Send message to

Do you want to send the message without a subject?
Please note that your message can be maximum 1000 characters long

Your message has been sent

You can find the message in your personal profile at "My messages".

An error occured

Please try again.

Make an appointment with

So that you can make an appointment, the calendar will open in a new tab on the personal profile of your contact person.

Create an onsite appointment with

So that you can make an onsite appointment, the appointment request will open in a new tab.

Desktop header of Corelight GmbH

Hall 7 - Booth Number 7-232 + 7-243

Corelight GmbH

Open Network Detection and Response (NDR) vendor based on open source Zeek.


  • Threat analysis
  • Computer emergency response team (CERT)
  • Forensics
  • Intrusion detection / prevention
  • Network monitoring
show more
Westendstraße 28
60325 Frankfurt am Main

About us

 Corelight is a cyber security vendor that provides an open network and detection platform. This is based on the open source Zeek tool, as well as Suricata IDS and SmartPCAP for efficient and highly flexible network traffic capture (packet captures). Zeek data has become the "gold standard" for incident response, threat hunting and forensics in large enterprises and government agencies worldwide. Corelight offers a family of network sensors - both physical and virtual, at any scale - that simplify the use of open source Zeek by adding integrations and features that large organizations need.
Most recently, the SaaS-based Corelight Investigator was also launched in EMEA in August 2022. Investigator is a network detection and response (NDR) solution that combines the comprehensive network evidence of Corelight sensors with machine learning (ML) and advanced analytics in a fast, intuitive search platform that accelerates security operations and consolidates legacy toolsets.
Investigator is easy to deploy, highly scalable, and available 24/7 globally to your Security Operations Center (SOC). In addition, the Corelight Labs team continuously develops new ML-based threat detections and automatically delivers them to Investigator, giving users instant access to the latest analytics content.

read more

Direct Exhibitor

show more