# Corelight

> Corelight is a San Francisco-based cybersecurity company that pioneered the commercial Open NDR (Network Detection and Response) platform, built on Zeek - the gold-standard open-source network security monitor created by co-founder Dr. Vern Paxson at Lawrence Berkeley National Lab. By transforming raw network traffic into high-fidelity, structured logs and pairing them with AI-powered analytics, Corelight gives enterprise security teams and government agencies the evidence they need to detect, investigate, and respond to threats faster. With $309M in total funding, 40%+ ARR growth, and recognition as a Gartner Magic Quadrant Leader for NDR, Corelight is widely regarded as the most trusted platform for network-based threat detection.

- **Founded:** 2013
- **Headquarters:** San Francisco, California, United States
- **Founders:** Dr. Vern Paxson (Co-Founder & Chief Scientist), Dr. Robin Sommer (Co-Founder & Zeek Project Leader), Seth Hall (Co-Founder & Chief Evangelist), Dr. Greg Bell (Co-Founder & Chief Strategy Officer)
- **Team size:** ~260 employees
- **Products:** Open NDR Platform, Corelight Investigator, Zeek, Smart PCAP, Corelight Threat Intelligence
- **Notable:** Named Leader in inaugural Gartner Magic Quadrant for Network Detection and Response (2024 and 2025), Named Leader in Forrester Wave for Network Analysis and Visibility (2025), GigaOM Radar Leader and Outperformer for NDR

## Products & services

- **Open NDR Platform** — AI-powered, evidence-based network detection and response platform deployable as appliances, cloud sensors, software sensors, virtual sensors, and flow monitoring tools. Integrates Zeek, Suricata, and YARA for comprehensive network visibility.
- **Corelight Investigator** — Cloud-based SaaS platform for threat hunting and triage. Features AI-led Guided Triage (reduces triage time by up to 50%), agentic playbooks, and cuts SIEM ingest by up to 80% without impacting security fidelity.
- **Zeek** — The gold standard open-source network security monitor with 10,000+ deployments worldwide. Transforms raw network traffic into compact, high-fidelity structured transaction logs. Created by co-founder Dr. Vern Paxson in 1995.
- **Smart PCAP** — Intelligent packet capture technology providing forensic-grade evidence for security investigations without capturing everything - preserving relevant packets based on detection logic.
- **Corelight Threat Intelligence** — Real-time adversary-driven threat intelligence with CrowdStrike Falcon Adversary Intelligence integration, providing contextualized indicators for network-based detections.

## Achievements

- Named Leader in inaugural Gartner Magic Quadrant for Network Detection and Response (2024 and 2025)
- Named Leader in Forrester Wave for Network Analysis and Visibility (2025)
- GigaOM Radar Leader and Outperformer for NDR
- Great Place to Work Certified 2025 - 94% employee satisfaction
- Fortune Best Small Workplaces Bay Area 2025
- 40%+ YoY ARR growth (FY2024)
- 300% YoY growth in AI and SaaS-driven NDR solutions
- CyberSecurity Breakthrough Awards - Network Security Innovation Award
- CyberDefense Magazine - InfoSec Startup of the Year
- Co-founders received IEEE Test of Time Award (2020) for Zeek
- Dr. Vern Paxson received ACM SIGCOMM Award (2011) and USENIX Security Test of Time Award
- $309.2M total funding raised across 7 rounds
- Zeek deployed at 10,000+ organizations worldwide as open-source standard

## Latest updates

- **2025-05** — Named Leader in Gartner Magic Quadrant for NDR for the second consecutive year
- **2025-02** — Announced Corelight Investigator reduces SIEM ingest by up to 80% without impacting security fidelity
- **2025-01** — Launched AI-Powered NDR SaaS Platform on AWS Middle East, expanding regional availability
- **2024-12** — Enabled file analysis with YARA integration in the Open NDR Platform
- **2024-11** — Appointed Kevin Williams as Chief Revenue Officer; launched Guided Triage AI feature reducing triage time by 50%
- **2024-10** — Launched Corelight Threat Intelligence with CrowdStrike Falcon Adversary Intelligence integration
- **2024-08** — Launched Corelight Investigator SaaS platform for cloud-based threat hunting and triage
- **2024-05** — Announced 40%+ YoY ARR growth and 300% growth in AI/SaaS NDR revenue
- **2024-04** — Secured $150M Series E funding led by Accel with Cisco Investments and CrowdStrike Falcon Fund

## Links

- Website: https://corelight.com
- LinkedIn: https://www.linkedin.com/company/corelight
- Twitter/X: https://twitter.com/corelight_inc
- GitHub: https://github.com/corelight
- Facebook: https://facebook.com/CorelightInc

---

Profile page: https://yespress.io/corelight
Published by YesPress — https://yespress.io
Last updated: 2026-05-19