Network security monitoring, now in the cloud.

New Corelight Cloud Sensor

The Corelight Cloud Sensor deploys in AWS and brings the powerful network security monitoring capabilities of Zeek/Bro to Amazon VPC traffic, ingested directly via Amazon VPC traffic mirroring or via 3rd party packet brokers.

Corelight Fleet Manager

Corelight Fleet Manager streamlines the deployment, configuration, and administration of Corelight Sensors across an organization from a single management dashboard with RBAC, customizable configuration templates, and sensor health and performance monitoring.

Download specifications

Products

Cloud Sensor

Sensor Appliances

Virtual Sensor

Specifications

Select product

Ready to Buy

Find a reseller Contact Corelight

Just the right amount of data.

100x richer than Netflow / 100x smaller than PCAP / 50+ data types and protocols.

Corelight’s logs are the “Goldilocks” of network data: 100x richer than Netflow and 100x times smaller than PCAP. Covering 50+ data types and protocols and interlinked for lightning-fast search, these logs offer just the right amount of data for security tools and operators. Corelight’s fork, filter, and log data reduction features make it easy to manage log volumes for your SIEM without sacrificing critical network visibility.

Core Collection packages:

Corelight Sensors come preloaded with the Core Collection—a curated set of Zeek packages for detection, data enrichment, and operations.

The Core Collection offers out-of-the-box behavioral threat insights such as cryptomining, port scanning, and long connection detection, fingerprinting connections, and useful operational info such as notification of soon-to-expire SSL certificates.