Application Virtualization and Container Isolation for Windows Endpoints

Ceedo Technologies (2005) Ltd. is an endpoint security company based in Netanya, Israel and founded in 2005. It has built products for three distinct audiences over its history: consumers wanting portable Windows workspaces on USB media, OEMs embedding its virtualization layer into their own products, and corporate IT teams that need application and desktop delivery with isolation built in. The company states its technology has shipped to more than four million users worldwide across those channels.

The technology is an abstraction layer the company calls a Kernel Firewall, combining disk virtualization, file system virtualization, registry virtualization, and kernel layering. Applications run inside a container that intercepts their writes and redirects them away from the host. Untrusted or malicious content executed in a browser, document reader, or email client is confined to that container, so infections including ransomware and previously unseen zero-day code do not persist on the underlying system.

Because isolation is enforced structurally rather than by detection, the approach does not depend on knowing a threat in advance, which is the case the company makes against signature-based tools. Ceedo has packaged the same engine differently over time, from Ceedo Personal for portable USB workspaces to Ceedo Enterprise for managed application virtualization and a MalwareLocker container product. The ceedo.com domain no longer hosts the security business and now serves an unrelated consumer product review publication.