Active Network Defense is a comprehensive SIEM / SOAR platform that simplifies threat detection, automates responses, and provides compliance visibility for your on-premises, cloud, and hybrid cloud environments. Active Network Defense delivers support for your environments running on Amazon Web Services, Microsoft Azure, and most other public cloud providers -- providing you a comprehensive solution to ensure security across your public, and private cloud infrastructure.
Active Network Defense​ provides essential security capabilities in a single platform, delivering everything you need to detect, and respond to threats and potential compliance issues. Active Network Defense easily scales your threat detection, and response capabilities as your hybrid environment changes.  Focus on identifying security issues and responding to threats, not managing logs, and complex SIEM platforms!
With Active Network Defense, you can rapidly deploy sensors into all of your, physical, virtual and cloud environments to centrally manage multi-layer event analysis, and detection of threats to your operations.

Threat Intelligence

Your Active Network Defense SIEM / SOAR platform receives continuous updates from the Hoplite Threat Intelligence Platform.  This critical integration saves your team from countless hours analyzing the different types of attacks, emerging threats, suspicious behavior, and exploits identified across the entire threat landscape.
Every day, the Hoplite Threat Intelligence Platform identifies, and delivers over 1 million threat indicators to Active Network Defense instances.  Using patented threat detection algorithms, and AI, Hoplite automatically analyzes your raw network traffic, and application event data to determine the nature of threats on your networks.

Deploy Anywhere

Active Network Defense is a modular, scalable, two-tier architecture to manage, and monitor every aspect of your network security.  Intelligent sensors collect, and normalize data from your on-premise, and cloud environments, while Active Network Defense provides centralized cloud security management, correlation, analysis, security automation, alerting, log management, and flexible reporting.
Purpose-built Active Network Defense software sensors deploy natively into each environment to help you gain visibility into all of your on-premise, and cloud environments. These sensors collect and normalize logs, monitor networks, and collect information about the environments, and assets deployed in your environments.
​​Secure Your Cloud Environment
Active Network Defense provides complete cloud security management for your cloud environments. AND includes the essential capabilities for monitoring cloud security, and quickly identifying malicious, or suspicious activity in your cloud environments.

A Sensor For Every Environment

Amazon Web Services

  • Purpose-built sensor for AWS
  • AWS-native intrusion detection
  • AWS-native vulnerability assessment
  • CloudTrail monitoring & alerting
  • S3 access log monitoring & alerting
  • ELB access log monitoring & alerting

Microsoft Hyper-V

  • Pre-configured by the Hoplite team to fit your environments
  • On-premises physical & virtual monitoring
  • Network and host IDS monitoring
  • Log collection for virtual & physical infrastructure
​

Microsoft Azure

  • Azure Insights monitoring & Alerting
  • Azure infrastructure assessment
  • Azure Service Bus & EventHub Integrations

VMWare ESXi

  • Pre-configured by the Hoplite team to fit your environments
  • Network and host IDS monitoring
  • Log collection for virtual & physical infrastructure
  • On-premises log collection & alerting

Physical

  • Pre-configured by the Hoplite team to fit your environments
  • Configured to handle > 10k Events Per Second
  • Deployable in, or out-of-band to suit your needs
.