What is Andrisoft and what does it offer?

Andrisoft is an EU-based software vendor, active since 2006, that builds on-premise network security and traffic-monitoring software for network operators. Its two products are Wanguard (DDoS detection and mitigation) and Wansight (traffic monitoring and accounting). Both ship as Linux packages that run on your own servers rather than as an appliance placed in the traffic path, and the company says it serves 1,000+ network operators in 50+ countries. If you want DDoS defence or flow-level visibility that stays inside your network and avoids per-gigabit fees, this is the category of tool to evaluate.

The two products

Wanguard — DDoS detection and mitigation

Wanguard is the flagship. Its Sensors watch NetFlow, sFlow, IPFIX, or mirrored packets, and anomaly checks run every second, so detection is measured in seconds. Mitigation happens on your own network in one of two ways:

• On your routers — via Flowspec or RTBH (remotely triggered black hole).
• On Linux filtering servers — dedicated Filters scrub diverted attack traffic at line rate.

The current release listed on the site is 9.0 (July 2026).

Wansight — traffic monitoring and accounting

Wansight uses the same Sensors and Console but without detection and mitigation. It provides bandwidth graphs for hundreds of thousands of IPs, top talkers, flow and packet forensics, and 95th-percentile accounting for invoicing. A license key upgrades it into Wanguard, so the two share one codebase and one Console.

How the components fit together

All of these are Linux packages reporting to a single Console, and a license key decides which capabilities are switched on.

Deployment model and hardware

The software runs on any 64-bit Intel or AMD server, so you build your own appliance from commodity hardware. Andrisoft publishes a sizing guide per component and lists tested network cards for 10–100 Gbps. One explicit caveat from the vendor: virtual machines are for trials only, not production.

The design goal is that no traffic leaves your network and there is no appliance in the path — you are not buying per-gigabit capacity, you are licensing software on hardware you already control.

Licensing and trial

• Sensor licenses are listed at $595 per year, with volume discounts.
• The Console is free.
• Separate license lines exist for Wanguard Sensors, Wansight Sensors, Wanguard Filters, and DPDK Engine, plus Console rebranding and support plans.
• A free 30-day trial license key is available, and support is included.

Who it is for

Network operators — ISPs, hosting providers, and enterprises running their own routing and scrubbing infrastructure — who want detection and mitigation under their own control. If you would rather not manage Linux servers, sizing, and router integration yourself, an appliance-based or cloud-scrubbed service will fit better. If data sovereignty, no per-gigabit billing, and full control of the mitigation path matter more, Andrisoft's stack is built precisely around those constraints.

To move forward: request a trial key, check the sizing guide against your server and NIC inventory, and confirm whether your routers support Flowspec or RTBH for the mitigation path.