Gatewatcher
Paris NDR platform recognised as a Visionary in Gartner's NDR Magic Quadrant, hosted in France
Quick Overview
| Company | Gatewatcher |
|---|---|
| Category | SIEM & Security Monitoring |
| Headquarters | Paris, France |
| EU Presence | EU (France) |
| Open Source | No |
| Pricing | Custom quote scoped to sensors and deployment size; no published price list |
| Free Option | Demo on request |
| Replaces | Darktrace, Corelight, Vectra AI |
Detailed Review
Gatewatcher is a Paris-based network detection and response vendor built around three components: a Sensor that captures network traffic, a Detection Center that identifies threats across protocols and files, and a Decision Center that reduces the resulting alerts to what a SOC can actually act on.
Gartner named the company a Visionary in its 2025 and 2026 Magic Quadrant for Network Detection and Response, an uncommon piece of independent recognition for a European vendor in a category the large American platforms otherwise dominate almost completely.
The product's stated advantage is triage rather than raw detection volume: Gatewatcher claims roughly a 95% reduction in alert noise and a tenfold improvement in triage speed, addressing the same underlying problem CrowdSec and Logpoint solve from different angles — an analyst team that cannot review everything a sensor flags. Deep packet inspection sits alongside AI-based anomaly detection, covering both known signatures and behaviour that has not been seen before.
Gatewatcher is registered in Paris and, like TEHTRIS and HarfangLab elsewhere in this directory, markets itself explicitly as French-built security infrastructure rather than a US platform with a European sales office. No pricing is published; deployments are scoped to sensor count and network size and quoted individually, which is standard for enterprise NDR but means budgeting requires a sales conversation before a shortlist can narrow.
What Gatewatcher does well
- Named a Visionary in Gartner's NDR Magic Quadrant
- Full-spectrum sensor, detection and decision architecture
- Claims ~95% alert-noise reduction, 10x faster triage
- Covers on-prem and cloud network traffic
- French-built and French-hosted
Where Gatewatcher falls short
- No published pricing — quote only
- NDR, not a log-based SIEM by itself
- Sensor deployment is real infrastructure work
- Strongest track record is in the French market
Standout feature. Positioned by Gartner as a Visionary in NDR, a recognition few European security vendors have earned independently.
Pros and Cons
Pros
- Named a Visionary in Gartner's NDR Magic Quadrant
- Full-spectrum sensor, detection and decision architecture
- Claims ~95% alert-noise reduction, 10x faster triage
- Covers on-prem and cloud network traffic
- French-built and French-hosted
Cons
- No published pricing — quote only
- NDR, not a log-based SIEM by itself
- Sensor deployment is real infrastructure work
- Strongest track record is in the French market
Alternatives to Gatewatcher
Frequently Asked Questions
What is Gatewatcher?
Gatewatcher is a Paris-based network detection and response vendor built around three components: a Sensor that captures network traffic, a Detection Center that identifies threats across protocols and files, and a Decision Center that reduces the resulting alerts to what a SOC can actually act on.
Gartner named the company a Visionary in its 2025 and 2026 Magic Quadrant for Network Detection and Response, an uncommon piece of independent recognition for a European vendor in a category the large American platforms otherwise dominate almost completely.
Where is Gatewatcher based?
Gatewatcher operates from Paris, France, which places it under EU (France).
What does Gatewatcher cost?
Custom quote scoped to sensors and deployment size; no published price list. Demo on request.
Who is Gatewatcher best for?
Enterprise NDR recognised by Gartner as a Visionary. Positioned by Gartner as a Visionary in NDR, a recognition few European security vendors have earned independently.
What are the drawbacks of Gatewatcher?
No published pricing — quote only. NDR, not a log-based SIEM by itself. Sensor deployment is real infrastructure work. Strongest track record is in the French market.