Sold by: Vectra AI
Vectra Match - Network, IoT, and OT Signatures
Overview
Vectra Match extends Vectra Network Detection and Response (NDR) with signature-based network threat detection powered by the open-source Suricata IDS engine. It runs on existing Vectra Sensors and analyzes the same network traffic used by Vectra's AI-driven behavioral detections, allowing security teams to identify known threat patterns and suspicious attacker behavior through a consolidated sensor and workflow.
Vectra Match supports the Vectra-curated Proofpoint Emerging Threats Pro ruleset, as well as customer-developed and third-party Suricata rules. Security teams can upload, assign, tune, enable, disable, suppress, and apply thresholds to rules through the Vectra interface or APIs.
When monitored traffic matches a rule, Vectra Match generates Suricata-based match metadata that can be sent to SIEM, data lake, and security analytics platforms through Vectra Stream and, for supported deployment types, syslog or Kafka
Highlights
- Integrated IDS for Vectra NDR
Details
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Trust Center
Access real-time vendor security and compliance information through their Trust Center powered by Drata or Vanta. Review certifications and security standards before purchase.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/unit |
|---|---|---|
Match_IP_Count | Match IP Count : Number of Match IP Addresses | $7.93 |
Dimensions summary
Vectra Match uses one usage-based pricing dimension. You pay by the number of Match IP addresses monitored, counted in units. Your cost scales directly with how many IP addresses you cover. There are no tiers or separate instance sizes to choose between. As your monitored IP count grows or shrinks, your billing tracks that count. This keeps pricing tied to the size of the environment you protect rather than fixed packages.
Top-of-mind questions for buyers
A Match IP address is an internal IP the product monitors. Vectra determines internal addresses from the HOME_NET setting, built from your Internal IP Address (CIDR) ranges. Excluded subnets and detected southside proxy IPs are removed from that set, so those addresses fall outside the counted total.
No. Billing tracks only the Match IP address count. You can upload up to 25 rulesets per Brain and assign them across sensors without changing your cost. The curated ruleset is included as a standard part of Match licensing. Ruleset volume and sensor count do not drive charges.
Your cost tracks the number of Match IP addresses monitored. When you expand internal subnet ranges, the counted IPs rise and billing follows. When you exclude subnets or reduce coverage, the count drops. There are no tiers, so each change adjusts cost in proportion to the IP count.
docs.vectra.ai
Helpful?
Vendor refund policy
Contact your Sales Representative
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
This product has charges associated with it for seller support. Zeek is an open source network security monitoring tool. It analyzes network traffic in real time, offering deep protocol inspection, anomaly detection, and logging for network events.
Vectra Sensors are deployed in VPCs to monitor AWS deployments to detect hidden threats without requiring any endpoint agents.
The Vectra Stream connector outputs Bro/Zeek formatted metadata from the Vectra Network Detection and Response Platform to any data-lake.
For security leaders, builders, and operators, who are tasked with protecting a complex, ever-changing environment from attack, Vectra AI protects modern networks from modern attacks. When modern attackers beat customers' existing controls - and they will, Vectra AI sees their every move, connects the dots, prioritizes and stops the attack in real-time. Our customers say we are the cybersecurity AI that stops attacks others can't.
Vectra Threat Detection and Response for Partner Provided Consulting Engagements
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.