caplon is a platform from consistec Engineering & Consulting GmbH that makes IT, OT and VoIP networks visible. It combines behaviour-based network detection and response (NDR), using AI-based anomaly detection or adjustable rule sets, with a signature-based intrusion detection system, a log analysis module, network performance monitoring, VoIP monitoring with fraud prevention and full recording of network traffic for forensics. According to the vendor, traffic is tapped through mirror ports or TAPs and the systems are operational within a few hours. It is aimed at companies and operators of critical infrastructure that need an attack detection system.
consistec is headquartered in Saarbrücken, Germany, and its website names no foreign parent company. The sensors and systems are placed in the customer's own network and operated by the customer, so analysis data can stay within the organisation's own infrastructure. The vendor describes caplon as a digitally sovereign monitoring platform with German development and German data. For a European organisation this means network detection can be set up without sending traffic and log data to a non-European cloud provider.