Corelight Due Diligence

Run due diligence on Corelight: check compliance and get alerts when suppliers change.

United States · corelight.com · 22 vendors

Corelight provides an Open Network Detection and Response (NDR) platform that transforms network and cloud activity into definitive evidence for security teams. The company's solutions help organizations proactively hunt for threats, accelerate incident response, and gain comprehensive network visibility, leveraging open-source technologies like Zeek and Suricata, and integrating AI-driven analytics.

Resilience scores

Technology vendors

Services catalogue

5 services in catalogue across 1 category; runs on 22 sub-vendors.

Insights

Last updated 2026-10-23 · revision 10

22 direct vendors, 249 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Compliance

4 in-scope frameworks identified; showing 3.

SOC 2 (source) — Evidence found

Evidence: https://corelight.com/trust-and-compliance

GDPR (source) — No public evidence

Evidence: https://corelight.com/trust-and-compliance, https://corelight.com/contact

ISO 27001 (source) — Evidence found

Evidence: https://corelight.com/trust-and-compliance

Financials

Three-year financials

Financial Resilience Score: 7/10

Corelight is a late-stage, venture-backed private US cybersecurity company that has raised an estimated $300M+ in cumulative equity funding across Series A through E. While the company does not publicly disclose revenue, EBIT, or equity figures, qualitative indicators point to solid financial resilience. The company benefits from a Tier-1 investor syndicate including Accel, General Catalyst, Insight Partners, CrowdStrike Falcon Fund, Cisco Investments, and Capital One Ventures, providing both capital and strategic customer/channel access. Corelight operates a recurring-revenue subscription model typical of NDR vendors, supporting predictable ARR. The company has been recognized as a Leader in the 2025 Gartner Magic Quadrant for NDR and the 2025 Forrester Wave for Network Analysis & Visibility, reducing sales-cycle friction with large enterprises. Reference customers span financial services, energy, healthcare, federal/government, and large retail verticals. However, like most late-stage cybersecurity growth companies, Corelight is likely operating at a loss and dependent on external funding for runway. The hybrid hardware-and-software model lowers gross margins versus pure-SaaS competitors, and the NDR market is crowded with well-funded competitors including ExtraHop, Vectra AI, Darktrace, Cisco, CrowdStrike, and Palo Alto Networks. The company has not yet IPO'd despite being founded in 2013, creating potential liquidity pressure for late-stage investors.

Key strengths: Tier-1 VC and strategic investor syndicate (Accel, General Catalyst, Insight Partners, CrowdStrike Falcon Fund, Cisco Investments, Capital One Ventures), Recurring subscription revenue model supporting predictable ARR, Leader in 2025 Gartner Magic Quadrant for NDR and Forrester Wave for NAV, Estimated $300M+ in cumulative equity funding across Series A-E, Open-source moat built on Zeek framework with original Zeek maintainers on staff, Blue-chip customer base across federal, financial services, energy, healthcare verticals, Strategic partnerships with CrowdStrike, Microsoft, and Splunk

Risk factors: Likely operating at a loss with dependence on external funding for runway, Hybrid hardware/software model lowers gross margins vs pure-SaaS competitors, Crowded competitive set including ExtraHop, Vectra AI, Darktrace, Cisco, CrowdStrike, Palo Alto Networks, No IPO yet despite being founded in 2013 - liquidity pressure on late-stage investors, Federal-government exposure vulnerable to US cybersecurity budget reprioritization, No publicly disclosed financials limiting transparency, Persistent pricing pressure in NDR market

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report