1<!DOCTYPE html> 2<html lang="en"> 3<head> 4 <meta charset="UTF-8"> 5 <meta name="viewport" content="width=device-width, initial-scale=1.0"> 6 <title>How PREVENT Works | BAS + NDR + Asset Lifecycle in One Agent | Beacon Technology Group</title> 7 <meta name="description" content="One lightweight agent delivers Breach & Attack Simulation, Network Detection & Response, and Asset Lifecycle Management. No appliances, no TAPs, works everywhere your endpoints go."> 8 <meta name="robots" content="index, follow"> 9 <link rel="canonical" href="https://prevent.gobeacon.ai/static/how-it-works.html"> 10 <meta property="og:type" content="website"> 11 <meta property="og:url" content="https://prevent.gobeacon.ai/static/how-it-works.html"> 12 <meta property="og:title" content="How PREVENT Works | One Agent. BAS + NDR + ALM."> 13 <meta property="og:description" content="One lightweight agent delivers BAS, NDR, and Asset Lifecycle Management. No appliances, no TAPs, works everywhere."> 14 <meta property="og:image" content="https://prevent.gobeacon.ai/images/sparkle_ethernet.png"> 15 <meta property="og:site_name" content="PREVENT by Beacon Technology Group"> 16 <meta name="twitter:card" content="summary_large_image"> 17 <link rel="icon" href="/favicon.ico" sizes="32x32"> 18 <link rel="icon" href="/favicon.svg" type="image/svg+xml"> 19 <meta name="theme-color" content="#ff0095"> 20 <link rel="preconnect" href="https://fonts.googleapis.com"> 21 <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin> 22 <link href="https://fonts.googleapis.com/css2?family=DM+Sans:wght@400;500;600;700&display=swap" rel="stylesheet"> 23 <link rel="stylesheet" href="/static/prevent.css"> 24</head> 25<body><a href="https://prevent.gobeacon.ai/cdn-cgi/content?id=UDFDBqH9A5YtP.6__fNcMgHtimWNEXLxhVfnS2yAm3Q-1791210043.6492467-1.2.1.1-Z8LkDkVBqJA7YmRtf4XGk.WeKvptXRUqMtfxCVD_h5cTgDg.RyExRH6MQ1DoG8cH" aria-hidden="true" rel="nofollow noopener" style="display: none !important; visibility: hidden !important"></a> 26 27<!-- NAV --> 28<nav class="nav"> 29 <div class="nav-inner"> 30 <a href="/" class="nav-logo"><img src="/images/beacon_white.png" alt="Beacon Technology Group"></a> 31 <div class="nav-links"> 32 <a href="/" class="nav-link">Overview</a> 33 <a href="/static/how-it-works.html" class="nav-link active">How It Works</a> 34 <a href="/static/partners.html" class="nav-link">For MSSPs</a> 35 <a href="/static/contact.html" class="nav-cta">Request Demo</a> 36 <a href="/login" class="nav-signin">Sign In</a> 37 </div> 38 <button class="nav-toggle" onclick="document.getElementById('mobile-nav').classList.toggle('open')" aria-label="Toggle menu"> 39 <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M3 12h18M3 6h18M3 18h18"/></svg> 40 </button> 41 </div> 42 <div class="nav-mobile" id="mobile-nav"> 43 <a href="/" class="nav-link">Overview</a> 44 <a href="/static/how-it-works.html" class="nav-link active">How It Works</a> 45 <a href="/static/partners.html" class="nav-link">For MSSPs</a> 46 <a href="/static/contact.html" class="nav-cta" style="text-align:center">Request Demo</a> 47 <a href="/login" class="nav-signin" style="text-align:center">Sign In</a> 48 </div> 49</nav> 50 51<!-- HERO --> 52<section class="hero-inner text-center"> 53 <div class="container"> 54 <h1>How PREVENT Works</h1> 55 <p style="margin:0 auto">One lightweight agent delivers BAS, NDR, and Asset Lifecycle Management. No appliances. No TAPs. Works everywhere your endpoints go.</p> 56 </div> 57</section> 58 59<!-- ONE AGENT ARCHITECTURE --> 60<section class="section"> 61 <div class="container"> 62 <div class="grid-2" style="gap:3rem"> 63 <div> 64 <div style="display:flex;align-items:center;gap:0.5rem;color:var(--purple-bright);margin-bottom:1rem"> 65 <svg class="icon-md" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><rect x="4" y="4" width="16" height="16" rx="2"/><path d="M9 9h6M9 13h6M9 17h6"/></svg> 66 <span style="font-weight:500">Architecture</span> 67 </div> 68 <h2 style="font-size:clamp(1.5rem,3vw,2rem);margin-bottom:1.5rem">One Agent. Everywhere.</h2> 69 <p style="margin-bottom:1.5rem">The PREVENT agent installs in minutes and runs silently alongside your existing security stack. No kernel drivers. No reboots. No conflicts with EDR.</p> 70 <div> 71 <div class="arch-feat"><div class="arch-icon">
71<svg class="icon-md" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z"/></svg></div><p>Single, lightweight agent (~15MB footprint)</p></div> 72 <div class="arch-feat"><div class="arch-icon"><svg class="icon-md" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M5 12.55a11 11 0 0114.08 0M1.42 9a16 16 0 0121.16 0M8.53 16.11a6 6 0 016.95 0M12 20h.01"/></svg></div><p>Works on-network, off-network, anywhere</p></div> 73 <div class="arch-feat"><div class="arch-icon"><svg class="icon-md" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M22 12h-4l-3 9L9 3l-3 9H2"/></svg></div><p>No SPAN ports, TAPs, or packet brokers</p></div> 74 <div class="arch-feat"><div class="arch-icon"><svg class="icon-md" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><ellipse cx="12" cy="5" rx="9" ry="3"/><path d="M21 12c0 1.66-4 3-9 3s-9-1.34-9-3"/><path d="M3 5v14c0 1.66 4 3 9 3s9-1.34 9-3V5"/></svg></div><p>Sends only findings, not raw data (70-80% bandwidth reduction)</p></div> 75 </div> 76 </div> 77 <div class="img-wrap"> 78 <img src="/images/sparkle_ethernet.png" alt="PREVENT Network Architecture" loading="lazy"> 79 </div> 80 </div> 81 </div> 82</section> 83 84<!-- BAS DEEP DIVE --> 85<section class="section section-plum"> 86 <div class="container"> 87 <div style="display:flex;align-items:center;gap:0.75rem;margin-bottom:2rem"> 88 <img src="/images/number-1.png" alt="" style="width:2.5rem;height:2.5rem"> 89 <h2 style="font-size:clamp(1.5rem,3vw,2rem)">BAS: Continuous Validation</h2> 90 </div> 91 <div class="grid-3 mb-12"> 92 <div class="card card-sm"> 93 <img src="/images/mfa-check.png" alt="" style="width:3rem;height:3rem;margin-bottom:1rem"> 94 <h3 style="font-size:1.25rem;margin-bottom:0.75rem">60 Controls</h3> 95 <p style="font-size:0.875rem;color:var(--text-gray-400)">Built from real IR artifacts. Credential theft, lateral movement, defense evasion â techniques attackers actually use.</p> 96 </div> 97 <div class="card card-sm"> 98 <svg style="width:3rem;height:3rem;color:var(--purple-bright);margin-bottom:1rem" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z"/></svg> 99 <h3 style="font-size:1.25rem;margin-bottom:0.75rem">MITRE Mapped</h3> 100 <p style="font-size:0.875rem;color:var(--text-gray-400)">Every control maps to ATT&CK tactics. See coverage gaps through the attacker's lens, not the auditor's.</p> 101 </div> 102 <div class="card card-sm"> 103 <svg style="width:3rem;height:3rem;color:var(--purple-bright);margin-bottom:1rem" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M23 4v6h-6M1 20v-6h6"/><path d="M3.51 9a9 9 0 0114.85-3.36L23 10M1 14l4.64 4.36A9 9 0 0020.49 15"/></svg> 104 <h3 style="font-size:1.25rem;margin-bottom:0.75rem">Auto-Remediation</h3> 105 <p style="font-size:0.875rem;color:var(--text-gray-400)">Control fails? PREVENT can enforce the fix automatically. From hours of exposure to seconds of response.</p> 106 </div> 107 </div> 108 <div class="card"> 109 <h3 style="font-size:1.25rem;margin-bottom:1.5rem">Control Categories</h3> 110 <div class="grid-3"> 111 <div class="ctrl-cat"><h4>Credential Access</h4><p>LSASS protection, WDigest hardening, Kerberoasting prevention, MFA gaps</p></div> 112 <div class="ctrl-cat"><h4>Initial Access & Execution</h4><p>Macro controls, PowerShell policy, remote access validation</p></div> 113 <div class="ctrl-cat"><h4>Lateral Movement</h4><p>SMB signing, admin share exposure, RDP/WinRM hardening</p></div> 114 </div> 115 </div> 116 </div> 117</section> 118 119<!-- NDR DEEP DIVE --> 120<section class="section"> 121 <div class="container"> 122 <div style="display:flex;align-items:center;gap:0.75rem;margin-bottom:2rem"> 123 <img src="/images/number-2.png" alt="" style="width:2.5rem;height:2.5rem"> 124 <h2 style="font-size:clamp(1.5rem,3vw,2rem)">NDR: Real-Time, Endpoint-Native</h2> 125 </div> 126 <div class="grid-2" style="gap:3rem;align-items:start"> 127 <div> 128 <p style="margin-bottom:2rem">Traditional NDR requires SPAN ports, TAPs, and cloud bandwidth. PREVENT uses Windows ETW (Event Tracing for Windows) â the same telemetry source Microsoft Defender relies on â to see everything at the endpoint level.</p> 129 <h3 style="font-size:1.25rem;margin-bottom:1rem">The Agent Sees:</h3> 130 <ul class="check-list mb-8"> 131 <li class="check-item">
131<svg class="check-icon" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M20 6L9 17l-5-5"/></svg> Every DNS query the endpoint makes</li> 132 <li class="check-item"><svg class="check-icon" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M20 6L9 17l-5-5"/></svg> Every outbound connection initiated</li> 133 <li class="check-item"><svg class="check-icon" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M20 6L9 17l-5-5"/></svg> Connection metadata: dest IP, port, protocol, timing</li> 134 <li class="check-item"><svg class="check-icon" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M20 6L9 17l-5-5"/></svg> Process context: what app opened the socket</li> 135 </ul> 136 <h3 style="font-size:1.25rem;margin-bottom:1rem">Detection Logic:</h3> 137 <ul class="check-list"> 138 <li class="check-item"><svg class="check-icon" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M20 6L9 17l-5-5"/></svg> Beaconing pattern detection (C2 intervals)</li> 139 <li class="check-item"><svg class="check-icon" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M20 6L9 17l-5-5"/></svg> Jitter analysis (catches evasion attempts)</li> 140 <li class="check-item"><svg class="check-icon" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M20 6L9 17l-5-5"/></svg> Threat intel correlation in real-time</li> 141 <li class="check-item"><svg class="check-icon" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M20 6L9 17l-5-5"/></svg> Suspicious destination flagging</li> 142 </ul> 143 </div> 144 <div> 145 <div class="toast-mock"> 146 <div class="toast-header"> 147 <svg style="width:1.25rem;height:1.25rem;color:var(--red-400)" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M18 8A6 6 0 006 8c0 7-3 9-3 9h18s-3-2-3-9M13.73 21a2 2 0 01-3.46 0"/></svg> 148 <span>THREAT DETECTED</span> 149 </div> 150 <div class="toast-body"> 151 <p>Suspicious outbound connection detected to unknown destination. Connection blocked.</p> 152 <p class="mono">Process: chrome.exe | Dest: 185.x.x.x:443</p> 153 </div> 154 </div> 155 <div class="card card-sm"> 156 <h4 style="font-size:1.125rem;margin-bottom:1rem">Toast Alerts: The Human in the Loop</h4> 157 <p style="font-size:0.875rem;color:var(--text-gray-400);margin-bottom:1rem">When threats are detected, users see alerts immediately on their desktop. They know something's wrong, stop what they're doing, and call IT before the breach spreads.</p> 158 <p style="font-size:0.875rem;color:var(--purple-bright);font-weight:500">The best IR happens when users know something's wrong.</p> 159 </div> 160 </div> 161 </div> 162 </div> 163</section> 164 165<!-- ASSET LIFECYCLE --> 166<section class="section section-plum"> 167 <div class="container"> 168 <div style="display:flex;align-items:center;gap:0.75rem;margin-bottom:2rem"> 169 <img src="/images/number-3.png" alt="" style="width:2.5rem;height:2.5rem"> 170 <h2 style="font-size:clamp(1.5rem,3vw,2rem)">Asset Lifecycle & Security Scoring</h2> 171 </div> 172 <div class="grid-2" style="gap:3rem;align-items:start"> 173 <div> 174 <p style="margin-bottom:2rem">You can't secure what you can't see. PREVENT delivers continuous asset intelligence â hardware, software, vulnerabilities, and a FICO-style score that everyone understands.</p> 175 <div style="display:grid;grid-template-columns:1fr 1fr;gap:1rem"> 176 <div class="asset-card"><h4>Hardware</h4><ul><li>Make, model, serial</li><li>CPU, RAM, storage</li><li>Network interfaces</li></ul></div> 177 <div class="asset-card"><h4>Software</h4><ul><li>App inventory</li><li>Version tracking</li><li>CVE correlation</li></ul></div> 178 <div class="asset-card"><h4>Configuration</h4><ul><li>Security settings</li><li>Firewall state</li><li>AV/EDR status</li></ul></div> 179 <div class="asset-card"><h4>Location</h4><ul><li>IP (internal/external)</li><li>Network segment</li><li>VPN status</li></ul></div> 180 </div> 181 </div> 182 <div> 183 <div class="card text-center"> 184 <h4 style="font-size:1.125rem;margin-bottom:1.5rem">Security Score: FICO for Endpoints</h4> 185 <div class="score-circle"><span>782</span></div> 186 <div style="max-width:16rem;margin:0 auto"> 187 <div class="score-range"><span class="score-dot" style="background:#22c55e"></span><span style="color:var(--text-gray-300)">750-850</span><span class="label">â Excellent</span></div> 188 <div class="score-range"><span class="score-dot" style="background:#84cc16"></span><span style="color:var(--text-gray-300)">650-749</span><span class="label">â Good</span></div> 189 <div class="score-range"><span class="score-dot" style="background:#eab308"></span><span style="color:var(--text-gray-300)">550-649</span><span class="label">â Fair</span></div> 190 <div class="score-range"><span class="score-dot" style="background:#ef4444"></span><span style="color:var(--text-gray-300)">300-549</span><span class="label">â Poor</span></div> 191 </div> 192 <p style="font-size:0.875rem;color:var(--text-gray-400);margin-top:1.5rem">"This endpoint has a 580. Let's fix it." â That's the conversation.</p> 193 </div> 194 </div> 195 </div> 196 </div> 197</section> 198 199<!-- CONTINUOUS LOOP --> 200<section class="section"> 201 <div class="container text-center"> 202 <h2 style="font-size:clamp(1.5rem,3vw,2rem);margin-bottom:1rem">The Continuous Improvement Loop</h2> 203 <p style="color:var(--text-gray-400);max-width:40rem;margin:0 auto 3rem">Security posture isn't a snapshot â it's a living score that improves with every cycle.</p> 204 <div class="loop-row"> 205 <div class="loop-step"><strong>DISCOVER</strong><small>Asset Inventory</small></div>
206 <span class="loop-arrow">âº</span> 207 <div class="loop-step"><strong>VALIDATE</strong><small>BAS Controls</small></div> 208 <span class="loop-arrow">âº</span> 209 <div class="loop-step"><strong>DETECT</strong><small>NDR Monitoring</small></div> 210 <span class="loop-arrow">âº</span> 211 <div class="loop-step"><strong>REMEDIATE</strong><small>Auto-Fix</small></div> 212 <span class="loop-arrow">âº</span> 213 <div class="loop-step"><strong>SCORE</strong><small>Risk Rating</small></div> 214 <span class="loop-arrow">â»</span> 215 </div> 216 <p style="color:var(--text-gray-400);margin-top:3rem">Not annual. Not quarterly. Always running. Every endpoint, every day.</p> 217 </div> 218</section> 219 220<!-- CTA --> 221<section class="section"> 222 <div class="container" style="max-width:52rem"> 223 <div class="cta-banner" style="background-image:none;background:linear-gradient(135deg,rgba(74,14,78,0.4),rgba(45,10,48,0.4));border:1px solid rgba(139,0,139,0.3)"> 224 <h2>See It In Action</h2> 225 <p>Ready to see how PREVENT validates, detects, and remediates in your environment?</p> 226 <a href="/static/contact.html" class="btn btn-primary">Request Technical Demo <svg class="icon-md" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M9 18l6-6-6-6"/></svg></a> 227 </div> 228 </div> 229</section> 230 231<!-- FOOTER --> 232<footer class="footer"> 233 <div class="footer-inner"> 234 <div class="footer-grid"> 235 <div> 236 <img src="/images/beacon_white.png" alt="Beacon Technology Group" style="height:2rem;width:auto"> 237 <p class="footer-tagline">AI-native cybersecurity platforms that predict and prevent breaches before they happen. Built for MSSPs who demand more than detection.</p> 238 </div> 239 <div> 240 <h4>PREVENT</h4> 241 <div class="footer-links"> 242 <a href="/">Overview</a> 243 <a href="/static/how-it-works.html">How It Works</a> 244 <a href="/static/partners.html">For MSSPs</a> 245 <a href="/static/contact.html">Request Demo</a> 246 </div> 247 </div> 248 <div> 249 <h4>Company</h4> 250 <div class="footer-links"> 251 <a href="/login">Customer Login</a> 252 <a href="/cdn-cgi/l/email-protection#e78e8996928e958e8294a78088858286848889c9868e">Contact Us</a> 253 <a href="https://cyfax.ai" target="_blank" rel="noopener">CYFAX Platform</a> 254 <a href="https://detect.solutions" target="_blank" rel="noopener">Beacon Technology Group</a> 255 </div> 256 </div> 257 </div> 258 <div class="footer-bottom"> 259 <p class="footer-copy">© 2026 Beacon Technology Group. All rights reserved.</p> 260 <p class="footer-version">PREVENT v2.0 | AI-Native Internal Attack Surface Prevention</p> 261 </div> 262 </div> 263</footer>
vendor: 110 bytes, lines 263-265
263 264 265<script data-cfasync="false" src="/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js"></script>
265<script type="module" src="https://static.cloudflareinsights.com/beacon.min.js/v31edd6df95cf4e85bb4c19e7a9bdbcba1788362987495" integrity="sha512-iIg7k2xntmwu6/uSb5tpc/hySgZc4eoL31yB29W6tJFo2akwjPWcEqnCEdJvGexCL0KEQwVYv5BlowfhVz26hg==" data-cf-beacon='{"version":"2024.11.0","token":"fb3ada6f4eaa4c3295f3ad134de8cd2e","spa":2}' crossorigin="anonymous"></script>
vendor: 1 bytes, line 265
265
266<script>(function(){function c(){var b=a.contentDocument||(a.contentWindow&&a.contentWindow.document);if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'a45d1194cb08c8ad',t:'MTc5MTIxMDA0Mw=='};var a=document.createElement('script');a.src='/cdn-cgi/challenge-platform/scripts/jsd/main.js';document.getElementsByTagName('head')[0].appendChild(a);";b.getElementsByTagName('head')[0].appendChild(d)}}if(document.body){var a=document.createElement('iframe');a.height=1;a.width=1;a.style.position='absolute';a.style.top=0;a.style.left=0;a.style.border='none';a.style.visibility='hidden';document.body.appendChild(a);if('loading'!==document.readyState)c();else if(window.addEventListener)document.addEventListener('DOMContentLoaded',c);else{var e=document.onreadystatechange||function(){};document.onreadystatechange=function(b){e(b);'loading'!==document.readyState&&(document.onreadystatechange=e,c())}}}})();</script>
266</body> 267</html>
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.