Ransomware CyberRisk Validation Report by SecureIQLab

Independent testing lab SecureIQLab evaluated Quell against ransomware samples sourced from active threat intelligence feeds. The dataset reflects the behavior of ransomware seen in real production environments.

Key results

• 100% detection and prevention rate across all 499 in-the-wild samples.
• 117 ransomware families covered.
• 12 files on average were encrypted before Quell contained the attack.
• Every sample was quarantined and its process terminated during testing.

How Quell was tested

SecureIQLab ran each sample on Windows endpoints with Quell installed and recorded detection, containment and the files affected. Evidence came from Quell agent logs alongside Wireshark captures, Process Monitor traces and screen recordings. The lab also ran legitimate software to measure false positives.

Why it matters

Quell watches for the one thing ransomware has to do to cause damage: encrypt files. When encryption starts, Quell stops the process before it spreads. Because it doesn't depend on signatures or known indicators, it holds up against unknown, modified and evasive variants. It runs with low CPU and memory use and works online or offline.

Download the full report for the test environment, ransomware families, build results, false positive testing and telemetry findings.