Vectra AI sells an AI-based network detection and response (NDR) platform. It monitors network traffic, identity systems and cloud activity to detect attacker behaviour such as lateral movement and credential theft, and it ranks threats by risk and links related activity into attack paths. The platform is agentless and can be deployed on-premises, as SaaS or in a hybrid model. The vendor also offers managed detection services and sells through managed security service providers.
Vectra AI, Inc. is headquartered in San Jose, California, and is therefore a US company. Under US jurisdiction the CLOUD Act can apply to data the company controls, whatever the server location. The company's privacy notice says hosting and storage take place within the United States, the EEA and other locations, and it refers to standard contractual clauses for transfers. The product is not presented as open source. For a European organisation, the choice between SaaS and on-premises deployment determines where detection data is stored, and the data processing agreement and sub-processor list should be reviewed before use.