# Does NDR work on encrypted traffic?

Yes, within limits. Timing, volume, destinations and the TLS handshake stay visible without decryption, and they are enough to spot beaconing, scanning or unusual uploads. Without decryption, no NDR can read the content of a session. NetSenX never decrypts.

FAQ: [NDR, EDR, SIEM, XDR, MDR](https://netsenx.com/en/faq/tools) · https://netsenx.com/en/faq/does-ndr-work-on-encrypted-traffic

## Read next

- https://netsenx.com/en/what-is-ndr
- https://netsenx.com/en/blog/2026-09-24_ndr-vs-edr-vs-siem

## Related questions

- [Can NDR see cloud and SaaS traffic?](https://netsenx.com/en/faq/can-ndr-see-cloud-and-saas-traffic)
- [Can NDR block attacks or only alert?](https://netsenx.com/en/faq/can-ndr-block-attacks-or-only-alert)
- [How do I build an asset inventory from network traffic?](https://netsenx.com/en/faq/how-to-build-an-asset-inventory-from-network-traffic)
- [Does a network map show devices that never send any traffic?](https://netsenx.com/en/faq/does-a-network-map-show-devices-that-never-send-traffic)
- [Is NDR worth it for a small or mid-sized company?](https://netsenx.com/en/faq/is-ndr-worth-it-for-a-small-or-mid-sized-company)