Corelight, founded in 2013 and headquartered in San Francisco, California, delivers the Open NDR platform built on open-source Zeek and Suricata. Corelight emphasizes high-fidelity threat detection, rich metadata extraction, and integration with third-party SIEM/SOAR and custom analytics. Used widely in security operations centers, Corelight provides continuous protocol coverage and promising encrypted traffic analysis capabilities.