Hero image blinking light Hero image
AP-3000 title

The Corelight AP 3000 is a Zeek force multiplier, extracting logs and files for 25+ Gbps of monitored traffic. That's up to 10x faster than open-source Zeek sensors! Deployable in minutes, not months, the AP 3000 Sensor is built for serious scale in the toughest environments.

fleet manager auth

New

Corelight Fleet Manager

Corelight Fleet Manager streamlines the deployment, configuration, and administration of Corelight Sensors across an organization from a single management dashboard with RBAC, customizable configuration templates, and sensor health and performance monitoring.

Download specifications
Specifications
Select product

Just the right amount of data.

a screenshot of log rates graph

100x richer than Netflow / 100x smaller than PCAP / 50+ data types and protocols.

Corelight’s logs are the “Goldilocks” of network data: 100x richer than Netflow and 100x times smaller than PCAP. Covering 50+ data types and protocols and interlinked for lightning-fast search, these logs offer just the right amount of data for security tools and operators. Corelight’s fork, filter, and log data reduction features make it easy to manage log volumes for your SIEM without sacrificing critical network visibility.

Core Collection packages:

Corelight Sensors come preloaded with the Core Collection—a curated set of Zeek packages for detection, data enrichment, and operations.

The Core Collection offers out-of-the-box behavioral threat insights such as cryptomining, port scanning, and long connection detection, fingerprinting connections, and useful operational info such as notification of soon-to-expire SSL certificates.

bitcoin fingerprint depiction of data transfer

June 11, 2019

Corelight Enhances Detection Capability with Support for MITRE ATT&CK Package

Read press release.

Corelight Launches Corelight Fleet Manager for Seamless, Multi-Sensor Support and Administration for Enterprises with Large Deployments

grey right arrow

Corelight Expands Global Sales and Operations Footprint to Europe

grey right arrow

Corelight and Exabeam Partner to Deliver Best of Breed Security Solution 
to Detect Advanced Threats and Accelerate Incident Response Time

grey right arrow

Seasoned Sales Leader Joins Corelight as Vice President of Global Sales

grey right arrow

Corelight Honored in 2018 CyberSecurity Breakthrough Awards Program

grey right arrow

Former Chief Data Officer for City of San Francisco Joins Corelight as Head of People, Operations and Data

grey right arrow

CSO: Best security software, 2019: Lab-tested reviews of today's top tools

grey right arrow

ZDNet: How AI and machine learning can help you defend the enterprise from cyberattacks

grey right arrow

Best security software: How 20 Cutting-edge Tools Tackle Today's Threats

grey right arrow

Government Technology: Former San Francisco Chief Data Officer Joins Cybersecurity Company

grey right arrow

eWeek: AT&T Makes First Wireless 5G Data Transfer Over Millimeter Wave

grey right arrow

Dark Reading: World-renowned Cybersecurity Veteran Richard Bejtlich Joins Corelight as Principal Security Strategist

grey right arrow

Gartner Security & Risk Management Summit 2019

June 17 – 20th
National Harbor, MD

Attend Richard Bejtlich’s speaking session “What can you see when you’re blindfolded? Network Security Monitoring vs. Encryption.” on June 18th or stop by our booth (#418) and enter for a chance to win a drone!

More info

AWS re:Inforce 2019