Allows users to run multiple Network Detection and Response (NDR) tools on a single platform as Instruments. This modular approach enables cost-efficient, quick deployment and expansion, suitable for new setups or enhancing existing security controls.
02
Fleet Management
Controls sensor fleets, enabling one-click deployment of instruments. It transfers data collected by sensors to SIEM and provides central control for sensor and instrument configurations. The platform includes a unified Fleet Management UI for accessing all Instrument UIs and APIs through a single point, which is reverse proxied and can be access-controlled on the Sensor if needed.
03
Sensors
Host instruments and can be deployed as virtual or hardware appliances or natively in the cloud. These hardware devices can be deployed at various points in the network to run security instruments and collect data.
04
Instruments
Containerized applications for specific cybersecurity tasks, deployed on a Sensor platform. These include tools for detection, traffic capture, and asset tracking. The platform supports the deployment of various security instruments, including Suricata IDS, Zeek, honeypots, and custom-developed tools.
05
Layered Architecture
Eliminates vertical silos for detection and security operations. Changes are local, allowing easy addition and removal of products. The modular architecture allows for the integration of both open-source and custom-developed security tools as instruments, providing flexibility in expanding the system's capabilities.
Your plan caps how many capabilities are shown — upgrade to see the full list
