Capture, analyze, and secure network traffic at exascale. Three products. One platform. From a single laptop to worldwide federation. Built on seventeen years of shipped Java packet capture.
Lynx interface — working prototype
Each product works standalone. Together, they form the Vantage Platform — unifying capture, analysis, and storage into a single distributed fabric. All three are in active development and available to design partners.
Multi-user, remote-first packet analysis with web and terminal interfaces. Inline IDS alerts, flow markers, real-time statistics, and fleet management. Part of the Vantage Platform.
Explore LynxHeadless capture daemon for long-duration, high-rate recording at the network edge. 800 Gbps with DPDK and Napatech. Serves multiple Lynx clients simultaneously. Integrates Suricata and Zeek natively. Part of the Vantage Platform.
Explore SentinelQuarry uses our virtual filesystem engine to project raw capture data as navigable directories. Turn a 10 TB capture into manageable 1 GB files Wireshark can read. Sparse and dense indexing. Security-bound projections with encryption. Part of the Vantage Platform.
Explore QuarryDon't replace your infrastructure. Enhance it.
Works with Endace, Napatech, DPDK, Mellanox, and any existing capture appliances. Software-only deployment. No vendor lock-in.
Quarry is designed to generate virtual capture files on demand with zero storage overhead, projecting exabyte-scale stores as navigable directories. Query-driven projections.
20 configurable security levels. PII/IMSI obfuscation. Policy-driven encryption. Air-gap support. GDPR, HIPAA, PCI-DSS compliance.
Real-time multi-analyst collaboration. Shared bookmarks, annotations, and chat with packet references. Work together on the same capture.
Mount any source as SILOs — Suricata, Zeek, Wireshark, firewalls, IDS systems. One unified view of your entire security infrastructure.
From single node to worldwide deployment. Manage thousands of nodes from a single control plane. Cross-cluster queries with data sovereignty.
Vantage Query is the English-first query language for the Vantage Platform, designed for Wireshark display filter compatibility and one language across capture, query, security, and export.
Results are real capture files that Wireshark, Zeek, and any standard tool can open. Syntax shown is from the current design; the language is under active development.
-- Wireshark-compatible syntax show packets where tcp.port == 443 and ip.src == 10.0.0.0/8 -- Multi-source virtual projection find flows where fraud-pattern from "live-capture", "suricata-silo" during last 24h security level 15 export to "investigation.pcapng"
Multi-user. Remote-first. Petabyte-scale. Security levels 0–20.
Now in early access with selected design partners.
We are selecting a small number of design partners to shape the platform. Tell us about your environment.