NDR vendors
We list 30 companies active in network detection and response, and 11 of them have it as their main focus. 4 are public, 8 are owned by another company and 18 are private. Most are based in the United States (23). The oldest, NETSCOUT, was founded in 1984. By revenue from annual reports, the largest company here is Fortinet ($6.8bn in FY2025).
By countryUnited States 23
Companies focused on network detection and response
11 companies| Company | Based in | Founded | Size | Ownership | Revenue |
|---|---|---|---|---|---|
Darktrace Darktrace provides AI-powered cybersecurity solutions that detect and respond to threats across networks, cloud, email, and AI systems. | Cambridge, United Kingdom | 2013 | 1,600 staff | Owned by Thoma Bravo | |
ARIA Cybersecurity ARIA Cybersecurity provides AI-driven threat detection and response solutions for IT and OT infrastructure. | Lowell, United States | Owned by CSPi | |||
Corelight Corelight provides network detection and response solutions for cybersecurity teams. | San Francisco, United States | 2013 | Private | ||
ExtraHop ExtraHop provides network detection and response for security and performance. | Seattle, United States | 2007 | Owned by Bain Capital and Crosspoint Capital Partners | ||
Fidelis Security Fidelis Security provides cybersecurity solutions for enterprises and government agencies. | Riverside, United States | 2003 | Owned by Partner One | ||
Lumu Lumu provides network detection and response to identify and stop cyber threats in real time. | Doral, United States | Private | |||
NetWitness NetWitness provides cybersecurity platforms for threat detection, investigation and response across IT and OT environments. | Riverside, United States | 1997 | Private | ||
PathSolutions PathSolutions sells TotalView, a network operations intelligence platform. | Santa Clara, United States | 1998 | Private | ||
Progress Flowmon network detection and response, plus MOVEit file transfer, Kemp LoadMaster load balancing, ShareFile, Chef, Telerik and other business software. | Burlington, United States | Private | |||
Stamus Networks Stamus Networks provides network detection and response systems for enterprise security teams. | Indianapolis, United States | 2014 | Private | ||
Vectra AI Vectra AI provides AI-native security and observability to detect and respond to cyber threats. | San Jose, United States | 2011 | Private |
Also active in network detection and response
19 companies| Company | Based in | Founded | Size | Ownership | Revenue |
|---|---|---|---|---|---|
Fortinet Fortinet provides cybersecurity solutions and services, including networking and security convergence, for enterprises and governments. | Sunnyvale, United States | 2000 | 15,109 staff | Public, FTNT | $6.8bn (FY2025) |
NETSCOUT NETSCOUT provides real-time network visibility, observability, cybersecurity, and DDoS protection solutions. | Westford, United States | 1984 | Public, NTCT | $859.5m (FY2026) | |
Allot Allot provides network intelligence and security solutions for service providers and enterprises. | Hod Hasharon, Israel | Public, ALLT | $102.0m (FY2025) | ||
AtlasCyber Provides agentic threat intelligence and validation for critical infrastructure security teams. | Merrimack, United States | Private | |||
Claroty Claroty provides cybersecurity for cyber-physical systems in industrial, healthcare, and commercial settings. | New York, United States | Private | |||
Corero Network Security Corero Network Security provides automatic DDoS protection for businesses and service providers. | London, United Kingdom | Public, CNS | |||
Cylus Cylus provides cybersecurity solutions for railway operators to protect rail operational technology. | Tel Aviv, Israel | Private | |||
Exabeam Exabeam provides security operations platforms that use behavioural analytics to detect and respond to threats. | Broomfield, United States | 2013 | Owned by Thoma Bravo | ||
Flowtriq Flowtriq provides real-time DDoS detection and automatic mitigation for servers and network infrastructure. | Toronto, Canada | Private | |||
G Galvanick Galvanick provides behavioral threat detection for operational technology environments. | Seattle, United States | Private | |||
GreyNoise Intelligence GreyNoise Intelligence provides real-time network threat intelligence. | Washington, D.C., United States | 2017 | Private | ||
Hillstone Networks Hillstone Networks provides cyber security products including firewalls, threat detection and cloud workload protection. | Santa Clara, United States | Private | |||
Infoblox Infoblox provides networking and security software for DNS, DHCP and IP address management. | Santa Clara, United States | Private | |||
Nozomi Networks Nozomi Networks provides OT and IoT security solutions for critical infrastructure, offering asset visibility and threat detection. | San Francisco, United States | Owned by Mitsubishi Electric | |||
Ordr Ordr provides a platform that discovers and enforces security policies for connected devices across IT, IoT, OT, and IoMT. | Santa Clara, United States | 2015 | Private | ||
Stellar Cyber Stellar Cyber provides an AI-native security operations platform that unifies detection and response tools. | San Jose, United States | 2015 | Private | ||
E Elektrobit German automotive software maker offering embedded security software, network intrusion detection and cybersecurity maintenance for vehicles. | Erlangen, Germany | 2004 | Owned by AUMOVIO | ||
Elisity Elisity provides identity-based microsegmentation software to contain lateral movement across enterprise networks. | Dallas, United States | 2018 | Owned by IonQ | ||
Marlink Marlink provides managed network, connectivity and cybersecurity services for remote maritime and land operations. | Paris, France | Private |
Recent deals in network detection and response
All network detection and response dealsAcquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Amounts are in US dollars.
More in Network Security
See every category- Firewall vendors 32 companies
- SASE vendors 24 companies
- ZTNA vendors 32 companies
- DDoS protection providers 19 companies
- DNS security vendors 16 companies