Progress Flowmon is a comprehensive Network Detection and Response (NDR) and performance monitoring platform. By leveraging high-fidelity network telemetry, Flowmon empowers IT and security teams to eliminate blind spots, optimize application performance, and defend against sophisticated cyber threats that bypass traditional perimeter defenses.

From Monitoring to Network Detection and Response (NDR)

While Flowmon remains a leader in NetFlow/IPFIX-based monitoring, its core value proposition has evolved into a powerful NDR platform. Modern security operations (SecOps) rely on Flowmon to provide deep visibility into network behavior. Key innovations include:

  • Encrypted Traffic Analysis (ETA): Identifying threats hidden within encrypted streams without the need for decryption, ensuring privacy and compliance while maintaining security.
  • MITRE ATT&CK Mapping: Aligning detected anomalies with the globally recognized MITRE ATT&CK framework to provide security analysts with clear context and actionable remediation steps.
  • Hybrid Cloud Observability: Seamlessly monitoring on-premises, cloud, and virtual environments from a single pane of glass.

Collaboration Between NetOps and SecOps

Flowmon serves as a unified platform where network and security teams can collaborate. This “single source of truth” accelerates troubleshooting, reduces Mean Time to Repair (MTTR), and ensures that resources are allocated efficiently. With a deployment time of under 30 minutes and an intuitive UI, Flowmon provides one of the fastest returns on investment (ROI) in the industry.

Flowmon by the numbers: Trusted by over 6,000 organizations worldwide. Founded in 2007 and a subsidiary of Progress since 2021, Flowmon is present in more than 50 countries.

The Flowmon Solution Suite

Flowmon uses machine learning, heuristics, and advanced analytics to improve network performance and provide automated incident response.

  • Flowmon ADS (Anomaly Detection System): The heart of the NDR platform. It uses a powerful engine to detect unknown threats, lateral movement, and data exfiltration.
  • Flowmon Probe: A high-performance sensor that generates enriched telemetry (IPFIX) from network traffic, including L7 visibility, without impacting network performance.
  • Flowmon Collector: A robust hub for collecting, visualizing, and analyzing telemetry data across the entire infrastructure.
  • Flowmon APM (Application Performance Monitoring): Optimizes the user experience by fine-tuning application performance and identifying bottlenecks.
  • Flowmon Packet Investigator: An automated network traffic audit tool that records and interprets packets to simplify complex troubleshooting.

Synergy: Flowmon & Garland Technology

Through the RelNet portfolio, Flowmon integrates seamlessly with Garland Technology TAPs. This combination ensures that the Flowmon platform receives 100% of the network data, providing absolute visibility for real-time performance and security reporting while significantly reducing the load on NetOps and SecOps teams.