New: AI agents can shop on Cubbie Read →

Open network detection and response platform transforming network traffic into rich evidence for threat detection, hunting, and investigation.

Pricing

Usage-based

Founded

2017

Team size

201-500 employees

Headquarters

San Francisco, CA

Corelight preview

Preview from corelight.com

At a glance

Pricing model

Usage-based

Integrates with

CrowdStrikeSplunk Enterprise SecuritySplunk SOARMicrosoft DefenderMicrosoft Sentinel+5

About Corelight

Corelight is an evidence-based network detection and response (NDR) platform built on open-source Zeek and Suricata that transforms raw network traffic into high-fidelity logs, alerts, and Smart PCAP evidence for threat hunting and incident response. It deploys as physical, virtual, and cloud sensors feeding SIEM/XDR tools. It targets security operations and threat-hunting teams at enterprises and governments needing deep network visibility.

Procurement & Fit

Structured facts from the vendor to help your security, finance, and procurement reviews move faster.

Trust

Security & compliance

The vendor hasn’t added security or compliance details yet.

Pricing

Commercial model

Pricing model: Usage-based

Free trial: No

Free plan: No

Contract minimum: Not specified

Procurement

Purchasing & legal

The vendor hasn’t added purchasing & legal details yet.

Fit

Best-fit company size

Company-size fit has not been specified yet.

Buyer Fit & Positioning

Implementation & Procurement

Commercial Fit & Ecosystem

Proof, Outcomes & Momentum

Alternatives, Migration & Buyer Objections