NetApprove watches every conversation on your network, learns what "normal" looks like for your business, and surfaces only the anomalies that matter, then takes action automatically. Built on machine learning and large-language-model reasoning, not yesterday's rule sets.
Visibility feeds the AI; the AI feeds containment; containment closes the loop with new ground truth.
A real-time 3D globe traces every connection from source to destination — direction (inbound / outbound / internal), destination country, protocol and volume. Whole-network risk on a single screen.
A 7-layer ML ensemble baselines every host, service and flow. An AI-powered reasoner triages alerts in plain English and scores per-host anomalies over a rolling 5-minute window — turning "suspicious" into "evidence" in a few clicks.
Confirm a threat and cut the session instantly with passive TCP-RST through an inject NIC — or let an Auto-Rule contain critical events automatically. Dry-Run, Allowlist and a full Audit log keep every action safe and accountable.
Everything to see, reason and respond — built for modern SOC and network teams.
Every connection on a live globe — direction, volume and destination country.
Baselines normal behaviour and scores per-host anomalies — no signature updates.
Catches mass rename / delete / encrypt on SMB before the whole estate is locked.
Cut sessions via TCP-RST in <5s across 5 adapters, with Dry-Run and Allowlist.
Full CISA ICSNPP suite: Modbus, S7Comm, DNP3, BACnet, OPC-UA and more.
Correlates accounts and devices across NTLM/Kerberos/LDAP/RADIUS to spot lateral movement.
Whole-org risk distilled to a single grade — readable by engineers and executives alike.
Surfaces TLS versions, ciphers and curves on the wire for the post-quantum era.
Ships Zeek logs to the cloud over an encrypted WireGuard tunnel for long-term history.
NetApprove watches per-host file activity on SMB shares over a rolling 5-minute window and scores risk — weighting dangerous behaviour heavily and routine work lightly. It catches the real thing while keeping false alarms low.
Detects critical Mass Rename · Worm Fanout · Shadow Copy Tampering (T1490) and high Ransom Note Drop · Extension Write · Mass Delete → enable an Auto-Rule and Shield contains the source automatically.
From web and authentication to industrial control systems (ICS/SCADA) — covering both IT and OT.
One SPAN port and NetApprove sees the whole network, with no single point of failure.
Copy traffic off the switch into the sensor silently — never in the data path.
The Zeek engine + analyzers parse every protocol and score anomalies in real time.
A 3D dashboard and live tables drill down to root cause in seconds.
Cut the session with TCP-RST, or let an Auto-Rule respond within <5 seconds.
Book a live demo and let NetApprove see, learn and shield your network within minutes.
SRAN CyberTech
48/6 Soi Chaeng Watthana 14, Thung Song Hong
Lak Si, Bangkok 10210
