Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Corelight Detection Collections by Corelight View product | Zeek by Zeek View product |
|---|---|---|
| Overview | ||
| What it is | Corelight Detection Collections offers curated network detection rules and behavioral analytics. Use it for Network Behavior Analysis. See Threat Detection alternatives. | What does Zeek do? It covers file hash extraction and high-speed packet capture. See typical use cases, self-hosted deployment and how it compares to rivals. |
| Product type | Curated Network Threat Detection & Analytics Rules | Open-Source Network Security Monitoring & Behavioral Analysis Engine |
| Best for | Enterprise SOC, Financial, Defense, Government, Healthcare | Cybersecurity, SOC Teams, Network Engineering, Defense, Research, Telecom |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | Cloud | CloudOn-Premise |
| Deployment details | Software Rule Packages; Sensor Integration; Software rule packages; Sensor-native execution | Open Source; Self-hosted Software; Self-hosted Software Engine; Hardened Appliance; Cloud Virtual Sensor |
| Data residency | Customer Network / On-premises / Cloud VPCs | Customer Infrastructure Dependent (Completely Self-Contained) |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: no |
| Single sign-on (SSO) | SSO: yes | SSO: no |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: no |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | Corelight SensorsZeekSuricataSplunkSentinel | Enterprise NetworksDatacenter FabricsMulti-Cloud VPCsMonitoring Taps |
| Compliance | SOC 2 Type IIISO 27001FIPS 140-2 | BSD LicenseCommon CriteriaNetwork Standards |
| Integrations & coverage | ||
| Integrations | Corelight SensorsSplunkMicrosoft SentinelCrowdStrikeElastic | ElasticsearchSplunkSuricataKafkaArkimeWiresharkCorelight |
| Industries | Enterprise SOCFinancialDefenseGovernmentHealthcare | CybersecuritySOC TeamsNetwork EngineeringDefenseResearchTelecom |
| Regions | GlobalUSEU | Global |
| Vendor | ||
| Company | Corelight | Zeek |
| Headquarters | San Francisco, California, USA | Berkeley, California, USA |
| Company size | 201-500 | 1-10 |
| Founded | 2013 | 1994 |
Overview
What it is
Corelight Detection Collections
Corelight Detection Collections offers curated network detection rules and behavioral analytics. Use it for Network Behavior Analysis. See Threat Detection alternatives.Zeek
What does Zeek do? It covers file hash extraction and high-speed packet capture. See typical use cases, self-hosted deployment and how it compares to rivals.Product type
Corelight Detection Collections
Curated Network Threat Detection & Analytics RulesZeek
Open-Source Network Security Monitoring & Behavioral Analysis EngineBest for
Corelight Detection Collections
Enterprise SOC, Financial, Defense, Government, HealthcareZeek
Cybersecurity, SOC Teams, Network Engineering, Defense, Research, TelecomPricing
Pricing model
Corelight Detection Collections
Contact VendorZeek
Contact VendorFree trial
Corelight Detection Collections
Free trial: yesZeek
Free trial: yesDeployment
Deployment options
Corelight Detection Collections
Zeek
Deployment details
Corelight Detection Collections
Software Rule Packages; Sensor Integration; Software rule packages; Sensor-native executionZeek
Open Source; Self-hosted Software; Self-hosted Software Engine; Hardened Appliance; Cloud Virtual SensorData residency
Corelight Detection Collections
Customer Network / On-premises / Cloud VPCsZeek
Customer Infrastructure Dependent (Completely Self-Contained)Key features
What it offers
Corelight Detection Collections
- Curated network detection rules
- Behavioral analytics
- MITRE ATT&CK mapping
- C2 beacon detection
- DNS tunneling defense
- NDR
- Threat Detection
- Security Analytics
Zeek
- Stateful network protocol analysis
- Structured transaction logging (HTTP/DNS/TLS)
- File hash extraction
- Event-driven domain scripting language
- High-speed packet capture
- Network security monitoring
- Network forensic investigation
- Protocol transaction logging
Platform & access
API access
Corelight Detection Collections
API access: yesZeek
API access: noSingle sign-on (SSO)
Corelight Detection Collections
SSO: yesZeek
SSO: noRole-based access (RBAC)
Corelight Detection Collections
RBAC: yesZeek
RBAC: yesMulti-tenant
Corelight Detection Collections
Multi-tenant: yesZeek
Multi-tenant: noMobile app
Corelight Detection Collections
Mobile app: noZeek
Mobile app: noSupported platforms
Corelight Detection Collections
Zeek
Compliance
Corelight Detection Collections
Zeek
Integrations & coverage
Integrations
Corelight Detection Collections
Zeek
Industries
Corelight Detection Collections
Zeek
Regions
Corelight Detection Collections
Zeek
Vendor
Company
Corelight Detection Collections
CorelightZeek
ZeekHeadquarters
Corelight Detection Collections
San Francisco, California, USAZeek
Berkeley, California, USACompany size
Corelight Detection Collections
201-500Zeek
1-10Founded
Corelight Detection Collections
2013Zeek
1994