Corelight

Corelight offers a network detection and response (NDR) solution that commercializes the open-source network security monitoring technology Zeek (formerly known as Bro) to transform raw network traffic into actionable logs, extracted files, and security insights. This real-time data helps security teams to perform threat hunting, response, and remediation.

The company has two main product lines referred to as Collections and Sensors to make Zeek more powerful. Collections are code packages that detect malicious port scanning behavior, brute force attacks, unencrypted connections, and other forms of cybersecurity threats. Corelight’s Sensors—hardware, software, cloud, virtual—collect network traffic signals and export them to Zeek for threat analysis. The hardware/appliance sensors can be deployed in a high-volume on-premises data center or telecommunications network and are designed to monitor network traffic at speeds of up to 100 gigabits per second (Gbps) and beyond while the software sensor runs in Linux platform and within containers to perform network traffic analysis. The cloud sensors are available for AWS, Microsoft Azure, Google Cloud, and the virtual sensors can be set up in areas such as branch locations, manufacturing floors, remote workplaces, and high-value enclaves to analyze network traffic at speeds of up to 8 Gbps. The company served over 70 customers globally, including Fortune 500 brands, large research universities, critical enterprises, and government agencies, as of October 2019.

In September 2021, the company raised USD 75 million in a Series D funding round led by Energy Impact Partners (EIP). The company expects to use the funding to develop new data and cloud solutions, grow its presence in the global NDR market, and expand its team globally. Corelight expects to remain private for the next few years and raise additional funding before it considers going public.