become a partner

NDR that strengthens your SOC

The plug&play NDR technology that completes the SOC with internal visibility, automated response, and immediate integration.

BOOST YOUR SOC
LECS SOC Integration diagram: telemetry from IT, OT, IoT and medical networks to SIEM and XDR with automated responseLECS // SOC INTEGRATIONNDR · SIEM · XDR · RESPONSEITOTIoTMEDICALRESPONSE · ISOLATELECSTIRES-IASPECTORAISESANTLIAORIONSIEM · XDRTELEMETRYSOC ANALYSTMONITORALERTISOLATERESPONSE LEVELS

SCROLL THE DIAGRAM →

Why LECS is relevant for a SOC

XDR, SIEM and NGFW have made SOCs stronger, but one element is often missing: native visibility into internal traffic.

LECS brings an accessible NDR component into the SOC, quick to activate and ready to use.

GET MORE INFO
  • Lateral threats
    remain invisible

LECS detects these anomalies by identifying network scanning attempts and unauthorized access among internal segments that evade traditional defenses.

  • Post-compromise movements
    are not detected

LECS constantly monitors the traffic baseline to report behavioral deviations in real time.

  • Lack of contextualization
    of alerts

LECS enriches the SOC with native telemetry, allowing analysts to reconstruct the entire attack chain (Kill Chain) and distinguish real threats from false positives.

The four pillars that enhance the capabilities of your SOC.

BECOME A PARTNER

Immediate deployment

  • Installed in minutesNo endpoint agents, no initial tuning.
  • Immediate valueNo impact on operations, no complex integration project.

Automated, SOC-ready reports with actionable insights.

  • Automatic reportsClear and structured, ready with no manual effort.
  • For analysts and managementUseful for internal analysis and for communicating with customers and compliance.

Granular, controlled response management.

  • Granular responseProgressive intervention levels by threat type, context and criticality.
  • Automation under controlNo unwanted impact on the customer’s operations.

AI-powered engines and autonomous agents for real-time detection and response.

  • Real-time analysisAI engines and autonomous agents detect anomalous behaviour on the traffic.
  • From reactive to proactiveAutomated responses: shorter response times and less load on the SOC.

Behavioral analysis and data validation.

Engine Tires-IA: beyond traditional detection.

Tires-IA learns network behaviour and analyses every connection in parallel, without slowing operations.

  • Anomaly detectionSuspicious behaviour and baseline deviations, in real time.
  • Less noise for the SOC−87% false positives in logs; up to 70–85% of alerts actually worth investigating.
  • Adaptive responseResponse actions calibrated to threat type and severity.

Traceability and compliance.

Complementary logging and physical data retention: every event stays traceable and verifiable.

  • Compliance supportDigital evidence for audits and insurance, supporting NIS2, GDPR and IEC 62443.
  • Telemetry for the SOCStructured, readable logs and automatic reports for management and customers.
  • Fits your stackSIEM, SOAR and XDR via API and Syslog, with CEF and LEEF parsers.

More visibility. Less noise.
Faster operations.

With LECS, the SOC expands network coverage, reduces false positives, accelerates detection and response, and increases the number of events handled automatically, without scaling the team proportionally.

Total control and centralized management

An efficient SOC needs tools that simplify analysis, not tools that make it more complex. LECS provides centralized probe management and an intuitive dashboard that lets you oversee the network from a single point of control, with broad visibility and continuous 24/7 operations.

DELVE INTO THE PLATFORM RANGE
  • Unified Dashboard

Monitor multiple physical or virtual technologies from a single interface, simplifying investigation, triage, and operational management.

  • Fast deployment

Instant installation without impacting existing operations or starting complex integration projects.

  • Reducing Triage

Thanks to automated correlation and alert contextualization, the SOC team sees higher-quality events and can accelerate the analysis phase.

NDR intelligence to support the security team.

How does LECS reduce analyst alert fatigue?

Through the Tires-IA engine, the system performs intelligent correlation of network events, filtering out background noise and false positives. This allows the SOC to display only qualified and contextualized alerts, optimizing investigation time.

Absolutely. LECS is designed to complement the existing ecosystem: it provides native telemetry and logs ready to be integrated with SIEM, XDR and Incident Response platforms, closing the visibility triangle (EDR + SIEM + NDR).

No. LECS is an agentless solution that analyzes network traffic by mirroring (SPAN). This eliminates the need for systemic changes on endpoints or initial tuning activities, making deployment immediate.

It strengthens traceability, audit readiness, and the quality of digital evidence—supporting compliance, post-incident investigations, and cyber-insurance claims.

Yes, LECS natively supports more than 100 IT and OT protocols. This allows the SOC to extend monitoring to IoT devices and industrial infrastructure that usually escape traditional security systems.