NetWatch · Built by Systeque
See what's actually moving on your network.
NetWatch records the traffic your network actually carries — every flow, searchable — so questions like "what is this machine talking to?" have answers instead of guesses.
What it does
Capabilities
Flow capture and search
The sensor captures network flows at line rate and streams them into ClickHouse, where they stay queryable — by host, port, protocol or time window — rather than aggregated away.
Traffic baselines and anomalies
Per-host and per-segment baselines make unusual traffic visible: a workstation that starts talking to a new country, a server whose nightly transfer suddenly triples.
Retention that supports investigations
Flow history is kept long enough to answer "when did this start?" during an incident, not just "what is happening now".
Runs on your network, monitored by ours
The sensor deploys on-premises or in your hosting estate; Systeque engineers watch the output as part of managed service engagements.
Architecture
A single-binary sensor written in Go captures flows with minimal footprint and ships them to ClickHouse, a columnar database built for exactly this shape of data — billions of small records, queried by time and dimension. That choice is why flow history stays searchable instead of being rolled up into averages.
In the product
Product brochure
NetWatch at a glance
One page covering what NetWatch does — live visibility, flow and host intelligence, protocol insight and security findings — plus the modular architecture behind it. Click the brochure to view it full size.
See NetWatch on your own traffic.
A short call to scope a pilot on one network segment — no commitment.