Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Zeek by Zeek View product | Corelight Sensors by Corelight View product |
|---|---|---|
| Overview | ||
| What it is | What does Zeek do? It covers file hash extraction and high-speed packet capture. See typical use cases, self-hosted deployment and how it compares to rivals. | What does Corelight Sensors do? It covers log streaming and zeek protocol parsing. See typical use cases, appliance or cloud deployment and how it compares to rivals. |
| Product type | Open-Source Network Security Monitoring & Behavioral Analysis Engine | High-Performance Network Security Sensor Appliances |
| Best for | Cybersecurity, SOC Teams, Network Engineering, Defense, Research, Telecom | Enterprise SOC, Data Centers, Telecommunications, Financial, Defense |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | CloudOn-Premise | CloudOn-Premise |
| Deployment details | Open Source; Self-hosted Software; Self-hosted Software Engine; Hardened Appliance; Cloud Virtual Sensor | Hardware Appliances; Virtual; Cloud AMI; Hardware appliances; Virtual appliances; Cloud AMIs |
| Data residency | Customer Infrastructure Dependent (Completely Self-Contained) | On-premises; Customer Cloud VPCs |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: no | API access: yes |
| Single sign-on (SSO) | SSO: no | SSO: yes |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: no | Multi-tenant: yes |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | Enterprise NetworksDatacenter FabricsMulti-Cloud VPCsMonitoring Taps | 10G/40G/100G Physical NetworksVMware ESXiKVMAWSAzure |
| Compliance | BSD LicenseCommon CriteriaNetwork Standards | FIPS 140-2Common CriteriaSOC 2 Type IIISO 27001 |
| Integrations & coverage | ||
| Integrations | ElasticsearchSplunkSuricataKafkaArkimeWiresharkCorelight | Corelight Fleet ManagerSplunkMicrosoft SentinelKafkaAWS |
| Industries | CybersecuritySOC TeamsNetwork EngineeringDefenseResearchTelecom | Enterprise SOCData CentersTelecommunicationsFinancialDefense |
| Regions | Global | GlobalUSEU |
| Vendor | ||
| Company | Zeek | Corelight |
| Headquarters | Berkeley, California, USA | San Francisco, California, USA |
| Company size | 1-10 | 201-500 |
| Founded | 1994 | 2013 |
Overview
What it is
Zeek
What does Zeek do? It covers file hash extraction and high-speed packet capture. See typical use cases, self-hosted deployment and how it compares to rivals.Corelight Sensors
What does Corelight Sensors do? It covers log streaming and zeek protocol parsing. See typical use cases, appliance or cloud deployment and how it compares to rivals.Product type
Zeek
Open-Source Network Security Monitoring & Behavioral Analysis EngineCorelight Sensors
High-Performance Network Security Sensor AppliancesBest for
Zeek
Cybersecurity, SOC Teams, Network Engineering, Defense, Research, TelecomCorelight Sensors
Enterprise SOC, Data Centers, Telecommunications, Financial, DefensePricing
Pricing model
Zeek
Contact VendorCorelight Sensors
Contact VendorFree trial
Zeek
Free trial: yesCorelight Sensors
Free trial: yesDeployment
Deployment options
Zeek
CloudOn-Premise
Corelight Sensors
CloudOn-Premise
Deployment details
Zeek
Open Source; Self-hosted Software; Self-hosted Software Engine; Hardened Appliance; Cloud Virtual SensorCorelight Sensors
Hardware Appliances; Virtual; Cloud AMI; Hardware appliances; Virtual appliances; Cloud AMIsData residency
Zeek
Customer Infrastructure Dependent (Completely Self-Contained)Corelight Sensors
On-premises; Customer Cloud VPCsKey features
What it offers
Zeek
- Stateful network protocol analysis
- Structured transaction logging (HTTP/DNS/TLS)
- File hash extraction
- Event-driven domain scripting language
- High-speed packet capture
- Network security monitoring
- Network forensic investigation
- Protocol transaction logging
Corelight Sensors
- High-capacity packet capture (1G-100G)
- Zeek protocol parsing
- Suricata signature engine
- Hardware acceleration
- Log streaming
- NDR
- Network Security
- Network Monitoring
Platform & access
API access
Zeek
API access: noCorelight Sensors
API access: yesSingle sign-on (SSO)
Zeek
SSO: noCorelight Sensors
SSO: yesRole-based access (RBAC)
Zeek
RBAC: yesCorelight Sensors
RBAC: yesMulti-tenant
Zeek
Multi-tenant: noCorelight Sensors
Multi-tenant: yesMobile app
Zeek
Mobile app: noCorelight Sensors
Mobile app: noSupported platforms
Zeek
Enterprise NetworksDatacenter FabricsMulti-Cloud VPCsMonitoring Taps
Corelight Sensors
10G/40G/100G Physical NetworksVMware ESXiKVMAWSAzure
Compliance
Zeek
BSD LicenseCommon CriteriaNetwork Standards
Corelight Sensors
FIPS 140-2Common CriteriaSOC 2 Type IIISO 27001
Integrations & coverage
Integrations
Zeek
ElasticsearchSplunkSuricataKafkaArkimeWiresharkCorelight
Corelight Sensors
Corelight Fleet ManagerSplunkMicrosoft SentinelKafkaAWS
Industries
Zeek
CybersecuritySOC TeamsNetwork EngineeringDefenseResearchTelecom
Corelight Sensors
Enterprise SOCData CentersTelecommunicationsFinancialDefense
Regions
Zeek
Global
Corelight Sensors
GlobalUSEU
Vendor
Company
Zeek
ZeekCorelight Sensors
CorelightHeadquarters
Zeek
Berkeley, California, USACorelight Sensors
San Francisco, California, USACompany size
Zeek
1-10Corelight Sensors
201-500Founded
Zeek
1994Corelight Sensors
2013