LiveAction

LiveAction builds ThreatEye, a network detection and response (NDR) platform that analyzes encrypted network traffic for anomalies and attacker behavior without needing to decrypt it, using machine-learning-driven traffic analysis and behavioral baselining. The platform grew out of LiveAction’s original network performance monitoring and diagnostics (NPMD) business, which it extended into security by acquiring CounterFlow AI in May 2021. CounterFlow brought a streaming machine-learning engine for deep packet dynamics and encrypted-traffic analysis that became the technical foundation for ThreatEye, and the CounterFlow brand has since been fully absorbed into LiveAction’s product line rather than operating separately.

LiveAction is headquartered in Palo Alto, California, and has raised roughly $41 million in funding from investors including Cisco Investments, Insight Partners, and Sway Ventures. It has also entered a strategic investment and technology development agreement with In-Q-Tel, the not-for-profit investment arm that helps deliver technology to U.S. government and intelligence agencies, signaling interest in ThreatEye’s applicability to government network environments.

By combining network performance monitoring and security detection in one platform, LiveAction targets the practical overlap between NetOps and SecOps teams, who often work from different tools and disagree on what a given traffic anomaly means. Its differentiation rests on unifying that data and workflow rather than on a single breakthrough detection technique; independent third-party detection-efficacy benchmarking (e.g., MITRE ATT&CK evaluations) was not found in public sources.