elastic endpoint detection & response

Save time, save money and reduce complexity 


LimaCharlie is an elastic real-time cross-platform endpoint detection and response.

LimaCharlie provides limitless scalability with no minimums and no long-term contracts or infrastructure for you to maintain. Reduce cost and complexity: gain all the capabilities of cutting edge detection and response with none of the liabilities.

A reliable and low-cost solution that provides endpoint telemetry, detection and response capability. With no contracts to sign you can get data flowing in minutes, and LimaCharlie provides a free tier - no credit card required - to help you get started.

Integrates into existing products and services, white-label friendly.


Get data flowing and provision new organizations in minutes.

LimaCharlie uses state of the art lightweight agents. Expose advanced attacks in real-time and quickly mitigate their impacts. Agents have zero impact on endpoint performance: deploy in seconds; no reboot; no impact even when analyzing, searching and investigating incidents.

  • Agent versions can be updated remotely

  • Interact with the endpoint in real-time

  • Send commands to isolate the host

  • Adjustable telemetry verbosity

  • Customizable management and detection granularity using tags

  • Cross platform on Windows, Linux and MacOS with a single pane of glass

  • 100% machine to machine integration through REST, JS and Python.

 Endpoint Detection and Response Sensor for Windows
 Endpoint Detection and Response Sensor for Linux
 Endpoint Detection and Response Sensor for OSX and MacOS

Simple pricing, support and trials are available. See the full documentation including features and recipes here.


LimaCharlie Is Used By



LimaCharlie was created by Refraction Point: a group of ex-Googlers, security experts and computer scientists on a mission to improve the ever-changing security landscape.

Researchers and security firms have deep knowledge and skill sets but often lack access to technologies that can make these assets actionable. Our vision is to provide fair access to cutting edge endpoint technologies to security professionals so they may leverage their skills and knowledge to deliver better security.

LimaCharlie is philosophically inspired by the intersection of the open source community and the intelligence community. Our products are designed for transparency and integration. We do not close down APIs or deal in proprietary lock-ins. Get setup with endpoint detection and response (EDR) agents today with no obligation or contract.