Platform · DPAI

From network traffic to decisions you can defend.

WireTrace is Deep Protocol & Asset Intelligence (DPAI). It decodes what devices say on the wire, turns that evidence into a durable identity for each device, and uses that understanding to detect threats, rank risk and define how your network should be segmented. Your existing controls enforce.

DISCOVERmirrored trafficIDENTIFYdurable identityCLASSIFYtype · role · PurdueUNDERSTANDdependencies · baselineDETECTthreats · deviationsDECIDErisk · policy intentCONTROLthrough your controlsONE PLATFORM · IT · OT · IoT · IoMT
How it works

Seven steps, one platform.

Each step builds on the evidence of the one before. Nothing is guessed from an address alone.

  1. 01

    Discover

    Builds the inventory from mirrored traffic (SPAN, TAP or ERSPAN). The capture interface only receives.

  2. 02

    Identify

    One durable identity per physical device, even when its address changes.

  3. 03

    Classify

    Domain, device type, role and Purdue level, each with a stated confidence.

  4. 04

    Understand

    Protocols decoded to the operation, dependencies mapped, normal behaviour baselined.

  5. 05

    Detect

    90+ deterministic detection rules and baseline deviations, each mapped and explained.

  6. 06

    Decide

    Asset Risk Score, prioritised vulnerabilities and declared segmentation intent.

  7. 07

    Control

    Policies run as monitor, recommend, require approval or automatic, and hand off to the controls you own.

Deployment

Passive by default. Governed when active.

Sensors connect to a mirror port or TAP. The capture interface only receives; it never transmits onto the monitored network. No agents are installed on any device.

Optional, administrator-governed active enrichment adds deeper inventory for IT and network devices. It needs defined scopes and read-only credentials, runs from the management interface, and an OT-safe profile keeps probes away from industrial and medical devices unless explicitly allowed.

  • Installs on your servers or virtual machines from one self-contained package
  • Runs fully without internet access, including the AI assistant
  • All storage and processing stay on your infrastructure
Monitored networkIT · OT · IoT · IoMTSPAN · TAP · ERSPANmirrored copySensorcapture port: receive onlyWireTrace platformon your infrastructureYour toolsSIEM · API · email · ticketsOptional enrichmentmanagement interface · scopedPASSIVE BY DEFAULTOFF UNTIL AN ADMINISTRATOR ENABLES IT · OT-SAFE PROFILE

See it on your network.

A WireTrace evaluation runs on a mirror port, on your infrastructure, and shows your own devices, communications and risks.