Our mission begins at the earliest stage of the attack chain, where threats first take shape - exploitation, reconnaissance, and silent intrusions. Some escalate into real attacks, while others flood systems with noise and false positives, overwhelming tools and disrupting analysts’ focus. We detect and analyze these early signals, enrich them with context, and deliver advanced IP threat intelligence and defense, giving analysts the clarity and control needed to stay ahead.
We’re a research lab with a deep focus on mass exploitation and network reconnaissance. We provide future-ready IP threat intelligence and adaptive defense tools, tailored for today’s mass exploitation era, defined by extreme speed, automation, and evolving AI-driven threats.
IP Threat Intel & CVE Mapping
Real-Time Custom Intelligence Feeds
Cyber Deception
Advanced Network Fingerprinting
Centralized IP Policy Management
Blocklist / EDL Manager
IP Blocklists
ELLIO Research Lab operates its own independent deception network of high-interaction and adaptive sensors and honeypots - continuously evolving and strategically deployed. With multi-layered architecture, real-time data processing, and unique ML, it detects and misleads attackers at scale - uncovering mass exploitation, recon activity, and new threats as they happen.
At Black Hat USA 2025, ELLIO will unveil TCP Fingerprint Firewall - an open-source, high-performance eBPF-based firewall that detects and blocks malicious scanners through advanced TCP fingerprinting. Powered by MuonFP and built as an XDP module for ultra-fast packet filtering, it identifies tools such as Nmap, ZMap, and Masscan by analyzing their unique TCP behaviors rather than relying on the legacy rules of traditional firewalls.
Get notified
ELLIO started with Vlad Iliushin and Jana Tom, who first met at Avast, the antivirus company behind the first AV for Windows 95. In 2023, they launched ELLIO, a research lab focused on analyzing mass exploitation and recon, with a clear mission: to empower security teams through efficient automation and clear visibility into large-scale threats.
Our headquarters is in Prague, one of the best places to live in Europe. It’s also where the word “robot” was first used by writer Karel Capek in his 1920 play R.U.R. That idea helped kick off the world of automation and AI, which are now a big part of cybersecurity. We’re proud to call this amazing city our home.
Vlad is a cybersecurity expert with a strong background in network security, IoT, and cyber deception. Before co-founding ELLIO, he led the Avast IoT Lab (now Gen Digital), focusing on security and IoT threats. Vlad also plays an active role in shaping cybersecurity testing standards as the President of AMTSO (Anti-Malware Testing Standards Organization). He's deeply committed to making cybersecurity efficient through effective automation and optimized resource management.
Follow Vlad on LinkedIn and X
Jana is a seasoned professional with a strong background in cybersecurity and technology marketing and communication. Before co-founding ELLIO, she worked at Avast (now Gen Digital), where she launched the Free for Education program, providing free antivirus software to U.S. schools. Jana also co-founded BSides Prague, creating a space for cybersecurity enthusiasts to connect and share knowledge in an informal, collaborative setting.
Follow Jana on LinkedIn.
.jpg)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
.png)
