NIKSUN
Request a demo
The Olympus platform
Platform overviewThe AI-native platformWhy one platformEnd the tool sprawlKnow the UnknownThe vision
Foundation
NIKSUN Knowledge WarehouseThe unified data lakeThe Olympus engineMaya · Playbooks & moreHow it worksIngest → mine → alert → remediateNikOSNikOS Max operating system
Meet Olympus

One platform. Every function.

Olympus unifies security, performance & observability on a single AI-native data lake.

Explore the platform
Understand & respond
Maya AIAI analyst & agentic actorNetXperts & NetSLMRoot-cause analysis & SLA monitoringRemediationBlock & respond across endpoint, network, & domain
Automation & ops
PlaybooksAutomated workflows, approvals, & RBACCase ManagementIncident tracking & collaborationReportSchedulerScheduled report delivery
Collect & integrate
NetTridentUniversal data & endpoint agentConnectors500+ integrations · many two-waySnapshotsBackup & restore configs and state
Discover & test
InfraPulseActive testingVulnScanCVE / CPE discoveryThreatStreamLive threat-indicator feed
Build & learn
NIKSUN LabsData science on your data lakeNIKSUN CoursesTraining & certification
Security & Compliance
Security Information & Event Management (SIEM)Network Detection & Response (NDR)Endpoint & Extended Detection & Response (EDR/XDR)Security Orchestration, Automation & Response (SOAR)Threat Intelligence (TI)Vulnerability Management (VM)Forensics & Incident Response (DFIR)Zero Trust & Segmentation (ZTA)
Performance & observability
Network Performance Management (NPM)Application Performance Management (APM)Infrastructure ObservabilityAI ObservabilityNetwork VisibilityActive TestingFull Packet CaptureData Retention & ArchivalVoIP MonitoringTrading & Exchange Monitoring
The foundation

Full Packet Capture

100 Gbps with ease, clustering to multi-Tbps with zero packet loss — in up to 1/10 the footprint.

Explore packet capture
Flagship
NetDetectorLiveSecurity · NDR & forensicsNetVCRPerformance · NPM & APMNetBlackBox ProFull packet capture · L2–L7LogWaveSIEM · logs & eventsFlowAggregatorFlow analytics · NetFlow/JFlow/sFlowNetPollerSNMP & infrastructure metricsNetOmniSingle pane of glass
Specialized
NetTradeWatchTrading & exchange monitoringNetMobilityMobile & cellular networksNetVoiceVoIP & call qualityNetBinLong-term archivalPhoneSweepTelephony securityAdd-on ModulesExtend any NIKSUN appliance
Know a product by name?

Browse the full catalog.

Many customers come to us by product. Find specs and datasheets for every NIKSUN appliance and software.

All products & datasheets
Cloud
NIKSUN Cloud Services (NCS)SaaS · SMB-affordable · fastest startPublic CloudAWS · Azure · GCP · OCI
Self-managed
Virtual / SoftwareFor your virtualization infrastructureHardware AppliancesMulti-Tbps · zero loss · DoDIN APL & Common Criteria
Built for your reality

From SMB SaaS to Tbps-scale gov.

Whether you need an affordable cloud service or APL/Common-Criteria-certified hardware at petabyte scale — same platform, your deployment.

Compare deployments
ThreatStreamThe Olympus engine · Discover & test

Know if a threat is
live right now.

A live feed of threat indicators, built into the platform. Look at any IP, domain, hash, or other field and ThreatStream tells you what threats it's associated with — and which co-occurring indicators, if you also see them, mean those threats are live in your environment right now.

Request a demo Read the ThreatStream datasheet
185.220.101.44Malicious · TI matchlive now
This IP is associated with Cobalt Strike C2. ThreatStream flags the co-occurring indicators seen in your lake that confirm it's active:
Beacon interval to known C2 domain
JA3 hash matches the toolkit
2 internal hosts talking to it
Block via PlaybookOpen forensics
What it does

From indicator to confirmed threat.

🛰

Feed

A live threat stream — IPs, domains, hashes, URLs, and more.

🔍

Look up

See the threats any field is associated with, instantly.

⚡

Confirm

Co-occurring indicators prove a threat is live in your lake.

Live threat feed

An indicator is only half the story.

ThreatStream runs continuously against the full NKW. The moment a malicious indicator and its co-occurring signals appear together in your environment, you know the threat is live — not theoretical.

  • ✓Live threat feed — IPs, domains, hashes, URLs, & more
  • ✓Instantly see the threats any field is associated with
  • ✓Correlates co-occurring indicators to confirm a live threat
  • ✓Runs against the full NKW — alarms the moment a match appears
Indicator match
LIVE
threat feedYour lake
Indicator + live signals = confirmed threat
MATCHES · LIVEhits
live
Confirmed
real-time
Alarm
✓ active threat
How it works

Match, correlate, confirm.

Ingest

Threat-indicator feeds load into the platform.

Match

Every field is checked against the live threat feed.

Correlate

Co-occurring indicators are linked together.

Alarm

A confirmed live threat fires the moment it appears.

Works with the engine

Works across the engine.

Block & respond

Remediation

Block a confirmed-malicious IP or domain the moment it matches.

Explore
Automated workflows

Playbooks

Automate the response when an indicator goes live in your lake.

Explore
Incident tracking

Case Management

Open and track a case from the first confirmed threat match.

Explore
Know the Unknown

See live threats the moment they appear.

See how ThreatStream confirms active threats against your own data — in real time.

Request a demo Back to the Capabilities suite