Corelight

What the company sells

Corelight sells network detection and response products built on the open-source Zeek project, including hardware sensors that convert network traffic into structured evidence and a SaaS investigation product called Investigator. Its Smart PCAP feature stores a targeted subset of packets for later investigation. The company was incorporated in 2016 and is based in San Francisco, California.

Categories

• Network detection and response (primary category)
• Network visibility and traffic brokering

Headquarters

San Francisco, United States

Founded

2016

Ownership

Not established from our sources

Website

corelight.com

Products and services

• Investigator

  A SaaS-based threat investigation and network detection and response product built to simplify tier-1 analyst workflows using network evidence.

• Appliance Sensors

  Hardware sensors deployed on a customer's network that capture traffic and convert it into structured network evidence for the Open NDR Platform, in throughput tiers from about 4 to over 125 Gbps.

• Smart PCAP

  Captures a targeted subset of network packets tied to investigations and stores months of traffic history rather than only minutes.

Sources

1. CorelightUndated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
2. CorelightUndated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
3. H.I.G. CapitalPublished September 3, 2021 · Tier C

Recorded September 27, 2026 from the sources above. Descriptions are in our own words; we do not rank or recommend vendors, and no vendor pays to be listed or to change what we write. Disclosure: until the publisher confirms it has no business relationship with this company, treat one as possible (how the network works). Spot a factual error? Request a correction.