Corelight is a network detection and response company founded in 2016 by Dr. Vern Paxson, Dr. Robin Sommer, Seth Hall, and Dr. Greg Bell, headquartered in San Francisco. Paxson created Zeek, formerly Bro, the open-source network security monitoring project that underpins Corelight's technology, during his research work at Lawrence Berkeley National Laboratory.
Corelight packages Zeek's traffic analysis with proprietary machine learning and cloud-monitoring extensions, converting raw network and cloud activity into structured, searchable evidence rather than leaving analysts to parse packet captures directly. The platform plugs into existing SIEM and XDR stacks so a security team layers Corelight's evidence on top of tools it already runs.
The product is built for enterprise, government, and university security operations centers rather than individual users. Corelight sells through Standard and Enterprise support subscriptions with no published rate card, and total cost also depends on how a customer's SIEM prices data ingestion downstream.
