cybersecdirectory

NDR vendors

We list 30 companies active in network detection and response, and 11 of them have it as their main focus. 4 are public, 8 are owned by another company and 18 are private. Most are based in the United States (23). The oldest, NETSCOUT, was founded in 1984. By revenue from annual reports, the largest company here is Fortinet ($6.8bn in FY2025).

By countryUnited States 23

Companies focused on network detection and response

11 companies
CompanyBased inFoundedSizeOwnershipRevenue
Darktrace

Darktrace provides AI-powered cybersecurity solutions that detect and respond to threats across networks, cloud, email, and AI systems.

Cambridge, United Kingdom20131,600 staffOwned by Thoma Bravo
ARIA Cybersecurity

ARIA Cybersecurity provides AI-driven threat detection and response solutions for IT and OT infrastructure.

Lowell, United StatesOwned by CSPi
Corelight

Corelight provides network detection and response solutions for cybersecurity teams.

San Francisco, United States2013Private
ExtraHop

ExtraHop provides network detection and response for security and performance.

Seattle, United States2007Owned by Bain Capital and Crosspoint Capital Partners
Fidelis Security

Fidelis Security provides cybersecurity solutions for enterprises and government agencies.

Riverside, United States2003Owned by Partner One
Lumu

Lumu provides network detection and response to identify and stop cyber threats in real time.

Doral, United StatesPrivate
NetWitness

NetWitness provides cybersecurity platforms for threat detection, investigation and response across IT and OT environments.

Riverside, United States1997Private
PathSolutions

PathSolutions sells TotalView, a network operations intelligence platform.

Santa Clara, United States1998Private
Progress

Flowmon network detection and response, plus MOVEit file transfer, Kemp LoadMaster load balancing, ShareFile, Chef, Telerik and other business software.

Burlington, United StatesPrivate
Stamus Networks

Stamus Networks provides network detection and response systems for enterprise security teams.

Indianapolis, United States2014Private
Vectra AI

Vectra AI provides AI-native security and observability to detect and respond to cyber threats.

San Jose, United States2011Private

Also active in network detection and response

19 companies
CompanyBased inFoundedSizeOwnershipRevenue
Fortinet

Fortinet provides cybersecurity solutions and services, including networking and security convergence, for enterprises and governments.

Sunnyvale, United States200015,109 staffPublic, FTNT$6.8bn (FY2025)
NETSCOUT

NETSCOUT provides real-time network visibility, observability, cybersecurity, and DDoS protection solutions.

Westford, United States1984Public, NTCT$859.5m (FY2026)
Allot

Allot provides network intelligence and security solutions for service providers and enterprises.

Hod Hasharon, IsraelPublic, ALLT$102.0m (FY2025)
AtlasCyber

Provides agentic threat intelligence and validation for critical infrastructure security teams.

Merrimack, United StatesPrivate
Claroty

Claroty provides cybersecurity for cyber-physical systems in industrial, healthcare, and commercial settings.

New York, United StatesPrivate
Corero Network Security

Corero Network Security provides automatic DDoS protection for businesses and service providers.

London, United KingdomPublic, CNS
Cylus

Cylus provides cybersecurity solutions for railway operators to protect rail operational technology.

Tel Aviv, IsraelPrivate
Exabeam

Exabeam provides security operations platforms that use behavioural analytics to detect and respond to threats.

Broomfield, United States2013Owned by Thoma Bravo
Flowtriq

Flowtriq provides real-time DDoS detection and automatic mitigation for servers and network infrastructure.

Toronto, CanadaPrivate
Galvanick

Galvanick provides behavioral threat detection for operational technology environments.

Seattle, United StatesPrivate
GreyNoise Intelligence

GreyNoise Intelligence provides real-time network threat intelligence.

Washington, D.C., United States2017Private
Hillstone Networks

Hillstone Networks provides cyber security products including firewalls, threat detection and cloud workload protection.

Santa Clara, United StatesPrivate
Infoblox

Infoblox provides networking and security software for DNS, DHCP and IP address management.

Santa Clara, United StatesPrivate
Nozomi Networks

Nozomi Networks provides OT and IoT security solutions for critical infrastructure, offering asset visibility and threat detection.

San Francisco, United StatesOwned by Mitsubishi Electric
Ordr

Ordr provides a platform that discovers and enforces security policies for connected devices across IT, IoT, OT, and IoMT.

Santa Clara, United States2015Private
Stellar Cyber

Stellar Cyber provides an AI-native security operations platform that unifies detection and response tools.

San Jose, United States2015Private
Elektrobit

German automotive software maker offering embedded security software, network intrusion detection and cybersecurity maintenance for vehicles.

Erlangen, Germany2004Owned by AUMOVIO
Elisity

Elisity provides identity-based microsegmentation software to contain lateral movement across enterprise networks.

Dallas, United States2018Owned by IonQ
Marlink

Marlink provides managed network, connectivity and cybersecurity services for remote maritime and land operations.

Paris, FrancePrivate

Recent deals in network detection and response

All network detection and response deals
DateDealAmountSource
12 Oct 2026IonQ acquired ElisitySource for IonQ buying Elisity, opens in a new tab$1.3bnSource for IonQ buying Elisity, opens in a new tab
18 Aug 2026Fortinet acquired Virtue AISource for Fortinet buying Virtue AI, opens in a new tabUndisclosedSource for Fortinet buying Virtue AI, opens in a new tab
July 2026Infoblox acquired KentikSource for Infoblox buying Kentik, opens in a new tabUndisclosedSource for Infoblox buying Kentik, opens in a new tab
January 2026Infoblox acquired AxurSource for Infoblox buying Axur, opens in a new tabUndisclosedSource for Infoblox buying Axur, opens in a new tab
October 2025Vectra AI acquired NetographySource for Vectra AI buying Netography, opens in a new tabUndisclosedSource for Vectra AI buying Netography, opens in a new tab
September 2025Mitsubishi Electric acquired Nozomi NetworksSource for Mitsubishi Electric buying Nozomi Networks, opens in a new tab$883mSource for Mitsubishi Electric buying Nozomi Networks, opens in a new tab
July 2025Darktrace acquired Mira SecuritySource for Darktrace buying Mira Security, opens in a new tabUndisclosedSource for Darktrace buying Mira Security, opens in a new tab
May 2025Fortinet acquired SuridataSource for Fortinet buying Suridata, opens in a new tabUndisclosedSource for Fortinet buying Suridata, opens in a new tab
March 2025Lumu acquired MaltiverseSource for Lumu buying Maltiverse, opens in a new tabUndisclosedSource for Lumu buying Maltiverse, opens in a new tab
March 2025PartnerOne acquired NetWitnessSource for PartnerOne buying NetWitness, opens in a new tabUndisclosedSource for PartnerOne buying NetWitness, opens in a new tab

Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Amounts are in US dollars.

See every category

Often listed alongside network detection and response