Cloud-Delivered Application Whitelisting With Default-Deny Endpoint Control

Avnos is an endpoint protection and management company headquartered in Singapore, co-founded by Ivan Goh, Liad David, and Dvir Atias, with Goh as chief executive. It sells a cloud-delivered platform to organisations that want application control enforced consistently on devices whether those devices sit in an office, a data centre, or on a remote worker's desk. Its backing has come from a small group of angel investors and the LORCA cyber accelerator.

The platform is built as a decentralised software-defined firewall: policy is authored centrally in the cloud and enforced on the device itself, so protection travels with the endpoint instead of depending on network location. Enforcement follows a true whitelisting model applied to users, applications, and connections with a default-deny posture, meaning anything not explicitly permitted neither executes nor connects. That model backs the real-time anti-ransomware claim, since unknown binaries never get to run.

An AI-driven engine automates workload discovery and mapping across on-premise, off-premise, hybrid, and cloud data centre environments, which is the practical prerequisite for whitelisting at scale: the allow list has to be built from what actually runs. Administrators get visibility into endpoint status, application status, users, and locations, and apply policy at a granular level. The approach places Avnos closer to zero trust network access than to signature-based endpoint tooling.