Skip to content
SPECIFICTION
Get listed

EndaceProbe

endace.com

WebLinuxAPISelf-hosted
Visit endace.com
Spec score 7.8 #10 of 22 in Network Packet Capture Software

What it is

EndaceProbe continuously records complete network packets, preserving network history for investigations into security threats, performance issues, and outages. It is offered as physical appliances and cloud or virtual deployments on AWS, Microsoft Azure, VMware, KVM, and Nutanix. Listed models sustain recording from 500 Mbps to 100 Gbps, with packet storage ranging from 1 TB to more than 3 PB. InvestigationManager provides centralized search and data mining, while EndaceCMS manages physical and cloud probes. Browser-based EndaceVision searches historical packets and includes hosted Wireshark decoding without downloading large PCAP files. The platform supports live capture, offline trace analysis, display filters, protocol decryption, and pcap, pcapng, and ERF formats. Endace lists Elastic integrations and an API for open-source, custom, and Fusion Partner tools. Appliances can host applications such as EndaceFlow. Security controls include hardened Linux, disabled shell access, authentication options, role-based access, and stated certifications. Pricing is available on request.

Spec sheet

Purpose
EndaceProbe provides continuous full packet capture and recorded network history for investigating security threats, performance issues, and outages.Read 4 Oct 2026 · endace.com
Intended users
Endace identifies customer sectors including healthcare, retail, banking and finance, military, government, telecom, and broadcast and entertainment.Read 4 Oct 2026 · endace.com
Deployment
The product is available as physical appliances and as cloud or virtual deployments, including AWS, Microsoft Azure, VMware, KVM, and Nutanix options.Read 4 Oct 2026 · endace.com
Integrations
Its APIs and Fusion Partner integrations connect packet history to security and performance monitoring tools, including commercial, open-source, and custom applications.Read 4 Oct 2026 · endace.com
Security
Endace states that its probes use a cryptographic module for encrypted communications and have FIPS 140-3 validation, Common Criteria NDcPP v2.2e certification, and DoDIN APL listing.Read 4 Oct 2026 · endace.com
Support
The Americas support terms list 24×7×365 availability, phone and email support, remote diagnostics, software updates, and a five-minute initial phone response time.Read 4 Oct 2026 · endace.com
Headquarters
Auckland, New ZealandRead 28 Sep 2026 · endace.com
Founded
2001Read 28 Sep 2026 · endace.com
Hosted applications
EndaceProbe appliances can host third-party tools, including EndaceFlow for NetFlow, using the platform's application hosting capability.Read 4 Oct 2026 · endace.com
Hosting
EndaceProbe appliances can host third-party tools, including EndaceFlow for NetFlow, using Application Dock.Read 4 Oct 2026 · endace.com
Investigation
The browser-based EndaceVision application searches and examines historical packet data and includes Wireshark for packet decoding without downloading large pcaps.Read 4 Oct 2026 · endace.com
OSm controls
OSm uses hardened Linux releases, disables shell access, supports Radius, TACACS, and LDAP authentication, and provides role-based access control.Read 4 Oct 2026 · endace.com
Packet analysis
EndaceVision is browser-based, and hosted Wireshark can decode packet data on the EndaceProbe without downloading large PCAP files.Read 4 Oct 2026 · endace.com
Recording capacity
Listed models range from 10 Gb/s to 100 Gb/s sustained recording for hardware appliances, with cloud and vProbe models also listed.Read 4 Oct 2026 · endace.com
Recording scale
Listed models range from 500 Mbps to 100 Gbps sustained recording, with listed packet storage from 1 TB to more than 3 PB.Read 4 Oct 2026 · endace.com
Search and management
InvestigationManager provides central search and data mining, while EndaceCMS provides central fabric management across physical and cloud probes.Read 4 Oct 2026 · endace.com
Security certifications
EndaceProbe models EP-94C8, EP-92C8, EP-2144, and EP-2184 have Common Criteria NDcPP v2.2e certification; Endace also states FIPS 140-3 certification and DoDIN APL listing.Read 4 Oct 2026 · endace.com
Support limit
The support terms cover the current and one previous major release of any software product.Read 4 Oct 2026 · endace.com

Plans and prices

EndaceProbe Priced on request On-premises appliances and cloud deployments; model capacities range from 500 Mbps to 100 Gbps sustained recording Read 4 Oct 2026 · endace.com

Every EndaceProbe plan and price →

Strong points and limits

Strong points

  • Records continuously at up to 100 Gbps
  • Supports AWS, Azure, VMware, KVM, and Nutanix
  • Browser-based historical packet search
  • Hosted Wireshark avoids large PCAP downloads
  • Includes stated security certifications and access controls

Limits

  • Pricing is available only on request
  • Support covers current and previous major release
  • Deployment options require appliances or hosted environments

Who it suits

EndaceProbe suits security, network, and operations teams in sectors such as healthcare, finance, government, telecom, and broadcast. It fits organizations needing appliance, cloud, or virtual packet recording with centralized investigation tools.

Verdict

EndaceProbe combines high-rate packet recording with centralized search, management, and browser-based analysis. Its broad deployment choices and security controls suit organizations that need retained network history, while pricing and support coverage require direct consideration.

Where Specifiction places it

Alternatives to EndaceProbeAll alternatives →