Progress Flowmon

Progress Flowmon is a network detection and response (NDR) platform that analyzes network flow data and full packet traffic to surface threats and anomalies that endpoint and log-based tools can miss, such as lateral movement, DDoS activity, and command-and-control traffic hidden inside otherwise normal-looking connections. It maps detected behavior to MITRE ATT&CK tactics and techniques, giving analysts a standardized way to triage severity and likely attacker intent, and integrates with SIEM platforms to feed automated response workflows.

The product traces back to Flowmon Networks, a 2007 spin-off of Masaryk University, Brno University of Technology, and network engineering firm UNIS in the Czech Republic, building on flow-monitoring research that started at CESNET in 2002. Flowmon built a reputation in Central Europe as a fast-growing network performance and security monitoring vendor before being acquired by application-delivery vendor Kemp Technologies in November 2020 to fold NDR capability into Kemp’s load-balancing and network stack. Kemp was itself acquired by Progress Software in September 2021, and Flowmon now operates as the Progress Flowmon product line within Progress’s broader infrastructure software portfolio.

For network security teams, Flowmon’s value is largely unchanged by the ownership changes: it remains a purpose-built NDR tool with a long operating history and real MITRE ATT&CK-mapped detection logic, now backed by a larger, publicly traded parent (Progress Software, Nasdaq: PRGS) with more resources for integration and support than the original Czech startup had on its own.