Security Blades
Pemvosec uses a modular "blade" architecture where each security capability is a self-contained, pluggable module. Enable only what you need and scale as you grow.
Blade Architecture
Each blade is a fully independent security module with its own configuration, rules, and APIs.
Antivirus (AV)
Next-generation antivirus with real-time threat detection and malware prevention.
Capabilities
- Signature-based detection with daily updates
- Heuristic and behavioral analysis
- YARA rule scanning for custom signatures
- Cloud reputation lookup
- Automated quarantine and cleanup
- Policy-based protection profiles
Configuration
- -Enable/disable real-time scanning
- -Configure scan schedules (quick, full, custom)
- -Define exclusion paths and file types
- -Set quarantine retention period
- -Configure cloud lookup settings
EDR
Endpoint Detection & Response with behavioral analysis and threat hunting.
Capabilities
- Real-time behavioral analysis
- Process tree visualization
- Threat hunting tools and queries
- Incident response playbooks
- Forensic data collection
- IOC (Indicator of Compromise) matching
Configuration
- -Define detection sensitivity levels
- -Configure alert thresholds
- -Set up automated response actions
- -Enable memory scanning
- -Configure telemetry collection depth
Mail Security
Advanced email protection against phishing, spam, and business email compromise.
Capabilities
- Anti-phishing with URL reputation
- Spam filtering with ML models
- Malware attachment scanning
- Business Email Compromise (BEC) detection
- Email encryption (TLS/S-MIME)
- DMARC/DKIM/SPF validation
Configuration
- -Set spam sensitivity threshold
- -Configure quarantine policies
- -Define trusted senders list
- -Enable attachment sandboxing
- -Set up encryption policies
Web Gateway
Secure web gateway with URL filtering and SSL inspection.
Capabilities
- URL category filtering
- SSL/TLS inspection
- Malware and threat protection
- Bandwidth control and QoS
- Data loss prevention (DLP)
- Cloud app visibility and control
Configuration
- -Define URL filtering policies
- -Configure SSL inspection certificates
- -Set bandwidth limits per category
- -Enable safe search enforcement
- -Configure bypass rules
DNS Security
DNS-layer security with threat blocking and content filtering.
Capabilities
- DNS-based threat blocking
- Content category filtering
- Malware and phishing protection
- Analytics and reporting
- Roaming client support
- Custom block/allow lists
Configuration
- -Configure DNS resolver settings
- -Select content categories to block
- -Define custom lists
- -Enable roaming protection
- -Set up logging and analytics
Accessing Blades
Subscription-Based Access
Blades are automatically available based on your subscription tier and purchased seats. No manual enabling required.
- Essentials: AV, EDR, Mail Security, Web Gateway, DNS Security
- Complete: All Essentials + ENP, ZTNA, VA, MDM, Encryption
- Enterprise: All Complete + ASPM, DLP, IAM, SAT, Backup, Compliance
Configuring a Blade
- Access the blade from the main navigation
- Click the Settings icon within the blade
- Adjust configuration options as needed
- Changes take effect immediately
Adding Seats
- Navigate to Settings > Subscription
- Click "Manage Subscription" to access the billing portal
- Increase seat count as needed
- New seats are available immediately after payment
Blade APIs
Each blade exposes its own API endpoints under the /api/v1/{blade} namespace. See the API Reference for complete documentation.