OpenText Bricata

OpenText Bricata is the network detection and response (NDR) product line OpenText acquired in November 2021 when it bought Bricata, a Columbia, Maryland-based NDR vendor founded in 2014. Bricata’s technology analyzes network traffic in real time to surface intrusions, lateral movement, and anomalous behavior that endpoint-only tools can miss, combining protocol analysis, threat intelligence correlation, and full-packet capture for later forensic review. OpenText has since folded the product into its broader Cybersecurity Cloud, pairing it with its Endpoint Detection and Response, Digital Forensics, and Incident Response tools to give security teams combined network-and-endpoint visibility.

The core value proposition is reducing alert fatigue: Bricata’s original pitch, carried forward under OpenText, is that layered detection methods (signature, protocol anomaly, and file extraction analysis) cut down on the false-positive volume that plagues single-method network monitoring, while giving threat hunters raw packet data to investigate incidents after the fact. It competes in a network detection and response category that includes both independent NDR vendors and network modules bundled into larger XDR platforms from Palo Alto Networks, Vectra AI, and Darktrace.

For OpenText customers already standardized on its Cybersecurity Cloud, Bricata’s NDR fills a real gap between endpoint telemetry and network-layer visibility. For net-new buyers evaluating NDR on its own merits, it competes primarily on integration with OpenText’s broader stack rather than best-of-breed standalone capability, and its public roadmap and release cadence are considerably less visible than venture-backed NDR challengers.