# Is Cyber Crucible antivirus?

**Short answer:** No. Antivirus identifies known-bad files using signatures. Cyber Crucible uses no signatures at all — it evaluates what a running program is actually doing and stops malicious behavior, including threats no one has seen before.

## Why signatures are no longer sufficient

A signature can only describe an attack someone has already analyzed. That model fails in two common situations:

- **Zero-day attacks**, where no signature exists yet.
- **Fileless attacks**, where there is no file to match a signature against.

Signature-based detection also requires constant updating from threat intelligence feeds, which means your protection is always trailing the attacker.

## What replaces it

Cyber Crucible models behavior — memory activity, process activity, and file access — and assesses intent in real time. That's why it has stopped zero-day attacks on customer networks as much as 90 days before any other vendor publicly reported or responded to them.