# What is detection-as-code, and does a small company need it?

Detection-as-code means writing your own detection rules as text files, often in a shared format such as Sigma, keeping them under version control and testing them like software. It suits security teams that hunt for specific threats and want precise control. A small company rarely needs it at the start: writing and maintaining rules takes skill and time, and a badly written rule creates noise or blind spots. You get more from a tool whose built-in detections and explanations already work, and from marking false positives as you go. If you later have a security specialist and specific needs, custom rules become worthwhile. In NetSenX, custom detection policies are available on the Enterprise plan; the core detections run on every plan.

FAQ: [Small business monitoring](https://netsenx.com/en/faq/smb) · https://netsenx.com/en/faq/what-is-detection-as-code-and-does-a-small-company-need-it

## Read next

- https://netsenx.com/en/ndr-for-small-business
- https://netsenx.com/en/pricing

## Related questions

- [Can a team without security specialists run NDR?](https://netsenx.com/en/faq/can-a-team-without-security-specialists-run-ndr)
- [Can we run network monitoring without a security expert?](https://netsenx.com/en/faq/can-we-run-network-monitoring-without-a-security-expert)
- [What security monitoring can one IT administrator realistically run?](https://netsenx.com/en/faq/what-security-monitoring-can-one-it-administrator-realistically-run)
- [Do I need Linux skills to run network detection?](https://netsenx.com/en/faq/do-i-need-linux-skills-to-run-network-detection)
- [Should a small business hire an MSP for security?](https://netsenx.com/en/faq/should-a-small-business-hire-an-msp-for-security)