ElastiFlow

ElastiFlow is a network performance and security analytics company that provides visibility and insights into network traffic through flow-based telemetry. Originally created by Rob Cowart as an open-source GitHub project in May 2017, ElastiFlow initially combined NetFlow, IPFIX, and sFlow protocols with the Elastic Stack (Elasticsearch, Logstash, and Kibana) to deliver network traffic visibility and analysis. It has since evolved into a commercial platform serving network and security teams globally. The company offers two primary products: NetObserv and NetIntel. Its core platform is designed to collect, transform, normalize, translate, and enrich network flow data. The collection layer supports extraction of over 6,200 standard and vendor-specific fields from flow records at scale. Data is then decoded and transformed, normalized to a common schema for simplified user experience and machine-driven analytics, and translated into human-readable formats to facilitate investigation and action. Enrichment is provided through external data sources including GeoIP, Autonomous System (AS) information, and IP reputation data to supply contextual information for identifying concerning network conditions. ElastiFlow is positioned to integrate with existing open data platforms, converting them into network flow analytics solutions. Its target market includes network operations and security operations teams that require deep visibility into network traffic behavior, performance, and security events. The platform is offered via tiered plans, including a cloud-based deployment option.