Overall experience with
How helpful reviews are selected
Critical Review
Product: Corelight Open NDR Platform
Challenges With Centralized Management In Multi-Environment Deployments Of Sensor Networks
Likes and dislikes about
likes
The data fidelity is unmatched. The fact that it is built on Zeek and Suricata means I can see exactly why a detection fired. I'm a big fan of the Smart Pcap feature, being able to pull only the relevant packets for a specific flow without wading through terabytes of noise, it's been a massive time saver for my team. Also, the ability to write custom Zeek scripts to hunt for very specific TTPs in our environment gives us a level of flexibility that you just don't get with other platforms.
February 12, 2026
dislikes
The lack of having fully centralized operational management in environments with a large number of sensors deployed across multiple environments
December 18, 2025
This service may contain translations provided by Google. Google disclaims all warranties related to the translations, express or implied, including any warranties of accuracy, reliability, and any implied warranties of merchantability, fitness for a particular purpose and noninfringement. Gartner's use of this provider is for operational purposes and does not constitute an endorsement of its products or services.