HALIFAX, Nova Scotia, 6 Oct. 2026 – Corelight, a leader in enabling the defensible AI SOC, today announced the establishment of Corelight Canada, a standalone entity created to work more closely with customers, partners, and public sector organizations in Canada.
Corelight already protects networks used by local governments and Canadian public institutions, including in the defence sector, working through a wide range of channel partners. Establishing an entity in the region demonstrates Corelight’s continued commitment to Canadian customers and provides a strong foundation for partners to grow with the company.
Through its Open Network Detection and Response (NDR) platform, Corelight helps security teams see potentially dangerous activity on their networks, detect advanced threats, and investigate incidents with evidence they can trust. The platform is built on open-source foundations, including Zeek and Suricata.
"Canada has been a strong and growing market for Corelight, and that success is a credit to our partners and the team we've built in the region,” said Roger Coelho, Corelight regional vice president of sales. “Establishing a Corelight entity in Canada deepens our commitment to Canadian organizations that rely on us to defend their networks against increasingly sophisticated threats. We'll continue to work through our trusted partner ecosystem. This new entity will give those partners and customers even greater local support, responsiveness, and expertise."
Organizations, including mid- to large-sized enterprises, government agencies, and financial institutions, require NDR because traditional perimeter and endpoint defenses are insufficient against sophisticated, modern cyberattacks. As networks become more complex, hybrid, and borderless, NDR provides the deep and widespread visibility required to detect threats that have already bypassed endpoint protections or are moving laterally within the network. Large organizations are also flooded with security alerts. NDR reduces this noise by correlating disparate network evidence into structured incidents, empowering security teams to confidently prioritize the most severe threats.
Unlike conventional security tools, Corelight transforms network traffic into comprehensive, evidence-based visibility. By capturing absolute ground truth, the platform empowers security teams to detect evasive threats and investigate incidents with remarkable speed and precision. This uncompromising approach makes Corelight uniquely equipped to defend large, complex enterprise environments where absolute clarity and rapid response are fundamental to success.
In addition, attackers are using AI models to accelerate vulnerability discovery and exploitation, compressing the window defenders have to respond. While typical enterprise patching cycles can still run from 60 to 150 days, the median time to exploit has fallen to roughly five days. With Mythos-class AI models, defenders are expecting to see vulnerabilities exploited before there is broad knowledge that there is even a hole to be patched. Faster patching simply is not the answer – AI speed attacks require AI-speed defense. Corelight has spent more than a decade turning ground-truth network evidence into the standard that the most attacked, hardened security teams rely on and continues to provide industry-leading, AI-first solutions.
Corelight technology is already used across major government agencies around the world including the Five Eyes networks. In Canada, the company works with partners to deliver and support the platform for defence, government, and critical infrastructure customers.
About Corelight
Corelight transforms network and cloud activity into evidence that security teams use to proactively hunt for threats, accelerate response to incidents, gain complete network visibility, and create powerful analytics. Corelight's customers include Global 2000 companies, major government agencies, and large research universities. Based in San Francisco, Corelight is an open-core security company founded by the creators of Zeek®, the widely used open-source network security technology. For more information, visit www.corelight.com.