Systems, methods and apparatus for a distributed security system that provides security processing for security customers external to network edges of external systems. Each security customer is associated with one or more external systems. The security system can monitor data communications originating from or destined to the external systems and generate security-related information based on the monitored communications. For each security customer, the system can aggregate the system information from each external system associated with that customer, regardless of the geographical location of the system.