ElastiFlow

What ElastiFlow does

ElastiFlow is a private network observability and security analytics vendor founded in 2017 by Rob Cowart (CEO) and Sven Cowart (CTO) and headquartered in Oakland, California (Delaware-incorporated). The company sells a subscription-based platform that ingests unsampled network flow data (IPFIX, NetFlow, sFlow) from more than 100 device vendors, extracts 6,200+ standard and vendor-specific fields, and writes that data into customer-owned open data platforms such as Elasticsearch, OpenSearch, Kafka, Confluent, Redpanda, Splunk, and Cribl Stream. Its product portfolio spans NetObserv (core flow collection and analytics), NetIntel (threat intelligence enrichment with ML-based analytics for Shadow IT detection and compliance scanning), and Mermin (Kubernetes network observability using OpenTelemetry-native and eBPF-powered technology). The company's Time Series Data Streams (TSDS) support reduces unsampled flow storage costs by 50-70%, which is positioned as the central economic unlock for complete network observability at enterprise scale.

ElastiFlow serves enterprise and mid-market organizations operating complex hybrid and cloud-native networks, with explicit targeting of three buyer groups: NetOps, SecOps, and DevOps/SRE. Go-to-market is sales-led (anchored by a January 2025 interim CRO hire from Dynatrace) and complemented by a multi-track partner program covering Technology Alliance Partners, Managed Service Providers, OEM/ElastiFlow Inside, and Global Systems Integrators, with named partners including Elastic, Juniper Networks, Calix, Oracle, Rohde & Schwarz, NetQuest, Wurth Phoenix, and amasol. Pricing is subscription-based, with a free tier (up to 4,000 flows/s) and a 30-day trial of the full commercial offering. The company maintains a community-led growth motion anchored by 40,000+ active community users across forum, Slack, and GitHub, supplemented by content marketing, webinars, and conference presence at Cisco Live and KubeCon.

The company has raised approximately $8 million in total disclosed funding, all from early-stage investor Venture Guides, across an August 2023 SEC Form D filing of roughly $3 million and a December 2023 $3M seed round, followed by a $5M follow-on in June 2024. Headcount has scaled from fewer than 10 to approximately 40 in roughly a year, with most employees remote; the company was recognized on Inc.'s Best Workplaces 2025, the Inc. 5000 Medallion 2025, and the Vet100 Seal 2026. Leadership has been expanded with the appointments of Eric Fischer as Interim CRO and Vivien Fang as VP of Strategic Alliances, indicating a deliberate transition from founder-led selling toward professionalized enterprise go-to-market.

Name

ElastiFlow

Legal name

ElastiFlow Inc.

Website

https://elastiflow.com

Company type

Private

Founded year

2017

Operating status

Operating

Headcount range

11–50 employees

Short description

ElastiFlow provides subscription-based network observability and security analytics built on unsampled flow data from 100+ vendors, serving enterprise NetOps, SecOps, and DevOps teams through open data platforms like Elastic, Splunk, and OpenSearch.

Ownership category

akta.pro rank

Product category

Network Observability Software

NAICS

Computer Systems Design and Related Services (5415), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (51821)

SIC

Services-Prepackaged Software (7372)

akta.pro primary industry

Network Observability, Assurance & Closed-Loop Operations (Telemetry, AIOps) (HDAIAIAJ)

akta.pro secondary industry

Security Data Lake, Telemetry Pipelines & Observability Security (HDADAGAH)

Keywords

• Network observability
• Flow analytics
• Threat intelligence
• Kubernetes monitoring
• Security analytics

Headquarters

HQ city

Atlanta

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations

Revenue model

1. Subscription Software Licenses: ElastiFlow operates on a subscription-based software licensing model. Commercial EULAs reference subscription fees set forth in customer orders. The company offers subscription tiers (as evidenced by the /subscriptions page on the website), with a free version available and a 30-day free trial for the complete offering. Subscription fees are invoiced with payment terms of 30 days from invoice date. Maintenance and support are included as part of the subscription.

Pricing tiers

Go-to-market motion3 records

Distribution channels3 records

Marketing channels7 records

Core offering

ElastiFlow provides a network observability and security analytics platform that collects unsampled network flow data from over 100 vendor implementations and extracts 6,200+ standard and vendor-specific fields. The platform delivers real-time, contextualized visibility for NetOps, SecOps, and DevOps teams through products including NetObserv (flow collection), NetIntel (threat intelligence enrichment), and Mermin (Kubernetes observability). It is offered as subscription software with a free community edition, integrating with open data platforms such as Elasticsearch, OpenSearch, Kafka, Splunk, and Cribl Stream.

Product overview

ElastiFlow offers a unified network observability and security platform with two primary products: NetObserv (the core network observability platform) and NetIntel (the threat intelligence product). Mermin extends the portfolio to Kubernetes environments. The platform is built on an open data approach, integrating with Elastic, OpenSearch, Kafka, Splunk and other data platforms. The company focuses on unsampled flow data collection for complete network visibility, supporting over 6,200 data fields from 100+ network vendors.

Differentiator

Problem solved

Functional benefit

Brands

• NetObserv: Network observability solution for collecting and analyzing network flow data, formerly known as Unified Flow Collector
• NetIntel
• Mermin

Products and services

• NetObserv Scalable network flow observability platform that collects and analyzes unsampled network flow data from over 100 vendor implementations, extracting 6,200+ standard and vendor-specific fields. Provides real-time, contextualized visibility for NetOps, SecOps, and DevOps teams, with bi-directional flow analysis and automated Kubernetes enrichment, integrating with open data platforms such as Elasticsearch, OpenSearch, Kafka, and Splunk.
• NetIntel Threat intelligence product that consolidates network and threat intelligence information into a single feed, enriching live network traffic with aggregated intelligence from globally distributed proprietary sensors and ML-based analytics. Reduces noisy, generic threat alerts, identifies Shadow IT by detecting actual cloud service usage, surfaces compliance violations, and generates actionable threat notifications for both internal and external actors.
• Mermin Kubernetes network observability tool using OpenTelemetry-native and eBPF-powered technology to provide vendor-neutral OTel traces that correlate application performance with the underlying network layer. Provides automated Kubernetes enrichment with K8s metadata, bidirectional flow analysis, and exports data as OTel traces for integration with Grafana, OpenSearch, and DataDog.

Quantifiable outcome

• 50-70% reduction in storage costs for unsampled flow data through TSDS support
• +3 more outcomes

Named customers4 records

Segments4 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration12 records

AI capability3 records

Feature4 records

Partnerships

Six partnerships are on record, tiered core and minor.

• Rohde & Schwarz (ipoque)coreTechnology or Integration · 21 May 2025Strategic partnership where ElastiFlow enriches IPFIX records from Rohde & Schwarz network monitoring solutions, transforming raw data into actionable insights for rapid detection of network events, security threats, and application performance issues. The combined approach gives NetOps, SecOps, and DevOps teams a single contextualized view of network activity. Dr. Ing. Martin Mieth, Director Network Analysis at ipoque (A Rohde & Schwarz Company) noted the partnership combines deep packet inspection capabilities with ElastiFlow's innovative network flow data technology.
• NetQuest CorporationcoreTechnology or Integration · 10 March 2021NetQuest and ElastiFlow deliver a highly scalable network visibility solution combining NetQuest's OMX3200 packet broker with ElastiFlow's NetObserv Unified Flow Collector. The joint solution enables persistent monitoring of high-bandwidth networks (100GbE and beyond) with unsampled IPFIX flow metadata for real-time threat detection. This partnership enables security teams to leverage high-fidelity IPFIX flow metadata for complete visibility into network traffic.
• ElasticcoreTechnology or IntegrationElastic is a technology alliance partner and integration partner for ElastiFlow. The ElastiFlow platform is built natively on Elasticsearch, Kibana, and OpenSearch open data platforms. The companies co-market solutions and participate in joint webinars (e.g., 'Modern NetFlow Unleashed' DoD-focused webinar with Robert Cowart and Elastic's Steve Kearns). VP of Product Management at Elastic, Steve Kearns, participated in ElastiFlow's 'Unifying NetOps & SecOps for Future-Ready IT' panel.
• Wurth PhoenixminorChannel Partner/ Reseller/ DistributorWurth Phoenix is listed as a partner on the ElastiFlow partner program page, indicating a channel or reseller relationship for distributing ElastiFlow solutions.
• amasolminorChannel Partner/ Reseller/ Distributoramasol is listed as a partner on the ElastiFlow partner program page, indicating a channel or reseller relationship for distributing ElastiFlow solutions.
• Deploy PartnersminorChannel Partner/ Reseller/ DistributorDeploy Partners is listed as a partner on the ElastiFlow partner program page, indicating a channel or implementation partner relationship.

Scale indicators8 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• Kentik: Kentik is a network observability platform built on internet flow telemetry (NetFlow, sFlow, IPFIX) for enterprises and service providers. It is the closest direct competitor to ElastiFlow in flow-based network observability for hybrid and cloud-native environments.
• LiveAction: LiveAction provides network performance monitoring and diagnostics for enterprise networks using flow data and packet analysis. It competes head-to-head with ElastiFlow's NetObserv for NetOps teams seeking real-time network visibility.
• ExtraHop: ExtraHop delivers network detection and response (NDR) and wire-data analytics for security and network operations. It overlaps with ElastiFlow's NetObserv and NetIntel products in using network traffic as the primary telemetry source for threat detection.
• Catchpoint: Catchpoint provides digital experience and network observability for cloud and internet-dependent applications. It is comparable to ElastiFlow in targeting enterprises that need real-time visibility into network paths and application performance.
• Plixer (cPacket Networks): Plixer (now part of cPacket Networks) provides flow-based network monitoring and security analytics using NetFlow/IPFIX. It competes directly with ElastiFlow NetObserv in flow analytics for network performance and security use cases.

Broad incumbents

• NetScout Systems: NetScout is an established provider of network performance management and packet-flow analytics for service providers and large enterprises. It represents the legacy incumbent against which ElastiFlow positions its modern, open-data flow platform.
• Cisco ThousandEyes: Cisco ThousandEyes provides internet and network observability as part of Cisco's full-stack observability portfolio. It is a broader incumbent alternative for enterprises consolidating network visibility under a single large vendor.
• Splunk: Splunk offers an enterprise SIEM and observability platform with a network data add-on and a Splunk App integration for ElastiFlow. It is both a partner and an incumbent competitor in network-derived security and observability analytics.
• Dynatrace: Dynatrace is a full-stack observability and APM platform with growing network monitoring capabilities. ElastiFlow's Interim CRO scaled Dynatrace from $3M to $330M, and Dynatrace represents the bundled-suite alternative to ElastiFlow's specialized flow platform.

Emerging players

• Corelight: Corelight delivers network security analytics built on open-source Zeek, providing enriched network telemetry for SOC teams. It overlaps with ElastiFlow's NetIntel product in using network-derived data for threat detection, with a stronger SOC/security tilt.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/ElastiFlow
• GitHubgithub.com/elastiflow
• YouTubeyoutube.com/@elastiflow
• LinkedInlinkedin.com/company/elastiflow

Revenue estimate

Valuation estimate

Number of profiles

Profiles4 records

Funding overview

Funding rounds2 records

Investors1 record

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about ElastiFlow