Corelight: Corelight Open NDR Platform

Corelight Open NDR is delivered as a SaaS offering using a multi- tenant SaaS cloud computing environment. It is an open, evidence- based Network Detection and Response platform built on community- driven open-source technologies like Zeek and Suricata, designed to provide comprehensive network visibility, detect advanced threats using multi-layered analytics (AI/ML, behavioral, signatures), and accelerate incident response by generating enriched, forensic-grade network telemetry.

Open NDR focuses on providing open core and open data for flexibility, customization, and seamless integration with existing security tools like SIEM, EDR, and XDR. It is available to federal government agencies, as well as government contractors etc.).