Best Network Detection and Response (NDR) Software - Page 3

How Many Network Detection and Response (NDR) Software Products Does G2 Track?

Total Products under this Category: 83

Category Stats (Nov 2026)

  • Average Rating: 4.37/5 The average rating of products in this category, based on all submitted ratings
  • Top Trending Product: Rapid7 Next-Gen SIEM (+0.18%) - Among all products in this category, Rapid7 Next-Gen SIEM recorded the largest rating increase compared to last month

Last updated: November 01, 2026

How Does G2 Rank Network Detection and Response (NDR) Software Products?

Why You Can Trust G2's Software Rankings:

  • 30 Analysts and Data Experts
  • 1,700+ Authentic Reviews
  • 83+ Products
  • Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

G2 Grid® for Network Detection and Response (NDR) Software

G2 Grid® for Network Detection and Response (NDR) Software plotting products by satisfaction and market presence

Highlighted products: Progress WhatsUp Gold, Sophos NDR, Cortex XDR, TrendAI Vision One, Rapid7 Next-Gen SIEM, Darktrace / HYBRID NETWORK, ExtraHop, and ManageEngine ADAudit Plus.

Underlying data: [Grid® JSON](https://www.g2.com/categories/network-detection-and-response-ndr/grids.json?focus%5B%5D=progress-whatsup-gold&focus%5B%5D=sophos-ndr&focus%5B%5D=palo-alto-networks-cortex-xdr&focus%5B%5D=trendai-vision-one&focus%5B%5D=rapid7-next-gen-siem&focus%5B%5D=darktrace-hybrid-network&focus%5B%5D=extrahop&focus%5B%5D=manageengine-adaudit-plus)

Sensato Nightingale

We believe genuinely effective cybersecurity is based on a holistic cybersecurity strategy. To enable this, a single platform is essential—a fully integrated platform out-of-the-box. That platform must incorporate your ability to comply with best practices, detect all attacks, and respond quickly. That platform is Nightingale. Nightingale Compliance Manager (CM) provides organizations with a rapid means of determining maturity as well as managing risk and policy exceptions. Nightingale Detection Manager (DM) combines network and host intrusion detection, honeypots, and vulnerability assessments to provide unparalleled protection. Nightingale Response Manager (RM) modernizes incident response by integrating playbooks, rapid response and automated countermeasures.

Average Rating: 3.8/5.0

Total Reviews: 4

How Do G2 Users Rate Sensato Nightingale?

  • Metadata Enrichment: 8.3/10 (Category avg: 8.5/10)
  • Quality of Support: 8.3/10 (Category avg: 8.9/10)
  • Multi-Network Monitoring: 7.8/10 (Category avg: 8.6/10)
  • Network Visibility: 7.2/10 (Category avg: 8.9/10)

Who Is the Company Behind Sensato Nightingale?

Who Uses This Product?

  • Company Size: 75% Medium, 25% Small

What Are Recent G2 Reviews of Sensato Nightingale?

Command|Link

ONE platform to manage your SD-WAN, UCaaS, CaaS, firewalls, MPLS, network, switches, IP phones, installs, trouble tickets, bills, and network performance across the entire globe Complete control of your technology stack without interference or dependency on vendors Increase agent efficiency and speed up issue resolution using CommandLink's proprietary ITSM Streamline IT support with automated software-enabled support workflows Shape service experiences for employees anywhere with full transparency at the most granular level Make real-time moves, adds, changes without picking up the phone Analyze and control bandwidth traffic by application, port, IP, and or protocol. Enable real-time, dynamic, and pre-scheduled bandwidth modifications as often as you like. Direct communication with your tier 3 engineering POD, enabling you to scale your IT infrastructure without headcount and especially without headaches Deliver high-quality services proactively and at scale with real-time analytics and reports If you need access to third party apps like ServiceNow, the CommandLink API enables streaming push and pull functions with any API enabled app.

Average Rating: 4.8/5.0

Total Reviews: 22

How Do G2 Users Rate Command|Link?

  • Metadata Enrichment: 8.3/10 (Category avg: 8.5/10)
  • Quality of Support: 9.7/10 (Category avg: 8.9/10)
  • Multi-Network Monitoring: 9.4/10 (Category avg: 8.6/10)
  • Network Visibility: 9.4/10 (Category avg: 8.9/10)

Who Is the Company Behind Command|Link?

  • Seller: CommandLink
  • Year Founded: 2012
  • HQ Location: Bothell, Washington, United States
  • LinkedIn® Page: www.linkedin.com
    314 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 59% Medium, 32% Large

What Do G2 Reviewers Say About Command|Link?

AI-generated summary from verified user reviews

Pros
  • Users praise the responsive and proactive customer support of Command|Link, enhancing their administrative experience significantly.
  • Users value the quick response time of Command|Link, appreciating effective communication and proactive problem-solving.
  • Users value the reliability of Command|Link, appreciating its structured support and efficient response times.
  • Users commend the robust support of Command|Link, highlighting their proactive response and partner-like collaboration.
  • Users value the ease of use of Command|Link, appreciating its simplicity and effective support for administrators.
Cons
  • Users find the limited features of Command|Link restrict their control and optimization of network management tasks.
  • Users experience communication issues with Command|Link, struggling with insufficient ISP notes and lack of direct carrier contact.
  • Users find the insufficient information from Command|Link regarding troubleshooting and carrier contact to be a drawback.
  • Users find the lack of detailed configuration options in Command|Link limits effective network management and operations.
  • Users find the poor support services of Command|Link inadequate for resolving issues effectively.

What Are Recent G2 Reviews of Command|Link?

Delta Threat

Delta AI NDR is the Next Generation Hybrid NDR Solution, Designed to Monitor, Detect and Mitigate risks in network infrastructure. Delta Detection System combined different methodologies of detection such as * Anomaly based Threat Detection * Signature based Traffic Analysis * Behavior analysis for Devices and Assets The solution is designed to be compatible and Scalable, Supporting SME and Large enterprises in wide range of industries

Average Rating: 4.5/5.0

Total Reviews: 2

How Do G2 Users Rate Delta Threat?

  • Metadata Enrichment: 8.3/10 (Category avg: 8.5/10)
  • Quality of Support: 8.3/10 (Category avg: 8.9/10)
  • Multi-Network Monitoring: 8.3/10 (Category avg: 8.6/10)
  • Network Visibility: 7.5/10 (Category avg: 8.9/10)

Who Is the Company Behind Delta Threat?

Who Uses This Product?

  • Company Size: 50% Medium, 50% Small

What Are Recent G2 Reviews of Delta Threat?

AI can help you find the answers. G2 helps you trust them.

Connect G2 to Claude or ChatGPT for answers grounded in G2's trusted reviews, comparisons, and pricing from real user insights.

How it works
Connect G2 to ChatGPTConnect G2 to Claude

Gradient Cyber

​Gradient Cyber’s Managed Extended Detection and Response (MXDR) service offers mid-market organizations comprehensive, 24/7/365 protection across their entire IT environment, including networks, endpoints, cloud infrastructures, Software as a Service (SaaS) applications, and business process applications. By integrating advanced AI/ML-driven analytics with human expertise through our proprietary XDR platform, Quorum™, we ensure rapid detection and neutralization of threats before they can impact operations. ​ Key Features of Gradient Cyber's MXDR Service: - Comprehensive Coverage: Our MXDR solution provides unified detection and response across all critical components of your IT ecosystem, ensuring no blind spots for attackers to exploit. ​ - Proactive Threat Detection: Utilizing a combination of automated tools and human analysis, we identify and mitigate threats in near real-time, significantly reducing the risk of breaches. ​ - Expert-Led Response: With a 10:1 client-to-analyst ratio, our dedicated team of security professionals offers personalized service, acting as an extension of your in-house team to swiftly address and remediate threats. ​ - High Accuracy: Our approach achieves a 99% false positive elimination rate, allowing your IT staff to focus on genuine threats without the distraction of unnecessary alerts. ​ - Scalability Across Industries: Serving clients in over 35 verticals, our MXDR service is tailored to meet the unique security challenges of various industries, ensuring relevant and effective protection. ​ - Robust Infrastructure: Operating from four in-house Security Operations Centers (SOCs) worldwide, we provide continuous monitoring and rapid response capabilities, ensuring global coverage and resilience. ​ - Integrated Compliance Tracking: Our service includes compliance tracking and detailed Situation Reports (SitReps), offering transparency and aiding in regulatory adherence. ​ By choosing Gradient Cyber’s MXDR service, organizations benefit from a seamless blend of technology and human expertise, transforming their cybersecurity posture from reactive to proactive.

Average Rating: 4.8/5.0

Total Reviews: 4

How Do G2 Users Rate Gradient Cyber?

  • Quality of Support: 10.0/10 (Category avg: 8.9/10)

Who Is the Company Behind Gradient Cyber?

Who Uses This Product?

  • Company Size: 50% Small, 25% Medium

What Do G2 Reviewers Say About Gradient Cyber?

AI-generated summary from verified user reviews

Pros
  • Users value the automation capabilities of Gradient Cyber, enhancing security management with proactive detection and intuitive features.
  • Users value the continuous monitoring by Gradient Cyber, which enhances security and reduces the need for daily logins.
  • Users praise the exceptional customer support from Gradient Cyber, feeling like a true partner in security management.
  • Users value the customization options of Gradient Cyber, enabling tailored features that perfectly fit their security needs.
  • Users value the intuitive dashboard customization of Gradient Cyber, enhancing usability and effectiveness across various environments.

What Are Recent G2 Reviews of Gradient Cyber?

NetShield

COSGrid NetShield is an advanced Network Detect and Response (NDR) solution that utilizes big data and machine learning technologies. It offers both real-time and historical visibility into network activities, along with various features such as baselining, correlation, anomaly and threat detection, and threat mitigation. Benefits: Real-time Traffic Analysis: Constantly examines raw network traffic and flow records to establish a baseline of normal network behavior. Threat Detection: Utilizes machine learning and other analytical techniques that go beyond traditional signature-based approaches to identify suspicious network traffic. Automated Response: Analyzes the traffic within the network to detect lateral movements, and can automatically initiate response actions to counter potential threats.

Average Rating: 4.3/5.0

Total Reviews: 2

How Do G2 Users Rate NetShield?

  • Metadata Enrichment: 6.7/10 (Category avg: 8.5/10)
  • Quality of Support: 8.3/10 (Category avg: 8.9/10)
  • Multi-Network Monitoring: 8.3/10 (Category avg: 8.6/10)
  • Network Visibility: 8.3/10 (Category avg: 8.9/10)

Who Is the Company Behind NetShield?

  • Seller: COSGrid Networks
  • Year Founded: 2016
  • HQ Location: Chennai, IN
  • LinkedIn® Page: www.linkedin.com
    11 employees on LinkedIn®
  • Ownership: Murugavel
  • Phone: 9022764534

Who Uses This Product?

  • Company Size: 50% Large, 50% Medium

What Are Recent G2 Reviews of NetShield?

ThreatBook TDP

ThreatBook TDP is a microstep online threat detection platform dedicated to accurately discovering internal missing hosts and helping security teams locate threats quickly and accurately.

Average Rating: 4.5/5.0

Total Reviews: 2

How Do G2 Users Rate ThreatBook TDP?

  • Metadata Enrichment: 9.2/10 (Category avg: 8.5/10)
  • Quality of Support: 9.2/10 (Category avg: 8.9/10)
  • Multi-Network Monitoring: 9.2/10 (Category avg: 8.6/10)
  • Network Visibility: 10.0/10 (Category avg: 8.9/10)

Who Is the Company Behind ThreatBook TDP?

Who Uses This Product?

  • Company Size: 50% Large, 50% Medium

What Do G2 Reviewers Say About ThreatBook TDP?

AI-generated summary from verified user reviews

Pros
  • Users value the alert notifications of ThreatBook TDP for their accuracy and user-friendly interface.
  • Users value the ease of use of TDP's dashboard, enabling quick visibility and effective threat management.
  • Users find the easy deployment of ThreatBook TDP highly convenient and efficient for getting started quickly.
  • Users value the quick visibility of network assets with TDP's user-friendly dashboard for efficient threat management.
  • Users value the quick visibility and ease of use of TDP's dashboard for effective threat response.

What Are Recent G2 Reviews of ThreatBook TDP?

ARIA SDS Packet Intelligence

The ARIA SDS Packet Intelligence (PI) application provides complete visibility into internal network traffic, including east-west data flows.

Average Rating: 4.5/5.0

Total Reviews: 1

How Do G2 Users Rate ARIA SDS Packet Intelligence?

  • Quality of Support: 8.3/10 (Category avg: 8.9/10)

Who Is the Company Behind ARIA SDS Packet Intelligence?

Who Uses This Product?

  • Company Size: 100% Small

What Are Recent G2 Reviews of ARIA SDS Packet Intelligence?

BAE Systems

CyberReveal, a suite of products for enhancing cyber security operations and protecting your business in the connected world.

Average Rating: 4.3/5.0

Total Reviews: 2

How Do G2 Users Rate BAE Systems?

  • Metadata Enrichment: 10.0/10 (Category avg: 8.5/10)
  • Quality of Support: 9.2/10 (Category avg: 8.9/10)
  • Network Visibility: 10.0/10 (Category avg: 8.9/10)

Who Is the Company Behind BAE Systems?

  • Seller: BAE Systems
  • Year Founded: 2016
  • HQ Location: Falls Church, US
  • LinkedIn® Page: www.linkedin.com
    17,268 employees on LinkedIn®
  • Ownership: LON: BA

Who Uses This Product?

  • Company Size: 50% Medium, 50% Small

What Are Recent G2 Reviews of BAE Systems?

Cynamics

Cynamics is the only Next Generation (NG) Network Detection and Response (NDR) solution in the market today using standard sampling protocols built-in to every gateway, patented algorithms, as well as AI and Machine Learning, to provide threat prediction and visibility at speed and scale. Designed for MSPs, MSSPs and companies of all sizes. Cynamics features: • Full network coverage in less than an hour • Requires no software agents or appliances • Does not increase client's attack surface • No blindspots or latency • Sampling-based protocols to predict 100% visibility with < 1% network traffic • Requires little-to-no management • Utilizes AI/ML to predict threats at a fraction of the cost of the competition • Eliminates the possibility of supply chain attacks

Average Rating: 4.0/5.0

Total Reviews: 1

How Do G2 Users Rate Cynamics?

  • Metadata Enrichment: 6.7/10 (Category avg: 8.5/10)
  • Quality of Support: 8.3/10 (Category avg: 8.9/10)
  • Multi-Network Monitoring: 6.7/10 (Category avg: 8.6/10)
  • Network Visibility: 8.3/10 (Category avg: 8.9/10)

Who Is the Company Behind Cynamics?

  • Seller: Cynamics
  • Year Founded: 2018
  • HQ Location: Boston, US
  • LinkedIn® Page: www.linkedin.com
    17 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 100% Large

What Are Recent G2 Reviews of Cynamics?

NDR by Bricata

Bricata is leading the next generation of advanced network detection and response for the enterprise. By fusing real-time visibility, advanced detection, analysis, forensics, incident response and threat hunting into a single platform, Bricata provides organizations with end-to-end visibility and full context for direct answers and powerful insight to take immediate action.

Average Rating: 4.0/5.0

Total Reviews: 1

How Do G2 Users Rate NDR by Bricata?

  • Quality of Support: 8.3/10 (Category avg: 8.9/10)

Who Is the Company Behind NDR by Bricata?

  • Seller: Bricata
  • Year Founded: 2014
  • HQ Location: Columbia, US
  • LinkedIn® Page: www.linkedin.com
    7 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 100% Large

What Are Recent G2 Reviews of NDR by Bricata?

What Are G2 Users Discussing About NDR by Bricata?

Sangfor Cyber Command

Cyber Command is a center control product of Sangfor security solution that is called the brain of Sangfor security operation matrix. It is able to efficiently coordinate our existing Sangfor firewall and EDR product to fix the security events.

Average Rating: 3.0/5.0

Total Reviews: 1

How Do G2 Users Rate Sangfor Cyber Command?

  • Quality of Support: 8.3/10 (Category avg: 8.9/10)

Who Is the Company Behind Sangfor Cyber Command?

Who Uses This Product?

  • Company Size: 100% Small

SecBI XDR

SecBI is a leading provider of Universal XDR (Extended Detection and Response) solutions that allow organizations to transform traditionally siloed security functions into a unified, automated, and highly successful detection and response operations system. By creating a vendor-agnostic XDR overlay, SecBI's Universal XDR Platform provides seamless and simple vendor agnostic product integration of already-deployed network, endpoint, and cloud security tools, enabling enterprises to extract greater value from existing security resources and to make their security operations more efficient and effective in protecting against sophisticated and stealthy cyber attacks. SecBI Universal XDR is used by finance, telecom, retail, and manufacturing enterprises worldwide. For more information, visit: http://www.secbi.com

Average Rating: 4.8/5.0

Total Reviews: 2

How Do G2 Users Rate SecBI XDR?

  • Metadata Enrichment: 10.0/10 (Category avg: 8.5/10)
  • Quality of Support: 10.0/10 (Category avg: 8.9/10)
  • Multi-Network Monitoring: 10.0/10 (Category avg: 8.6/10)
  • Network Visibility: 10.0/10 (Category avg: 8.9/10)

Who Is the Company Behind SecBI XDR?

  • Seller: SecBI
  • Year Founded: 2001
  • HQ Location: Copenhagen, Capital Region of Denmark, Denmark
  • LinkedIn® Page: www.linkedin.com
    1 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 100% Small

What Do G2 Reviewers Say About SecBI XDR?

AI-generated summary from verified user reviews

Pros
  • Users value the automation capabilities of SecBI XDR for quickly detecting and prioritizing real threats efficiently.
  • Users value the responsive customer support of SecBI XDR, enhancing their overall experience and satisfaction.
  • Users value the automatic correlation of security data by SecBI XDR, enabling quick detection of real threats.
  • Users find the ease of use of SecBI XDR enhances their security management experience significantly.
  • Users commend the easy implementation of SecBI XDR, allowing for quick and seamless deployment in their environments.
Cons
  • Users find the complex implementation of SecBI XDR challenging, needing in-depth knowledge for effective configuration.
  • Users find the complexity of configuration in SecBI XDR challenging, necessitating a deep understanding of their environment.
  • Users find the complex configuration of SecBI XDR challenging, needing significant expertise to optimize its performance.
  • Users find it challenging to configure and fine-tune SecBI XDR, needing a solid understanding of their environment for optimization.
  • Users find the learning curve steep for SecBI XDR, needing time to optimize configurations and workflows effectively.

What Are Recent G2 Reviews of SecBI XDR?

Strata Cloud Manager

Palo Alto Networks Strata™ Cloud Manager is the industry’s first AI-powered unified management and operations solution. It transforms network security by unifying the management of all network security products into a single interface, strengthening security in real-time across all enforcement points and proactively preventing disruptions—all aligned with our platform approach. Strata Cloud Manager empowers security teams to: - Gain Complete Visibility Across Your Network Security Estate: Achieve real-time, comprehensive visibility of your entire network security landscape including the most critical threats that need attention through a unified interface. - Enable Simple and Consistent Network Security Lifecycle Management: Manage configurations and policies consistently across all enforcement points from one interface. Improve operational efficiency with automated processes for onboarding, operations, and device refresh. - Strengthen Security Posture in Real-Time: Leverage AI-powered analysis to detect, resolve, and optimize policy anomalies. Improve your security posture with integrated best practice recommendations and maintain compliance with industry and infosec standards. - Proactively Resolve Network Disruptions and Enhance User Experience: Predict, diagnose and resolve network health issues– such as user experience problems, capacity bottlenecks, and service connection issues–up to 30 days in advance to ensure smooth operations. - Instant Knowledge at Your Fingertips to Resolve Issues Fast: Quickly find, understand, and address security and operational challenges before they escalate, streamlining network security management and operations. Strata Copilot, an AI-powered assistant with a natural language interface, provides immediate access to the full depth of the Strata Network Security platform and insights from your environment at your fingertips

Average Rating: 5.0/5.0

Total Reviews: 1

How Do G2 Users Rate Strata Cloud Manager?

  • Quality of Support: 10.0/10 (Category avg: 8.9/10)
  • Multi-Network Monitoring: 10.0/10 (Category avg: 8.6/10)
  • Network Visibility: 10.0/10 (Category avg: 8.9/10)

Who Is the Company Behind Strata Cloud Manager?

  • Seller: Palo Alto Networks
  • Year Founded: 2005
  • HQ Location: Santa Clara, CA
  • LinkedIn® Page: www.linkedin.com
    23,492 employees on LinkedIn®
  • Ownership: NYSE: PANW
  • Total Revenue (USD mm): $3,408

Who Uses This Product?

  • Company Size: 100% Large

What Are Recent G2 Reviews of Strata Cloud Manager?

The Illusive Platform

lllusive continuously discovers and automatically remediates privileged identity risks that are exploited in all ransomware and other cyberattacks. Despite best-practice investments to protect identities, including deployment of PAM and MFA, 1 in 6 enterprise endpoints holds exploitable identity risks. Illusive makes it easy for security teams to get visibility into the vulnerable identities sprawled across an organization’s endpoints and servers, then eliminate them or deploy deception-based detection techniques as a compensating control to stop attackers. Illusive has participated in over 140 red team exercises and has never lost one! Founded by nation state attackers, Illusive’s technology is trusted by large global financials, retailers, services organizations, and pharmaceuticals.

Average Rating: 4.0/5.0

Total Reviews: 1

How Do G2 Users Rate The Illusive Platform?

  • Metadata Enrichment: 10.0/10 (Category avg: 8.5/10)
  • Quality of Support: 8.3/10 (Category avg: 8.9/10)
  • Network Visibility: 10.0/10 (Category avg: 8.9/10)

Who Is the Company Behind The Illusive Platform?

  • Seller: Proofpoint
  • Year Founded: 2002
  • HQ Location: Sunnyvale, CA
  • LinkedIn® Page: www.linkedin.com
    5,261 employees on LinkedIn®
  • Ownership: NASDAQ: PFPT

Who Uses This Product?

  • Company Size: 100% Small

What Are Recent G2 Reviews of The Illusive Platform?

ThreatDefend

The Attivo Networks ThreatDefend Platform is a comprehensive cybersecurity solution designed to detect and respond to in-network threats in real time. By deploying deception techniques, it identifies stolen credentials, ransomware, and targeted attacks across various environments, including user networks, data centers, cloud infrastructures, SCADA systems, IoT devices, and POS systems. The platform's advanced attack analysis and actionable alerts enable organizations to accelerate their incident response processes, thereby reducing the risk of breaches and data loss. Key Features and Functionality: - Deception Technology: Utilizes authentic decoys and lures to misdirect attackers, effectively revealing their presence within the network. - Comprehensive Coverage: Offers protection across multiple attack surfaces, including endpoints, networks, cloud environments, serverless functions, IoT devices, and specialized systems like SCADA and POS. - Real-Time Detection and Analysis: Provides immediate, substantiated alerts based on actual attacker engagements, facilitating swift incident response. - Integration Capabilities: Seamlessly integrates with existing security solutions, such as Micro Focus ArcSight, to enhance visibility and improve incident response efficiency. - Machine Learning Automation: Employs machine learning to automate the creation and deployment of decoys and lures, ensuring the deception environment remains dynamic and authentic. Primary Value and Problem Solved: The ThreatDefend Platform addresses the critical need for early detection of in-network threats that have bypassed traditional perimeter defenses. By employing deception strategies, it effectively reduces attacker dwell time, prevents privilege escalation, and detects lateral movement within the network. This proactive approach not only enhances an organization's security posture but also streamlines incident response, ultimately mitigating the risk of data breaches and operational disruptions.

Average Rating: 3.5/5.0

Total Reviews: 1

How Do G2 Users Rate ThreatDefend?

  • Quality of Support: 8.3/10 (Category avg: 8.9/10)

Who Is the Company Behind ThreatDefend?

Who Uses This Product?

  • Company Size: 100% Small
Brandon Summers-Miller
BS
Researched and written by Brandon Summers-Miller
Updated October 3, 2024