Active NDR Platform Components
Deploy multi-layer defense with our integrated security components.
Synapse
High-performance Rust-based reverse proxy and firewall with XDP packet filtering, JA4+ fingerprinting, and automatic threat intelligence.
- Inline deployment (reverse proxy & firewall)
- XDP packet filtering & JA4+ fingerprinting
- WAF, threat intel, automatic TLS
Amygdala
JA4+ fingerprinting sensor for mirrored traffic. Userland and eBPF support. Capture TCP, TLS, HTTP, SSH, and DHCP fingerprints.
- Mirrored / tapped traffic (out-of-band)
- Full JA4+ suite: JA4T, JA4S, JA4H, JA4L, JA4X
- CLI tool, optional eBPF
Complete Security Workflow
Extended Detection & Response
Runtime monitoring and intelligent detection within your application.
- Runtime monitoring
- Behavioral analysis
- Zero-day protection
Deploy Synapse
High-performance reverse proxy with built-in security.
- XDP-based packet filtering
- JA4+ fingerprinting
- Automatic TLS management
Response Automation
Automated mitigation and policy updates in real time.
- Automatic remediation
- Instant threat blocking
- Continuous policy evolution
Explore the Documentation
Architecture Overview
Understand data flow, processing pipeline, and scoring engine.
JA4 Fingerprinting
Advanced network fingerprinting for threat detection.
API Reference
Signal, Threat, and Threat Feeds API documentation.
Data Sources
30+ threat intelligence sources and categorization.
Configuration
YAML, CLI, and environment variable configuration.
Testing Guide
Manual testing procedures and validation.