Exeon.NDR
Network detection and response based on flow and log metadata, run on customer systems.
- Swiss CompanyThe operating company is headquartered and legally incorporated in Switzerland.
- Swiss DevelopedThe product is primarily developed by a team operating from Switzerland.
- Self-hostableCan be installed on your own servers or on-premises.
exeon.com
Overview
Exeon.NDR is a network detection and response (NDR) product from Exeon Analytics AG in Zurich; the platform was earlier marketed as ExeonTrace. Instead of mirroring traffic to dedicated sensors or inspecting packet contents, it analyses metadata such as NetFlow and logs from existing routers, switches, firewalls, DNS servers, proxies, cloud platforms and applications, using supervised and unsupervised machine learning to detect attacks, including in encrypted traffic. It covers IT, OT and cloud networks, aggregates and correlates alerts to reduce false positives, and exposes APIs for data ingestion and for responses through SIEM, SOAR, EDR and XDR tools. Related modules include Exeon.UEBA for user and entity behaviour analytics and Exeon.Visibility.
The software requires no agents or additional hardware and runs on infrastructure chosen by the customer: on-premises, in a private or public cloud or in air-gapped networks, and it can analyse traffic in AWS, Azure and Google Cloud. No vendor-hosted SaaS edition is listed; some customers use it as a managed service through partners such as Swisscom or Reist Telecom.
Exeon is sold as a subscription that includes licence, setup, training and support, with prices based on the number of active internal IP addresses; no prices are published. Customer references on its site include PostFinance, SWISS International Air Lines and Swiss hospitals. As a metadata-based system, it does not offer the payload-level forensics of tools that perform deep packet inspection.
Why it may be a Swiss alternative
Exeon.NDR is operated by Exeon Analytics AG, which is headquartered in Zürich. Swiss-headquartered company. Ownership is mixed or not fully verified, or development happens mainly abroad.
We could not verify where customer data is hosted.
May replace
- DarktraceDarktrace Holdings Limited · GBCovers network detection and response only; analyses metadata from existing devices instead of mirrored traffic and has no email or endpoint products.
- Vectra AIVectra AI, Inc. · USAnalyses flow and log metadata from existing devices instead of dedicated network sensors.
Foreign products with overlapping functionality. An alternative is not necessarily a one-to-one replacement.
Swiss footprint
Five independent questions. A Swiss company is not automatically Swiss-hosted — and vice versa. How the footprint is assessed
Swiss company. Swiss-headquartered company. Ownership is mixed or not fully verified, or development happens mainly abroad.
- HeadquartersIs the operating company headquartered in Switzerland?
- Zürich, Zurich (ZH), SwitzerlandVerified[1]
- Legal jurisdiction
- OwnershipIs the company ultimately Swiss-owned?
- Unknown / not verified
Privately held; the shareholder structure and investors are not published. Co-founder David Gugelmann chairs the board, which also includes Markus Eugster, Beat Schillig and Felix Haldner. No acquisition was found in register publications or press reports up to October 2026; the most recent capital increases (December 2024 and December 2025) came from conditional capital.
- DevelopmentIs the product developed in Switzerland?
- YesVendor claim[3]
Exeon describes its platform as Swiss-made; the company and its management are based in Zurich.
- HostingIs customer data hosted in Switzerland?
- Unknown / not verified
Exeon.NDR runs on infrastructure chosen by the customer, on-premises, in a private or public cloud or in air-gapped networks, and Exeon states that data processing stays on-premises. No vendor-hosted SaaS edition was found, so the data location depends on the customer's deployment.
- InfrastructureIs the hosting infrastructure operated by a Swiss-owned provider?
- Unknown / not verified
Features & platforms
- Platforms
- Deployment
- Made for
- Interface languages
- Unknown / not verified
Privacy & security
- Public API
- Yes
- Not verified
- End-to-end encryption, Encryption at rest, Encryption in transit, Multi-factor authentication, Single sign-on (SAML/OIDC), SCIM provisioning and Data export
- Certifications
- None listed
Pricing
- Pricing model
- On request
- Free plan
- No
- Free trial
- Unknown / not verified
- Enterprise plan
- Yes
- Billing in CHF
- Unknown / not verified
Prices checked 15 Oct 2026. Always confirm on the vendor’s site.
Open source
- Open source
- NoInferred
Commercially licensed software; no source code is published.
Company
Zurich-based cybersecurity company, founded in 2016 with roots at ETH Zurich, that develops network detection and response software.
Similar Swiss products
Web application and API firewall with reverse proxy, run on customer infrastructure.
Swiss company · foreign parent
- Self-hostable
Network SecurityPaidPlug-and-play microsegmentation appliance for legacy, medical and OT devices.
Swiss company
- Self-hostable
Network SecurityPaidManaged SASE service with SD-WAN, firewall, secure web gateway, CASB and ZTNA.
Swiss native
- Swiss Data Option
Network SecurityPaid
Sources & verification
Every claim on this page is marked as verified, vendor claim or inferred. Unknown means we could not confirm it — not that the answer is “no”.
- Verified Confirmed by an independent or official source such as the commercial register.
- Vendor claim Stated by the vendor in its own documentation, website or legal terms.
- Inferred Derived by the editors from indirect evidence — see the note.
- [1]
- [2]
- [3]
Exeon Analytics AG
- [1]
- [2]
- [3]
- [4]
- [5]