Arista Networks builds cloud and AI datacenter networking hardware and the EOS/CloudVision software stack. Its security line, built around the NDR engine acquired with Awake Security, applies AI models to network traffic to detect threats and drive guided response inside CloudVision.
Arista Networks is a supplier of datacenter and campus networking systems built on a single software foundation, the Extensible Operating System (EOS), and managed through CloudVision. The company positions its security capability as an extension of that network fabric rather than as a separate appliance business. The core technology came from the June 2020 acquisition of Awake Security, a network detection and response vendor, which Arista has since folded into products marketed as Arista NDR and the Zero Trust Networking portfolio. Arista describes the NDR engine as using an AI-driven entity model, referred to in its materials as AVA, to profile devices, users and applications on the network, surface malicious activity, and present analysts with correlated situations rather than raw alerts.
Arista is a public company listed on the New York Stock Exchange under the ticker ANET. It reported revenue of $7.0 billion for fiscal 2024, up from $5.86 billion in 2023, with cloud and AI customers such as Microsoft and Meta historically representing a large share of that total. Founded in 2004 and led by chief executive Jayshree Ullal, with Andy Bechtolsheim as chief development officer and chairman, the company is not owned or controlled by a private equity sponsor or parent group. Security remains a small part of the overall revenue base; Arista does not break out security or NDR revenue separately in its filings, and it reports as a single operating segment.
Documented from public materials · these are the products the AMS scores
Arista NDR
Shipping since 2020
Arista NDR is the network detection and response platform derived from the Awake Security acquisition. Arista documents it as combining full packet capture and traffic analysis with an entity model that profiles devices, users and applications without requiring agents on endpoints. The vendor describes an AI component branded AVA that clusters related signals into what Arista calls situations, so that an analyst reviews grouped incident context rather than isolated alerts. Public product material describes hunting, forensic search over historical traffic, and integration with third party enforcement points. See the Arista NDR product page.
CloudVision
Shipping since 2016
CloudVision is Arista's network-wide management, telemetry and change control plane for EOS devices. Arista documents streaming telemetry collection, configuration compliance checking, automated change validation and rollback, and network-wide state search. Arista positions CloudVision as the control point through which security policy and segmentation are distributed across the fabric, and as the console where NDR findings can be tied back to the switches and ports involved. Automation in CloudVision is documented as workflow and policy driven, with human approval of change sets rather than autonomous action.
Zero Trust Networking
Zero Trust Networking
Arista groups its segmentation, identity-aware access and traffic inspection capabilities under Zero Trust Networking. Public material describes MSS (Multi-Domain Segmentation Service) for distributing segmentation policy across the fabric via CloudVision, identity-based access on campus switches, and the use of the switching estate itself as a distributed sensor and enforcement layer feeding Arista NDR. The offering is documented as an architecture spanning several Arista products rather than a single standalone SKU.
2024 - 2026 ·gold = a monetization move· grey = product or capital
Arista announced its intent to acquire Pluribus Networks closed earlier and continued to fold distributed cloud networking software into the EOS and CloudVision stack, extending network-wide segmentation and telemetry that feed the security portfolio. See the Arista press release archive and the company's SEC filings.
Arista reported fiscal 2024 revenue of $7.0 billion, up from $5.86 billion in 2023, and continued to report as a single operating segment without separate disclosure of security or NDR revenue. Filings are available through Arista investor relations.
Pricing not public. Arista does not publish list pricing for Arista NDR, CloudVision or the Zero Trust Networking portfolio on its website, and the company's SEC filings do not disclose per-unit or per-subscription pricing for security software. Public procurement records and reseller catalogs list Arista hardware and software SKUs from time to time, but Arista itself has not released an official price book for the security line.
What is documented in Arista's filings is the shape of the model rather than the level. Arista sells hardware systems together with software subscriptions and post-contract support, and it describes subscription and services revenue as recognized ratably over the contract term. Software for the security and management layer is sold as a term subscription tied to the deployed estate, typically scoped by the devices, sites or capacity being monitored, and is booked alongside multi-year support agreements. Arista sells through a mix of direct sales and channel partners, so end customer discounting is negotiated and not disclosed.
There is no public evidence that Arista meters the AI components of its security stack separately. The AVA analysis engine inside Arista NDR is presented in product material as an included capability of the platform rather than as a consumption-priced add-on, and Arista has not published an agent, task, query or token based meter for it. On the public record, AI functionality is bundled into the subscription for the underlying product.
Analyst layer · placement follows the documented capability above
Independence. Arista's documented security automation is analyst-assisting rather than analyst-replacing. Arista NDR is described as clustering related detections into situations and providing hunting and forensic context, with the human analyst making the triage and response decision. CloudVision change automation is documented as validated change sets with rollback, which implies review and approval in the workflow. On shipped and documented capability, human involvement remains above fifty percent, so independence sits at S.
Job width. The scope covers an end-to-end workflow inside one function. Between full traffic capture, entity profiling, detection, grouped incident context, historical search and integration with enforcement points, the portfolio covers the detection-through-investigation path for a network security team. It does not documented-ly span other functions such as identity administration, endpoint management or IT service operations as a single automated job. That places job width at M.
Output versus cost. The documented gain is alert consolidation and faster investigation against the same sensor estate. Arista's public material describes correlation of signals into fewer investigable items and agentless coverage of devices that cannot host endpoint software, which compresses analyst hours on a given volume of traffic. There is no public evidence of two or more orders of magnitude change in output per unit of cost, so the output/cost dimension is Linear.
Monetization pattern. Arista monetizes the network estate first and the intelligence layer second. Revenue is anchored in switching hardware, with software subscriptions and support attached to the installed base and recognized over the term. The AI analysis engine is packaged inside the product subscription rather than sold on its own meter, and Arista does not disclose security revenue separately in its filings. The documented pattern is therefore bundled AI inside a subscription that scales with deployed infrastructure, not usage-priced agent monetization.
| Edition | AMS score | Metric on record | Change |
|---|---|---|---|
| Aug 2026 | S · M · Lin | Fiscal 2024 revenue of $7.0 billion; security revenue not separately disclosed | Baseline, first edition |
Future editions add a row whenever the score or the metric moves, with the evidence that moved it.
About this data
Everything on this page is a synthesis of public information: published reporting, vendor documentation, and procurement data that anyone can access. We link to those sources throughout. Nothing on this page draws on private or confidential information, and the positions are Monetizely's analysis of that public record, refreshed monthly.