Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Corelight Open NDR Platform by Corelight View product | NetworkMiner by NetworkMiner View product |
|---|---|---|
| Overview | ||
| What it is | Looking for NDR software? Corelight Open NDR Platform by Corelight provides SIEM/lake streaming for Network Analytics. Compare features and alternatives. | NetworkMiner offers host-centric PCAP parsing and automated file and artifact extraction. Use it for network digital forensic analysis. See Network Security alternatives. |
| Product type | Open Enterprise Network Detection & Response Platform | Network Forensic Analysis Tool & Passive Packet Investigator |
| Best for | Global Enterprise, Defense, Financial, Telecom, Healthcare | Cybersecurity, Incident Response, Digital Forensics, Defense, Law Enforcement |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | SaaSCloudOn-Premise | Cloud |
| Deployment details | Hardware; Virtual; Cloud Sensors & SaaS; Hardware appliance; Virtual appliance; Cloud sensors | Standalone Software; Open Source / Commercial; Standalone Windows Software / Linux Mono Executable |
| Data residency | On-premises Data Center; Multi-Cloud | Local Host Machine Only (No Cloud Telemetry) |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: no |
| Single sign-on (SSO) | SSO: yes | SSO: no |
| Role-based access (RBAC) | RBAC: yes | RBAC: no |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: no |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | Bare-metal HardwareVMwareKVMAWSAzureGCP | PCAP Packet CapturesNetwork InterfacesLive Ethernet Streams |
| Compliance | Common CriteriaFIPS 140-2SOC 2 Type IIISO 27001 | GPLv2 (Open Source Edition)ISO 27037 Digital Evidence Principles |
| Integrations & coverage | ||
| Integrations | SplunkMicrosoft SentinelElasticCrowdStrikeSnowflakeKafka | Wireshark PCAP/PCAPNG formatsNetworkMiner ProSnort/Suricata PCAPs |
| Industries | Global EnterpriseDefenseFinancialTelecomHealthcare | CybersecurityIncident ResponseDigital ForensicsDefenseLaw Enforcement |
| Regions | GlobalUSEU | Global |
| Vendor | ||
| Company | Corelight | NetworkMiner |
| Headquarters | San Francisco, California, USA | Sweden |
| Company size | 201-500 | 1-10 |
| Founded | 2013 | 2007 |
Overview
What it is
Corelight Open NDR Platform
Looking for NDR software? Corelight Open NDR Platform by Corelight provides SIEM/lake streaming for Network Analytics. Compare features and alternatives.NetworkMiner
NetworkMiner offers host-centric PCAP parsing and automated file and artifact extraction. Use it for network digital forensic analysis. See Network Security alternatives.Product type
Corelight Open NDR Platform
Open Enterprise Network Detection & Response PlatformNetworkMiner
Network Forensic Analysis Tool & Passive Packet InvestigatorBest for
Corelight Open NDR Platform
Global Enterprise, Defense, Financial, Telecom, HealthcareNetworkMiner
Cybersecurity, Incident Response, Digital Forensics, Defense, Law EnforcementPricing
Pricing model
Corelight Open NDR Platform
Contact VendorNetworkMiner
Contact VendorFree trial
Corelight Open NDR Platform
Free trial: yesNetworkMiner
Free trial: yesDeployment
Deployment options
Corelight Open NDR Platform
NetworkMiner
Deployment details
Corelight Open NDR Platform
Hardware; Virtual; Cloud Sensors & SaaS; Hardware appliance; Virtual appliance; Cloud sensorsNetworkMiner
Standalone Software; Open Source / Commercial; Standalone Windows Software / Linux Mono ExecutableData residency
Corelight Open NDR Platform
On-premises Data Center; Multi-CloudNetworkMiner
Local Host Machine Only (No Cloud Telemetry)Key features
What it offers
Corelight Open NDR Platform
- Open NDR architecture
- Zeek protocol parsing
- Suricata intrusion detection
- Encrypted traffic analysis
- SIEM/lake streaming
- NDR
- Network Analytics
- Network Security
NetworkMiner
- Host-centric PCAP parsing
- Automated file and artifact extraction
- Passive OS fingerprinting
- Credential harvesting from PCAP
- Passive network sniffing
- Network digital forensic analysis
- Passive host and OS fingerprinting
- PCAP file and artifact reconstruction
Platform & access
API access
Corelight Open NDR Platform
API access: yesNetworkMiner
API access: noSingle sign-on (SSO)
Corelight Open NDR Platform
SSO: yesNetworkMiner
SSO: noRole-based access (RBAC)
Corelight Open NDR Platform
RBAC: yesNetworkMiner
RBAC: noMulti-tenant
Corelight Open NDR Platform
Multi-tenant: yesNetworkMiner
Multi-tenant: noMobile app
Corelight Open NDR Platform
Mobile app: noNetworkMiner
Mobile app: noSupported platforms
Corelight Open NDR Platform
NetworkMiner
Compliance
Corelight Open NDR Platform
NetworkMiner
Integrations & coverage
Integrations
Corelight Open NDR Platform
NetworkMiner
Industries
Corelight Open NDR Platform
NetworkMiner
Regions
Corelight Open NDR Platform
NetworkMiner
Vendor
Company
Corelight Open NDR Platform
CorelightNetworkMiner
NetworkMinerHeadquarters
Corelight Open NDR Platform
San Francisco, California, USANetworkMiner
SwedenCompany size
Corelight Open NDR Platform
201-500NetworkMiner
1-10Founded
Corelight Open NDR Platform
2013NetworkMiner
2007