Corelight Open NDR delivers rapid deployment, essential insight, and data for cybersecurity. Known for ease of use, cost-effectiveness, and open-source Zeek code, it enhances security by streamlining traffic monitoring and integrating with threat feeds.
| Product | Mindshare (%) |
|---|---|
| Corelight | 5.0% |
| Darktrace | 15.5% |
| Vectra AI | 12.0% |
| Other | 67.5% |
Corelight Open NDR offers organizations enhanced network security and visibility, utilizing physical sensors in addition to cloud, virtual, and software variants. It supports incident response with packet capture sampling, monitoring internet, data center, and LAN traffic while facilitating east-west traffic identification. Despite its complexity, users suggest architectural simplifications and a graphical interface to boost usability and reduce costs. Features like Smart PCAP and service catalogs contribute positively, but an interactive interface with more seamless feature access is desired.
What Are Corelight Open NDR's Key Features?Primarily utilized by organizations to bolster network security, Corelight Open NDR is deployed in various sectors to increase visibility and streamline incident response. Its deployment spans physical, cloud, virtual, and software models, focusing on comprehensive packet capture sampling for effective traffic monitoring. Across industries, it serves managed services by identifying lateral network traffic, optimizing internet, data center, and LAN performance.
Corelight Open NDR was previously known as Corelight Open NDR.
Carrefour
Ednon
Grand Canyon Education
SektorCERT
Tietoevry
Volkswagen Financial Services
| Author info | Rating | Review Summary |
|---|---|---|
| Account Executive at Fishtech Group | 4.0 | I use Corelight for east-west traffic visibility, finding it stable, scalable, and offering immediate ROI due to its low cost and easy setup. However, I note that new features haven't been added recently. |
| Technical Sales Manager at Spire Solutions | 3.5 | I rate Corelight a 7/10. It's excellent for traffic monitoring, stable, and scalable with powerful threat detection and integrations. However, I found its architecture complex, setup difficult, and pricing high. |
| Manage Consultant at SITE | 4.0 | I use Corelight for customer incident response. It's easy to deploy, handle, and scalable, with good support. I'd improve the interface's interactivity and feature access. Despite this, I rate it 8/10, preferring it for its rule-based approach over alternatives. |
| Pre Sales Technician at DotForce | 5.0 | I find Corelight an excellent, stable, and affordable solution for network traffic analysis, providing crucial data for cyber security. It integrates well and simplifies incident remediation, despite initially lacking machine learning. I highly recommend it. |
| Chief Executive Officer at NetMetrix | 4.0 | I use Corelight for security, valuing its embedded Suricata IDS. While stable and scalable, it is expensive and needs a GUI. Setup is easy, and support is good. I rate it 8/10. |
