Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Corelight Investigator by Corelight View product | Fortinet FortiNDR by Fortinet View product |
|---|---|---|
| Overview | ||
| What it is | Looking for Network Security software? Corelight Investigator by Corelight provides entity tracking for Incident Investigation. Compare features and alternatives. | Fortinet FortiNDR, from Fortinet, provides threat hunting and anomaly detection. Common uses: network threat detection. Check deployment options and top NDR competitors. |
| Product type | Cloud-Native Network Detection and Response (NDR) | Network detection and response platform |
| Best for | Enterprise Security Operations, Banking, Tech, Healthcare, Public | Enterprise, SMB, Financial services, Healthcare, Government, Education, Manufacturing, Retail, Technology, Service providers |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: no |
| Deployment | ||
| Deployment options | SaaSCloud | Cloud |
| Deployment details | Cloud (SaaS); Sensor-Backed Analytics; Cloud SaaS; Sensor-backed network analytics | Appliance, virtual and supported cloud deployment options; Appliance, virtual and supported cloud deployment options |
| Data residency | US; EU; Global | Depends on deployment, service region, cloud architecture and customer configuration; verify the applicable Fortinet service/region |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: yes |
| Single sign-on (SSO) | SSO: yes | SSO: yes |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: yes |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | Corelight SensorsAWSAzureGCPOn-premises Networks | Hardware applianceVMware ESXiKVMAWSMicrosoft AzureFortiNDR Cloud (SaaS) |
| Compliance | SOC 2 Type IIISO 27001GDPRHIPAA | Supports security controls used in common regulated environmentsexact certifications depend on product, model, release and deployment |
| Integrations & coverage | ||
| Integrations | Corelight SensorsCrowdStrike FalconMicrosoft SentinelSplunk | FortiGateFortiAnalyzerFortiSIEMFortiSOARFortiEDRFortiSandboxFortiGuard |
| Industries | Enterprise Security OperationsBankingTechHealthcarePublic | EnterpriseSMBFinancial servicesHealthcareGovernmentEducation+4 more |
| Regions | GlobalUSEU | GlobalAvailability varies by product, deployment and service region |
| Vendor | ||
| Company | Corelight | Fortinet |
| Headquarters | San Francisco, California, USA | Sunnyvale, California, USA |
| Company size | 201-500 | 10,000+ |
| Founded | 2013 | 2000 |
Overview
What it is
Corelight Investigator
Looking for Network Security software? Corelight Investigator by Corelight provides entity tracking for Incident Investigation. Compare features and alternatives.Fortinet FortiNDR
Fortinet FortiNDR, from Fortinet, provides threat hunting and anomaly detection. Common uses: network threat detection. Check deployment options and top NDR competitors.Product type
Corelight Investigator
Cloud-Native Network Detection and Response (NDR)Fortinet FortiNDR
Network detection and response platformBest for
Corelight Investigator
Enterprise Security Operations, Banking, Tech, Healthcare, PublicFortinet FortiNDR
Enterprise, SMB, Financial services, Healthcare, Government, Education, Manufacturing, Retail, Technology, Service providersPricing
Pricing model
Corelight Investigator
Contact VendorFortinet FortiNDR
Contact VendorFree trial
Corelight Investigator
Free trial: yesFortinet FortiNDR
Free trial: noDeployment
Deployment options
Corelight Investigator
Fortinet FortiNDR
Deployment details
Corelight Investigator
Cloud (SaaS); Sensor-Backed Analytics; Cloud SaaS; Sensor-backed network analyticsFortinet FortiNDR
Appliance, virtual and supported cloud deployment options; Appliance, virtual and supported cloud deployment optionsData residency
Corelight Investigator
US; EU; GlobalFortinet FortiNDR
Depends on deployment, service region, cloud architecture and customer configuration; verify the applicable Fortinet service/regionKey features
What it offers
Corelight Investigator
- Cloud-native NDR
- Zeek network telemetry
- MITRE ATT&CK threat detections
- Entity tracking
- Rapid network query pivots
- NDR
- Network Security
- Threat Detection
Fortinet FortiNDR
- Network traffic analytics
- Behavioral detection
- Threat hunting
- Encrypted-traffic analysis
- Anomaly detection
- Incident investigation
- Machine learning
- Network threat detection
Platform & access
API access
Corelight Investigator
API access: yesFortinet FortiNDR
API access: yesSingle sign-on (SSO)
Corelight Investigator
SSO: yesFortinet FortiNDR
SSO: yesRole-based access (RBAC)
Corelight Investigator
RBAC: yesFortinet FortiNDR
RBAC: yesMulti-tenant
Corelight Investigator
Multi-tenant: yesFortinet FortiNDR
Multi-tenant: yesMobile app
Corelight Investigator
Mobile app: noFortinet FortiNDR
Mobile app: noSupported platforms
Corelight Investigator
Fortinet FortiNDR
Compliance
Corelight Investigator
Fortinet FortiNDR
Integrations & coverage
Integrations
Corelight Investigator
Fortinet FortiNDR
Industries
Corelight Investigator
Fortinet FortiNDR
Regions
Corelight Investigator
Fortinet FortiNDR
Vendor
Company
Corelight Investigator
CorelightFortinet FortiNDR
FortinetHeadquarters
Corelight Investigator
San Francisco, California, USAFortinet FortiNDR
Sunnyvale, California, USACompany size
Corelight Investigator
201-500Fortinet FortiNDR
10,000+Founded
Corelight Investigator
2013Fortinet FortiNDR
2000