Corelight transforms network data into definitive evidence, powering AI-driven detection and expert-authored workflows. Founded in 2013 by the creators of the Bro (now Zeek) open-source project, the company emerged from a realization that the best approach to cybersecurity starts with network evidence. The founders, including Dr. Vern Paxson who began this work more than 25 years ago at the Lawrence Berkeley National Laboratory, understood that attackers can evade endpoint detection and firewalls, but they cannot avoid leaving digital footprints on the networks they traverse. This insight became the foundation for Corelight's mission to make evidence the heart of security.
Today, Corelight is the fastest-growing Network Detection and Response (NDR) platform in the industry, trusted by some of the most sensitive, mission-critical enterprises and government agencies worldwide. The company's Open NDR Platform is uniquely powered by open source innovations including Zeek, Suricata, and YARA, combined with proprietary advances. Corelighters are united by a strong shared culture and values, building an organization that sustains open-source development while delivering enterprise-grade security solutions that help defenders proactively hunt for threats, accelerate incident response, and gain complete network visibility.