We didn't come to add a tool.
We came to end the stack.
Convoy is one security platform, built and run by the people who wrote it. Our own detection engine, our own agent, our own operators, and one source of truth under all of it.
$ convoy status --company
The name
Every vessel covers the ones beside it. The whole formation is watched at once.
That's how a convoy moves, and it's how we treat your endpoints, identities, inboxes, firewalls, devices and cloud accounts. Each one covers the others. One team watches all of it. Nothing moves unseen.
{{count}}+
Assets protected
1.2K+
Investigation guides, written by us
2K+
Detection rules, mapped to MITRE ATT&CK
1
Platform. One agent. One source of truth. One number on the invoice.
What we believe
Five rules we'd rather lose a deal than break.
We own the code.
The platform, the detection engine and Convoy Agent are ours end to end. When something needs to change, we change it. Nobody's roadmap sits between you and a fix.
Operators you can see.
The people watching your environment work in the same console you do, with the same data. You see their actions in your audit trail the moment they take them.
Plain answers.
If your posture is fine, Cockpit says so. If it isn't, you hear it from us before you think to ask. We don't dress up a score to make a renewal easier.
Coverage is never a cost decision.
You pay per identity protected. Sending us more telemetry makes you safer, so it never costs more. We'd rather you log everything.
Open to the machines you trust.
Every tenant is open over MCP and REST under the same permissions as the console, so the AI tools your team already trusts can operate the platform instead of reading about it.
The log
Where we've been.
CyberConvoy
A prediction and response platform for companies that can't stop: hospitals, payments, manufacturing, real estate.
CyberConvoy becomes Convoy
Same team, same customers. One name for one platform.
Convoy Agent
Our own agent: full telemetry, including EDR, for every customer.
MCP on every tenant
100+ tools, so your own AI tools can operate the platform under the console's permissions.
Intelligence
Predictions, Threat Actors and Threat Intelligence, working from the same source of truth.
Hunt
Say what you suspect in plain words. Armada writes and runs the queries.
Airspace
Agent Detection and Response: every AI agent in the company, who uses it, what it touches and who answers for it.
Leadership.
Zisha Twersky
Founder and Chief Executive Officer
Runs strategy. Finds where security is broken and designs what replaces it.
Yitz Einhorn
Founder and Chief Technology Officer
Runs engineering. Turns the ideas others call impossible into systems that ship.
Careers
Build it with us.
Real attackers, real customers and a codebase we own top to bottom. Your code ships the week you write it.
Bet on the platform, not the patchwork.
See it on your own stack in a 30-minute briefing, or come build it with us.