GREYCORTEX
GREYCORTEX builds Mendel, a passive Network Detection and Response platform that uses AI-driven behavioral analysis, DPI, and signature-based IDS to secure enterprise IT and industrial OT/ICS networks. It serves enterprise and government customers across 27 markets, delivered via subscription through direct sales and channel partners.
- Company typePrivate
- Founded2016
- HeadquartersBrno, Czechia
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What GREYCORTEX does
GREYCORTEX (legal entity GreyCortex s.r.o.) is a private Czech cybersecurity vendor founded in 2016 in Brno by eight co-founders, operating in the Network Detection and Response (NDR) category. Its flagship product, GREYCORTEX Mendel, is a passive network traffic analysis platform that combines signature-based Intrusion Detection, Deep Packet Inspection across roughly 30 application protocols, Network Behavior Analysis driven by Bayesian and Gaussian Mixture Models, Network and Application Performance Monitoring, and a correlation/risk engine aligned with CVSS and the NIST Critical Infrastructure Cybersecurity Framework. A proprietary ASNM protocol captures 70+ attributes per flow, exceeding standard NetFlow/IPFIX, and the solution supports both enterprise IT environments and industrial OT/ICS/SCADA networks through the same platform, with appliance or virtual deployment.
The company serves enterprise and government customers across 27 markets, with public references spanning banking (Komercni Banka), technology (CD Projekt Red, CEDROBSA, HiLASE), government (Hyogo Prefecture), and education (VSE University), plus visible logos including JSW, Empik, and Y Soft. Mendel is sold as a recurring subscription on a hardware appliance or virtual ISO, priced per deployment rather than per seat, and delivered through direct enterprise field sales supplemented by value-added distributors (DNS in Czech Republic, CLICO in Poland/CEE), a flagship technology partnership with HPE Aruba Networking, and MSSP/SOCaaS partners offering Network Security Monitoring as a Service.
GREYCORTEX's go-to-market combines content-driven demand generation (blog, webinars, YouTube, LinkedIn), partner-led live attack demonstrations, and an annual GREYCORTEX Day conference. The company has been recognized by Deloitte Technology Fast 50 CE (2020 Rising Stars), Gartner and Forrester as a global NDR player (2026), and holds ISO 27001 certification and GDPR compliance. It has raised $1.3 million from Y Soft Ventures (2016) as its only disclosed funding round and operates with 11-50 employees, positioning it as a capital-efficient, founder-led European challenger in a market dominated by larger US-based NDR vendors.
GREYCORTEX firmographics
Firmographics- Name
- GREYCORTEX
- Legal name
- GreyCortex s.r.o.
- Website
- https://greycortex.com
- Company type
- Private
- Founded year
- 2016
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- GREYCORTEX builds Mendel, a passive Network Detection and Response platform that uses AI-driven behavioral analysis, DPI, and signature-based IDS to secure enterprise IT and industrial OT/ICS networks. It serves enterprise and government customers across 27 markets, delivered via subscription through direct sales and channel partners.
- Ownership category
- akta.pro rank
GREYCORTEX industry classification
Industry- Product category
- Network Detection and Response (NDR) / Network Security Monitoring
- NAICS
- Other Measuring and Controlling Device Manufacturing (334519)
- SIC
- Industrial Instruments For Measurement, Display, And Control (3823)
- akta.pro primary industry
- Network Detection & Response (NDR) (HDADABAI)
Keywords
Where GREYCORTEX is headquartered
LocationHeadquarters
- HQ city
- Brno
- HQ country
- Czechia
- HQ region
- Europe
Offices1 record
Markets served
GREYCORTEX business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Infrastructure, Operations
Revenue model
- GREYCORTEX Mendel Subscription Licenses: GREYCORTEX Mendel is sold as a subscription license, likely with annual or multi-year billing terms, based on deployment scale (hardware appliance or virtual installation). The product is available as a hardware appliance or virtual installation ISO for hypervisor deployment, suggesting pricing tied to deployment size and monitoring capacity rather than seat count.
Go-to-market motion3 records
Distribution channels5 records
Marketing channels7 records
GREYCORTEX product offering
Product offeringCore offering
GREYCORTEX develops and sells GREYCORTEX Mendel, a Network Detection and Response (NDR) platform delivered as a hardware appliance or virtual installation. The platform combines signature-based IDS, Deep Packet Inspection, AI/ML-powered Network Behavior Analysis, and performance monitoring to detect known and unknown threats across enterprise IT and industrial OT/ICS/SCADA networks. It is sold primarily to enterprise and government customers via subscription licenses, direct sales, and value-added channel partners.
Product overview
GREYCORTEX offers GREYCORTEX Mendel, a unified Network Detection and Response (NDR) platform for securing IT and OT networks. The product portfolio includes two primary variants: Mendel in IT for enterprise IT network security monitoring, and Mendel in OT for industrial control systems and SCADA networks. The platform is continuously updated with new versions, with Mendel 4.6 being the latest release. Mendel combines signature-based IDS detection with machine learning-powered behavioral analysis to provide comprehensive threat detection across both traditional IT and operational technology environments.
Differentiator
Problem solved
Functional benefit
Brands
- Mendel: Network Detection and Response (NDR) solution providing deep network visibility, AI-based threat detection, and automated incident response for IT and OT networks.
Products and services
- GREYCORTEX Mendel Network Detection and Response (NDR) platform combining signature-based IDS, Deep Packet Inspection, AI/ML-powered Network Behavior Analysis, and performance monitoring. Delivered as a hardware appliance or virtual installation, sold primarily via subscription license to enterprise and government customers across 27 markets globally.
- GREYCORTEX Mendel in IT Network Detection and Response offering for enterprise IT networks, providing security monitoring, threat detection, and network visibility for enterprise environments in government, healthcare, banking, and education.
- GREYCORTEX Mendel in OT Advanced industrial intrusion detection system (IDS) for OT/ICS/SCADA networks, designed for companies in energy, utilities, and manufacturing sectors. Monitors vendor remote access, legacy OT devices, and IT/OT convergence threats.
Quantifiable outcome
- Automatic blocking of attacker in approximately two minutes from attack initiation (demonstrated in HPE Aruba Networking live demo with CX10000 integration)
- +3 more outcomes
Companies that use GREYCORTEX
Customer profileNamed customers6 records
Segments8 records
Ideal customer profiles3 records
GREYCORTEX technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration9 records
AI capability5 records
Feature10 records
GREYCORTEX partnerships and signals
Strategic signalPartnerships
Four partnerships are on record, tiered flagship, core and minor.
- HPE Aruba NetworkingflagshipHPE Aruba Networking integrated GREYCORTEX Mendel with the HPE CX10000 switch platform. In live attack demonstrations published on HPE Aruba's Airheads Broadcasting YouTube channel, Mendel receives deep flow telemetry from the CX10000, identifies an ongoing port scan attack, and automatically updates the switch security policy with a blocking rule — all within approximately two minutes. This is a flagship technology integration demonstrating automated threat response.
- DNScoreDNS is a Czech value-added distributor. DNS partners with GREYCORTEX to distribute Mendel in the Czech Republic, offering local channel coverage, technical pre-sales support, and customer success capabilities in the home market.
- CLICOcoreCLICO is a specialized, value-added distributor operating in Poland and the CEE region since 1991. CLICO distributes GREYCORTEX Mendel as a key channel partner, providing local sales, pre-sales support, and post-sales services to customers in Poland and the broader Central and Eastern European market.
- EUCYBSEC (European Cyber Security Excellence Center)minorGREYCORTEX became a member of the non-profit EUCYBSEC (European Cyber Security Excellence Center) association. EUCYBSEC aims to create a communication space where commercial, state, and academic specialists can freely interact and share knowledge. Membership provides opportunities to participate in professional events organized by the association.
Scale indicators2 records
Recent moves8 records
Expansion highlights6 records
GREYCORTEX competitors and assessment
Company assessmentDirect peers
- Darktrace: UK-headquartered NDR vendor using AI/ML for anomaly detection across enterprise networks. Directly comparable to GREYCORTEX Mendel in core product category, target customer (enterprise/government), and unsupervised ML-based detection approach, though at significantly greater scale and global footprint.
- ExtraHop: US-based NDR vendor combining network detection with NPM/APM, similar in product positioning to GREYCORTEX Mendel. Competes for the same enterprise IT security and performance monitoring budgets and serves government, healthcare, and financial services customers.
- Vectra AI: AI-driven NDR vendor focused on detecting attacker behaviors in enterprise networks. Closely comparable in core technology (ML-based behavioral detection) and customer base (enterprise IT security), with overlapping geographic coverage in EMEA.
- Corelight: NDR vendor built on open-source Zeek with ML-based analytics. Competes in the same NDR category as GREYCORTEX Mendel, particularly for enterprise and government buyers who value evidence-based detection and Suricata/Zeek integration.
- IronNet Cybersecurity: NDR vendor with behavioral analytics for enterprise and government customers, including defense and critical infrastructure. Comparable in target verticals (government, financial services) and AI-based detection approach.
Broad incumbents
- Cisco (Secure Network Analytics / Stealthwatch): Incumbent networking vendor with an enterprise-scale NDR offering bundled into the broader Cisco security portfolio. Comparable in NDR functionality but vastly larger in scale, channel, and installed base; competes primarily in large enterprise accounts where Cisco is the incumbent networking vendor.
- Palo Alto Networks (Cortex XDR / NDR): Major cybersecurity platform vendor with an NDR module inside Cortex. Competes in the same enterprise deals as GREYCORTEX but as part of a much broader XDR/SIEM/SOAR portfolio, often displacing standalone NDR specialists via platform bundling.
- Arista Networks (Awake Security): Awake Security, now part of Arista, offers an NDR platform focused on threat detection using AI. Competes in similar enterprise accounts but benefits from Arista's networking scale and channel.
Emerging players
- Dragos: OT-focused network detection and response vendor. Highly relevant peer for GREYCORTEX's Mendel in OT product, but specializes exclusively in industrial/ICS environments rather than unified IT+OT, so they compete head-to-head in OT-only deals.
- Nozomi Networks: OT/IoT cybersecurity vendor with network monitoring and asset visibility for industrial environments. Comparable in the OT/ICS portion of GREYCORTEX's product line and overlaps in energy, utilities, and manufacturing verticals.
Market position
Strengths4 records
Weaknesses4 records
Competitive moat6 records
Key risks6 records
Key highlights7 records
Customer concentration
GREYCORTEX social profiles
Digital presenceGREYCORTEX compliance and trust
Trust signalCompliance1 record
GREYCORTEX financial estimates
Financial estimateRevenue estimate
Valuation estimate
GREYCORTEX leadership team
Management profileNumber of profiles
Profiles8 records
GREYCORTEX funding detail
Funding detailFunding overview
Funding rounds2 records
Investors1 record
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
GREYCORTEX M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about GREYCORTEX
What does GREYCORTEX do?
GREYCORTEX develops and sells GREYCORTEX Mendel, a Network Detection and Response (NDR) platform delivered as a hardware appliance or virtual installation. The platform combines signature-based IDS, Deep Packet Inspection, AI/ML-powered Network Behavior Analysis, and performance monitoring to detect known and unknown threats across enterprise IT and industrial OT/ICS/SCADA networks. It is sold primarily to enterprise and government customers via subscription licenses, direct sales, and value-added channel partners.
Is GREYCORTEX a public or private company?
GREYCORTEX is a private company. It is classified as venture growth investor backed and is currently operating.
When was GREYCORTEX founded?
GREYCORTEX was founded in 2016. It employs 11 to 50 people.
Where is GREYCORTEX based?
GREYCORTEX is headquartered in Brno, Czechia, in the Europe region.
How does GREYCORTEX make money?
One revenue line is on record: GREYCORTEX Mendel Subscription Licenses.
Who are GREYCORTEX's main competitors?
Direct peers on record are Darktrace, ExtraHop, Vectra AI, Corelight and IronNet Cybersecurity. Broad incumbents are Cisco (Secure Network Analytics / Stealthwatch), Palo Alto Networks (Cortex XDR / NDR) and Arista Networks (Awake Security). Emerging players are Dragos and Nozomi Networks.
Does GREYCORTEX have an API?
No public API is recorded for GREYCORTEX.
What industry is GREYCORTEX in?
GREYCORTEX's product category is Network Detection and Response (NDR) / Network Security Monitoring. Its primary akta.pro industry code is HDADABAI, Network Detection & Response (NDR). Its NAICS code is 334519 and its SIC code is 3823.