Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Corelight Sensors by Corelight View product | Zeek by Zeek View product |
|---|---|---|
| Overview | ||
| What it is | What does Corelight Sensors do? It covers log streaming and zeek protocol parsing. See typical use cases, appliance or cloud deployment and how it compares to rivals. | What does Zeek do? It covers file hash extraction and high-speed packet capture. See typical use cases, self-hosted deployment and how it compares to rivals. |
| Product type | High-Performance Network Security Sensor Appliances | Open-Source Network Security Monitoring & Behavioral Analysis Engine |
| Best for | Enterprise SOC, Data Centers, Telecommunications, Financial, Defense | Cybersecurity, SOC Teams, Network Engineering, Defense, Research, Telecom |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | CloudOn-Premise | CloudOn-Premise |
| Deployment details | Hardware Appliances; Virtual; Cloud AMI; Hardware appliances; Virtual appliances; Cloud AMIs | Open Source; Self-hosted Software; Self-hosted Software Engine; Hardened Appliance; Cloud Virtual Sensor |
| Data residency | On-premises; Customer Cloud VPCs | Customer Infrastructure Dependent (Completely Self-Contained) |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: no |
| Single sign-on (SSO) | SSO: yes | SSO: no |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: no |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | 10G/40G/100G Physical NetworksVMware ESXiKVMAWSAzure | Enterprise NetworksDatacenter FabricsMulti-Cloud VPCsMonitoring Taps |
| Compliance | FIPS 140-2Common CriteriaSOC 2 Type IIISO 27001 | BSD LicenseCommon CriteriaNetwork Standards |
| Integrations & coverage | ||
| Integrations | Corelight Fleet ManagerSplunkMicrosoft SentinelKafkaAWS | ElasticsearchSplunkSuricataKafkaArkimeWiresharkCorelight |
| Industries | Enterprise SOCData CentersTelecommunicationsFinancialDefense | CybersecuritySOC TeamsNetwork EngineeringDefenseResearchTelecom |
| Regions | GlobalUSEU | Global |
| Vendor | ||
| Company | Corelight | Zeek |
| Headquarters | San Francisco, California, USA | Berkeley, California, USA |
| Company size | 201-500 | 1-10 |
| Founded | 2013 | 1994 |
Overview
What it is
Corelight Sensors
What does Corelight Sensors do? It covers log streaming and zeek protocol parsing. See typical use cases, appliance or cloud deployment and how it compares to rivals.Zeek
What does Zeek do? It covers file hash extraction and high-speed packet capture. See typical use cases, self-hosted deployment and how it compares to rivals.Product type
Corelight Sensors
High-Performance Network Security Sensor AppliancesZeek
Open-Source Network Security Monitoring & Behavioral Analysis EngineBest for
Corelight Sensors
Enterprise SOC, Data Centers, Telecommunications, Financial, DefenseZeek
Cybersecurity, SOC Teams, Network Engineering, Defense, Research, TelecomPricing
Pricing model
Corelight Sensors
Contact VendorZeek
Contact VendorFree trial
Corelight Sensors
Free trial: yesZeek
Free trial: yesDeployment
Deployment options
Corelight Sensors
CloudOn-Premise
Zeek
CloudOn-Premise
Deployment details
Corelight Sensors
Hardware Appliances; Virtual; Cloud AMI; Hardware appliances; Virtual appliances; Cloud AMIsZeek
Open Source; Self-hosted Software; Self-hosted Software Engine; Hardened Appliance; Cloud Virtual SensorData residency
Corelight Sensors
On-premises; Customer Cloud VPCsZeek
Customer Infrastructure Dependent (Completely Self-Contained)Key features
What it offers
Corelight Sensors
- High-capacity packet capture (1G-100G)
- Zeek protocol parsing
- Suricata signature engine
- Hardware acceleration
- Log streaming
- NDR
- Network Security
- Network Monitoring
Zeek
- Stateful network protocol analysis
- Structured transaction logging (HTTP/DNS/TLS)
- File hash extraction
- Event-driven domain scripting language
- High-speed packet capture
- Network security monitoring
- Network forensic investigation
- Protocol transaction logging
Platform & access
API access
Corelight Sensors
API access: yesZeek
API access: noSingle sign-on (SSO)
Corelight Sensors
SSO: yesZeek
SSO: noRole-based access (RBAC)
Corelight Sensors
RBAC: yesZeek
RBAC: yesMulti-tenant
Corelight Sensors
Multi-tenant: yesZeek
Multi-tenant: noMobile app
Corelight Sensors
Mobile app: noZeek
Mobile app: noSupported platforms
Corelight Sensors
10G/40G/100G Physical NetworksVMware ESXiKVMAWSAzure
Zeek
Enterprise NetworksDatacenter FabricsMulti-Cloud VPCsMonitoring Taps
Compliance
Corelight Sensors
FIPS 140-2Common CriteriaSOC 2 Type IIISO 27001
Zeek
BSD LicenseCommon CriteriaNetwork Standards
Integrations & coverage
Integrations
Corelight Sensors
Corelight Fleet ManagerSplunkMicrosoft SentinelKafkaAWS
Zeek
ElasticsearchSplunkSuricataKafkaArkimeWiresharkCorelight
Industries
Corelight Sensors
Enterprise SOCData CentersTelecommunicationsFinancialDefense
Zeek
CybersecuritySOC TeamsNetwork EngineeringDefenseResearchTelecom
Regions
Corelight Sensors
GlobalUSEU
Zeek
Global
Vendor
Company
Corelight Sensors
CorelightZeek
ZeekHeadquarters
Corelight Sensors
San Francisco, California, USAZeek
Berkeley, California, USACompany size
Corelight Sensors
201-500Zeek
1-10Founded
Corelight Sensors
2013Zeek
1994