S32TECHNOLOGIES
Sovereign XDR

NetDefense

Network defense for government and defense environments. NetDefense applies signals-intelligence detection across the network, including persistent intrusions on infrastructure without endpoint agents.

Request a briefingInside NetDefense

4

deployment models, including fully air-gapped

Yours

retention window, set by you

You

authorize every containment action

Network

detection where no agent runs

Signals-intelligence depth

Signals-intelligence detection across the network

NetDefense analyzes network traffic for low-volume and persistent intrusion activity, including activity blended with ordinary traffic and outside endpoint monitoring.

Full-take traffic analysisAnalyzes full traffic for low-volume, persistent intrusion activity, retaining detail beyond sampled metadata.
Persistent and clandestine threatsDetects movement, staging and beaconing associated with intrusions lasting months, including activity outside monitored endpoints.
Encrypted and evasive trafficBehavioral and machine-learning detection identifies intrusion activity from traffic patterns as well as signatures.
Cross-segment visibilityCorrelates activity across tiers and segments in one operating picture, following threats as they cross network boundaries.

Every detection carries a signed, versioned evidence trail and chain of custody for review.

Network-layer visibility

Coverage beyond endpoint agents

Routers, firewalls, VPN appliances and hypervisors carry no endpoint agent. Network-layer collection is the only place that activity is visible at all.

Deep packet inspection, asset discovery, and machine-learning detection of malware, ransomware, insider and zero-day, at the layer an agent never reaches.

router no agent
firewall no agent
VPN appliance no agent
hypervisor no agent
Reach and scale

From one network to national infrastructure

The same detection engine covers a single network, a whole department, and national-scale infrastructure, extended from the ground to space-based collection, without losing depth as it grows.

Site

One network or enclave, watched in full at the packet layer.

→
Enterprise

Every segment and tier composed into one operating picture.

→
National

Distributed infrastructure across a country, one engine end to end.

→
From space

Space-based collection extends reach beyond the network you hold.

How it fits together

One engine, expanded for government

NetDefense is the government configuration of the NetSentinel detection platform, with counterintelligence and space extensions beyond the commercial configuration.

The core engine · the foundation

NetSentinel

Real-time network visibility, deep packet inspection, asset discovery and machine-learning detection. Proven with commercial defenders, and the engine everything on this page is built on.

This platform

NetDefense

The government configuration provides the signals-intelligence detection capabilities described above.

Counterintelligence

NetPatriot

A counterintelligence system for network and endpoint threat detection.

NetGuardianExtends detection to space-based assets and national-scale collection.
NetSentinel on its own

The NetSentinel engine is available standalone for commercial network defense, without the government edition.

NetSentinel for commercial teams
One leg of three

Detection, response, and the test of both

Detection is one leg. Cyber Response investigates what NetDefense surfaces, including on the appliances and hypervisors an agent never reaches. RedLane tests whether it would have surfaced at all.

Who it is for

National programs and armed forces

National programs, agencies and armed forces defending networks they cannot afford to lose visibility on. Every engagement is scoped against the authorities you hold and the jurisdiction you operate under.

See the traffic that matters. Act before it spreads.

Request a briefingContact us