Product

About the Corelight

Corelight provides an Open Network Detection and Response (NDR) platform that transforms network traffic into high-fidelity data for incident response, threat hunting, and forensics. Built on the powerful open-source Zeek® (formerly Bro) network security monitor and integrated with Suricata IDS, Corelight delivers rich, actionable network evidence, including logs, extracted files, and custom insights. The platform offers various deployment options including physical appliances, virtual sensors, software sensors, and cloud sensors for environments like AWS, Azure, and GCP. Corelight Investigator is a SaaS-based solution that leverages machine learning and advanced analytics to accelerate security operations. By providing comprehensive visibility and context across the network, Corelight helps organizations detect known and unknown threats, improve detection coverage, accelerate response times, and enhance overall security posture.