Sangfor Endpoint Secure Achieves 100% Ransomware Protection

Sangfor is excited to announce that Sangfor Endpoint Secure achieved 100% ransomware protection in the Advanced Threat Detection Test conducted by AV-Test, one of the world's leading independent test institutes for IT security products.

In the Advanced Threat Detection Test, Sangfor Endpoint Secure scored a maximum of 40 points and was awarded the “Advanced Approved Endpoint Protection” certificate. The latest AV-Test certification follows on from the AV-Test “TOP PRODUCT” award received in recognition of Endpoint Secure’s 100% protection against hundreds of 0-day attacks and thousands of newly-discovered malware. 

RaaS Heightens the Urgency for Ransomware Protection

The Advanced Threat Detection Test report by AV-Test notes that Ransomware-as-a-Service (RaaS) is gaining traction, a trend also reported in Sangfor’s Global Ransomware Trends Report. RaaS is essentially a ransomware-for-hire model that allows non-specialists to take part in ransomware attacks. Sangfor has data proving this criminal business model has contributed to an increase in recent ransomware attacks and likely more in the future. It is imperative for organizations to adopt robust ransomware protection to safeguard their business. 

The Advanced Threat Detection Test from AV-Test provides organizations with objective and authoritative research into the effectiveness of ransomware protection software on the market. 

Advanced Threat Detection Test by AV-Test

The Test

The Advanced Threat Detection Test evaluated 34 endpoint security products from market-leading vendors, including Microsoft, McAfee, Trend Micro, and Sangfor. The 34 products were further divided into 17 consumer solutions and 17 corporate solutions.

The Test Scenarios

Each security product was tested against 10 realistic ransomware attack scenarios on Windows operating systems. One attack involves a spear phishing email with a zip attachment that contains an executable file. The file launches immediately upon unzipping, and the ransomware starts to encrypt the system using a series of steps called a kill chain. AV-Test mapped each kill chain step of the ransomware attacks to the MITRE ATT&CK Framework (see Figure 1 for an example). 

Figure 1. Ransomware Scenario 01 in the Advanced Threat Detection Test, Courtesy of AV-Test

Figure 1. Ransomware Scenario 01 in the Advanced Threat Detection Test, Courtesy of AV-Test

The Scoring Criteria

According to AV-Test, an attack is considered thwarted if the security product detects and stops ransomware in one of the first two steps (Initial Access or Execution). Four points are awarded for complete ransomware detection and defense, meaning a maximum of 40 points for 10 scenarios. Points are deducted for non-detection, partial detection (ransomware manages to encrypt files), or if the ransomware threat remains on the system.

AV-Test color-coded the attack steps to help readers quickly evaluate the performance of security products in each scenario (see Figures 2-3 for examples):

  • Green (detected and attack stopped)
  • Yellow (detected but not completely blocked)
  • Orange (no detection)

Figure 2. Sangfor Endpoint Secure’s performance in Scenarios 01-06

Figure 2. Sangfor Endpoint Secure’s performance in Scenarios 01-06

Figure 3. Sangfor Endpoint Secure’s performance in Scenarios 07-10

Figure 3. Sangfor Endpoint Secure’s performance in Scenarios 07-10

The Test Results

Out of the 17 consumer solutions, 12 products were awarded the maximum 40 points. 

Out of the 17 corporate solutions, 12 products were awarded the maximum 40 points, including Sangfor Endpoint Secure, proving that Sangfor Endpoint Secure is one of the best ransomware protection solutions on the market

To learn more about the Advanced Threat Detection Test, visit the official AV-Test website to read the test report in its entirety.

Ransomware Protection with Sangfor Solutions

Sangfor Endpoint Secure is a powerful Endpoint Detection and Response (EDR) solution that goes beyond traditional anti-malware and antivirus software. Sangfor Endpoint Secure leverages Sangfor’s proprietary Engine Zero AI malware detection engine and Neural-X threat intelligence platform to deliver unrivaled malware protection for endpoints. 

Sangfor Endpoint Secure is built with innovative anti-ransomware tools, including the world’s first and only endpoint ransomware honeypot, which quickly detects and kills the ransomware encryption process, minimizing any damage to the system. The encryption controlling application is also identified and then located on other infected systems allowing “One-Click Kill” to eradicate the detected ransomware throughout the organization with just a single mouse click.

Sangfor NGAF - Next Generation Firewall (NGFW), Sangfor IAG, Sangfor Cyber Command, and Sangfor Endpoint Secure integrate together as part of  Sangfor’s Anti-Ransomware solution. With security deployed at the perimeter, endpoint, and network, Sangfor’s Anti-Ransomware is a holistic solution that breaks every step of the ransomware kill chain. Sangfor Anti-Ransomware is a modular solution that can be tailored to meet the ransomware protection requirements of any organization. 

Visit the Sangfor Anti-Ransomware webpage to find out how Sangfor keeps customers safe from ransomware infection.

To learn more about ransomware attacks and how they work, read our glossary article that gives you a good overview of ransomware attacks.

Figure 4. Sangfor Anti-Ransomware Solution ransomware protection

Figure 4. Sangfor Anti-Ransomware Solution

About Sangfor Technologies

Sangfor Technologies is an APAC-based, leading global vendor specializing in Cyber SecurityCloud Computing, and IT Infrastructure. Founded in 2000 and publicly listed since 2018 (STOCK CODE: 300454.SZ), Sangfor employs 9,500 employees, operates 60 offices, and serves more than 100,000 customers worldwide, many of them Fortune Global 500 companies, governmental institutions, universities, and schools. Visit us at to learn more about Sangfor’s solutions and let Sangfor make Your Digital Transformation Simpler and Secure.


Contact Us for Business Inquiry

Listen To This Post


Get in Touch

Get in Touch with Sangfor Team for Business Inquiry

Related Articles

Press Release

Sangfor Announces the Only Solution Available that Kills Ransomware in 3 Seconds

Date : 04 Dec 2023
Read Now

Press Release

Sangfor Recognized in the Frost & Sullivan Frost Radar™ for SASE, 2023

Date : 28 Nov 2023
Read Now


Sangfor Technologies and Newborn Screening Reference Center Sign Business Agreement at the Third Belt and Road Forum for International Cooperation

Date : 27 Oct 2023
Read Now

See Other Product

Best Darktrace Cyber Security Competitors and Alternatives in 2023
Cyber Command - NDR Platform
Endpoint Secure
Internet Access Gateway (IAG)
Sangfor Network Secure - Next Generation Firewall