Open NDR platform built on Zeek and Suricata that combines network evidence (logs, files, smart PCAP), IDS, and behavioral and ML detections. Passive sensors deploy as physical, virtual, or cloud appliances and stream logs to SIEMs; included collections add ICS/OT protocol visibility.
AI-driven NDR powered by Attack Signal Intelligence, which analyzes attacker behavior across network, identity, and cloud to prioritize threats. Response actions run through existing firewall, EDR, and SOAR integrations; Vectra MDR/MXDR analysts provide 24x7 coverage.
Sophor NDR SophosVirtual-appliance NDR that monitors traffic via TAP/SPAN using deep learning, behavioral analytics, and rule-based engines, feeding detections into Sophos XDR and MDR. Automated blocking is available with Sophos Firewall.
Trellix Network Security TrellixEvolution of Trellix Network Security (NX). Multi-layered detection (signatures, sandboxing, 180+ lateral-movement rules, ML) with inline blocking via NDR sensors and IPS, Hyperautomation response workflows, and OT visibility through a Nozomi Networks integration.
Connecting the worlds most innovative cities to the latests smart technology solutions.
Find out More