• Aashish Goela
• July 1, 2025
• No Comments

Every great product starts with a powerful idea. But at Seceon, we don’t stop there – we believe innovation must be shared, challenged, and celebrated.

That’s exactly what we set out to do during the recently concluded Q2 2025 Seceon Innovation & Certification Days, a vibrant event bringing together security leaders, engineers, security specialists, and our partners. This wasn’t just another tech update – it was a collaborative platform to showcase the ideas, breakthroughs, and product enhancements that will shape the next chapter of Seceon’s journey.

Across multiple sessions, we explored emerging cybersecurity trends, dissected use cases, and discussed how our OTM platform continues to evolve to meet the most pressing challenges facing MSSPs, enterprises, and security teams worldwide.

Among the standout presentations was a session led by Mr. Ashish Tiwari, diving deep into one of our flagship innovations – aiXDR-PMax. Focused on performance, control, and visibility, the session introduced participants to the powerful upgrades in our EDR and EPP layers and gave a glimpse into what’s coming next.

Click here to view complete session on aiXDR-Pmax by Mr. Ashish Tiwari.

The Why Behind aiXDR-Pmax

Modern attacks are no longer straightforward – they’re stealthy, persistent, and often dwell silently inside networks for weeks or months. Endpoints, often considered the weakest links, are prime targets.

While many organizations rely on standard EDR tools, these often fall short due to resource-heavy agents, siloed visibility, or a lack of intelligent automation. That’s where aiXDR-PMax enters the picture – not just as another endpoint solution, but as a platform built for today’s SOC needs with AI-driven detection, ultra-lightweight architecture, and full-stack telemetry correlation.

Lighter, Smarter, Faster: aiXDR-PMax’s Core Design

One of the standout talking points in the session was how aiXDR-PMax balances powerful features with a featherlight footprint. It’s built from the ground up to be:

• OS-agnostic: Runs seamlessly on Windows and Linux, with macOS support currently in development
• Efficient: Consumes less than 3% CPU and minimal memory (initially ~600MB during setup, quickly optimizing to <100MB RAM after runtime)
• Lightweight: Requires less than 750MB disk space
• Scalable: Deployable across enterprise or MSP environments without affecting endpoint performance

This technical foundation allows security teams to deploy robust protection without compromising user experience or device speed – a common challenge in traditional EDR deployments.

Behind this efficiency lies an impressive threat intelligence foundation: over 12 million known signatures, 1 million exploit signatures, and 500,000 byte code signatures – providing comprehensive coverage against both known and emerging threats.

EDR Capabilities: From Detection to Immediate Action

What makes aiXDR-PMax more than a lightweight agent is its smart detection and contextual awareness. Some of the new features highlighted include:

• Lateral Movement Detection (Linux)

By tracking unauthorized host enumeration and port scanning, the system can identify early signs of attackers attempting to spread laterally within the network. This is a major boost for cloud-native and Linux-heavy environments, which are often under-monitored in traditional EDR setups.

• Pen Test & RMM Tool Detection

Ashish showcased the system’s improved ability to detect the use of legitimate tools for malicious purposes – a common tactic in living-off-the-land (LotL) attacks. The ability to spot this kind of behaviour quickly helps security teams act before damage is done.

• Full App and Extension Inventory

With granular insight into all applications, services, and drivers – plus browser extensions – running on Linux and Mac endpoints, aiXDR-PMax enhances control and audit readiness across the board.

• Vulnerability Assessment + Compliance Alignment

Ashish also walked us through the daily vulnerability scanning functionality, which includes endpoint apps, drivers, and extensions. These scans are mapped to compliance frameworks like HIPAA, PCI-DSS, and ISO 27001, offering both protection and peace of mind.

• Tamper Proofing: Always-On Protection

A critical capability that ensures the aiXDR-PMax agent cannot be disabled, bypassed, or modified by unauthorized users or malicious software. This tamper-resistant architecture guarantees that endpoint protection remains operational even under attack, while satisfying stringent regulatory requirements across HIPAA, PCI-DSS, and ISO 27001 frameworks.

• Remote Endpoint Actions

Admins can now reboot, shut down, or upgrade Linux endpoints directly through the UI -speeding up remediation and operational efficiency.

EPP That’s End-User Conscious

Security doesn’t end at detection – it has to communicate, respond, and empower.

Ashish introduced the session’s second segment by covering how aiXDR-PMax’s Endpoint Protection Platform (EPP) features provide clarity and control at the user level, without overwhelming them.

Highlights included:

• Real-Time User Alerts: When the agent detects or blocks suspicious activity, end-users receive a clear and timely notification – keeping them informed without confusion.
• Dedicated Desktop Interface: Offers endpoint-level visibility into logs, threats, web filtering status, and database sync. This transparency is especially valuable for IT admins managing remote users or distributed environments.
• Custom PII/PHI Discovery: Attendees were particularly impressed by the capability to detect sensitive data like Aadhar numbers, ZATCA tax IDs, and more, helping organizations maintain compliance in multiple regulatory regions.
• Advanced Whitelisting and File Management: Instead of using command-line interfaces or custom scripts, files can be reviewed and restored from quarantine through an intuitive interface. The system supports comprehensive whitelisting based on hash, application path, process, and file signatures, giving administrators granular control over what can execute in their environment.
• Web Filtering by Category: With customizable allow/block lists and real-time monitoring, organizations can block phishing, malware sites, gambling, or social media platforms – supporting both security and productivity.

Sneak Peek: What’s Coming Next

The session wrapped up with a forward-looking view. Ashish shared upcoming features that reflect Seceon’s vision to offer deeper context, real-time observability, and zero trust enforcement:

• Endpoint Observability: Live telemetry on process activity, user behavior, file changes, and network access – all from a single pane of glass.
• User Activity Monitoring: Detect mouse/keyboard inactivity to trigger session timeouts or security actions.
• Advanced Threat Prevention
  • Blacklist Management: Proactively block known malicious processes, files, paths, hashes, and domains across the entire environment
  • Known Breached Port Detection: Alerts when lateral movement is attempted via commonly exploited ports like SSH (22), RDP (3389), or FTP (21)
• HDMI/DisplayPort Blocking: Prevent visual exfiltration or screen sharing via physical ports—a critical control in sensitive environments.
• UI-Based Agent Upgrade Scheduling: Plan and execute updates during non-disruptive hours via a modern, easy-to-use scheduler.

A Modular Way to Strengthen XDR

Not every organization wants to rip and replace their existing stack. That’s why Seceon introduced Custom XDR Enhancement Packages, which were also discussed in the session.

Whether you’re missing File Integrity Monitoring, Device Control, Web Filtering, or App Scanning, you can now add these modular capabilities to your existing security strategy.

Three flexible packages were outlined in the session:

• Basic: FIM + Device Control
• Advanced: Adds Device Scanning + Web Filtering
• Premium: All features included, plus onboarding support, 24/7 threat intelligence feeds, and integration assistance

Each package is designed to integrate seamlessly with existing XDR platforms, providing organizations with the flexibility to enhance their current security posture without wholesale infrastructure changes.

Final Thoughts

What made this session resonate was not just the feature list but the clarity with which he connected Seceon’s roadmap to real-world challenges faced by SOC teams, CISOs, and MSPs today.

The Q2 Innovation Days reminded us that cybersecurity isn’t just about blocking threats. It’s about giving defenders the tools they need to work faster, see deeper, and act with confidence.

aiXDR-PMax continues to evolve as the central pillar of Seceon’s unified, AI-driven cybersecurity platform and this session made it clear that the best is yet to come.