Stamus Networks
Stamus Networks is a private NDR vendor that builds Clear NDR, a Suricata-based network detection and response platform, and sells it to financial institutions, government agencies, central banks, critical infrastructure operators, and MSSPs via annual subscriptions priced by monitored bandwidth.
- Company typePrivate
- Founded2014
- HeadquartersIndianapolis, United States
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What Stamus Networks does
Stamus Networks is a private, venture-backed network detection and response (NDR) vendor headquartered in Indianapolis, Indiana and Paris, France, with a 100% virtual workforce distributed across eight countries. The company's flagship platform, Clear NDR Enterprise (formerly Stamus Security Platform), is built on Suricata, the open-source network security engine co-developed by the company's CTO Eric Leblond and CSO Peter Manev, who both serve on the OISF board. Clear NDR differentiates through its Declarations of Compromise and Declarations of Policy Violation frameworks, which aggregate multi-layer detections (signatures, heuristics, ML, behavioral analytics) into evidence-backed, high-confidence events designed to reduce alert fatigue and accelerate incident response.
The product portfolio includes Clear NDR Enterprise (paid), Clear NDR Community (free, formerly SELKS), Stamus Appliances (turnkey hardware for 40/100 Gbps installations), and a Stamus Labs open-source toolkit spanning Suricata Language Server, Jupyter Playbooks, GopherCAP, Splunk and Kibana dashboards, and threat intelligence feeds. Revenue is generated primarily through annual software subscriptions priced by monitored connection speed (100 Mbps to 100 Gbps tiers) supplemented by hardware appliance sales for high-throughput deployments. Go-to-market combines direct enterprise field sales with an extensive channel network of resellers, distributors, MSSPs, and technology integrations with SentinelOne, Splunk, CrowdStrike, Elastic, AWS, Google Cloud, Azure, and VMware Carbon Black.
Stamus Networks serves financial institutions, government CERTs, central banks, critical infrastructure operators, MSSPs, and large enterprises across North America, Europe (with notable French and Eastern European deployments), and the UK. The company has supported NATO CCDCOE cyber defense exercises for 10 consecutive years since 2016, holds a 4.7/5.0 rating on Gartner Peer Insights for NDR, and had raised approximately $9M in cumulative funding through a $6M Series A in August 2023 plus a subsequent ~$2.9M tranche in May 2025, ahead of a March 2026 leadership transition that brought in Mark Firmin as CEO and Patrick Deane as CFO to accelerate global expansion.
Stamus Networks firmographics
Firmographics- Name
- Stamus Networks
- Legal name
- Stamus Networks, Inc.
- Website
- https://stamus-networks.com
- Company type
- Private
- Founded year
- 2014
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- Stamus Networks is a private NDR vendor that builds Clear NDR, a Suricata-based network detection and response platform, and sells it to financial institutions, government agencies, central banks, critical infrastructure operators, and MSSPs via annual subscriptions priced by monitored bandwidth.
- Ownership category
- akta.pro rank
Stamus Networks industry classification
Industry- Product category
- Network Detection and Response (NDR)
- NAICS
- Security Systems Services (except Locksmiths) (561621), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (518)
- SIC
- Services-Prepackaged Software (7372), Computer Communications Equipment (3576)
- akta.pro primary industry
- Network Detection & Response (NDR) (HDADABAI)
- akta.pro secondary industry
- OT Threat Detection & Monitoring (NDR/IDS for ICS) (HDADAJAF)
Keywords
Where Stamus Networks is headquartered
LocationHeadquarters
- HQ city
- Indianapolis
- HQ country
- United States
- HQ region
- North America
Offices2 records
Markets served
Stamus Networks business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- Software Subscription (Clear NDR Enterprise): Annual subscription licensing for Clear NDR Enterprise software based on monitored connection speed (100 Mbps, 1 Gbps, 10 Gbps, 40 Gbps, 100 Gbps increments). Includes 24-hour threat intelligence updates, software maintenance, and support with new updates every 2-4 months.
- Hardware Appliances: Optional turnkey appliances for Clear NDR Probes and Clear NDR Central Server for on-premise installations, particularly for 40 Gbps and 100 Gbps requirements.
- Product Development and Market Expansion: Series A funding ($6M) to improve product innovation, customer experience, and marketing efforts for Suricata-based network security solutions.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Unit Pricing | Annual | Clear NDR Enterprise - Speed-based tiers |
Go-to-market motion2 records
Distribution channels4 records
Marketing channels7 records
Stamus Networks product offering
Product offeringCore offering
Stamus Networks develops and sells Clear NDR, a network detection and response platform built on the open-source Suricata engine that transforms raw network traffic into high-fidelity threat detections using Declarations of Compromise and Declarations of Policy Violation. The company sells the commercial Clear NDR Enterprise product as annual subscriptions licensed by monitored connection speed, supplemented by Stamus Appliances for high-throughput (40-100 Gbps) deployments, with optional cloud and on-premise deployment models. It also offers Clear NDR Community (formerly SELKS) as a free open-source edition.
Product overview
Stamus Networks offers Clear NDR, a unified network detection and response platform built on Suricata, comprising two main products: Clear NDR Enterprise (formerly Stamus Security Platform) for commercial deployments and Clear NDR Community (formerly SELKS) for free open-source use. The platform provides high-fidelity threat detection through Declarations of Compromise, guided threat hunting, and transparent explainable results. Deployment options include cloud, on-premise, and hardware appliances. The product portfolio includes Stamus Labs tools including Suricata Language Server, Jupyter Playbooks, GopherCAP, Splunk App, and threat intelligence feeds. Technical integrations with SentinelOne, Array Networks, Splunk, Elastic, and major cloud providers enable broad ecosystem connectivity.
Differentiator
Problem solved
Functional benefit
Brands
- Clear NDR: Network detection and response platform, formerly known as Stamus Security Platform (Clear NDR Enterprise) and SELKS (Clear NDR Community). Provides threat detection and response capabilities for enterprise clients.
- Suricata Language Server
- GopherCAP
Products and services
- Clear NDR Enterprise Primary commercial network detection and response platform built on Suricata, delivering high-fidelity threat detection through Declarations of Compromise, guided threat hunting, and transparent explainable results across enterprise, OT, and IoT environments. Formerly known as Stamus Security Platform.
- Clear NDR Community Free open-source community edition of the Clear NDR platform, formerly known as SELKS, providing open-source network detection and response capabilities for individuals and organizations to evaluate and deploy network security monitoring.
- Stamus Appliances Pre-configured, turnkey hardware appliances for Clear NDR Probes and Central Server deployments. Required for 40 Gbps and 100 Gbps installations to ensure performance objectives, with next business day repair and replacement support.
- Suricata Language Server Open-source IDE tool supporting Suricata signature development with workspace-wide SID tracking, AI-assisted signature development, CI/CD validation via GitHub Actions, and real-time diagnostics for large Suricata ruleset deployments.
- Open NRD Threat Intel Feeds Subscription-based threat intelligence feeds from Stamus Labs providing updated indicators of compromise and threat data for network detection.
- Stamus for Cloud Cloud deployment option for the Clear NDR platform, enabling organizations to monitor cloud infrastructure and hybrid environments on AWS, Google Cloud, and Azure.
- Stamus on-premise On-premise deployment option for Clear NDR platform that allows organizations to maintain network detection and response capabilities within their own infrastructure.
Quantifiable outcome
- Organizations reduced from millions of daily alerts to 10-15 actionable alerts requiring review
- +2 more outcomes
Companies that use Stamus Networks
Customer profileNamed customers8 records
Segments5 records
Ideal customer profiles5 records
Stamus Networks technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration19 records
AI capability8 records
Feature7 records
Stamus Networks partnerships and signals
Strategic signalPartnerships
19 partnerships are on record, tiered flagship and core.
- NATO CCDCOEflagship10th consecutive year supporting NATO Cooperative Cyber Defence Centre of Excellence (CCDCOE) cyber defense exercises including Locked Shields and Crossed Swords. Contributing expert personnel, technical training, and advanced network detection capabilities since 2016.
- SentinelOneflagshipIntegration of Clear NDR with SentinelOne Singularity platform bringing network intelligence into AI-powered SOC. Rich network telemetry delivered into Singularity Data Lake, real-time visibility into east-west traffic and agentless systems, automated endpoint action triggers based on network detections.
- SplunkcoreTechnology integration partner with free Splunk app available for Clear NDR data analysis and visualization.
- CrowdStrikecoreTechnology integration partner for unified security operations.
- ElasticcoreTechnology integration partner with Kibana dashboards and Elasticsearch integration.
- Array NetworkscoreJoint solutions including SSL Intercept for encrypted traffic decryption and Network Traffic Broker for high-performance threat detection. Array SSL Intercept enables visibility into SSL/TLS encrypted traffic for threat detection.
- AWScoreCloud deployment integration partner for Clear NDR cloud installations.
- Google CloudcoreCloud deployment integration partner for Clear NDR cloud installations.
- Microsoft AzurecoreCloud deployment integration partner for Clear NDR cloud installations.
- VMware Carbon BlackcoreTechnology integration partner for endpoint security interoperability.
- Suricata/OISFflagshipOpen-source foundation partner. Stamus Networks is the global leader in Suricata-based network security and co-founder Peter Manev is a member of the executive team at Open Network Security Foundation (OISF). CTO Eric Leblond sits on OISF board of directors.
- Titan Data SolutionscoreValue added reseller partner helping customers reduce risk and improve security posture.
- Airbus CybersecuritycoreValue added reseller partner for cybersecurity solutions distribution.
- Kudelski SecuritycoreValue added reseller partner for security solutions.
- ComputaCentercoreValue added reseller partner for Stamus Networks solutions.
- Hunt & HackettcoreMSSP partner reducing risk and improving security of clients using Clear NDR Enterprise.
- EdnoncoreMSSP partner for managed detection and response services.
- ConixcoreMSSP partner based in France for managed security services.
- PwC UKcoreTechnology integration partner for security operations.
Scale indicators4 records
Recent moves7 records
Expansion highlights6 records
Stamus Networks competitors and assessment
Company assessmentMarket position
Competitive moat6 records
Key risks6 records
Key highlights7 records
Customer concentration
Stamus Networks social profiles
Digital presenceStamus Networks financial estimates
Financial estimateRevenue estimate
Valuation estimate
Stamus Networks leadership team
Management profileNumber of profiles
Profiles9 records
Stamus Networks funding detail
Funding detailFunding overview
Funding rounds3 records
Investors4 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Stamus Networks M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Stamus Networks
What does Stamus Networks do?
Stamus Networks develops and sells Clear NDR, a network detection and response platform built on the open-source Suricata engine that transforms raw network traffic into high-fidelity threat detections using Declarations of Compromise and Declarations of Policy Violation. The company sells the commercial Clear NDR Enterprise product as annual subscriptions licensed by monitored connection speed, supplemented by Stamus Appliances for high-throughput (40-100 Gbps) deployments, with optional cloud and on-premise deployment models. It also offers Clear NDR Community (formerly SELKS) as a free open-source edition.
Is Stamus Networks a public or private company?
Stamus Networks is a private company. It is classified as venture growth investor backed and is currently operating.
When was Stamus Networks founded?
Stamus Networks was founded in 2014. It employs 11 to 50 people.
Where is Stamus Networks based?
Stamus Networks is headquartered in Indianapolis, United States, in the North America region.
How does Stamus Networks make money?
Three revenue lines are on record. Software Subscription (Clear NDR Enterprise) is the primary driver. The others are hardware Appliances and product Development and Market Expansion.
Does Stamus Networks have an API?
Yes. Clear NDR provides REST API endpoints that extend Analyst Operations Console capabilities into external integrations, SOAR platforms, ticketing systems, and custom automation workflows. The API enables integration of investigation data, detections, and telemetry into broader SOC operations.
What industry is Stamus Networks in?
Stamus Networks's product category is Network Detection and Response (NDR). Its primary akta.pro industry code is HDADABAI, Network Detection & Response (NDR), with a secondary code of HDADAJAF, OT Threat Detection & Monitoring (NDR/IDS for ICS). Its NAICS code is 561621 and its SIC code is 7372.