OnSystem Logic

OnSystem Logic builds application-hardening software for Windows endpoints centered on a single technical bet: that detection-based endpoint security will always lag attackers who abuse trusted, signed tools already present on a system. Its flagship product, OnSystem Defender, implements what the company calls a patent-pending in-memory application reference monitor that continuously validates what a running application is allowed to do, in a given execution context, before it’s allowed to do it, aiming to stop memory-safety exploits and living-off-the-land attacks that pass signature and behavioral detection.

Founded in 2015 and based in Baltimore, Maryland, OnSystem Logic has been funded primarily through non-dilutive channels, including a National Science Foundation Small Business Innovation Research (SBIR) grant that helped develop OnSystem Defender, along with early backing from Plug and Play and Maryland’s TEDCO. The University of Maryland is a disclosed customer. The company’s total disclosed funding is modest, around $350K across two rounds, consistent with a small, technically-focused team rather than a heavily venture-backed growth story.

The company’s non-bypassable execution-control approach is a genuinely different architecture from signature or behavior-based EDR, but OnSystem Logic remains a small player with limited public evidence of enterprise-scale deployment outside of grant-funded pilots and early adopters, competing in a market dominated by much larger endpoint security vendors.