically confirms or dismisses it, drastically reducing false positives.

Analysis in seconds

Processing time is transparent for end users. Files are analyzed in about ~3 seconds, compatible with smooth web browsing.

Centralized visibility

All results are consolidated in GLIMPS Malware Expert for deep investigation, triage, and retrohunt.

How does GLIMPS secure your network file flows?

[Insérer le schéma correspondant]

GLIMPS Malware for Network Security integrates with your network security stack to analyze every file in transit, whether it comes from a web download or a network detection:

ICAP connector (web proxies) – Your web proxy redirects downloaded files to the GLIMPS ICAP connector for analysis before delivery to the endpoint. Available as encrypted ICAPS hosted as SaaS by GLIMPS, or deployed on-premise via Docker. Compatible with proxies supporting the ICAP protocol, including F5 BIG-IP, Squid, and other ICAP-compatible solutions.

Gatewatcher NDR integration – The Gatewatcher NDR detects anomalies and weak signals across all network traffic, including encrypted traffic. Files identified as suspicious are automatically sent to the GLIMPS Malware API for confirmation or dismissal. The SOC receives validated, contextualized alerts with a detection score and malware family attribution. A direct link to GLIMPS Malware Expert enables deep investigation.

REST API – For custom integrations with other network devices or security solutions that require on-demand file analysis.

I want to learn more

AI detection built for your network

Multi-engine detection

More than 25 detection engines, including around ten AI-based engines (Deep Learning, Machine Learning, LLM), complemented by antivirus engines and your own YARA rules, characterize every file intercepted on the network.

Automatic archive extraction

Intercepted archives (ZIP, RAR, 7Z…) are automatically extracted and analyzed by GLIMPS Malware. Every contained file is scanned by the detection engines.

Instant, actionable verdict

The verdict is returned as JSON with the detection score and identified malware families. The proxy blocks or allows the file based on your defined policy. The NDR enriches its alerts with the GLIMPS verdict.

Cache and performance

Built-in caching prevents resubmission of already analyzed files. Designed for high daily download volumes with no impact on network performance.

GLIMPS Malware for Network Security: who is it for?

Context: You manage web proxies, firewalls, and network equipment and must secure inbound file flows.

What GLIMPS delivers: A native ICAP integration with your existing proxies, without changing your infrastructure. The GLIMPS ICAP connector sits transparently in your network chain.

Context: Files downloaded from the internet or detected by the NDR are a major attack vector and are difficult to control at scale.

What GLIMPS delivers: A sovereign AI detection layer that intercepts threats before they reach endpoints. Aligned with GDPR and NIS2, with a major reduction in false positives through the NDR + GLIMPS feedback loop.

Context: You handle a high volume of network alerts and need to quickly separate real threats from false positives.

What GLIMPS delivers: Gatewatcher NDR sends suspicious files to GLIMPS, which automatically confirms or dismisses the threat. You receive validated alerts with a direct link to GLIMPS Malware Expert for deep investigation.

How customers use GLIMPS Malware for Network Security

Securing web downloads through a proxy

An organization using a web proxy (F5, Squid) filters employees’ internet traffic. Every downloaded file is intercepted by the GLIMPS ICAP connector and analyzed before it reaches the workstation, blocking malware before execution.

Automated triage for NDR alerts

Gatewatcher NDR detects a network anomaly and identifies a suspicious file. The file is automatically sent to GLIMPS for analysis by 25 detection engines. The SOC receives a confirmed verdict with malware family attribution, enabling a fast, targeted response.

Why choose GLIMPS Malware for Network Security?

Proprietary AI detection

GLIMPS’ code conceptualization technology, developed within the French Ministry of the Armed Forces by GLIMPS’ founders, identifies zero-day threats and variants that traditional antivirus solutions do not detect. Detection rate above 99%.

Reduced false positives

The NDR + GLIMPS loop automatically confirms or dismisses network alerts. SOC analysts focus only on validated, contextualized incidents.

Sovereignty and compliance

French vendor, hosting in France and Europe, no data leaves the platform. Aligned with GDPR, compatible with NIS2.

Used by the French Armed Forces

Used by the French Armed Forces and incubated by the French Ministry of the Armed Forces. French Tech 2030 award winner.

Frequently asked questions

Integration is done through the GLIMPS ICAP connector. The connector is available as encrypted ICAPS hosted as SaaS by GLIMPS, or deployed on-premise as a lightweight Docker image. Configure your proxy to redirect files to the ICAP connector. You can be operational within a few hours.

Gatewatcher NDR detects traffic anomalies and automatically sends suspicious files to the GLIMPS Malware API for analysis. GLIMPS returns a verdict with a detection score and the identified malware family. A link to GLIMPS Malware Expert enables deep investigation.

GLIMPS analyzes all file types. Archives (ZIP, RAR, 7Z…) are automatically extracted and analyzed by GLIMPS Malware. The verdict is returned as JSON with the score and identified malware families.

Yes. GLIMPS Malware for Network Security is available as SaaS (hosted in France), on-premise, and in SecNumCloud environments. The ICAP connector can be delivered as SaaS (encrypted ICAPS) or deployed locally via Docker, depending on your architecture constraints.

Analysis is performed in about ~3 seconds, compatible with smooth web browsing. A cache prevents resubmission of files already analyzed. The solution is designed to handle large daily file volumes without noticeable latency.