EndaceVision
EndaceVision is a browser-based application for investigating security threats and network or application performance issues with historical packet data.
What EndaceVision is
EndaceVision is a browser-based application for investigating security threats and network or application performance issues with historical packet data. Analysts can search and filter recorded traffic by link name, application classification, IP or MAC address, port, timestamp, and other parameters. EndaceProbes classify captured traffic by application using built-in deep packet inspection. Views include bandwidth over time, conversations, traffic over time, and top talkers. MicroVision uses packet timestamps to display events at microsecond detail, including average and maximum values for each sample point. A hosted Wireshark instance lets analysts decode packets on EndaceProbes or InvestigationManager without downloading large packet captures. The datasheet lists role-based access control and TACACS security. EndaceVision is included on EndaceProbe Analytics Platforms and InvestigationManager, and can be accessed from modern desktop or tablet browsers with appropriate credentials. Cisco Secure Network Analytics can link alerts to related packet-level Network History in EndaceVision. The product is aimed at security, network, and IT teams. Endace was founded in 2001 and is headquartered in Auckland, New Zealand. It is paid, with pricing on request.
Good
- Searches historical traffic across addresses, ports, timestamps, and more.
- MicroVision shows packet events at microsecond detail.
- Hosted Wireshark avoids downloading large packet captures.
- Included on EndaceProbe Analytics Platforms and InvestigationManager.
Watch out
- Paid product; pricing is available on request.
- Browser access requires appropriate credentials.
- Included with specified Endace platforms, not listed as standalone.
Who it suits
EndaceVision suits security, network, and IT teams investigating threats or troubleshooting network and application performance using recorded packet data. Its included availability is tied to EndaceProbe Analytics Platforms and InvestigationManager.
Verdict
EndaceVision is focused on packet-level investigation and performance analysis, with visualizations and hosted packet decoding. Buyers should confirm platform fit and request pricing for their deployment.
Plans and prices
From EndaceVision's own pricing page, checked 8 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| EndaceVision | Priced on request | Included on EndaceProbe Analytics Platforms and InvestigationManager · no public price shown |
The facts
Each one read from EndaceVision's own pages, with the date it was checked.
What it does
- Additional integrations
- Endace's 2026 partner announcement lists integrations including Cisco XDR, Splunk SIEM and SOAR, Vectra AI, Microsoft Sentinel, Google SecOps, Exabeam LogRhythm, Palo Alto Networks XSOAR, Sumo Logic, and Fortinet FortiNDR.checked 8 Oct 2026
- Audience
- The product page describes EndaceVision for security, network, and IT teams investigating network and application issues.checked 8 Oct 2026
- Bundled product
- EndaceVision is included on EndaceProbe Analytics Platforms and InvestigationManager.checked 8 Oct 2026
- Deep packet inspection
- EndaceProbes provide built-in deep packet inspection that classifies captured traffic by application for analysis in EndaceVision.checked 8 Oct 2026
- Integrations
- Endace says Cisco Secure Network Analytics can link alerts to related packet-level Network History in EndaceVision.checked 8 Oct 2026
- Microburst analysis
- MicroVision uses packet timestamps to visualize events at microsecond-level detail and displays average and maximum values for each sample point.checked 8 Oct 2026
- Purpose
- EndaceVision is a browser-based application for investigating security threats and network or application performance issues using historical packet data.checked 8 Oct 2026
- Search and filters
- Users can search and filter recorded traffic by link name, application classification, IP and MAC addresses, port number, timestamp, and other parameters.checked 8 Oct 2026
- Security controls
- The EndaceVision datasheet lists support for role-based access control and TACACS security.checked 8 Oct 2026
- Support
- Endace says its worldwide support call center is available 24×7 and premium support includes 24×7×365 phone, email, and portal support.checked 8 Oct 2026
- Visualizations
- The visualizations include bandwidth over time, conversations, traffic over time, and top talkers.checked 8 Oct 2026
- Wireshark
- A hosted Wireshark instance lets analysts decode and view packets on EndaceProbes or InvestigationManager without downloading large packet captures.checked 8 Oct 2026
The company
- Company
- Endace says it was founded in 2001.checked 8 Oct 2026
- Founded
- 2001checked 28 Sep 2026
- Headquarters
- Auckland, New Zealandchecked 28 Sep 2026
Where it runs
- Supported browser access
- The datasheet says EndaceVision runs in any modern browser on desktop or tablet devices, with appropriate credentials.checked 8 Oct 2026
Alternatives to EndaceVision
- 1
Wireshark
Free planOpen sourceAPILinuxmacOSSelf-hosted7.5Free plan - 2
Colasoft Capsa
Free planWindows7.4$295 one-time - 3
Sniffnet
Free planOpen sourceLinuxmacOSWindows7.4Free plan - 4

Arkime
Free planOpen sourceWebAPILinuxSelf-hosted7.3Free plan - 5
Avidemux
Free planOpen sourceWebLinuxmacOSWindows7.3Free plan - 6

NetworkMiner
Free planLinuxmacOSWindows6.9$1,300 one-time
