Method of edge-based auto containment

A system for managing a containment instruction, the system comprising:

• an endpoint contained inside a company network;
• a main platform contained in a public cloud and running a central containment component as a software which is configured to send a secured containment instruction to the endpoint contained inside a company network where a malicious activity has been detected,
• wherein the central containment component is configured to asynchronously elaborate and place the secured containment instruction inside a messaging queue of the central containment component;
• wherein the company network comprises an edge containment component comprising an in-built Application Programming Interface (API) and configured to periodically poll a messaging queue service by creating an outgoing connection from the company network to the central containment component in the public cloud as an outgoing polling connection;
• wherein the edge containment component is configured to retrieve, decode and send the containment instruction to the endpoint inside the company network when the edge containment component detects the containment instruction,
• wherein the retrieving the secured containment instruction by the edge containment component is performed as a part of the outgoing connection through a specialized design of piggybacking on the outgoing polling connection between two different networks by using a response to an outgoing polling channel without a separate channel for data retrieval,
• wherein the edge containment component is configured to use an in-built API interface to execute the secured containment instruction on the endpoint,
• wherein the endpoint is configured to send an acknowledgement of success or failure to the edge containment component when the secured containment instruction is applied, and wherein the edge containment component is configured to send the acknowledgement to the central containment component by creating the outgoing connection and to place the acknowledgement in the messaging queue.