What software protects devices against ransomware and zero-day attacks?

The term you’re looking for is generally **endpoint protection / endpoint detection and response (EDR) or advanced antivirus solutions** that advertise **ransomware and zero‑day protection**.

Based on current offerings, examples of software and services that explicitly protect devices against **both ransomware and zero‑day attacks** include:

- **Hughes Ransomware and Zero‑Day Prevention** – An endpoint protection service that uses a *multi‑layer prediction and prevention‑first* approach to stop known and unknown threats, including ransomware and zero‑day attacks, on Windows, macOS, ChromeOS, Android, and Linux.[1]

- **ESET LiveGuard Advanced** – A cloud‑sandboxing add‑on that analyzes new files *before they execute* to detect and block **ransomware and zero‑day attacks**, especially “never‑before‑seen” threats.[2]

- **ThreatLocker Allowlisting & Ringfencing** – Application allowlisting with a **default‑deny / zero‑trust** model that blocks any software not on the allowlist, preventing ransomware and malware (including those using zero‑day exploits) from running, and uses “ringfencing” to stop exploited apps from doing damage.[5]

- **Acronis EDR / Acronis Cyber Protect** – Uses **AI‑guided behavioral analysis** to detect suspicious endpoint activity, including **zero‑day malware and ransomware that bypasses traditional defenses**.[9]

- **ZoneAlarm advanced products** – ZoneAlarm recommends its advanced **endpoint protection platforms (EPP)** and related tools that use behavioral analysis and machine learning to detect and block **zero‑day exploits** in addition to more conventional malware.[7]

More broadly, when shopping for software, look for these categories and features (often combined in one suite):

- **Next‑gen antivirus / EDR** with behavioral and AI‑based detection for unknown threats.[3][4][7][9]

- **Ransomware protection** (rollback, file‑access monitoring, anti‑encryption controls).

- **Zero‑day / exploit mitigation** via sandboxing, isolation, or allowlisting (e.g., cloud sandboxing like ESET LiveGuard, application allowlisting like ThreatLocker, or browser isolation as described by Ericom).[2][5][6]

If you tell me your platform (Windows/macOS/Linux/Android/iOS) and whether this is for home or business, I can narrow this down to a short, tailored list of options.