Corelight

We transform network data into definitive evidence. This evidence powers AI-driven detection and expert workflows, helping to enable the AI SOC ecosystem. Our open Network Detection and Response (NDR) platform provides comprehensive, correlated evidence for network visibility, faster investigations, and threat hunting. We aim to reduce risk, eliminate visibility gaps, accelerate incident response by reconstructing attack timelines with historical context, and improve threat detection accuracy.

Our multi-layered detection engine combines threat intelligence, machine learning, behavioral analytics, and expert-tuned signatures. This helps reduce false positives and deliver risk-prioritized alerts. We offer on-premise and cloud sensors that capture structured, industry-standard telemetry. Our offerings include insights from Zeek and Suricata, plus proprietary technologies for VPN, encrypted collections, and packet capture. Sensors are available for virtual, software, cloud, and physical environments, and include machine learning and scalable search.

We were founded in 2016, but our roots go back over 25 years to co-founder Dr. Vern Paxson’s creation of the open-source project Zeek (then Bro) at Lawrence Berkeley National Laboratory. This project provides detailed network activity information and grew with contributions from Dr. Robin Sommer and Seth Hall. It received support from the US National Science Foundation and Department of Energy. We continue to manage the Zeek project. Our customers include Fortune 500 companies, major government agencies, and research universities. We specialize in network security monitoring, intrusion detection, and threat detection using technologies like Bro, Zeek, NTA, and NDR.

Our mission is to help customers stay ahead of cyber attacks and protect the digital world. Our values guide how we work:

• Low ego results: We believe in humility in execution, taking thoughtful risks, and collaborating to find the best ideas.
• Applied curiosity: We constantly question, incorporating data and evidence from various sources to drive success.
• Tireless service: We are committed to serving our customers, the open source communities we work with, and our team members.

Our team has 201-500 employees. We work in a distributed model, with most of our team working remotely. We cultivate a culture of excellence, inclusion, innovation, and cyber defense. Corelighters come from diverse backgrounds and have varied perspectives, but we all share a common culture and values. Our work environment offers ways to connect both online and in person, including volunteering, meet-ups, and Employee Resource Groups (ERGs).

We believe in a humble, winning culture where everyone’s contributions are valued, and customer success is a priority. We support a healthy work-life balance and help each employee achieve sustainable growth and fulfillment. Our culture is inclusive, collaborative, and growth-oriented.

We offer a flexible work environment with remote options and a WFH stipend. Employees can connect through Employee Resource Groups (ERGs), local meet-ups, and regular team offsites, including an annual company-wide event. We also provide service awards.

For health and wellbeing, we cover medical, dental, and vision for employees and their dependents. Other benefits include FSA, HSA, and DCA accounts, Headspace or Calm subscriptions, One Medical memberships, virtual therapy through Talkspace, and travel insurance.

Our family and financial benefits include 401(k) matching for US employees and pensions for international employees. We offer adoption and fertility benefits through Carrot, paid parental leave, reservist leave, free MetLife legal benefits in the US, and financial planning resources. Compensation packages include equity and may offer commission-based or discretionary bonuses.