Change is coming to the network detection and response (NDR) market
After several years of relative stability and steady growth, Omdia research indicates that the network detection and response (NDR) segment appears poised for rapid change.
While a handful of vendors continue to enjoy significant market traction, the segment faces uncertainty due to the evolving demands on threat detection, investigation, and response (TDIR) solutions.
It’s becoming tougher for many vendors to find traction in a changing NDR market landscape. Several second-tier players have exited the market in the last several quarters, and Omdia expects a further culling of vendors in this segment. As the NDR market shakes out over the next 12–24 months, vendors must ensure that they can meet the visibility requirements of customers, as continued network evolution, cloud computing, and the need for proactive security approaches demand a greater focus on extended network visibility. This will include fully articulating NDR’s value within broader initiatives such as XDR and zero trust.
How Do NDR Vendors Differentiate Themselves?
NDR vendors differentiate across numerous features, but the most successful vendors share the goal of providing the highest possible signal-to-noise ratio in their threat detection techniques. No one needs another network-based “alert cannon.” There is significant variation in approaches, however, both regarding what data is collected and how it is analyzed, and this is particularly true with respect to how leading vendors handle analysis of encrypted traffic.
To read the complete article, visit Dark Reading.