Aurora Protect Desktop and Aurora Protect Mobile leverage cutting-edge cloud services to determine whether software, files, and websites are potentially malicious and a threat to the security of a device. The Aurora Protect cloud services use sophisticated AI, machine learning, and efficient mathematical models to process large volumes of data from global sources, retain and continuously learn from the patterns and properties of that data, and use that data to make intelligent predictions and decisions about the risk potential of software, files, and Internet destinations in near-real time. The Aurora Protect services constantly evolve to address new cyber threats, providing an aggressive and proactive security strategy that identifies malicious software and websites before they can have any impact on your organization's infrastructure or device users.

The Aurora Protect services provide the threat analysis for files that are scanned by the Aurora Protect Desktop agent. If a file is identified as malicious, the Aurora Protect Desktop agent will perform any mitigation actions that you configured (for example, alert or quarantine). The agent includes a local Aurora Protect service model, so if the agent cannot communicate with the cloud, the agent will use the local model to score a file.

The Aurora Protect services are a core component of several Aurora Protect Mobile features, including malware detection, SMS message scanning, and secure network checks.

The Aurora Focus agent on desktop devices sends the data that it collects to the Aurora Focus cloud services. The data is aggregated and stored in the secure Aurora Focus cloud database. The Aurora Focus data analytics services offer rich interpretations of device data that you can access in the management console. Aurora Focus uses a Context Analysis Engine (CAE) to analyze and correlate events as they occur on devices. You can configure Aurora Focus to take automated response actions when the CAE identifies certain artifacts of interest (for example, display a notification or log off the current user), providing an additional layer of threat detection and prevention to complement the capabilities of Aurora Protect Desktop.