Antiy Labs
Chinese antivirus engine and threat intelligence vendor founded 2000 in Harbin and Beijing.
On the record
Checkpoint: Next Antiy CERT annual threat report release, and continued US Treasury sanctions decisions on Chinese cybersecurity vendors
The call
Antiy sits protected inside China's regulatory perimeter but stuck mid-tier among domestic rivals, with sanctions risk and a five-year funding silence hanging over it.
Antiy Labs makes antivirus and threat-detection software primarily for Chinese customers. The Chinese government protects it through a domestic-preference policy that keeps out Western competitors like Microsoft and Kaspersky, but Antiy still competes against larger Chinese rivals (Qihoo 360, Sangfor, NSFOCUS) in the same protected market. Artificial intelligence is making basic threat detection cheaper and faster for anyone to build, while major tech companies are baking security into their own operating systems. The biggest threat is that the US has already sanctioned three similar Chinese cybersecurity companies in recent months, which could cut off international sales and partnerships for Antiy if it gets targeted next.
Why
01
AI pressure: Native OS AI detection: Apple XProtect, Microsoft Defender, Google Play Protect. OS vendors folding AI-enhanced malware detection natively, squeezing the AVL SDK licensing business over time. Could AI do the core job? Only partly.
02
Bigger players: Qihoo 360, Venustech, Sangfor, NSFOCUS. Larger domestic peers compete in the same protected Xinchuang market, keeping Antiy mid-pack rather than leading. Could a giant copy it? No, they are blocked.
03
What protects it. Recognized CNCERT/CNNVD/MPS emergency-response status and Xinchuang domestic-substitution policy lock out Western rivals.
What would change this call
US Treasury names Antiy in a sanctions action. Would confirm Western-facing equity value and cross-border revenue are at risk.
Xiaomi drops or replaces the AVL SDK in MIUI phones. Would show erosion of a key OEM distribution relationship.
Antiy files a STAR Market IPO prospectus or announces a new funding round. Would resolve the five-year funding silence and signal growth or exit path.
Xiaomi drops or replaces the AVL SDK in MIUI phones. Would show erosion of a key OEM distribution relationship.
Antiy files a STAR Market IPO prospectus or announces a new funding round. Would resolve the five-year funding silence and signal growth or exit path.
Key numbers
- AVL SDK embedded in 10+ vendors, used in Xiaomi MIUI phones
- Equation Group malware research published continuously since 2015
- 3 Chinese cybersecurity peers sanctioned by US Treasury
Named risks
- Sector-wide US Treasury sanctions momentum against Chinese cyber vendors could extend to Antiy.
- Five-year public funding silence since roughly 2021 with no IPO filing leaves financial trajectory unconfirmed.
- AI-driven commoditization of signature detection pressures AVL SDK licensing margins over time.
- Mid-tier position among larger listed domestic peers like Qihoo 360 risks share erosion without direct evidence yet.
- No verified independent revenue or headcount data makes company health difficult to assess externally.
Rivals, as read in July 2026
| Rival | Direction | Evidence |
|---|---|---|
| Qihoo 360 | contesting | Larger domestic peer sharing same Xinchuang-protected regulatory category, no confirmed share loss as of 2024-05 |
| Venustech and Sangfor Technologies | contesting | Mid-tier domestic peers overlapping in enterprise security and threat monitoring, position as of 2024-05-21 |
| Microsoft, Apple, Google native security stacks | gaining on | Native AI-enhanced detection (Defender, XProtect, Play Protect) compresses standalone AV engine market long-term |
| Kaspersky | contesting | Only comparable global vendor with equivalent Equation Group technical dissections, 2015 to 2023 |
| Integrity Technology Group, Sichuan Silence | gaining on | Peers sanctioned by US Treasury Dec 2024 and Jan 2025, raising sector sanctions risk Antiy has so far avoided |
Questions people ask
- Is Antiy Labs profitable?
- No verified profitability figures exist. Antiy is privately held with no disclosed revenue; third-party aggregator estimates are excluded here as unreliable. As of 2024-05-21, CBInsights lists it at Series C funding stage, still private and unlisted, with no confirmed IPO.
- Could AI replace Antiy Labs' antivirus engine business?
- Commodity signature detection and templated threat-report drafting are increasingly automatable by ML/LLM tools, pressuring Antiy's AVL SDK licensing margins as OS vendors like Microsoft and Google build native AI detection. Antiy's proprietary malware dataset and 2015-2023 Equation Group research are harder to replicate.
- Who owns Antiy Labs?
- Antiy Labs is privately held and venture-backed, headquartered in Harbin with a Beijing-registered operating entity, Beijing Antiy Network Security Technology Co Ltd. It has not completed an IPO on China's STAR Market or elsewhere as of the latest available data in 2024-05-21.
- Is Antiy Labs at risk of US sanctions?
- Antiy has not been named in US Treasury sanctions as of 2025-01-17, but three Chinese cybersecurity peers, Sichuan Silence in December 2024, and Integrity Technology Group plus Sichuan Juxinhe in January 2025, were sanctioned within an 18-month window, raising sector-wide exposure risk.
- Who is Antiy Labs' biggest competitor?
- Antiy competes with larger domestic Chinese peers Qihoo 360, Venustech, Sangfor Technologies, and NSFOCUS within the same state-protected Xinchuang regulatory category, and overlaps globally with Kaspersky and Trend Micro in nation-state threat intelligence reporting.
- Does Antiy Labs use AI in its products?
- Antiy markets an AI model training and security knowledge engineering pipeline as part of its vendor-described Cyber Super Brain Platform, claimed to enhance malware classification and rule generation. This is a company-stated capability with no independent third-party verification found.
Timeline
- 2026-07AVL SDK shown receiving routine signature and engine upgrade announcements, per company site
- 2025-01-17US Treasury sanctions Integrity Technology Group and Sichuan Juxinhe, Chinese cyber peers, not Antiy
- 2024-12US Treasury sanctions Sichuan Silence Information Technology, a Chinese cyber peer
- 2024-05-21CBInsights snapshot lists Antiy at Series C, private, unlisted, Harbin and Beijing
- 2024-02Antiy CERT publishes 2023 annual global threat and APT report
- 2023-06Antiy publishes analysis claiming NSA-linked Equation Group hacked iPhones via iMessage since 2013
- 2017-05-18Antiy site describes recognized CNCERT, CNNVD, and Ministry of Public Security support-unit status
- 2015Antiy begins publishing technical dissections of Equation Group malware components
- 2000-07antiy.com domain registered, consistent with company founding
- 2000Antiy founded in Harbin, China
Revision history
26 July 2026
First assessed. Losing its protection. The text above is fixed as of this date and is not edited afterwards.
In the same band
Sources
- Products, Competitors, Financials, Employees, Headquarters Locations (2024-05-21)
- Antiy Labs - Overview, News & Similar companies
- The Next Generation Anti-Virus Engine Innovator
- The Next Generation Anti-Virus Engine Innovator (2017-05-18)
- The Next Generation Anti-Virus Engine Innovator
- The Next Generation Anti-Virus Engine Innovator
- The Next Generation Anti-Virus Engine Innovator
- US cyber-attacks on iPhones began as early as 2013, says report from Chinese cybersecurity company
- From "Equation" to "Equation Group" ...
- The Next Generation Anti-Virus Engine Innovator
- Treasury Sanctions Technology Company for Support to Malicious Cyber Group
- Treasury Sanctions Company Associated with Salt Typhoon and Hacker Associated with Treasury Compromise (2025-01-17)