Corelight Recognized as an Outperforming Leader in the 2025 GigaOm Radar for Network Detection and Response (NDR) Solutions v3

Key findings from the report:

• Deep packet inspection (DPI) allows NDR solutions to analyze both packet headers and payloads, providing granular visibility into network traffic. This capability is crucial for detecting sophisticated threats hidden within seemingly benign traffic.
• Encrypted traffic analysis allows NDR solutions to detect threats within encrypted network traffic without decrypting it. This capability is essential for maintaining data privacy while still identifying potential security risks in an increasingly encrypted network landscape.
• Historical forensics capabilities enable NDR solutions to store and analyze historical network data for post-incident investigation and threat hunting. This feature is crucial for understanding the full scope of security incidents and identifying long-term patterns of malicious activity.
• This GigaOm Radar report examines 29 of the top NDR solutions, providing an overview of the market, identifying leading NDR offerings, and helping decision-makers evaluate these solutions to make a more informed investment decision.

Why our customers choose Corelight

The GigaOm Radar evaluates vendors based on several criteria, including technical capabilities and business impact. Corelight's strengths in the Innovation/Platform Play quadrant of the NDR Radar are reflected in several key capabilities:

• Deep Packet Inspection: Corelight Open NDR utilizes Zeek and Suricata to transform raw packet data into structured network evidence, exposing subtle indicators of compromise such as command-and-control channels.
• Encrypted Traffic Analysis: Employs JA3 and JA3S TLS fingerprinting to detect encrypted threats without decryption, with integration options for selective decryption through partner products.
• Historical Forensics: Innovative SmartPCAP technology captures investigation-relevant packets for extended forensic windows, supporting up to seven years of historical data storage and fast querying.