Detection and monitoring EU-developed
Tehtris EDR
Endpoint detection and response product that monitors execution and privilege activity, investigates suspicious behavior, and can block processes or isolate hosts.
By Tehtris · France
The record identifies an EU developer or development origin. The origin note explains the evidence; current ownership and hosting are recorded separately where established.
At a glance
Recorded facts- Response workflow
- Detection and monitoring
- Developer or maintainer
- Tehtris
- Recorded country
- France
- Product model
- Commercial
- Deployment
- SaaS
- Software license
- Proprietary
- Upstream status
- Active
- Evidence class
- EU-developed
What the sources establish
Origin noteTehtris identifies itself as a French company and says its EDR is designed, developed and operated in Europe.
Reported capabilities
- Endpoint agent monitors workstations and servers for suspicious activity.
- Console supports fleet search, alert triage and configurable response.
- Can stop processes or isolate hosts according to policy.
Scope and limits
Current site promotes Tehtris EDR; older XDR AI Platform pages are stale or unavailable. The public product page describes managed European OVHcloud hosting; self-hosted deployment was not reverified.
Inspect the research evidence 5 source observations
identity / capabilities / deployment
Current product page describes commercial Tehtris EDR, agent telemetry, investigation console, stopping processes and isolating hosts; it describes OVHcloud hosting and an optional SecNumCloud configuration.
Read sourceorigin
Tehtris says its EDR is designed, developed and operated in Europe and discusses its French cybersecurity company history.
Read sourcecountry
Official contact page labels its Paris address as the French headquarters.
Read sourcelicense / deployment
TEHTRIS's linked XDR Platform terms grant a limited non-transferable SaaS use right, retain exclusive vendor ownership of service software, and explicitly list EDR, EPP and SIEM in the service scope.
Read sourcemaintenance
Current 2026 site actively offers Tehtris EDR, with current platform specifications and sales contact.
Read source
This profile summarizes source material. It does not include hands-on security testing, procurement review, or an assessment of fit for your environment.
Capabilities & integrations
Tags record specific documented functions. They do not establish end-to-end interoperability; check the component, edition and version in the source.
No structured capability or integration evidence has been added for this tool in the current pass. This does not establish that a feature is unsupported. Send a documentation link.
Put the tool in context.
Check telemetry, field mappings, conversion and alert handling before deploying a Sigma rule. A practical detection workflow for CSIRTs and SOC teams.
From Sigma rule to a tested detection