Network detection and response
Tools that analyse network traffic and metadata to detect threats and support investigation and response.
6 vendors · alphabetical, never ranked
- Arista NetworksArista Networks is primarily a data center and cloud networking company; its Arista NDR product, built from its 2020 acquisition of Awake Security, analyzes enterprise network traffic to identify and prioritize threats for security teams.Public (NYSE: ANET) · primary category
- CorelightCorelight sells network detection and response products built on the open-source Zeek project, including hardware sensors that convert network traffic into structured evidence and a SaaS investigation product called Investigator.Ownership not established · primary category
- DarktraceDarktrace sells a family of AI-based security products, sold under names such as Darktrace / NETWORK, / EMAIL, / CLOUD, / OT, / ENDPOINT and / IDENTITY, that learn what is normal for a customer's own environment and flag anomalous activity for investigation and response.Owned by Thoma Bravo since 2024 · primary category
- GuardsixLogpoint rebranded as Guardsix in March 2026.Owned by Summa Equity since 2023
- NETSCOUTNETSCOUT sells network observability, cybersecurity and DDoS protection products, built on a shared data platform that also supports carrier service assurance.Public (NASDAQ: NTCT)
- Vectra AIVectra AI sells the Vectra AI Platform, a network detection and response product that analyzes traffic, identity systems and cloud activity to surface attacker behavior such as lateral movement and compromised credentials.Ownership not established · primary category
No vendor pays to be listed or to change what we write. Descriptions are ours, drawn from each company's own site and filings. Corrections: /corrections.