About Us
Nothing important on your network should stay hidden
And nothing important should disappear inside a flood of alerts.
We built Stamus Clear to show you what's actually happening in your environment: prioritized and explainable, so you're never handed a flood and told to sort it out yourself. Every Declaration comes with the network evidence and detection logic behind it, so you can understand what you're seeing and act with confidence.
About Us
Our Story.
01
Open-source detection engine
In 2014, Eric Leblond and Peter Manev were solving a much narrower problem: how do you monitor a 10-gigabit network without losing packets. They built the answer on Suricata, the open-source detection engine Eric still helps govern today as a board member of the Suricata Foundation and Peter as a member of the executive team.
02
Most capable detection engines
The bigger lesson came later, from a SOC team that had quietly stopped using their own alerts. They weren't ignoring the product, they were drowning in it. Every signal looked equally urgent: unranked, unexplained, impossible to act on with confidence. The team had built one of the most capable detection engines in the industry, and analysts were using it to investigate after the fact because they didn't trust it enough to act on at the moment.
03
Clear filters and prioritises detections
The goal isn’t to detect more but to understand what matters. Stamus Clear filters and prioritises detections into Declarations of Compromise and Policy Violations and gives analysts high-confidence, actionable findings with the evidence to understand and respond.
Our team
Built By the People Who Helped Build the Engine
Stamus isn't a company that licensed someone else's detection technology and put a dashboard on top. Our founders are some of the original engineers behind Suricata itself, the open-source engine trusted by enterprises, ISPs, and governments worldwide. Eric Leblond and Peter Manev have spent over a decade in the open-source detection community, writing code that ships inside products built by companies many times our size. Suricata is part of our DNA, but Stamus Clear goes far beyond the engine, turning network telemetry into prioritized, explainable evidence security teams can use immediately.

Mark Firmin
·
CEO

Eric Leblond
Co-Founder & CTO

Peter Manev
Co-Founder & CSO

Pat Deane
CFO

Phil Owens
Vice President of Customer Solutions
Proof
Trusted Where
It’s Hardest to Fake
Most of our customers can't put their logo on a vendor’s website, and we won't pretend otherwise. What we have is over a decade of experience inside European national banks, government institutions, critical infrastructure operators, and organizations running large, complex networks where missing activity has serious consequences.
The Proof
10+years
Invited by NATO to train elite cyber defense teams in live Fire exercises.
4,000+
Participants in NATO live Fire exercises from 36 countries.
36 countries
Represented across NATO live Fire exercises involving 4,000+ participants.

Teams that switch to Stamus stay because they get direct access to people who understand their environment, from deployment and integration through investigation and ongoing optimization.

Stamus Clear is built for organizations that need to keep sensitive network data under their own control, including highly regulated and air-gapped environments.
Nothing stays in the dark.
See what's really there, fix it one problem at a time, and prove it when someone asks.