About
Founded in 2021, Nodal Technologies exists to close the most persistent gap in network defence: detecting and disrupting adversaries who use entirely legitimate tools and protocols to do entirely illegitimate things.
Why we exist
Our founding team kept running into the same wall. Signature-based detection cannot match what it has never seen. Anomaly detection drowns in the ordinary strangeness of real networks. Neither approach can address an adversary whose entire method is to look exactly like an administrator.
So we built the industry’s first AI-driven system designed specifically to understand attack behaviour — the shape of command-and-control, the structure of lateral movement, the rhythm of collection and exfiltration — rather than hunting for known-bad artefacts or statistical outliers.
The result compresses the window between compromise and response from months to seconds, and does it without asking an operational network to change how it works.
Our mission
Eliminate adversary dwell time by detecting and disrupting sophisticated command-and-control communications in real time.
How we build
These are the constraints we design against, not marketing positions. Each one closes off an easier path we chose not to take.
What an intrusion looks like changes constantly. How it has to behave in order to work does not. We model the second, which is why detection does not depend on having seen the tool before.
A campaign is defined by the relationships between compromised systems. Anything that reports events one host at a time is describing symptoms rather than the intrusion.
In the environments we work in, a false positive that takes a system offline is its own incident. Disruption is surgical and temporary by design.
Every conclusion carries the evidence that produced it. An answer a security team cannot explain to an auditor, a regulator or a board is not finished.
Trajectory
Developed a new way to represent network traffic at scale while preserving packet timing and behavioural context.
Real-time behavioural detection, attack path mapping and automated mitigation.
Detection and containment extended to insider threats and autonomous AI agents.
The team
An experienced chief executive in cybersecurity and software, with leadership roles at RSA Security, Trusted Information Systems, Pedestal Software and Network Intelligence. Named Forbes Magazine's #1 Cloud Computing CEO in 2017, with deep experience bringing cybersecurity innovations to market.
More than thirty years in technical sales of advanced networking and security at Vicinity, Bay Microsystems and Lucent, with proven success in the DoD and intelligence community markets. Expert in translating complex technical capability into business value for security organisations.
Recognised as a pioneer in virtual-world data visualisation and distributed AI systems, with more than thirty years as an inventor and programmer. Former VP of AI/ML at Breakout Capital and a Tech Fellow at Capital One. Holds nine patents in advanced computing and visualisation.
Defence acquisition, national intelligence science and technology, and network attack research, alongside research collaborations including the Johns Hopkins University Applied Physics Laboratory.
Advisor
Advisor
AdvisorIn the field
At JSI Telecom US, we provide critical information needs to governments around the world. The Nodal CyberBrain is an integral part of our information security defense-in-depth strategy… It provides us with certainty to clearly see any anomalous activity in our environment.
See it on your traffic
A 30-minute technical walkthrough on sanitised threat data — or a proof of concept in your own environment. No agents required to evaluate.
