Vectra AI, a leader in AI-native security and observability, has expanded its partnership with Endace, the packet capture authority, to provide customers with integrated packet-level forensics alongside AI-driven threat detection. Under the enhanced alliance, Vectra AI will offer Endace Probes directly to customers, combining the Vectra AI security and observability platform with Endace’s continuous full-packet capture capabilities in a unified solution.
The joint offering enables organizations to correlate real-time AI-powered attack signals with comprehensive packet-level forensic evidence. For highly regulated industries such as federal government and financial services, the solution provides chain-of-custody evidence that supports regulatory compliance, fraud investigations, and incident response activities.
“Security teams are being asked to move faster, prove what happened, and show their controls are working,” said Hitesh Sheth, CEO of Vectra AI. “Vectra AI gives defenders the trusted signal they need to understand attacker behavior in real time. With integrated Endace full packet capture, customers can move from attack signal to definitive evidence, helping them accelerate investigations, support compliance efforts and respond with confidence.”
As part of the expanded collaboration, customers can leverage Endace’s continuous full-packet capture in several key areas:
Regulatory compliance: Vectra AI detections are supported by packet data that validates security findings, while Endace continuously captures and retains full network payloads. This enables financial institutions and government agencies to produce complete transaction and communication records for regulatory requests—not only for detected security events.
Audit readiness: By combining AI-powered detections with continuous packet retention, the integrated solution simplifies evidence retrieval during audits. Vectra AI provides detection context, while Endace’s always-on capture and long-term cold-storage retention allow investigators and auditors to retrieve historical network activity quickly.
Incident forensics: Vectra AI identifies malicious activity and provides investigators with the packet evidence needed to validate detections. Endace complements these insights with long-term, full-network packet capture, giving incident responders complete visibility into affected systems, communications, and sessions for comprehensive forensic analysis and fraud investigations.
“Vectra AI has been an important partner in our Fusion program for many years. We’re excited to enable Vectra AI to sell EndaceProbes to its customers,” said Stuart Wilson, CEO of Endace. “Endace’s always-on packet capture and rich metadata generation gives Vectra AI customers a complete, trusted record of network activity, allowing security teams to move from AI-generated detections to definitive evidence in seconds. Together we help organizations investigate threats faster, prove what happened and respond more effectively.”
Additional Resources
To learn more about how Vectra AI and Endace strengthen investigations for Federal and Financial Organizations, read the blog post here.
_________
About Vectra AI
Vectra AI is the leader in AI-native security and observability for the AI enterprise. As artificial intelligence changes who and what works inside the enterprise, attackers are exploiting more attack paths, abusing trusted identities, and automating attacks at unprecedented speed and scale. Rooted in more than a decade of behavioral AI and machine learning innovation, Vectra AI helps security teams observe behavior across the enterprise, understand attacker activity, signal what matters, and act with confidence. The result is reduced attack exposure, faster attack response, and improved SOC efficiency. With 39 patents, recognition as a Leader in the 2025 and 2026 Gartner® Magic Quadrant™ for Network Detection and Response, and the trust of more than 2,000 organizations worldwide, Vectra AI helps organizations build attack resilience in the AI era.
Vectra AI Media Contact:
vectra-ai@inkhouse.com
About Endace
Endace’s scalable, always-on packet capture gives Network Operations and Security teams the visibility they need for fast, accurate incident investigation with rich forensic evidence at their fingertips from all their tools. EndaceProbes provide enterprise-class packet capture in on-prem, public and private cloud environments, with rapid, centralized search and one-click access to full pcap data from leading security and performance solutions (including Microsoft, Palo Alto Networks, Fortinet, Cisco, Splunk, Elastic, Vectra AI, and many others). Endace’s rich network evidence provides a vital source of trusted data for the agentic SOC, enabling accurate incident detection, triage, validation and response.
Capture every packet. See every threat. www.endace.com
Join our LinkedIn group Information Security Community!
