Netography
Netography built a cloud-native network observability platform that ingested flow logs and DNS data across hybrid and multi-cloud environments and applied 300+ detection models for enterprise SOC teams. The company was acquired by Vectra AI in October 2025 and rebranded as Vectra Fusion.
- Company typePrivate
- Founded2018
- HeadquartersAnnapolis, United States
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What Netography does
Netography was a cloud-native network observability and threat detection company founded in 2018 and headquartered in Annapolis, Maryland. The company built the Fusion platform (later rebranded Vectra Fusion), which ingested and normalized VPC/VNet flow logs, DNS logs, and on-premises NetFlow/sFlow data from AWS, Azure, GCP, Oracle Cloud, and IBM Cloud environments. It enriched this traffic with context from security and IT tools including CrowdStrike, Microsoft Defender, SentinelOne, Axonius, Wiz, Tenable, and Claroty, then applied 300+ detection models to surface threats, lateral movement, exposures, and misconfigurations across hybrid and multi-cloud networks. The platform was deployed agentlessly via cloud-native API integrations and exposed a custom Network Query Language (NQL) for filtering, dashboarding, and detection authoring, with an open-source MCP server enabling natural language AI workflows.
The company operated a subscription-based SaaS business model sold primarily through direct enterprise field sales, supplemented by MSSP, technology, reseller, and distributor channels, with quote-based pricing and no publicly disclosed list prices. Its customer base spanned financial services (including a named customer FICO), healthcare, higher education, and federal/government, addressing enterprise SOC use cases such as threat detection, lateral movement containment, compliance validation, and zero-trust segmentation.
In October 2025, Vectra AI acquired Netography and rebranded the platform as Vectra Fusion, integrating the cloud-native observability stack into Vectra's broader AI-driven cybersecurity platform. Prior to the acquisition, Netography had raised $2.6 million in seed funding from Andreessen Horowitz (February 2019) and $45 million in Series A funding co-led by Bessemer Venture Partners and SYN Ventures (November 2021), and operated with 11-50 employees under CEO Martin Roesch.
Netography firmographics
Firmographics- Name
- Netography
- Website
- https://netography.com
- Company type
- Private
- Founded year
- 2018
- Operating status
- Acquired
- Headcount range
- 11–50 employees
- Short description
- Netography built a cloud-native network observability platform that ingested flow logs and DNS data across hybrid and multi-cloud environments and applied 300+ detection models for enterprise SOC teams. The company was acquired by Vectra AI in October 2025 and rebranded as Vectra Fusion.
- Ownership category
- akta.pro rank
Netography industry classification
Industry- Product category
- Network Detection and Response (NDR)
- NAICS
- Computer Systems Design and Related Services (54151), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (5182)
- SIC
- Services-Computer Programming, Data Processing, Etc. (7370), Services-Computer Integrated Systems Design (7373)
- akta.pro primary industry
- Attack Detection & Response for Cloud/SaaS (SOC for Cloud) (HDADAGAJ)
- akta.pro secondary industries
- Distributed Tracing (HDABAJAD), Third-Party & Supply Chain Exposure Monitoring (HDADAHAJ)
Keywords
Where Netography is headquartered
LocationHeadquarters
- HQ city
- Annapolis
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
Netography business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Infrastructure, Operations
Revenue model
- Platform Subscription: Cloud-native SaaS platform subscription model for network observability and threat detection, likely sold as an annual or multi-year contract to enterprise customers.
Go-to-market motion1 record
Distribution channels4 records
Marketing channels8 records
Netography product offering
Product offeringCore offering
Netography developed and sold Vectra Fusion (formerly Netography Fusion), a cloud-native network observability and threat detection platform that ingests and normalizes VPC/VNet flow logs, DNS logs, and on-premises NetFlow/sFlow data from hybrid and multi-cloud environments. The platform enriches traffic with context from cloud providers and third-party security tools, applies 300+ detection models to surface exposures and attacker activity, and delivers findings via a web portal, REST API, and MCP server for enterprise security operations teams.
Product overview
Netography developed a cloud-native network observability and threat detection platform called Netography Fusion (now rebranded to Vectra Fusion following the October 2025 acquisition by Vectra AI). The platform ingests and normalizes network traffic logs—including cloud VPC/VNet flow logs, DNS logs, and on-premises NetFlow/sFlow—from hybrid and multi-cloud environments (AWS, Azure, GCP, Oracle Cloud, IBM Cloud). It enriches this traffic data with context from cloud providers and third-party security tools (endpoint protection, asset management, vulnerability management), applies 300+ detection models aligned to MITRE ATT&CK, and delivers alerts via SIEM and SOAR integrations. The platform operates as the observability and detection layer within the broader Vectra AI Platform, which also encompasses threat detection and response, exposure management, and managed MDR services.
Differentiator
Problem solved
Functional benefit
Products and services
- Vectra Fusion Cloud-native network observability and threat detection platform that ingests and normalizes VPC/VNet flow logs, DNS logs, and on-premises NetFlow/sFlow data from hybrid and multi-cloud environments; enriches traffic with context from cloud providers and third-party security tools; applies 300+ detection models; and is accessible via web portal, REST API, and MCP server for enterprise security operations teams.
- Vectra AI Managed Detection and Response (MDR/MXDR) Managed Extended Detection and Response service providing 24/7 monitoring, threat hunting, and incident response as a service on top of the Vectra AI Platform, available to enterprises that want outsourced SOC capabilities.
Quantifiable outcome
- Complete visibility across on-premises and multi-cloud environments
- +1 more outcomes
Companies that use Netography
Customer profileNamed customers1 record
Segments5 records
Ideal customer profiles5 records
Netography technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration14 records
AI capability5 records
Feature7 records
Netography partnerships and signals
Strategic signalPartnerships
One partnership is on record.
- Vectra AIflagshipVectra AI acquired Netography in October 2025 to expand its AI-driven cybersecurity platform with pioneering cloud-native network observability. The acquisition integrates Netography's observability capabilities with Vectra AI's attack signal clarity to address challenges in modern hybrid network environments.
Scale indicators2 records
Recent moves6 records
Expansion highlights5 records
Netography competitors and assessment
Company assessmentDirect peers
- Corelight: Corelight delivers NDR built on Zeek (open-source NSM), providing network visibility and threat detection for enterprise SOCs. It targets a similar buyer profile to Netography and competes for the same hybrid multi-cloud network observability budget, with a more open-data approach.
- Darktrace: Darktrace is a direct competitor in AI-driven network detection and response, using ML to identify anomalous behavior across enterprise networks, cloud, and SaaS environments. Like Netography, it sells to enterprise SOC teams, though Darktrace emphasizes self-learning AI rather than flow-log-based detection.
- ExtraHop: ExtraHop provides network detection and response through deep packet inspection and machine learning, serving enterprise security teams. It overlaps directly with Netography in lateral movement detection and east-west traffic visibility, though ExtraHop historically requires sensors and decryption versus Netography's agentless model.
- IronNet Cybersecurity: IronNet provides AI-driven network detection and collective defense for enterprises and government agencies. It targets a similar federal/regulated-customer base as Netography and competes for NDR budget within large security operations environments.
Emerging players
- Wiz: Wiz is a cloud security posture management platform that integrates with Netography for context enrichment. It is an adjacent competitor in cloud security with overlapping SOC buyer relationships, and its broader move into runtime/cloud detection creates partial overlap with Netography's cloud network observability.
- Datadog Cloud Network Monitoring: Datadog offers cloud network monitoring and observability as part of its broader monitoring platform, with overlap in VPC flow log analysis and multi-cloud visibility. While primarily a DevOps observability tool, it increasingly addresses security use cases that compete with Netography for a share of the cloud observability budget.
Broad incumbents
- Vectra AI: Vectra AI acquired Netography in October 2025 and is now the parent company. Pre-acquisition, Vectra was also the closest direct NDR peer, focused on AI-driven attack signal intelligence across network, identity, and cloud. The combined entity competes directly against CrowdStrike, Microsoft, and Palo Alto in the NDR/XDR market.
- CrowdStrike: CrowdStrike's Falcon platform has expanded from endpoint detection into network detection, identity protection, and cloud security. It is also a key integration partner for Netography (context enrichment), but increasingly competes head-to-head as Falcon XDR/NDR capabilities grow into the same SOC use cases Netography addresses.
- Palo Alto Networks Cortex XDR: Palo Alto Networks Cortex XDR is a platform incumbent combining endpoint, network, and cloud data for threat detection and response. It overlaps with Netography's east-west traffic visibility and lateral movement detection but bundles those capabilities into a broader XDR platform.
- Cisco Secure Network Analytics (Stealthwatch): Cisco Stealthwatch is a legacy enterprise NDR platform sold as part of Cisco's broader security portfolio. It competes with Netography in network traffic analysis and threat detection for large enterprises, but with an appliance/sensor-based architecture versus Netography's agentless, cloud-native approach.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks5 records
Key highlights7 records
Customer concentration
Netography social profiles
Digital presenceNetography financial estimates
Financial estimateRevenue estimate
Valuation estimate
Netography leadership team
Management profileNumber of profiles
Profiles4 records
Netography funding detail
Funding detailFunding overview
Funding rounds2 records
Investors6 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Netography M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Netography
What does Netography do?
Netography developed and sold Vectra Fusion (formerly Netography Fusion), a cloud-native network observability and threat detection platform that ingests and normalizes VPC/VNet flow logs, DNS logs, and on-premises NetFlow/sFlow data from hybrid and multi-cloud environments. The platform enriches traffic with context from cloud providers and third-party security tools, applies 300+ detection models to surface exposures and attacker activity, and delivers findings via a web portal, REST API, and MCP server for enterprise security operations teams.
Is Netography a public or private company?
Netography is a private company. It is classified as corporate owned and is currently acquired.
When was Netography founded?
Netography was founded in 2018. It employs 11 to 50 people.
Where is Netography based?
Netography is headquartered in Annapolis, United States, in the North America region.
How does Netography make money?
One revenue line is on record: platform Subscription.
Who are Netography's main competitors?
Direct peers on record are Corelight, Darktrace, ExtraHop and IronNet Cybersecurity. Emerging players are Wiz and Datadog Cloud Network Monitoring. Broad incumbents are Vectra AI, CrowdStrike, Palo Alto Networks Cortex XDR and Cisco Secure Network Analytics (Stealthwatch).
Does Netography have an API?
Yes. The Fusion Portal is an API-driven interface, so everything available in the Portal is also accessible via the API. The API supports programmatic interaction for traffic filtering, dashboard customization, detection model creation, event management, and network forensics. Additionally, the Vectra Fusion MCP Server is an open-source, local Model Context Protocol (MCP) server that enables direct, natural language interaction with Vectra Fusion through AI workflows, allowing users to conduct network forensics, investigate suspicious activity, and analyze security events by chatting with AI in plain English. Developer documentation is at docs.fusion.vectra.ai/api-reference.
What industry is Netography in?
Netography's product category is Network Detection and Response (NDR). Its primary akta.pro industry code is HDADAGAJ, Attack Detection & Response for Cloud/SaaS (SOC for Cloud), with a secondary code of HDABAJAD, Distributed Tracing. Its NAICS code is 54151 and its SIC code is 7370.