CoreDetection The owner has verified their profile information displayed on this page.

CoreDetection is a self-hosted, ML-powered DDoS detection appliance for ISPs, data centers and enterprises. It installs on your own Linux server and analyses NetFlow v5/v9, IPFIX, sFlow and jFlow exports out-of-band, so customer traffic never changes path. Smart Detection learns per-IP behavioural baselines (168 hour-of-week profiles) and combines them with thresholds, attack signatures and severity scoring, catching volumetric, amplification, botnet and pseudo-L7 floods while cutting false positives by roughly 90% versus threshold-only tools. A built-in NOC dashboard shows live attacks, prefix and BGP session health, and forensics by source IP, country and ASN. Response is automated through BGP RTBH blackholing, FlowSpec (RFC 5575/8955) and threat-feed blocklists, with email, Telegram and webhook alerting and a REST API for SOC integration. Licensing is offline and server-bound, and all flow telemetry stays on your infrastructure.

CoreDetection can be found in Web Security & DDoS Protection categories.