Skip to content
Nodal Technologies

Network Observability

See the network as it actually operates.

Nodal continuously maps devices, communications and relationships across your environment: a live view of how infrastructure connects and behaves.

Take the product tour
Live map · 4 subnets · passive● observing

The network is the ground truth of how adversaries operate during an incident.

Network observability is the foundation for understanding what is happening inside your environment. Nodal works at the network layer, the one layer an intruder has to use and cannot switch off.

Go beyond asset inventories and static network diagrams. Nodal reveals the devices that are present, the services they expose, who they communicate with, and how those relationships change over time.

The network is the high ground.

Down in the valley you see only your nearest neighbours, and every device looks the same, friend or foe.

NodalHostsAdversary

01 · Continuous device visibility

An inventory that keeps itself current.

Maintain an up-to-date view of managed and unmanaged devices across your subnets. Every device becomes part of a living network map, with its addresses, passive identities, services, protocols, communications and activity history available in context.

As your environment changes, Nodal keeps the view current without depending on manually maintained inventories or assumptions about what should be there.

Devices · discovered passively● updating
AddressIdentityServicesState
  • 10.0.4.17ws-fin-07SMB · RDPmanaged
  • 10.0.4.62build-02SSHmanaged
  • 10.0.9.8nas-backupSMB · NFSunmanaged
  • 10.0.12.41plc-line-3Modbus/502new
  • 10.0.12.7hmi-01VNCunmanaged
  • 172.31.4.20api-gwHTTPScloud

Illustrative data

02 · Monitor device relationships

Who talks to whom, from the LAN to the WAN.

Knowing which devices exist is only the starting point. Security teams need to understand how those devices communicate, to find unexpected access, possible lateral movement, exposed services and paths to critical systems.

Nodal traces device-to-device communication from the LAN, across subnets, out to the WAN, mapping the relationships that connect your network.

Trace · ws-fin-07 to the internet
Peers of ws-fin-0724 h
  • 10.0.4.62 build-02SSH/2248 MB
  • 10.0.9.8 nas-backupSMB/4452.1 GB
  • 198.51.100.74 unknownHTTPS/44314 MB

03 · Blast radius mapping

Where an adversary can go from here.

When a device is compromised, what matters is not only what it can reach, but where an adversary can propagate from it.

Before an attack, Nodal shows how users, devices and services can reach one another, so you can find unexpected paths to critical systems and strengthen segmentation. During an incident, the same model shows how the adversary is expanding: where command-and-control is propagating, where an insider is moving, and which systems are carrying commands and data.

Blast radius · ws-fin-07

5 devices reachable · 1 unexpected path to a critical system

04 · Validate segmentation

Segmentation, proven by real network behaviour.

Segmentation, zero trust, access control lists and AI governance only work when the network behaves as intended. Nodal shows the deep east-west traffic, so security and network teams see unexpected connections between segments and the moment they bridge across subnets.

When a device talks to a new peer, behaves suspiciously or uses an unusual service, Nodal shows the surrounding context, and how far the activity departs from that device's own history.

Segments · as designed, and as observed
Surprise for build-02vs. its own baseline
routinenever seen

Deploy where your network traffic lives.

Nodal adapts to the way your network is built. Deploy lightweight probes and agents wherever traffic can be observed, for a complete, real-time view of your environment.

Simple software deployment for Linux, macOS and Windows.

See your own network

Find out what is really talking on your network.

A 30-minute walkthrough on sanitised data, or a proof of concept on your own traffic.