Cybersecurity software company Keeper Security Inc. today announced the launch of Keeper Forcefield, a new service that provides protection against memory-based attacks on Windows devices.

Forcefield offers kernel-level endpoint security that proactively defends against memory-based attacks, including credential theft from infostealers and runtime memory-scraping malware. Keeper claims that the offering is the first to deliver real-time memory protection at both the user and kernel levels, raising the standard for endpoint security in enterprise environments.

The new service seeks to assist in addressing the issue whereby attackers are increasingly bypassing traditional cybersecurity defenses by targeting unprotected memory rather than exploiting vulnerabilities. New generations of malicious software delivered through phishing attacks or other methods can now access application memory to extract passwords, session tokens and other sensitive data, circumventing traditional encryption methods.

Keeper Forcefield addresses the issue by closing the gap by locking down memory access at the kernel level. The service enforces real-time memory protection capable of blocking nonprivileged, fileless and zero-day attacks without degrading system performance, unlike conventional antivirus or endpoint detection and response tools.

“Forcefield closes one of the most dangerous blind spots in endpoint security,” said co-founder and Chief Technology Officer Craig Lurey. “Malware can extract sensitive information directly from a device’s memory, even at the user level where administrative privilege isn’t required. Forcefield prevents this type of exploit entirely without disrupting trusted applications or everyday workflows.”

Forcefield works by operating at the kernel level to actively monitor and control access to protected application memory, ensuring that only authorized processes can interact with sensitive data. The service effectively blocks unauthorized or malicious processes from reading application memory by enforcing selective memory restrictions and safeguarding against credential theft and other memory-based exploits.

Windows applications protected by Forcefield include web browsers such as Chrome, Firefox, Edge, Brave, Opera and Vivaldi, as well as Keeper’s own software suite, including the Desktop App, Web Vault, Browser Extensions, Gateway, Bridge, Commander and KeeperChat. The service works on both Windows 11 x64 and ARM64.

Forcefield is available for both individual users and enterprise environments.

Image: SiliconANGLE/Ideogram