Enea Qosmos

What Enea Qosmos does

Enea Qosmos is an embedded Deep Packet Inspection (DPI) and traffic intelligence business unit within Enea AB, a publicly traded Swedish company listed on Nasdaq Stockholm (ticker: ENEA). Founded in 2000 and headquartered in Clichy, France, Enea Qosmos develops commercial-grade DPI and threat detection technology that classifies network traffic in real time up to Layer 7. The technology recognizes more than 4,900 protocols and applications using a combination of stateful inspection, behavioral and statistical analysis, heuristics, and machine learning. A distinctive capability, branded First Packet Advantage, classifies traffic on the first packet — covering VPNs, anonymizers, domain fronting, tunneling, and file spoofing — supported by a continuously updated cache of hundreds of millions of DPI-validated IP addresses. Encryption Guard extends visibility into encrypted traffic through statistical analysis, machine learning, DNS-based classification, and the First Packet cache.

The product portfolio comprises three core lines: the Qosmos ixEngine (an SDK-embedded DPI engine licensing more than 4,900 protocols); the Qosmos TD SDK (an IDS-based threat detection SDK co-developed with the Open Information Security Foundation and embedding Suricata core functionality); and the Qosmos Probe (a high-throughput network sensor supporting up to 100 Gbps). Adjacent messaging security products — including the Enea Adaptive Messaging Firewall and AI-Driven Message Categorization — serve mobile operators, CPaaS providers, and government agencies. Enea Qosmos sells primarily through an OEM/embedded model, licensing SDKs to cybersecurity and networking vendors under annual subscription and support contracts. The business claims penetration in 5 of 6 SSE market leaders, 4 of 5 SASE leaders, and 3 of 4 SD-WAN leaders, with an overall 80% share among the leaders of SSE, SASE, and Secure SD-WAN, and reports more than 300 customers across over 100 countries. The go-to-market is direct enterprise field sales targeting solution architects and technical decision makers at major vendor accounts.

Name

Enea Qosmos

Legal name

Enea AB

Website

https://qosmos.com

Company type

Public

Founded year

2000

Operating status

Operating

Headcount range

251–500 employees

Short description

Enea Qosmos, a product line of Enea AB, provides embedded Deep Packet Inspection and traffic intelligence SDKs for cybersecurity, networking, and messaging security vendors. Its ixEngine and TD SDK are licensed into products of 80% of leading SSE, SASE, and SD-WAN vendors globally.

Ownership category

akta.pro rank

Product category

Deep Packet Inspection Software

NAICS

Security Systems Services (except Locksmiths) (561621), Security Systems Services (56162), Computer Systems Design and Related Services (5415)

SIC

Computer Communications Equipment (3576), Industrial Instruments For Measurement, Display, And Control (3823), Services-Computer Integrated Systems Design (7373)

akta.pro primary industry

Industrial Protocol Security & Deep Packet Inspection (DPI) (HDADAJAH)

akta.pro secondary industries

Intrusion Detection & Prevention Systems (IDS/IPS) (HDAFAFAD), Fault & Performance Monitoring (SNMP/Telemetry/APM for Networks) (HDAFAMAA), Service Assurance & SLA/QoS Management (HDAFAMAL)

Keywords

• Deep Packet Inspection
• Network Traffic Intelligence
• Embedded DPI Engine
• Threat Detection SDK
• Messaging Security

Headquarters

HQ city

Clichy

HQ country

France

HQ region

Europe

Offices3 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure

Revenue model

1. Software Licensing (SDK): Qosmos ixEngine and TD SDK are delivered as Software Development Kits licensed to cybersecurity and networking solution vendors for embedding into their products. Revenue is generated through licensing fees, maintenance contracts, and protocol signature updates.
2. Subscription and Support Services: The company offers 24/7 global support with various levels of maintenance and advisory services including regular software and protocol signature updates, generating recurring subscription revenue.

Pricing tiers

Go-to-market motion2 records

Distribution channels2 records

Marketing channels5 records

Core offering

Enea Qosmos develops and licenses embedded Deep Packet Inspection (DPI) and traffic intelligence software, delivered as Software Development Kits (SDKs) that cybersecurity and networking vendors embed into their products. The Qosmos ixEngine recognizes over 4,900 protocols and applications in real time using stateful inspection, behavioral/statistical analysis, heuristics, and machine learning, while the Qosmos TD SDK provides IDS-based threat detection and the Qosmos Probe delivers up to 100 Gbps network visibility. Complementary offerings include the Enea Adaptive Messaging Firewall family (AI-powered SMS/MMS/RCS security for mobile operators and CPaaS providers).

Product overview

Enea Qosmos provides embedded network traffic intelligence and cybersecurity solutions, comprising three core product families: (1) Qosmos embedded DPI products - including the Qosmos ixEngine (next-generation DPI engine recognizing 4900+ protocols delivered as SDK), Qosmos TD SDK (IDS-based threat detection integrating Suricata), and Qosmos Probe (high-throughput network sensor up to 100 Gbps); (2) Enea Adaptive Messaging Firewall products protecting SMS/MMS/RCS with AI capabilities, including versions for mobile operators and CPaaS providers; and (3) AI-driven message categorization as an add-on enabling value-based pricing, routing optimization, and compliance. The portfolio is powered by AI/ML for traffic classification, threat detection, and message analysis.

Differentiator

Problem solved

Functional benefit

Brands

• Qosmos ixEngine: Commercial grade, next-generation Deep Packet Inspection and classification engine that recognizes over 4900 protocols and applications.
• Qosmos TD SDK
• Qosmos Probe

Products and services

• Qosmos ixEngine Commercial-grade next-generation Deep Packet Inspection (DPI) and traffic classification engine that recognizes over 4,900 protocols and applications. Delivered as an SDK, it provides real-time traffic visibility up to Layer 7 for cybersecurity and networking solution vendors.
• Qosmos TD SDK (Threat Detection SDK) IDS-based threat detection software developed in partnership with the Open Information Security Foundation (OISF), embedding core functionalities from Suricata. Integrates with Qosmos ixEngine to eliminate double packet processing and accelerate parsing speed for improved threat detection performance in cybersecurity solutions.
• Qosmos Probe High-throughput network sensor providing non-intrusive visibility into network infrastructures at up to 100 Gbps. Combines advanced DPI-based network visibility with IDS-based threat detection, deployable on off-the-shelf hardware in under two hours.
• Enea Adaptive Messaging Firewall AI-powered messaging security solution protecting SMS, MMS, and RCS channels from fraud, spam, and smishing for mobile network operators. Detects grey routes, SIM bank fraud, and applies AI-driven message categorization for compliance and revenue optimization. Protects over 800 million subscribers for 99+ operators.
• Enea Adaptive Messaging Firewall for CPaaS Specialized messaging firewall variant for Communication Platform-as-a-Service (CPaaS) providers and aggregators. Protects SMS, MMS, and RCS channels while optimizing routing and ensuring compliance with operator policies.
• AI-Driven Message Categorization AI-powered message classification capability using supervised machine learning to categorize SMS, MMS, and RCS messages by intent (authentication, promotion, notification). Enables value-based pricing, optimized routing, and regulatory compliance enforcement.

Quantifiable outcome

• 5 out of 6 SSE market leaders embed Enea Qosmos ixEngine
• +7 more outcomes

Named customers6 records

Segments6 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability7 records

Feature6 records

Partnerships

One partnership is on record.

• Open Information Security Foundation (OISF)coreStrategic or Co-development Partner · 14 September 2023Enea partnered with the Open Information Security Foundation (OISF) to develop the Qosmos Threat Detection SDK. The SDK embeds core functionalities from Suricata, the industry's best-in-breed IDS, integrating it with Qosmos ixEngine for double packet processing elimination and accelerated parsing speed.

Scale indicators9 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• Viavi Solutions: Viavi provides DPI-driven network intelligence and assurance solutions for service providers, including deep packet inspection, application classification, and subscriber analytics overlapping with Qosmos's traffic intelligence portfolio.
• EXFO: EXFO offers network intelligence and DPI-based analytics solutions for service providers and enterprises, addressing similar traffic classification and visibility use cases as Qosmos in telecom and cybersecurity environments.
• Sandvine (AppLogic Networks): Sandvine, now AppLogic Networks, supplies DPI-based network analytics and policy enforcement for service providers, directly competing with Qosmos in traffic classification and visibility for telco deployments.
• Allot Ltd. Allot provides DPI-based traffic intelligence, security, and analytics solutions for telcos and CSPs, with comparable protocol recognition and network visibility capabilities to Qosmos ixEngine.
• ipoque (Rohde & Schwarz): ipoque, now part of Rohde & Schwarz, sells embedded DPI engines for network analytics, cybersecurity and traffic management, directly competing with Qosmos ixEngine in the OEM DPI category.

Emerging players

• nDPI (ntop): nDPI is an open-source DPI library maintained by ntop that offers protocol detection capabilities overlapping with Qosmos ixEngine, often used by cost-sensitive or in-house engineering teams as an alternative to commercial DPI SDKs.
• Procera Networks (Sandvine): Procera, now part of Sandvine/AppLogic Networks, historically competed as a direct DPI vendor for deep packet inspection; continued integration into AppLogic Networks keeps it as an emerging peer in the same embedded DPI category.

Broad incumbents

• Palo Alto Networks (App-ID): Palo Alto Networks operates App-ID, a proprietary DPI and application classification technology embedded across its NGFW and Prisma SASE platforms, representing the largest in-house alternative to Qosmos DPI in the cybersecurity stack.
• Cisco (NBAR / Snort): Cisco offers NBAR2 for DPI-based application recognition across enterprise networking and SD-WAN, alongside Snort IDS for threat detection, competing with Qosmos for embedded DPI and threat intelligence slots.
• Netscout Systems (Omnis Cyber Intelligence): Netscout provides DPI-based service assurance, network and security visibility solutions (Omnis Cyber Intelligence) that compete with Qosmos Probe and ixEngine for high-throughput traffic analysis use cases.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat5 records

Key risks5 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/enea
• Xx.com/enea_qosmos

Revenue estimate

Valuation estimate

Number of profiles

Profiles3 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Enea Qosmos