SAN FRANCISCO, May 8, 2025 /PRNewswire/ -- Corelight, the fastest growing provider of network detection and response (NDR) solutions, today announced its participation in Locked Shields 2025, the world's largest and most complex international live-fire cyber defense exercise, organized by the NATO Cooperative Cyber Defence Centre of Excellence (CCDCOE). This exercise brings together elite defenders (blue teams) and simulated attackers (red teams) to collaborate across civil and military sectors to identify and tackle intricate cyber attacks aimed at critical infrastructure and services.
For the second consecutive year, Corelight is providing its Open NDR platform and expert personnel to assist participating blue teams in detecting, analyzing, and countering simulated cyber threats in real-time. The exercise brings together more than 2,000 participants from more than 30 nations to strengthen the cyber resilience of NATO and partner nations through realistic defensive scenarios.
"Cyber resilience in today's increasingly sophisticated threat landscape starts with comprehensive visibility and a multi-layered defense strategy," said Brian Dye, Corelight CEO. "There has been an increase in nation-state attacks exploiting threat vectors that avoid traditional perimeter protection. The Locked Shields exercise helps NATO partner nations better see how attackers are evolving their tactics and train security teams on how to stay one step ahead."
Corelight's open NDR platform delivers comprehensive network visibility and evidence-based detections that enable blue teams to swiftly identify malicious activity, conduct thorough investigations, and efficiently respond to incidents during the intensive exercise. The platform's foundation in open-source Zeek technology provides the rich, protocol-aware data that powers both analysts and GenAI and combines that with the supervised and unsupervised machine learning needed to detect threats that other tools miss. This allows for swift threat detection, enhanced forensic visibility, and efficient incident response.
The Locked Shields exercise represents the cutting edge of collaborative cyber defense, bringing together defenders from across NATO and partner nations to strengthen the world's collective security posture. Partners like Corelight bring invaluable expertise and technology that enhances the realism and educational value of the exercise while building stronger relationships across the global cybersecurity community.
The multi-day exercise simulates a large-scale cyber attack against a fictional country, with blue teams tasked with maintaining services and networks while countering a diverse range of cyber threats. In addition to technical challenges, teams must also coordinate effective strategic communications and make decisions under significant time pressure, mirroring the complex dynamics of real-world cyber crises.
Corelight's involvement in Locked Shields underscores the company's commitment to improving global cyber resilience through partnership with public sector organizations and the sharing of expertise across the security community. The company continues to leverage its deep roots in the open-source security community to advance network detection and response capabilities for organizations worldwide.
About Corelight
Corelight transforms network and cloud activity into evidence that security teams use to proactively hunt for threats, accelerate response to incidents, gain complete network visibility and create powerful analytics. Corelight's global customers include Global 2000 companies, major government agencies, and large research universities. Based in San Francisco, Corelight is an open-core security company founded by the creators of Zeek®, the widely used open source network security technology. For more information, visit www.corelight.com.
SOURCE Corelight