Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Corelight Sensors by Corelight View product | NetworkMiner by NetworkMiner View product |
|---|---|---|
| Overview | ||
| What it is | What does Corelight Sensors do? It covers log streaming and zeek protocol parsing. See typical use cases, appliance or cloud deployment and how it compares to rivals. | NetworkMiner offers host-centric PCAP parsing and automated file and artifact extraction. Use it for network digital forensic analysis. See Network Security alternatives. |
| Product type | High-Performance Network Security Sensor Appliances | Network Forensic Analysis Tool & Passive Packet Investigator |
| Best for | Enterprise SOC, Data Centers, Telecommunications, Financial, Defense | Cybersecurity, Incident Response, Digital Forensics, Defense, Law Enforcement |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | CloudOn-Premise | Cloud |
| Deployment details | Hardware Appliances; Virtual; Cloud AMI; Hardware appliances; Virtual appliances; Cloud AMIs | Standalone Software; Open Source / Commercial; Standalone Windows Software / Linux Mono Executable |
| Data residency | On-premises; Customer Cloud VPCs | Local Host Machine Only (No Cloud Telemetry) |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: no |
| Single sign-on (SSO) | SSO: yes | SSO: no |
| Role-based access (RBAC) | RBAC: yes | RBAC: no |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: no |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | 10G/40G/100G Physical NetworksVMware ESXiKVMAWSAzure | PCAP Packet CapturesNetwork InterfacesLive Ethernet Streams |
| Compliance | FIPS 140-2Common CriteriaSOC 2 Type IIISO 27001 | GPLv2 (Open Source Edition)ISO 27037 Digital Evidence Principles |
| Integrations & coverage | ||
| Integrations | Corelight Fleet ManagerSplunkMicrosoft SentinelKafkaAWS | Wireshark PCAP/PCAPNG formatsNetworkMiner ProSnort/Suricata PCAPs |
| Industries | Enterprise SOCData CentersTelecommunicationsFinancialDefense | CybersecurityIncident ResponseDigital ForensicsDefenseLaw Enforcement |
| Regions | GlobalUSEU | Global |
| Vendor | ||
| Company | Corelight | NetworkMiner |
| Headquarters | San Francisco, California, USA | Sweden |
| Company size | 201-500 | 1-10 |
| Founded | 2013 | 2007 |
Overview
What it is
Corelight Sensors
What does Corelight Sensors do? It covers log streaming and zeek protocol parsing. See typical use cases, appliance or cloud deployment and how it compares to rivals.NetworkMiner
NetworkMiner offers host-centric PCAP parsing and automated file and artifact extraction. Use it for network digital forensic analysis. See Network Security alternatives.Product type
Corelight Sensors
High-Performance Network Security Sensor AppliancesNetworkMiner
Network Forensic Analysis Tool & Passive Packet InvestigatorBest for
Corelight Sensors
Enterprise SOC, Data Centers, Telecommunications, Financial, DefenseNetworkMiner
Cybersecurity, Incident Response, Digital Forensics, Defense, Law EnforcementPricing
Pricing model
Corelight Sensors
Contact VendorNetworkMiner
Contact VendorFree trial
Corelight Sensors
Free trial: yesNetworkMiner
Free trial: yesDeployment
Deployment options
Corelight Sensors
CloudOn-Premise
NetworkMiner
Cloud
Deployment details
Corelight Sensors
Hardware Appliances; Virtual; Cloud AMI; Hardware appliances; Virtual appliances; Cloud AMIsNetworkMiner
Standalone Software; Open Source / Commercial; Standalone Windows Software / Linux Mono ExecutableData residency
Corelight Sensors
On-premises; Customer Cloud VPCsNetworkMiner
Local Host Machine Only (No Cloud Telemetry)Key features
What it offers
Corelight Sensors
- High-capacity packet capture (1G-100G)
- Zeek protocol parsing
- Suricata signature engine
- Hardware acceleration
- Log streaming
- NDR
- Network Security
- Network Monitoring
NetworkMiner
- Host-centric PCAP parsing
- Automated file and artifact extraction
- Passive OS fingerprinting
- Credential harvesting from PCAP
- Passive network sniffing
- Network digital forensic analysis
- Passive host and OS fingerprinting
- PCAP file and artifact reconstruction
Platform & access
API access
Corelight Sensors
API access: yesNetworkMiner
API access: noSingle sign-on (SSO)
Corelight Sensors
SSO: yesNetworkMiner
SSO: noRole-based access (RBAC)
Corelight Sensors
RBAC: yesNetworkMiner
RBAC: noMulti-tenant
Corelight Sensors
Multi-tenant: yesNetworkMiner
Multi-tenant: noMobile app
Corelight Sensors
Mobile app: noNetworkMiner
Mobile app: noSupported platforms
Corelight Sensors
10G/40G/100G Physical NetworksVMware ESXiKVMAWSAzure
NetworkMiner
PCAP Packet CapturesNetwork InterfacesLive Ethernet Streams
Compliance
Corelight Sensors
FIPS 140-2Common CriteriaSOC 2 Type IIISO 27001
NetworkMiner
GPLv2 (Open Source Edition)ISO 27037 Digital Evidence Principles
Integrations & coverage
Integrations
Corelight Sensors
Corelight Fleet ManagerSplunkMicrosoft SentinelKafkaAWS
NetworkMiner
Wireshark PCAP/PCAPNG formatsNetworkMiner ProSnort/Suricata PCAPs
Industries
Corelight Sensors
Enterprise SOCData CentersTelecommunicationsFinancialDefense
NetworkMiner
CybersecurityIncident ResponseDigital ForensicsDefenseLaw Enforcement
Regions
Corelight Sensors
GlobalUSEU
NetworkMiner
Global
Vendor
Company
Corelight Sensors
CorelightNetworkMiner
NetworkMinerHeadquarters
Corelight Sensors
San Francisco, California, USANetworkMiner
SwedenCompany size
Corelight Sensors
201-500NetworkMiner
1-10Founded
Corelight Sensors
2013NetworkMiner
2007