Network Detection and Response (NDR) Glossary Definition

style="margin:0;">Network Detection and Response (NDR) is a security capability that analyzes network traffic to detect suspicious behavior and support investigation.

NDR complements endpoint and log-based monitoring by showing communications between systems, users, workloads, and external destinations.

Security and infrastructure teams use this concept to reduce exposure, enforce access boundaries, inspect traffic, and limit the impact of compromise.

Related concepts include Routing.

Additional Resource: NIST Computer Security Resource Center Glossary.