Feature Comparison

Advanced Detection Techniques

CTS-AI
CTS-AI uses a combination of traditional and advanced detection techniques including advanced analytics, machine learning, correlation and reputation.

Network Detection and Response (NDR)
Many NDR solutions are overly dependent on single detection techniques creating gaps in threat coverage.

Next Generation Firewalls (NGFW)
Next-generation Firewall UTMs introduce multi-layer detection capabilities, often including IDS/IPS, Sandbox, DNS, Proxy, Antivirus. While some of these are seen as relatively sophisticated, the combined network-based detection capabilities are primarily dependent on the IDS/IPS which can struggle to detect and prevent today's more sophisticated threats

Pre-Tuned Detection

CTS-AI
CTS-AI uses the NTT Security analysis engine used for advanced threat detection and managed detection and response services. This analysis engine is continuously trained and tuned by NTT Security’s security operations centers (SOCs) to ensure accurate and up-to-date threat coverage.

Network Detection and Response (NDR)
NDR sensors typically have a learning period requiring users to configure and tune the system to recognize good and bad behavior before being able to detect threats efficiently. This is a continuous effort that also introduces risk as non-experts are likely to tune the systems incorrectly causing inaccurate triggers and possibly compromise the system’s efficiency in detecting threats.

Next Generation Firewalls (NGFW)
NGFW sensors are typically very noisy after initial deployment and require users to configure and tune the system based on signature triggers. Poorly configured and tuned systems can lead to alert fatigue and create a significant risk of missing difficult to detect, “needle in a haystack” threats.

Threat Intelligence

CTS-AI
CTS-AI has an “always include” policy for all its detection capabilities including threat intelligence. Users benefit from the same threat intelligence feed curated by NTT Security researchers and data scientists and used by NTT Security’s premium Managed Detection and Response service.

Network Detection and Response (NDR)
NDR providers typically offer threat intelligence as an optional premium add-on or rely on third party threat intelligence to provide such capabilities.

Next Generation Firewalls (NGFW)
NGFW providers typically offer threat intelligence as an optional premium add-on or rely on third party threat intelligence to provide such capabilities.

Built-In Response

CTS-AI
CTS-AI is easily configured to respond directly to threats by integrating natively with access control lists (ACLs).

Network Detection and Response (NDR)
NDR sensors typically depend on third party solutions to perform responsive actions requiring additional expense and expertise to implement.

Next Generation Firewalls (NGFW)
NGFWs require inline placement to block detected threats. While capable of providing network blocking, this comes with risk of creating a potential network chokepoint.

Security Incident Reports

CTS-AI
Compared to typical technology providers, CTS-AI outputs detailed security incident reports with actionable recommendations allowing users to implement a swift and well-informed response to detected threats.

Network Detection and Response (NDR)
NDR sensors tend to be noisy in nature and frequently trigger tens, hundreds, or even thousands of events that need user validation before a security incident can be confirmed. Events triggered by more sophisticated detection techniques, such as machine learning, are also extremely complicated and difficult to understand and analyze due to the “blackbox” nature of these solutions.

Next Generation Firewalls (NGFW)
NGFW sensors tend to be noisy in nature and frequently trigger tens, hundreds, or even thousands of events that need user validation before a security incident can be confirmed. In addition to event triggers, NGFWs are typically configured to output raw audit logs that require analysis to understand the larger picture resulting in millions, or even billions, of rows requiring expert validation.

Automated Notifications

Because cyber threats never sleep, having strong threat detection is a basic requirement for any network. Traditional threat detection solutions typically require 24/7 security staffing to be on hand to identify, analyze, and validate security incidents and apply appropriate responses. CTS-AI automates the threat detection process by performing essential identification, analysis, and incident validation and sends incident notifications and response recommendations to remote users directly via email and a purpose-built mobile app.

Ease of Management

CTS-AI is extremely simple to start up and use. It is a fully cloud-based service so there is no hardware to install, no software to configure, and it doesn’t require any cyber security expertise to operate. Working 24/7 in the background, CTS-AI is maintained and continuously updated by advanced machine learning techniques combined with human validation from NTT cyber security experts and the company’s global threat intelligence ecosystem.

Enhanced for Mobile

Unlike other solutions, CTS-AI is designed primarily for mobile use so users can literally fit the power of a global security operations center (SOC) directly in their pocket. And because CTS-AI operates on a mobile platform, users are not tethered to a security monitoring workstation and can receive threat notifications anywhere they go.

Free Service

Unlike any other advanced cyber security solution in its class, CTS-AI is a completely free service that includes 24/7 threat detection and response and does not require additional staffing or third party security solutions for operation. CTS-AI also includes continuous updates from the NTT global threat intelligence ecosystem at no charge.