Vectra AI Platform
The overall platform that follows an attacker's behaviour across network, identity and cloud, and supports discovery, detection, investigation, response and hunting.
Partner solutions
Vectra AI Australia: authorised partner for AI-driven threat detection
The Vectra AI Platform uses AI to spot attacker behaviour across networks, identities and cloud services and ranks it by urgency. TOM SHAW is an authorised Vectra AI partner that supplies, implements, integrates and supports Vectra AI across Australia.
AI-driven NDR, identity and cloud detection
What Vectra AI does
The Vectra AI Platform uses AI to spot attacker behaviour across networks, identities and cloud services, including Active Directory, Entra ID, Microsoft 365 and AWS. It links related activity into a single attack picture and ranks it by urgency, so security teams can investigate and stop real attacks rather than chase isolated alerts.
- Network detection and response across data centre, campus, remote, cloud and OT networks
- Identity threat detection for Active Directory, Entra ID and Microsoft 365
- Cloud attack detection across AWS, Azure, Google Cloud and Microsoft 365
- AI triage, correlation and prioritisation of related detections
- Network observability and exposure management
- Managed extended detection and response (MXDR) by Vectra analysts
More about the platform on the Vectra AI website.
Buy on AWS Marketplace Implement and Support Vectra AI on AWS Marketplace
Vectra AI products we supply and implement
Vectra NDR
Network detection and response that watches traffic for signs of lateral movement, command and control and data theft, extended to cover identity and public cloud.
Vectra AI Detections for Identity
Detects credential theft, account takeover and privilege escalation for human and machine identities across Active Directory, Entra ID, Microsoft 365, AWS and Azure.
Vectra AI Detections for Cloud
Detects attacker activity in public cloud and SaaS, including AWS, Azure, Google Cloud, Oracle Cloud, Microsoft 365 and Copilot for Microsoft 365.
Vectra MXDR
Vectra's managed extended detection and response service, where Vectra analysts monitor, investigate and help contain threats, either fully managed or co-managed with your SOC.
What Vectra AI helps with
Finding attackers already inside the network
Vectra NDR looks for behaviours such as reconnaissance, lateral movement and data staging that signature tools miss, including on devices that cannot run an agent.
Protecting Microsoft 365 and Entra ID
Identity and cloud detections flag account compromise, suspicious privilege changes and misuse of Microsoft 365 and Entra ID, linking them to activity elsewhere.
Cutting alert noise in the SOC
AI triage and correlation group related detections into prioritised entities, so analysts spend time on the attacks that are progressing rather than individual alerts.
Extending a small security team
Vectra MXDR adds analysts who investigate and respond to threats surfaced by the platform, with full or co-managed models depending on team maturity.
Implement Vectra AI in Australia with TOM SHAW
From licensing to long-term support, one Australian partner looks after your Vectra AI deployment.
Supply and licensing
Buy Vectra AI through an Australian partner, with licensing sized to what you actually need.
Implementation
We plan and deploy Vectra AI in your environment, configured for your risks rather than left on defaults.
Integration
We connect Vectra AI with the rest of your security stack, including Noble1, so its signals feed one view of human and machine risk.
Support
After go-live we support Vectra AI: tuning, upgrades, health checks and help when you need it.
Related services
Vectra AI in Australia: common questions
What is Vectra AI?
Vectra AI provides an AI-driven threat detection and response platform that detects attacker behaviour across networks, identities and cloud services, and prioritises it for investigation.
What is NDR?
Network detection and response (NDR) analyses network activity to find attackers moving through an environment. Vectra NDR applies this across data centre, campus, remote, cloud and IoT/OT networks.
Does Vectra AI detect attacks in Microsoft 365 and Entra ID?
Yes. Vectra AI Detections for Identity and for Cloud cover Microsoft 365, Entra ID and Active Directory, as well as AWS, Azure and Google Cloud.
Does Vectra AI offer managed detection and response?
Yes. Vectra offers a managed extended detection and response service (Vectra MXDR) in which Vectra analysts investigate and help contain threats across identity, cloud, SaaS and network.
What is Vectra NDR?
Vectra NDR is Vectra's network detection and response capability. It analyses network activity across data centre, campus, remote, cloud and IoT/OT environments to find attackers moving through the network.
Does Vectra AI work with SentinelOne, CrowdStrike and Microsoft Defender?
Yes. The Vectra AI Platform integrates with endpoint detection and response tools, including SentinelOne, CrowdStrike Falcon and Microsoft Defender, so network, identity and cloud detections can be acted on at the endpoint.
Does Vectra AI send alerts to a SIEM or SOAR?
Yes. Vectra AI's entity scoring, network metadata and logs can be sent to a SIEM over Syslog or API, and its prioritised alerts can drive SOAR playbooks in platforms such as Cortex XSOAR, Splunk SOAR and Google Chronicle.
How is Vectra AI deployed?
Vectra AI is agentless. It can be deployed on-premises, as SaaS, or in a hybrid model, so it can cover devices that cannot run an agent.
Can you threat hunt with Vectra AI?
Yes. The Vectra AI Platform lets analysts hunt for unusual behaviour across a hybrid network with a query builder or SQL, and start an investigation from a detection in one click.
Is TOM SHAW a Vectra AI partner in Australia?
Yes. TOM SHAW is an authorised Vectra AI partner in Australia. We supply, implement, integrate and support Vectra AI for Australian organisations.
Can TOM SHAW implement Vectra AI for us?
Yes. We plan, deploy and configure Vectra AI in your environment and integrate it with your existing security tools, including Noble1, so its signals feed one view of human and machine risk.
Do you support Vectra AI after it is deployed?
Yes. We support Vectra AI after go-live, including tuning, upgrades, health checks and help when you need it.
Can I buy Vectra AI implementation through AWS Marketplace?
Yes. TOM SHAW's Vectra AI implementation and support offering is listed on AWS Marketplace, so you can buy it through your AWS account.
Does Vectra AI work with Noble1?
Yes. Vectra AI integrates with Noble1, TOM SHAW's cyber risk platform, so its signals feed a single view of human and machine risk.
Talk to us about Vectra AI
Licensing, implementation, integration or support: tell us what you need and the TOM SHAW team will get back to you.
Talk to us about Vectra AIOr call 1800 845 211 or email info@tomshaw.com.