Major software release eliminates traditional barriers to packet capture, storage and analysis with a 50x search performance boost.
Seamless automation introduces a new era of on-demand network visibility, while the Vault REST API transforms packets from a manual forensic resource into a fully integrated component of automated security workflows.

Endace, the packet capture authority, today announced the release of OSm 7.3, a major new software update that makes network packet data faster, more affordable, and significantly easier to use for enterprise security and network teams.

Packets Without the Wait: Faster Search, Automation, and Instant Forensics

As cyber threats evolve at unprecedented speed and regulations such as DORA, GDPR, HIPAA, and PCI-DSS require organizations to maintain detailed forensic capabilities, packet-level network visibility is increasingly recognized as the gold standard for security and troubleshooting.

Packet capture now represents the bedrock evidential data needed to solve complex security and network incidents. EndaceProbes play a central role in making that data accessible across security and network teams, and OSm 7.3 extends this capability by delivering instant access to deep network intelligence that integrates seamlessly into automated workflows.

“We are at a critical moment where teams are realising the value of packet capture as a tool they use every day,” said Stuart Wilson, CEO of Endace.

“The regulatory environment demands it, the threat landscape requires it, and now the technology makes it practical for every organization. With OSm 7.3, we are delivering comprehensive network visibility that is immediate, scalable, and affordable—so security teams can focus on threats rather than fighting their tools.”

Key Innovations in OSm 7.3: SOC-Tested and Industry-Driven

OSm 7.3 was shaped by extensive industry feedback and Endace’s experience operating five Security Operations Center (SOC) events over the past year.

1. Revolutionary Search Performance: 50x Speed Improvement

OSm 7.3 introduces a fundamentally re-architected search engine delivering results up to 50 times faster than the previous generation—already ahead of competing solutions.

• From minutes to seconds: Queries that previously took 45–60 seconds now return results in just 1–2 seconds
• Instant user experience: EndaceVision displays results and metadata almost immediately, eliminating progress bars and wait times
• Competitive advantage: While competitors measure search in minutes, Endace now delivers sub-second performance for common queries

2. Vault REST API: Automation-Ready Packet Intelligence

The new Vault REST API marks a fundamental shift in how packet data integrates with modern security operations. It was designed using real-world experience from SOC environments running tools from Cisco, Splunk, Palo Alto Networks, and others.

Key capabilities of the Vault REST API include:

• Evidence preservation: Security tools automatically request and archive packet data in the background
• Comprehensive forensics: Delivers raw packets, reassembled files, Zeek logs, and network visualizations
• Intelligent archiving: Stores critical evidence in secondary “vault” storage for long-term retention
• Integrated workflows: Attaches evidence directly to SIEM, SOAR, or XDR incident worklogs

“We watched security teams work with our technology alongside tools from Cisco, Palo Alto, and other leading vendors,” said Cary Wright, VP of Products at Endace.

“The Vault REST API makes packet intelligence a native part of automated security workflows rather than a manual fallback. When access is fast and flexible, packet evidence becomes invaluable for accelerating investigation, response, and detection.”