EndaceProbe’s forensic packet data integrates directly into leading IDS/IPS, SIEM, SOAR, XDR, firewalls, NPM/APM, and AI/MLL detection solutions for faster MTTR.
New and upgraded integrations with Endace’s always-on packet capture deliver the crucial visibility and forensic evidence that NOC and SOC teams need to protect their networks
EndaceProbes help teams detect and investigate threats and performance issues more efficiently and resolve incidents faster and more accurately
AUCKLAND, New Zealand & AUSTIN, Texas, April 16, 2026–(BUSINESS WIRE)–Packet capture authority, Endace, has announced a raft of new partners and updated integrations as part of its Fusion Partner Program, including Cisco XDR, Splunk SIEM, Splunk SOAR, Vectra AI, Microsoft Sentinel, Google SecOps, Exabeam LogRhythm, Palo Alto Networks XSOAR, Sumo Logic, and Fortinet FortiNDR.
“Customers realize that always-on, full packet capture is critical to giving their SOC and NOC teams sufficient visibility into threats and issues on their networks,” said Michael Morris, Senior Director of Technology Alliances at Endace. “Our partners see the value of integrating this critical evidence source directly into their solutions to put forensic data right at analysts’ fingertips when they’re investigating and resolving threats and issues. It’s a very synergistic approach. It gives customers a seamless, tightly integrated solution that streamlines and accelerates incident detection, investigation and response.”
For 25 years, Endace has provided organizations with innovative, scalable, always-on packet capture that delivers unalterable network truth. Endace’s Fusion Partners offer a wide range of solutions including XDR/NDR, SIEM, SOAR, IDS/IPS, firewalls, NPM/APM, and AI/ML detection, all of which benefit from being able to provide users with fast, easy access to full packet data. EndaceProbes also support open-source tools, including Wireshark, Suricata, and Zeek. In fact, Endace is a contributor to Wireshark, the de facto standard for network packet analysis, and is a gold sponsor of the Wireshark Foundation. A full version of Wireshark is hosted on all EndaceProbes.
In 2025 and 2026, EndaceProbes have been providing full packet capture in the Cisco and Splunk “SOC-in-a-Box” at major cybersecurity trade shows and conferences, including RSAC, Black Hat, and Cisco Live.
Many of Endace’s Fusion Partners have provided insights about the value of packet data in Endace’s Packet Forensics Files interviews. Examples include:
