No more typing reviews! Try our Samantha, our new voice AI agent.

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the report

Prominent pros & cons

PROS

Corelight Open NDR effectively provides visibility in a client's environment and positively impacts company operations.
It can scan large volumes of traffic with the Suricata engine, revealing unexpected signatures and exposures.
Deployment is easy, contributing to efficient compute and storage use.
The network evidence provided allows understanding suspicious connections without relying solely on alerts.
Corelight enables straightforward remediation through correlated metrics for quick data retrieval related to alerts or detections.

CONS

Corelight hasn't added features in a long time.
Customer support for Corelight Open NDR is very poor.
The architecture of Corelight Open NDR is complex and difficult to understand due to multiple machines and VMs.
Investigation workflows in Corelight Open NDR are difficult to understand, and team members struggle with performing them.
Corelight Open NDR is expensive and the price could be reduced.
 

Corelight Open NDR Pros review quotes

reviewer2834367 - PeerSpot reviewer
Growth And Strategy Lead at a computer software company with 51-200 employees
Apr 29, 2026
Our company has seen massive improvements in cybersecurity position for our clients.
Pranav Salian - PeerSpot reviewer
Head of Business Operations at a computer software company with 501-1,000 employees
Oct 17, 2026
The lightweight aspect and the easy deployment of Corelight Open NDR stand out to me the most because it helps save compute and storage requirements on our side.
reviewer2914821 - PeerSpot reviewer
Cyber Security Professional at a tech services company with 11-50 employees
Oct 22, 2026
The detailed network evidence that Corelight Open NDR offers helps us mainly understand suspicious connections without having to rely on separate alerts.
Learn what your peers think about Corelight Open NDR. Get advice and tips from experienced pros sharing their opinions. Updated: October 2026.
918,970 professionals have used our research since 2012.
HamadaElewa - PeerSpot reviewer
Technical Sales Manager at Spire Solutions
Feb 13, 2024
It's easy to create additional dashboards specific to supporting specific tasks.
Dan Jeske - PeerSpot reviewer
Account Executive at Fishtech Group
Aug 18, 2023
It's an easy way for us to get visibility in a client's environment.
Muteb Alqahtani - PeerSpot reviewer
Manage Consultant at SITE
Jul 18, 2022
It is easy to deploy and easy to handle.
JP
Pre Sales Technician at DotForce
Aug 26, 2021
Corelight is easy to use.
it_user1356657 - PeerSpot reviewer
Chief Executive Officer at NetMetrix
Sep 27, 2020
The most valuable feature is the embedded IDS from Suricata.
 

Corelight Open NDR Cons review quotes

reviewer2834367 - PeerSpot reviewer
Growth And Strategy Lead at a computer software company with 51-200 employees
Apr 29, 2026
Before Corelight recently started pushing some of the agentic features, querying at times could be a little difficult, depending on your mastery of log scale.
Pranav Salian - PeerSpot reviewer
Head of Business Operations at a computer software company with 501-1,000 employees
Oct 17, 2026
Customer support for Corelight Open NDR is very poor.
reviewer2914821 - PeerSpot reviewer
Cyber Security Professional at a tech services company with 11-50 employees
Oct 22, 2026
Corelight Open NDR can be improved by making its investigation workflows easier to understand. This is very concerning because on our team, no one knows how to perform these workflows.
Learn what your peers think about Corelight Open NDR. Get advice and tips from experienced pros sharing their opinions. Updated: October 2026.
918,970 professionals have used our research since 2012.
HamadaElewa - PeerSpot reviewer
Technical Sales Manager at Spire Solutions
Feb 13, 2024
The solution’s architecture is complex and difficult to understand. There are multiple machines and VMs.
Dan Jeske - PeerSpot reviewer
Account Executive at Fishtech Group
Aug 18, 2023
Corelight hasn’t added features in a long time.
Muteb Alqahtani - PeerSpot reviewer
Manage Consultant at SITE
Jul 18, 2022
They can enhance the interface of the product. They can make it more interactive and also easier to use for feature access.
JP
Pre Sales Technician at DotForce
Aug 26, 2021
Machine learning could be a good improvement, but it's very costly.
it_user1356657 - PeerSpot reviewer
Chief Executive Officer at NetMetrix
Sep 27, 2020
In the next release, building a graphical user interface would be helpful.