LECS Platform

LECS Platform is a Network Detection and Response (NDR) product for monitoring internal network traffic in IT, OT, IoT, and medical environments. It is deployed as dedicated hardware or as a virtualized appliance, and runs in parallel with the existing network without changing network parameters. Detection: - Analyzes packet headers and payloads. - Uses multiple parallel detection engines to identify morphological deviations and entropy-based anomalies. - Operates in a hidden mode so that it is not directly attackable. Response: - Applies automated response actions to mitigate threats. - Lets a SOC define progressive response levels based on threat type, context, and criticality of the affected system. - Sends notifications on anomalies and uses context analysis to reduce false positives. Additional modules and formats: - OT/Embedded: can be integrated into IoT/OT devices and SCADA systems without an operating system. - Asset Inventory & Discovery: passive asset inventory that identifies and classifies devices, detects CVEs, and supports IEC 62443 through zone segmentation and conduit communication rules. - AI Agent: software module for behavioral analysis and insider-threat prevention. - Virtual: version for hypervisors such as VMware, Hyper-V, and Proxmox. Deployment and sizing: Small, Medium/Large, and Corporate offerings. The dashboard can be cloud-managed or on-premises, with logs staying within the customer infrastructure in the on-premises version. The vendor states support for NIS2 and ACN requirements. It is positioned as complementary to firewalls and antivirus, targeting lateral movement and threats that have already passed perimeter defenses.