Hardware or virtual appliance that analyzes internal traffic across IT, OT, IoT and medical networks, correlates anomalies with proprietary engines and responds when you decide. Up and running in 10 minutes, supporting NIS2 compliance.
Proprietary technology protecting the internal network: it sees the east-west traffic that firewalls and EDR miss.
Same technology, same dashboard: choose the analysis capacity based on traffic and number of sites. Every line includes a hardware or virtual appliance, central dashboard, detection & response engines, email and Telegram notifications, automatic reports and warranty.
Agile protection for small facilities and branch offices: detection & response with a Cloud dashboard, on compact hardware or as a virtual version.
For manufacturing companies and multi-site organizations: more analysis capacity for dense networks and centralized monitoring of every site.
Maximum protection for large networks, critical infrastructures and public bodies: the highest traffic volumes, On-Premises installation with data and logs inside the company perimeter.
ACN qualified (QC1) · ISO 9001 · ISO/IEC 27001, 27017, 27018 · Patented technology · Gartner Peer Insights 5.0★
Network telemetry already correlated for your SOC, without adding another silo.
Appliance, virtual, embedded or with dedicated modules: LECS adapts to the infrastructure you already have.
The LECS hardware appliance: it connects to the switch mirror port and is operational in about 10 minutes, in the Small, Medium/Large and Corporate lines.
A version installable on new machines and devices built by OEMs, for protection integrated right from the factory.
ORION: passive network inventory, device classification, CVE/CVSS and IEC 62443 segmentation into Zones & Conduits.
CELESTIA™: AI agent for endpoints, dedicated to behavioral analysis and the abuse of valid credentials. Complementary to EDR.
Virtual version for VMware, Hyper-V and Proxmox, with the same features as the appliance.
From the plant floor to the hospital, from the store to the ship: one platform, with protocols and scenarios specific to each sector.
≈245,000 protected hosts in 24 countries, 230 partners and a 98% renewal rate. Here is what customers say on Gartner Peer Insights.
Zero downtime: LECS works in parallel with the network, on a copy of the traffic, with no interruptions and no changes to existing devices. A typical installation takes about 10 minutes.
Yes. LECS is agentless: it passively monitors PLCs, SCADA and medical devices that cannot host security software, including End of Life systems. For new machines, manufacturers can integrate LECS Embedded.
It depends on the deployment. In the Cloud version the dashboard resides on servers in Italy. In the On-Premises version, logs and dashboard stay on the Aggregator, inside the company infrastructure, supporting the strictest requirements, including NIS2 and ACN.
No, LECS is complementary. While firewalls protect the perimeter and antivirus software protects endpoints, LECS closes the “blind spot” of internal visibility (Network Detection & Response). It identifies lateral movement and threats that have already bypassed external defenses.
Automatically: events are correlated and classified by severity, and you receive email and Telegram notifications plus periodic reports. Auto Suppression and fine tuning cut false positives, so you focus only on real risks.
