X-PHY Inc

Name: X-PHY Inc
Address: Eberle Building, Suite 300, 107 S B Street, San Mateo, CA, 94401, US
Telephone: +6564935035

Cybersecurity foundations are built from the hardware.

Headquartered in San Mateo, USA, X-PHY is the world’s pioneer in intelligent, proactive, and autonomous hardware-based cybersecurity solutions.

09/01/2026

The security industry has one habit it can't shake. AI agents are about to test it a fourth time.

Every layer of enterprise security has followed the same arc. Network security began in software and eventually needed hardware-enforced segmentation. Endpoint security began in software and eventually needed TPMs and secure boot. Cloud followed the same path.

AI agents are at the start of that pattern now. They arrived as chatbots and have become, in effect, employees with database access, API keys and system privileges, acting without a human reviewing each step, at machine speed, across every system they touch. The first critical MCP vulnerability (CVE-2025-49596, CVSS 9.4) appeared within eight months of the protocol's release.

The industry's answer so far has been guardrails, permissions and monitoring. All of it necessary. All of it operating inside the same software trust boundary a compromised agent is already standing in.

In TechRadar Pro, our CEO Camellia Chan, sets out what three decades of security history suggest comes next, and why the industry shouldn't wait for a major compromise to learn the lesson a fourth time.

Read the full piece: https://www.techradar.com/pro/ai-agents-are-inside-the-enterprise-are-your-security-foundations-ready-for-them

08/04/2026

Still shredding drives because you can't prove they're wiped?

It's the industry's default: software-layer encryption on an aging drive can't always guarantee the data on it is truly unrecoverable, so physical destruction becomes the only outcome companies trust - even when the hardware itself is still perfectly usable.

In this Forbes Technology Council roundup on smarter hardware lifecycle strategies, our CEO Camellia Chan makes the case for a different approach: drives with self-encryption, so erasure is cryptographically verifiable at the silicon level, independent of the OS. That keeps end-of-life sanitization fast, verifiable, and waste-free.

Read more from the experts here: https://www.forbes.com/councils/forbestechcouncil/2026/08/03/how-to-build-a-smarter-safer-hardware-lifecycle-strategy/

07/09/2026

Most security software depends on two things: a timely update, and a live connection to phone home. Ransomware doesn't wait for either.

X-PHY builds detection into the drive itself. The AI sits in the firmware, monitors read and write patterns in real time, and can lock the drive down the moment it sees ransomware-like behaviour - no update, no internet connection, no user action required.

That's the gap between patching a system and hardening the drive underneath it.

Learn more: https://x-phy.com/products/endpoint-security/secure-ssd/

07/03/2026

That Erling Haaland clip everyone's been sharing this week - the one where he scares himself in a restaurant mirror. Did you laugh? Were you fooled?

If you haven't heard by now, it isn't Haaland.

It's Chinese comedian Jin Long's TikTok, AI-edited and re-captioned - and it fooled a lot of very confident feeds in under 24 hours.

Harmless fun this time. But it's the same trick used on video calls to move real money and real instructions.

There are AI clips we are all happy to enjoy for the laugh. For the ones you can't afford to get wrong, there's X-PHY Deepfake Detector.

Check out the clips here: https://www.instagram.com/reels/DaN3W4Iu0Vs/

07/01/2026

A video call, senior leaders on screen, and instructions that seemed legitimate... but they weren't.

Pit against the X-PHY Deepfake Detector, the giveaway here was a lip-sync mismatch. A telltale sign that is getting harder to spot with the naked eye.

In fact, the footage was flagged as 95% likely manipulated.

X-PHY Deepfake Detector analyses and flags manipulated media in real time, on-device, with no upload required.

Leave nothing to chance, try it free now: https://x-phy.com/products/endpoint-security/deepfake-detector/

05/27/2026

As our friends, partners and communities around the world mark Eid al-Adha, we send our warmest wishes for a blessed and peaceful celebration.

05/06/2026

AI agents are becoming the most overprivileged “employees” in the company.

97% of enterprise leaders expect a major AI agent security incident within 12 months — yet only 6% of security budgets are allocated to this risk.

We’re onboarding agents faster than any human, then issuing them way more access than any human would ever get on day one: service accounts, API tokens, and application identities that connect to tools, data, endpoints, and cloud resources. They execute with elevated permissions.

And like any overprivileged insider, the risk isn’t really intent. It’s blast radius.

When an agent is compromised, it doesn’t need to “look suspicious.” It executes legitimate actions with legitimate credentials at machine speed - far faster than any human-driven incident response.

That’s why 87% of enterprise leaders agree that agents operating with valid credentials pose a greater insider threat risk than human employees: the activity looks like normal system behaviour, and traditional anomaly detection struggles to distinguish “compromised” from “functioning.”

So it’s time to take back control:
- Draw boundaries (what it can access, when, and why)
- Reduce privileges (least privilege, short-lived tokens, scoped roles)
- Add a hardware-rooted security layer (visibility and guardrails below the OS - outside the agent’s software attack surface)
- Monitor ex*****on, not just prompts

That’s why X-PHY starts at the hardware layer. Firmware-level visibility catches anomalies below the software stack - where agents connect to data, models, and infrastructure, and where “agent activity” becomes real operations.

04/22/2026

⚠️ Anthropic built an AI that found a zero-day vulnerability in OpenBSD - a flaw that had survived 27 years of expert human review and millions of automated scans.

And so, they chose not to release it.

Claude Mythos Preview operates autonomously. It reads source code, forms hypotheses, runs tests, and produces full exploit reports with no human involvement at any stage. In testing, it discovered thousands of previously unknown vulnerabilities across every major OS and browser.

And in an early test, it escaped its own sandbox and accessed the internet independently.

Our CEO Camellia Chan wrote about what this means for enterprise security architecture in this piece for Tech Coffee House.

The short version:
The patch-and-recover model (the window between discovery and exploitation) depends on time. CrowdStrike's 2026 Global Threat Report already recorded an 89% year-on-year increase in AI-assisted attacks, and that was before Mythos existed. When AI can produce working zero-day exploits at speed, that window doesn't just shrink - it closes.

This is not about being more vigilant or patching faster. The rules of the game have long changed, and doubling down on old methods alone will prove futile.

This is why hardware-rooted security matters. A defence embedded below the OS and firmware layer sits outside the attack surface that tools like Mythos are designed to probe. It's the last line that doesn't depend on the software environment remaining intact to function.

Read the full piece here → https://techcoffeehouse.com/2026/04/20/anthropic-withheld-claude-mythos-preview-here-is-what-the-security-industry-needs-to-learn/

04/14/2026

Anthropic's Claude Mythos Preview - Boon or Bane?

The code-security LLM is reportedly capable of finding deep vulnerabilities and accelerating exploit development. So capable that it escaped its sandbox environment, accessed the internet, and emailed the developer about its prison break.

It is no wonder Anthropic is keeping the model in limited availability rather than releasing it broadly.

As our CEO Camellia Chan notes in this article on Fast Company, once AI can produce working zero-day exploits at speed, organisations could “lose the breathing space they have traditionally relied on to detect, patch, and recover.” She also warns: “Any security architecture that assumes a bounded, predictable attacker needs to reckon with that.”

Where do you stand on this - defensive breakthrough, offensive accelerant, or both?

Read 👉 https://www.fastcompany.com/91525413/is-mythos-a-blessing-or-a-curse-for-cybersecurity-it-depends-who-you-ask

04/09/2026

A candidate joins a video interview. They look real. They sound real. They answer every question.

But they are not real.

This clip - originally shared by Vidoc Security Lab - shows a deepfake job interview candidate in the wild.

The moment the video appeared on screen, X-PHY Deepfake Detector prompted us to run detection. One click, and it caught it on the first pass.

HR teams spend enormous energy verifying credentials, checking references, running background checks - but when it comes to the person on the other end of the camera, all they have is their eyes and gut instinct.

That gap is being exploited right now. Reach out to learn more about our award-winning Deepfake Detector now.

🎥 Original clip credit: youtube.com/shorts/o8ZIRk1zuNc

Address

Eberle Building, Suite 300, 107 S B Street
San Mateo, CA
94401

Telephone

+6564935035

Website

https://x-phy.com/

Alerts

Be the first to know and let us send you an email when X-PHY Inc posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.

Contact The Business

Send a message to X-PHY Inc:

Want your business to be the top-listed Engineering Company in San Mateo?