Better network forensics, in a fraction of the time.

Everything goes over your network. That's where the truth lives—and Corelight illuminates it all.

Hero image blinking lightHero image
Featured — The Corelight AP 3000 Sensor

Our highest performing sensor, the AP 3000 can handle up to 25 Gbps of monitored traffic. With our new Web UI, sensor deployment and management is even easier. Configure in minutes, and focus on what matters. See better and save time, at any scale.

Download Specifications:
Select product

A modern UI that has you up and running in minutes.

Corelight's new streamlined and intelligent UI makes configuring, deploying, and managing Corelight Sensors even easier (it was already pretty quick). You can click to select inputs, output targets, and all the important settings to fit into your security stack quickly.
Corelight Sensor software

Incident response up to 20x faster.

Empower your security operations center with Bro's renowned network logs and efficient file extraction. Corelight Sensors transform network traffic into high-fidelity data to accelerate threat hunting, security incident response, and network forensics.

Data that’s more useful. Clearly.

In real time, we extract what really matters from the never-ending river of network traffic, transforming packets into actionable Bro logs designed by and for security professionals. Bro's unique logs makes it easy to reconstruct what happened and understand patterns, giving you nearly the context of PCAP, but with Netflow-like usability.

Zero maintenance.

Corelight Sensors take minutes to configure: you provide the traffic feed and specify where to send logs and extracted files—nothing more. New features roll out seamlessly through regular, automatic updates. And you get world-class support from the creators of Bro. Spend your time defending the network, not keeping sensors working.