# Do we need both host-based and network-based intrusion detection?

Ideally yes, because each sees what the other misses, but a small company can add them one at a time. Host-based detection (HIDS, or today usually EDR) runs on a computer and sees files, processes and logins on that machine. Network-based detection (NIDS, or NDR) watches traffic and sees how devices talk to each other, including devices where no software can be installed. A host tool cannot see a printer calling out; a network tool cannot see a malicious file being opened. Start with protection on every computer, because that is the more basic need, then add network detection when you have a local network with devices beyond laptops. NetSenX is the network side; it does not replace endpoint protection.

FAQ: [Small business monitoring](https://netsenx.com/en/faq/smb) · https://netsenx.com/en/faq/do-we-need-both-host-and-network-intrusion-detection

## Read next

- https://netsenx.com/en/ndr-for-small-business
- https://netsenx.com/en/pricing

## Related questions

- [What is detection-as-code, and does a small company need it?](https://netsenx.com/en/faq/what-is-detection-as-code-and-does-a-small-company-need-it)
- [Can a team without security specialists run NDR?](https://netsenx.com/en/faq/can-a-team-without-security-specialists-run-ndr)
- [Can we run network monitoring without a security expert?](https://netsenx.com/en/faq/can-we-run-network-monitoring-without-a-security-expert)
- [What security monitoring can one IT administrator realistically run?](https://netsenx.com/en/faq/what-security-monitoring-can-one-it-administrator-realistically-run)
- [Do I need Linux skills to run network detection?](https://netsenx.com/en/faq/do-i-need-linux-skills-to-run-network-detection)