Platform / MTD Engine

Moving is a decision, not a schedule.

Phorvex decides which workloads to move, and when. It determines the best defense, inside hard availability and SLO limits. It never destroys state. When a workload is stateful, Phorvex quarantines it instead of deleting it.

Only the moves that matter

Phorvex moves the workloads that cut an attacker off and leaves the rest of the fleet alone. The mathematics behind the choice is intentionally not published.

The best defense

Phorvex determines the best defense, inside hard availability and SLO limits, and it gets better at judging that with every move.

Harm-free by construction

Destructive rotations on stateful workloads are always refused. Phorvex quarantines instead, disrupting the attacker while the job survives.

Results

The numbers that matter.

~5.5s
Eviction dwell
Against ~15s for a blind timer. Reactive tools never acted.
20/20
Work preserved
The only approach that did no harm.
Not
learnable
By an adaptive attacker
Decoy-resistant by design.
0
False positives
Across the benchmark.

Real Kubernetes cluster, n=20, reproducible, controls clean.

Why a decision beats a schedule

An attacker can learn a schedule. They cannot outwait a decision.

Clock-based rotation leaks its own pattern, and an adaptive attacker simply waits it out. Phorvex decisions follow the live state of the fleet and where the attacker is. There is no schedule to learn, and no decoy that can bait it into wasted moves.

  • Proactive. Moves before any alert fires.
  • Decoy-resistant. Bait cannot trick it into wasted moves.
  • Inside your limits. Availability and SLO limits are hard constraints, never suggestions.

Run the benchmark conversation.

Methodology, controls, and reproduction, engineer to engineer.