Vectra AI leads in 2024 IDC report on network detection

Vectra AI has been designated a leader in the 2024 IDC MarketScape: Worldwide Network Detection and Response Vendor Assessment.

The report highlights Vectra AI's capability in offering network detection and response solutions that effectively discern between signal and noise. According to the assessment, the primary strength of Vectra AI lies in the types of telemetry it collects and correlates. "It can be argued that in all cybersecurity, the biggest problem is separating the signal from the noise. Vectra AI is designed to condense alerts into a workable, well-enriched handful of alerts. To do this, Vectra AI uses an entity-centric approach called Attack Signal Intelligence," the report states.

Security operations centre (SOC) practitioners have expressed concerns over tools that generate excessive alerts, causing vendor distrust. Reports such as the IDC MarketScape provide crucial evaluations that assist security leaders in making informed choices about replacing outdated tools. The IDC MarketScape report acknowledged, "Vectra references said that Vectra AI did a superior job of finding detections against other vendors in the proof-of-concept stage of engagement."

The report also emphasised the effectiveness of Vectra's proprietary alert prioritisation system, noting, "The proprietary scoring used to determine 'response' priority is preferred over most alert prioritisation scoring systems, the subtle difference being that the response itself and the potential blast surface are considered."

Chris Kissel, IDC Vice-President Security & Trust, stated, "Network detection and response (NDR) has traditional strengths in that it uses activity within the network and at the time of ingress/egress to find anomalies that should be investigated – new port activity, evidence of beaconing, and impossible travel are such use cases. Vectra AI is good at these types of detections, but what really gives Vectra AI lift, is the ability to consider endpoint and identity logs as well as logs from public clouds to build a comprehensive picture of adversarial behavior while maintain low false positives."

Mark Wojtasiak, Vice President of Research and Strategy at Vectra AI, commented, "We agree with the IDC MarketScape report that network detection and response (NDR) is especially powerful when combined with other tools. Today's SOC teams need visibility into a hybrid attack surface that extends from the network to identity and cloud. and that is what we have done with the Vectra AI Platform. With our patented Attack Signal Intelligence, we connect the dots in real-time giving SOC teams integrated and accurate detection of real attacks across their entire hybrid environment."

Vectra AI has consistently received recognition for its platform, notably being named the Customers' Choice for NDR. The company's platform is designed to integrate signals across public cloud, SaaS, identity, and data centre networks, leveraging its patented Attack Signal Intelligence to enable rapid detection and response to advanced cyber-attacks.