1. A method for maintaining network security, the method comprising: distributing a network security platform to each of plural networks, each network security platform having a sensor execution environment and an analysis execution environment; monitoring network activity for each of the plural networks with plural sensor modules running on the sensor execution environment of each of the plural network security platforms, the plural sensor modules storing monitored network activity in memory accessible by the analysis execution environment; detecting a network threat with one or more of plural analysis modules running on the analysis execution environment of one of the network security platforms, the detecting performed by analysis of the stored monitored network activity at the one network security platform; and in response to detecting the network threat, distributing the one or more of plural analysis modules to the analysis execution environment of one or more other of the network security platforms.