Home / Products / NOX

Console · detection and response

NOX

The console that receives events from your agents, detects threats and drives the response.

Book a demoSpecifications
NOX dashboard: open alerts, incidents, agents and active MITRE techniques
NOX dashboard
Features

What NOX does

Detection

Alerts mapped to MITRE ATT&CK.

Response

Isolate, kill, block.

Hunting

Search the event history.

Fleet health

Status and version of every agent.

Organizations

Separate data and access.

Reports

PDF with your logo.

Alerts

Ranked, not a flood of noise.

  • Severity from low to critical
  • Repeated alerts grouped
  • A false positive removed everywhere
NOX console: alerts ranked by severity, with the MITRE ATT&CK technique and the affected host
Alert list
Rules

Readable and adaptable.

  • Readable by your analysts
  • Mapped to MITRE ATT&CK
  • Tailored to each system
Detection rules in NOX, with severity and MITRE technique
Detection rules
Response

Response under your control

Manual mode

NOX proposes, the analyst approves.

Automatic mode

Above your confidence threshold.

Everything logged

Who, when, on which host.

NOX

Specifications

Installation
On your servers
Ingestion
Encrypted link from Talos
Access
Web console and integrations
Organizations
Several, isolated from each other
Without Internet
Detection and response keep running

See NOX with your own data.

Book a demoDiscover Pythie