Endpoint Risk Governance
Focus on inventory, compliance assessment, and threat screening.
Two Independent Security Products
NP observes network packets. ED governs endpoint risk.
SecuTex NP and SecuTex ED are independent product lines. NP focuses on network traffic capture, anomaly detection, packet evidence, and forensic investigation. ED focuses on endpoint inventory, compliance assessment, and rapid threat screening.
Network Evidence Retention
Focus on traffic capture, investigation, and retrospective evidence.
SecuTex Products
From network evidence to endpoint risk, close investigation and governance gaps.
SecuTex NP helps preserve network traffic evidence and reconstruct incident context. SecuTex ED helps inventory endpoint assets, compliance status, and threat indicators. Each product maps to a different scenario and can be evaluated based on the enterprise risk gap.
Network Packet Evidence
SecuTex NP
Deploy NP at core, perimeter, DMZ, office, server, or critical network segments to preserve network-side evidence from mirrored traffic and reconstruct incident context such as abnormal outbound connections, lateral movement, C2 traffic, and operation policy violations.
- Continuous packet capture to preserve raw evidence for incident investigation.
- Anomaly detection, threat intelligence matching, incident investigation, and correlation search.
- Hardware appliance or VM deployment planned by traffic scale and retention period.
Endpoint Risk Governance
SecuTex ED
Use a central console to manage assessment projects and centrally inventory endpoint assets, compliance status, update posture, and suspicious threat indicators for one-time large-scale scans or long-term endpoint tracking.
- Supports On-Demand Scan and Persistent Agent editions.
- Asset inventory, Taiwan government GCB / financial-sector FCB compliance checks, and custom baseline checks.
- Use YARA rules and IoC matching to help screen endpoint threat indicators.
Risk Gaps
Clarify the gap first, then choose the right SecuTex product.
SecuTex NP and SecuTex ED support different security tasks. Evaluate NP first when the issue is network traffic and event evidence. Evaluate ED first when the issue is endpoint inventory, compliance status, and threat indicators.
Network-side investigation gaps
Internal traffic lacks traceable records
Preserve raw packets from mirrored traffic to reconstruct source, destination, port, timeline, and communication content.
Incident context is difficult to reconstruct
When host logs are incomplete, overwritten, or deleted, NP keeps network-side evidence available to confirm abnormal outbound connections, lateral movement, and affected scope.
Critical systems cannot run agents
Observe network devices, server zones, and critical segments through out-of-band capture, supplementing investigation data without disrupting production services.
Endpoint-side governance gaps
Endpoint status is difficult to centralize
Collect endpoint assets, operating systems, update posture, installed software, and assessment results into a trackable endpoint inventory.
Audit and compliance checks rely on manual work
Turn Taiwan government GCB, financial-sector FCB, and custom baselines into prioritized, exportable check results to reduce manual consolidation effort.
Suspicious events require fast endpoint screening
Use on-demand scans to check suspicious files, processes, YARA rules, and IoC hits, helping define which endpoints need priority handling.
Use Cases
Common evaluation scenarios
When teams need stronger investigation evidence, lower audit inventory cost, or faster suspicious endpoint screening, NP and ED can be evaluated separately for the right scenario.
After abnormal outbound traffic, teams need fuller evidence than an alert.
A critical system connects to an unfamiliar network after hours. NP uses packet records to trace DNS queries, destination IPs, connection time, and similar behavior in the same segment, helping teams confirm affected scope and preserve traceable network-side evidence.
Before audit, teams need fast visibility into endpoint compliance and risk.
ED collects assessment results and shows non-compliant items, missing updates, and suspicious threat indicators so administrators can prioritize remediation and export audit evidence.
Free Trial / PoC
Need help deciding whether NP or ED should be evaluated first?
Share your network topology, traffic scale, endpoint count, or audit requirement. We will recommend the most suitable PoC or Free Trial path for SecuTex NP or SecuTex ED.