LogRhythm, the company powering today’s security operations centres (SOCs), announced that it has acquired MistNet, a cloud-based analytics platform that delivers vast network visibility and accurate threat detection. The acquisition will allow LogRhythm to deliver intelligent, machine-learning-based detection and response capabilities that incorporate network detection, user and entity behaviour analytics (UEBA), endpoint detection and response data (EDR), and additional MITRE ATT&CK detections to solve current and emerging security and risk problems.
According to Global Market Insights, the Network Traffic Analysis (NTA)/Network Detection and Response (NDR) market is approximately $1.5B and will grow at 17 per cent CAGR between 2020 and 2026. As organisations seek to simplify, optimise and extend their detection and response capabilities, they look to vendors to provide more holistic services, fueling the consolidation trend among NDR, EDR, UEBA and security and event management (SIEM) solutions.
“I am thrilled to announce the acquisition of MistNet. Their solution will facilitate our goal of addressing current and emerging endpoint security needs for our global customers and partners,” said Mark Logan, president and CEO of LogRhythm. “MistNet complements our existing SIEM platform by enhancing deep network visibility, behavior analytics and threat detection capabilities and will accelerate LogRhythm’s reach into the XDR market.”
The acquisition delivers the ability to collect and enrich tremendous amounts of security data ‘on location,’ generating exceptionally accurate behavioural models and threat models without having to move any of the data. MistNet’s patent-pending TensorMist-AI™ technology also brings powerful AI capabilities to LogRhythm by constructing a geo-distributed meshed data pipeline that combines scale-out data management with distributed processing analytics. This provides improved network visibility to increase detection and reduce the time to respond to advanced persistent threats (APTs) that are commonly able to bypass traditional perimeter defences. MistNet’s CyberMist product suite is currently used by large enterprises worldwide.
LogRhythm’s comprehensive SaaS platform and cloud collection capabilities, combined with MistNet's distributed analytics, will empower customers to easily manage their security and compliance needs and with the highest return on investment. MistNet’s network detection and response capabilities, along with LogRhythm Labs’ vast library of out-of-the-box threat detection, compliance and operating technology solutions, enables customers to realise value quickly and with minimal effort and required knowledge. Customers can deploy MistNet as a standalone solution or in combination with the LogRhythm NextGen SIEM Platform.
“We are excited to join a company as committed to innovation and customer success as LogRhythm,” said Geoffrey Mattson, president and CEO of MistNet. “The acquisition creates significant product synergy at the convergence of XDR and SIEM that will positively impact the industry, including the potential for accelerating detection based on open frameworks such as MITRE ATT&CK and driving additional use cases for supply chains, public cloud and IoT/OT security.”