NetDefense
Network defense for government and defense environments. NetDefense applies signals-intelligence detection across the network, including persistent intrusions on infrastructure without endpoint agents.

deployment models, including fully air-gapped
retention window, set by you
authorize every containment action
detection where no agent runs
Signals-intelligence detection across the network
NetDefense analyzes network traffic for low-volume and persistent intrusion activity, including activity blended with ordinary traffic and outside endpoint monitoring.
Every detection carries a signed, versioned evidence trail and chain of custody for review.
Coverage beyond endpoint agents
Routers, firewalls, VPN appliances and hypervisors carry no endpoint agent. Network-layer collection is the only place that activity is visible at all.
Deep packet inspection, asset discovery, and machine-learning detection of malware, ransomware, insider and zero-day, at the layer an agent never reaches.
From one network to national infrastructure
The same detection engine covers a single network, a whole department, and national-scale infrastructure, extended from the ground to space-based collection, without losing depth as it grows.
One network or enclave, watched in full at the packet layer.
Every segment and tier composed into one operating picture.
Distributed infrastructure across a country, one engine end to end.
Space-based collection extends reach beyond the network you hold.
One engine, expanded for government
NetDefense is the government configuration of the NetSentinel detection platform, with counterintelligence and space extensions beyond the commercial configuration.
NetSentinel
Real-time network visibility, deep packet inspection, asset discovery and machine-learning detection. Proven with commercial defenders, and the engine everything on this page is built on.
NetDefense
The government configuration provides the signals-intelligence detection capabilities described above.
NetPatriot
A counterintelligence system for network and endpoint threat detection.
The NetSentinel engine is available standalone for commercial network defense, without the government edition.
Detection, response, and the test of both
Detection is one leg. Cyber Response investigates what NetDefense surfaces, including on the appliances and hypervisors an agent never reaches. RedLane tests whether it would have surfaced at all.
National programs and armed forces
National programs, agencies and armed forces defending networks they cannot afford to lose visibility on. Every engagement is scoped against the authorities you hold and the jurisdiction you operate under.