# Burdoom

*/Startups/Burdoom*

## Startup Overview

This platform is an automated network containment system that stops lateral movement during active breaches. It halts unauthorized access by isolating compromised network segments using ephemeral micro-segmentation. Instead of relying on static defense lines, it dynamically redraws network boundaries around infected assets.

Security operations teams face a critical delay between detecting a threat and manually updating firewall rules. Attackers exploit this gap to move laterally across infrastructure and escalate privileges. This solution removes response latency by autonomously enforcing quarantine boundaries the exact moment an intrusion is verified.

Legacy approaches like CrowdStrike Falcon rely on heavy endpoint software, while orchestration tools like Palo Alto Cortex XSOAR depend on complex playbooks and manual firewall configurations. This platform operates entirely agentless in deployment. It remains fully autonomous in active containment, executing precise network isolation without requiring human intervention or prior endpoint installation.

## Startup Founding Hypothesis

**Approach**: that isolates compromised network segments using ephemeral micro-segmentation
**Competitors**:
- [CrowdStrike Falcon](/Competitors/CrowdStrike_Falcon)
- [Manual Firewall Rules](/Competitors/Manual_Firewall_Rules)
- [Palo Alto Cortex XSOAR](/Competitors/Palo_Alto_Cortex_XSOAR)
**Differentiator2x2**: agentless in deployment and fully autonomous in active containment

## Startup Solution Coordinate

**Solution**: [Autonomous Containment Fabric](/Software/Autonomous_Containment_Fabric)

## Startup Position2x2

```mermaid
quadrantChart
title Deployment vs Containment Autonomy
x-axis Agent-Heavy --> Agentless
y-axis Manual Execution --> Fully Autonomous
quadrant-1 Zero-Touch Network Isolation
quadrant-2 Agent-Based Autonomous
quadrant-3 Manual Endpoint Intervention
quadrant-4 Manual Network Config
Burdoom: [0.85, 0.85]
CrowdStrike Falcon: [0.20, 0.85]
Palo Alto Cortex XSOAR: [0.75, 0.45]
Manual Firewall Rules: [0.90, 0.15]
```

## Startup Customer Journey

```mermaid
flowchart LR; A[Cloud Marketplace Catalog] --> B[Passive Dependency Scanner]; B --> C[Lateral Movement Map]; C --> D[Ephemeral Isolation Policy]; D --> E[Enterprise VPC Micro-segmentation]; E --> F[Hardware Firewall Integration]; F --> G[Automated Incident Rollback];
```

## Startup Proof Points

_Illustrative — target and order-of-magnitude estimate figures, not an achieved track record (this Thing is concept-stage)._

**Pilot Goals**:
- Target 30-Day Enterprise Pilot: Deploy in a single corporate office network (up to 2,000 IPs), complete the 14-day passive dependency mapping, and successfully contain three scheduled red-team lateral movement simulations without disrupting adjacent business operations.
- Target 60-Day Cloud Architecture Pilot: Integrate Burdoom across multiple active cloud VPCs and existing hypervisor APIs to demonstrate dynamic topology mapping during rapid infrastructure changes, capturing 100% of newly spun-up instances in the isolation boundary.
**Target Metrics**:
- Target: Under 30 seconds from initial SIEM critical alert to enforced network micro-segmentation rule deployment.
- Aim: 0 orphaned firewall or switch rules remaining within 5 minutes of incident ticket resolution in the SIEM.
- Target: 100% active dependency mapping for unmanaged IoT and legacy devices achieved without installing endpoint agents.
- Aim: Zero false-positive production traffic drops during the transition from the 14-day passive mapping phase to active enforcement.
**Target Case Studies**:
- Target: Mid-market manufacturing firm with unmanaged industrial IoT networks. Goal: Demonstrate isolation of a simulated compromised factory floor sensor at the switch level within 30 seconds, preventing lateral movement to corporate IT networks.
- Target: Regional healthcare network relying on legacy diagnostic servers incompatible with endpoint agents. Goal: Validate the 14-day passive dependency mapping phase accurately whitelists legitimate traffic while autonomously quarantining simulated ransomware via automated VPC segmentation.
- Target: Cloud-native financial services firm with high-churn VPCs. Goal: Prove zero orphaned firewall rules over a 60-day period by verifying automatic rollback of temporary isolation rules immediately upon SIEM ticket resolution.
**Testimonial Targets**:
- Target Role: Chief Information Security Officer (CISO) at a mid-sized enterprise. Target Sentiment: Validation that network-level containment halts lateral movement originating from endpoints where traditional EDR agents were bypassed or disabled.
- Target Role: Lead Network Architect. Target Sentiment: Strong endorsement of the automatic rule rollback feature, specifically emphasizing that ephemeral containment does not leave permanent, state-cluttering rules on core routers.
- Target Role: Security Operations Center (SOC) Manager. Target Sentiment: Confidence that the 14-day passive mapping phase accurately identifies core infrastructure paths, allowing autonomous isolation without the fear of breaking legitimate production dependencies.

## Startup Top Risks

**Risks**:
- Severity: existential · Description: Autonomous containment triggers a false positive that isolates critical production servers, causing catastrophic client downtime. · Mitigation Status: in-progress
- Severity: high · Description: Major cloud providers restrict the native networking APIs required for agentless deployment. · Mitigation Status: unmitigated
- Severity: high · Description: Enterprise security teams reject fully autonomous containment in favor of human-in-the-loop approval gates. · Mitigation Status: unmitigated
- Severity: moderate · Description: Palo Alto or CrowdStrike bundle automated micro-segmentation into their existing installed platforms. · Mitigation Status: in-progress

## Startup Competitors

- [CrowdStrike Falcon](/Competitors/CrowdStrike_Falcon) — Endpoint Security
- [Manual Firewall Rules](/Competitors/Manual_Firewall_Rules) — Status Quo
- [Palo Alto Cortex XSOAR](/Competitors/Palo_Alto_Cortex_XSOAR) — SOAR Platform
- [Illumio Core](/Competitors/Illumio_Core) — Agent-Based Segmenter
- [Akamai Guardicore](/Competitors/Akamai_Guardicore) — Incumbent Segmenter

## Startup Token Bindings

**Vocab Fingerprint**: 731b5fab4fbaf49a

## Neighborhood

### Candidate solutions

- [Source Heavy Plate Welders](/Problems/Source_Heavy_Plate_Welders) — candidate solution for · Problems

### What it offers

- [Autonomous Containment Fabric](/Software/Autonomous_Containment_Fabric) — offers · Software
- [Weld Gauge Agent](/Agents/Weld_Gauge_Agent) — offers · Agents
- [Weld Code Agent](/Agents/Weld_Code_Agent) — offers · Agents

### Composed of

- [Structural Code Verification Worker](/Agents/Structural_Code_Verification_Worker) — composes · Agents
- [Heavy Plate Sourcing Service](/Services/Heavy_Plate_Sourcing_Service) — composes · Services
- [Bead Profile Analysis Agent](/Agents/Bead_Profile_Analysis_Agent) — composes · Agents
- [Torch Angle Telemetry API](/Software/Torch_Angle_Telemetry_API) — composes · Software
- [Weld Vision Extraction SDK](/Software/Weld_Vision_Extraction_SDK) — composes · Software
- [Joint Geometry API](/Software/Joint_Geometry_API) — composes · Software
- [Plate Pre-Screening Service](/Services/Plate_Pre-Screening_Service) — composes · Services
- [Torch Kinematics Engine](/Software/Torch_Kinematics_Engine) — composes · Software
- [Bead Profile Agent](/Agents/Bead_Profile_Agent) — composes · Agents
- [Code Compliance Worker](/Agents/Code_Compliance_Worker) — composes · Agents
- [Network Segmentation Engine](/Agents/Network_Segmentation_Engine) — composes · Agents
- [Network Fabric API](/Agents/Network_Fabric_API) — composes · Agents
- [Autonomous Containment Worker](/Agents/Autonomous_Containment_Worker) — composes · Agents
- [Ephemeral Segmentation Service](/Services/Ephemeral_Segmentation_Service) — composes · Services

### Embodies

- [Agent](/Theses/Agent) — embodies · Theses
- [Software](/Theses/Software) — embodies · Theses

### Who it serves

- [Bulk Material Handling & Conveyance OEMs](/CompanyTypes/Bulk_Material_Handling_&_Conveyance_OEMs) — serves · CompanyTypes
- [bedding plant mass producers teams](/CompanyTypes/bedding_plant_mass_producers_teams) — serves · CompanyTypes

### What it addresses

- [paying detention fees on loads that sat at the dock](/Problems/paying_detention_fees_on_loads_that_sat_at_the_dock) — addresses · Problems

### Competitors

- [LinkedIn Recruiter](/Competitors/LinkedIn_Recruiter) — competes with · Competitors
- [Indeed Sponsored Jobs](/Competitors/Indeed_Sponsored_Jobs) — competes with · Competitors
- [Onsite Coupon Tests](/Competitors/Onsite_Coupon_Tests) — competes with · Competitors
- [Aerotek](/Competitors/Aerotek) — competes with · Competitors
- [Workday Recruiting](/Competitors/Workday_Recruiting) — competes with · Competitors
- [Onsite Coupon Testing](/Competitors/Onsite_Coupon_Testing) — competes with · Competitors
- [Tradesmen International](/Competitors/Tradesmen_International) — competes with · Competitors
- [Physical Coupon Tests](/Competitors/Physical_Coupon_Tests) — competes with · Competitors
- [Physical Coupon Testing](/Competitors/Physical_Coupon_Testing) — competes with · Competitors
- [Specialized Trade Recruiters](/Competitors/Specialized_Trade_Recruiters) — competes with · Competitors
- [Illumio Core](/Competitors/Illumio_Core) — competes with · Competitors
- [Akamai Guardicore](/Competitors/Akamai_Guardicore) — competes with · Competitors
- [CrowdStrike Falcon](/Competitors/CrowdStrike_Falcon) — competes with · Competitors
- [Manual Firewall Rules](/Competitors/Manual_Firewall_Rules) — competes with · Competitors
- [Palo Alto Cortex XSOAR](/Competitors/Palo_Alto_Cortex_XSOAR) — competes with · Competitors

### Similar Startups

- [Canopy Strike](/Startups/Canopy_Strike) — similar · Startups
- [Abortedfire](/Startups/Abortedfire) — similar · Startups
- [Flarestorm](/Startups/Flarestorm) — similar · Startups
- [Shielduffer](/Startups/Shielduffer) — similar · Startups
- [Defendermanor](/Startups/Defendermanor) — similar · Startups
- [Sentinel](/Startups/Sentinel) — similar · Startups
- [Zoneframe](/Startups/Zoneframe) — similar · Startups
- [Dynamicfire](/Startups/Dynamicfire) — similar · Startups
- [Hopporosity](/Startups/Hopporosity) — similar · Startups
- [Activefire](/Startups/Activefire) — similar · Startups
- [Gorgetorch](/Startups/Gorgetorch) — similar · Startups
- [Dropzone Security](/Startups/Dropzone_Security) — similar · Startups
- [Security](/Startups/Security) — similar · Startups
- [Zonespan](/Startups/Zonespan) — similar · Startups
- [Apimuri](/Startups/Apimuri) — similar · Startups
- [Quafac](/Startups/Quafac) — similar · Startups
- [Hollowhaven](/Startups/Hollowhaven) — similar · Startups
- [Challengepoint](/Startups/Challengepoint) — similar · Startups
- [Triageridge](/Startups/Triageridge) — similar · Startups
- [Botpoint](/Startups/Botpoint) — similar · Startups