Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | NetworkMiner by NetworkMiner View product | Corelight Sensors by Corelight View product |
|---|---|---|
| Overview | ||
| What it is | NetworkMiner offers host-centric PCAP parsing and automated file and artifact extraction. Use it for network digital forensic analysis. See Network Security alternatives. | What does Corelight Sensors do? It covers log streaming and zeek protocol parsing. See typical use cases, appliance or cloud deployment and how it compares to rivals. |
| Product type | Network Forensic Analysis Tool & Passive Packet Investigator | High-Performance Network Security Sensor Appliances |
| Best for | Cybersecurity, Incident Response, Digital Forensics, Defense, Law Enforcement | Enterprise SOC, Data Centers, Telecommunications, Financial, Defense |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | Cloud | CloudOn-Premise |
| Deployment details | Standalone Software; Open Source / Commercial; Standalone Windows Software / Linux Mono Executable | Hardware Appliances; Virtual; Cloud AMI; Hardware appliances; Virtual appliances; Cloud AMIs |
| Data residency | Local Host Machine Only (No Cloud Telemetry) | On-premises; Customer Cloud VPCs |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: no | API access: yes |
| Single sign-on (SSO) | SSO: no | SSO: yes |
| Role-based access (RBAC) | RBAC: no | RBAC: yes |
| Multi-tenant | Multi-tenant: no | Multi-tenant: yes |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | PCAP Packet CapturesNetwork InterfacesLive Ethernet Streams | 10G/40G/100G Physical NetworksVMware ESXiKVMAWSAzure |
| Compliance | GPLv2 (Open Source Edition)ISO 27037 Digital Evidence Principles | FIPS 140-2Common CriteriaSOC 2 Type IIISO 27001 |
| Integrations & coverage | ||
| Integrations | Wireshark PCAP/PCAPNG formatsNetworkMiner ProSnort/Suricata PCAPs | Corelight Fleet ManagerSplunkMicrosoft SentinelKafkaAWS |
| Industries | CybersecurityIncident ResponseDigital ForensicsDefenseLaw Enforcement | Enterprise SOCData CentersTelecommunicationsFinancialDefense |
| Regions | Global | GlobalUSEU |
| Vendor | ||
| Company | NetworkMiner | Corelight |
| Headquarters | Sweden | San Francisco, California, USA |
| Company size | 1-10 | 201-500 |
| Founded | 2007 | 2013 |
Overview
What it is
NetworkMiner
NetworkMiner offers host-centric PCAP parsing and automated file and artifact extraction. Use it for network digital forensic analysis. See Network Security alternatives.Corelight Sensors
What does Corelight Sensors do? It covers log streaming and zeek protocol parsing. See typical use cases, appliance or cloud deployment and how it compares to rivals.Product type
NetworkMiner
Network Forensic Analysis Tool & Passive Packet InvestigatorCorelight Sensors
High-Performance Network Security Sensor AppliancesBest for
NetworkMiner
Cybersecurity, Incident Response, Digital Forensics, Defense, Law EnforcementCorelight Sensors
Enterprise SOC, Data Centers, Telecommunications, Financial, DefensePricing
Pricing model
NetworkMiner
Contact VendorCorelight Sensors
Contact VendorFree trial
NetworkMiner
Free trial: yesCorelight Sensors
Free trial: yesDeployment
Deployment options
NetworkMiner
Cloud
Corelight Sensors
CloudOn-Premise
Deployment details
NetworkMiner
Standalone Software; Open Source / Commercial; Standalone Windows Software / Linux Mono ExecutableCorelight Sensors
Hardware Appliances; Virtual; Cloud AMI; Hardware appliances; Virtual appliances; Cloud AMIsData residency
NetworkMiner
Local Host Machine Only (No Cloud Telemetry)Corelight Sensors
On-premises; Customer Cloud VPCsKey features
What it offers
NetworkMiner
- Host-centric PCAP parsing
- Automated file and artifact extraction
- Passive OS fingerprinting
- Credential harvesting from PCAP
- Passive network sniffing
- Network digital forensic analysis
- Passive host and OS fingerprinting
- PCAP file and artifact reconstruction
Corelight Sensors
- High-capacity packet capture (1G-100G)
- Zeek protocol parsing
- Suricata signature engine
- Hardware acceleration
- Log streaming
- NDR
- Network Security
- Network Monitoring
Platform & access
API access
NetworkMiner
API access: noCorelight Sensors
API access: yesSingle sign-on (SSO)
NetworkMiner
SSO: noCorelight Sensors
SSO: yesRole-based access (RBAC)
NetworkMiner
RBAC: noCorelight Sensors
RBAC: yesMulti-tenant
NetworkMiner
Multi-tenant: noCorelight Sensors
Multi-tenant: yesMobile app
NetworkMiner
Mobile app: noCorelight Sensors
Mobile app: noSupported platforms
NetworkMiner
PCAP Packet CapturesNetwork InterfacesLive Ethernet Streams
Corelight Sensors
10G/40G/100G Physical NetworksVMware ESXiKVMAWSAzure
Compliance
NetworkMiner
GPLv2 (Open Source Edition)ISO 27037 Digital Evidence Principles
Corelight Sensors
FIPS 140-2Common CriteriaSOC 2 Type IIISO 27001
Integrations & coverage
Integrations
NetworkMiner
Wireshark PCAP/PCAPNG formatsNetworkMiner ProSnort/Suricata PCAPs
Corelight Sensors
Corelight Fleet ManagerSplunkMicrosoft SentinelKafkaAWS
Industries
NetworkMiner
CybersecurityIncident ResponseDigital ForensicsDefenseLaw Enforcement
Corelight Sensors
Enterprise SOCData CentersTelecommunicationsFinancialDefense
Regions
NetworkMiner
Global
Corelight Sensors
GlobalUSEU
Vendor
Company
NetworkMiner
NetworkMinerCorelight Sensors
CorelightHeadquarters
NetworkMiner
SwedenCorelight Sensors
San Francisco, California, USACompany size
NetworkMiner
1-10Corelight Sensors
201-500Founded
NetworkMiner
2007Corelight Sensors
2013