Tech riderRev. 30 Sept 2026
Corelight Open NDR
- 1Runs onAPI, Linux, self-hosted, Web
- 2CostsNot stated by the maker
- 3Detection methodhybrid
- 4Real-time detectionYes
- 5Supported datanetwork traffic, packet data, flow logs, cloud network traffic, protocol logs, files
- 6Deployment optionshybrid
- 7Anomaly explanationsYes
6 lines stated Written from the maker's own pages: corelight.com
Overview
Corelight Open NDR is ranked #11 of 19 in anomaly detection software on Specifiction. It runs on API, Linux, Self-hosted, Web.
Corelight Open NDR plans and pricing
All plansCompared on anomaly detection software
- Detection method
- hybridcorelight.com
- Real-time detection
- Yescorelight.com
- Supported data
- network traffic, packet data, flow logs, cloud network traffic, protocol logs, filescorelight.com
- Deployment options
- hybridcorelight.com
- Anomaly explanations
- Yescorelight.com
Facts
- Purpose
- Corelight Open NDR transforms raw network and cloud traffic into context-enriched, high-fidelity evidence for security operations.corelight.com · 30 Sept 2026
- Detection
- Its detection strategy combines machine learning, behavioral analytics, curated signatures, and threat intelligence.corelight.com · 30 Sept 2026
- Incident response
- AI-powered explainability, automated triage, and integrated response workflows provide context for containing threats and lowering MTTR.corelight.com · 30 Sept 2026
- Tool consolidation
- Corelight says Open NDR combines network security monitoring, intrusion detection, static file analysis, and intelligent packet capture in one platform.corelight.com · 30 Sept 2026
- Integrations
- The platform has native integrations with SIEM, XDR, SOAR, and cloud platforms including Splunk, CrowdStrike, Microsoft, Elastic, and AWS.corelight.com · 30 Sept 2026
- APIs
- Logs API and an MCP server provide programmatic access for custom orchestration and management.corelight.com · 30 Sept 2026
- Deployment
- Corelight offers physical, software, virtual, cloud, and flow-log sensors for on-premises, air-gapped, hybrid, and multicloud environments.corelight.com · 30 Sept 2026
- Cloud coverage
- Cloud-native sensors support AWS, Azure, and Google Cloud, while software sensors support Linux-based systems.corelight.com · 30 Sept 2026
- Scale
- Physical and software sensors are built to handle network environments at 100+ Gbps scale.corelight.com · 30 Sept 2026
- Security and compliance
- Corelight maintains a dedicated security program and says select products are independently audited and certified to industry-leading compliance standards.corelight.com · 30 Sept 2026
- Federal certifications
- Corelight states that its sensors comply with FIPS 140-2, are NIAP Common Criteria certified, and that the Open NDR Platform is FedRAMP Class C (Moderate) in process.corelight.com · 30 Sept 2026
- Audience
- Corelight serves large enterprises and government agencies in more than fifteen countries.corelight.com · 30 Sept 2026
Company
- Founded
- 2016corelight.com · 28 Sept 2026
- Headquarters
- San Francisco, California, USAcorelight.com · 28 Sept 2026
Best Corelight Open NDR alternatives
See all 18 All accessCh 01 ManageEngine NetFlow Analyzer Free planAndroidiOS from $172/mo7.3 All accessCh 02 Metaplane Free planFree trialAPI Free to start7.3 All accessCh 03 OpenSearch Free planAPILinux Free to start7.3 All accessCh 04 PyOD Free planAPILinux Free to start7.3 All accessCh 05 Anomalib Free planLinuxself-hosted Free to start7.2 All accessCh 06 PySAD Free planLinuxMac Free to start7.1
Where it ranks on Specifiction
Is Corelight Open NDR yours?
Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.
Sources
- corelight.com/platform/· checked 30 Sept 2026
- corelight.com/platform/deployment-options· checked 30 Sept 2026
- corelight.com/legal/trust-center· checked 30 Sept 2026
- corelight.com/solutions/industry/federal· checked 30 Sept 2026
- corelight.com/company/about-corelight· checked 30 Sept 2026
- corelight.com/contact· checked 30 Sept 2026