🔒

Corelight

Corelight: Evidence-Based NDR and Threat Hunting Platform

Visit Corelight
Compare Tools

Overview

Disrupt future attacks with complete network visibility, next-level analytics, faster investigations, and expert threat hunting.

Focus Area

Enterprise Network Detection & Open-Source Zeek Security Analytics

Core Features & Capabilities

Network Evidence Transformation: Transforms raw network traffic into structured, rich security telemetry (Zeek & Suricata).
Generative AI SOC Integration: Feeds high-fidelity network evidence into SIEM/XDR and LLM SecOps assistants.
Automated Encrypted Traffic Analysis: Detects malware and C2 activity inside encrypted TLS traffic without decryption.

Best For

Designers

Integrations

MakeAWSGCPAzure

Architecture & Security

Enterprise Cybersecurity Platform: Physical, virtual, and cloud sensors built on open-source Zeek architecture.

Pricing Details

Enterprise Custom: Annual contract pricing based on network bandwidth monitored (Gbps) and sensor footprint.

Quick Info

PricingSubscription
ComplexityIntermediate
DeploymentCloud
Time to ValueInstant
API AvailableNo
Free TrialNo
Open SourceNo