Nzyme by Nzyme is a network defense system that monitors Ethernet and WiFi network traffic for threats. It confirms expected behavior and selectively forwards data to SIEM or log management systems with minimal configuration and a small hardware footprint. Nzyme allows monitoring of all network traffic, including WiFi (802.11) data, to detect wireless threats such as rogue access points or unauthorized networks. It automatically parses and analyzes protocols like IP, ARP, TCP, UDP, DNS, and TLS. Nzyme aggregates, stores, and presents recorded data for efficient threat hunting without complex visualization builders or query languages. It operates with a built-in web interface and can run on any hardware with just a network cable connected to a mirror port on a switch.
