No more typing reviews! Try our Samantha, our new voice AI agent.

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the report

Prominent pros & cons

PROS

Corelight Open NDR provides extensive visibility by using the Suricata engine to scan large volumes of traffic, uncovering unexpected signatures and exposures.
It significantly improves cybersecurity positions for clients.
Corelight Open NDR enables quick remediation of cyber attacks through correlated metrics for efficient data pivoting.
It is deployed and handled with ease.
The most valuable feature is the embedded IDS from Suricata.

CONS

Before Corelight Open NDR recently integrated agentic features, querying was challenging, depending on log scale expertise.
Machine learning enhancements are costly.
Corelight Open NDR hasn't added features in a long time.
The architecture is complex, involving multiple machines and VMs.
Corelight Open NDR is expensive, and the price could be reduced.
 

Corelight Open NDR Pros review quotes

reviewer2834367 - PeerSpot reviewer
Growth And Strategy Lead at a computer software company with 51-200 employees
Apr 29, 2026
Our company has seen massive improvements in cybersecurity position for our clients.
Dan Jeske - PeerSpot reviewer
Account Executive at Fishtech Group
Aug 18, 2023
It's an easy way for us to get visibility in a client's environment.
HamadaElewa - PeerSpot reviewer
Technical Sales Manager at Spire Solutions
Feb 13, 2024
It's easy to create additional dashboards specific to supporting specific tasks.
Learn what your peers think about Corelight Open NDR. Get advice and tips from experienced pros sharing their opinions. Updated: May 2026.
896,803 professionals have used our research since 2012.
Muteb Alqahtani - PeerSpot reviewer
Manage Consultant at SITE
Jul 18, 2022
It is easy to deploy and easy to handle.
JP
Pre Sales Technician at DotForce
Aug 26, 2021
Corelight is easy to use.
it_user1356657 - PeerSpot reviewer
Chief Executive Officer at NetMetrix
Sep 27, 2020
The most valuable feature is the embedded IDS from Suricata.
 

Corelight Open NDR Cons review quotes

reviewer2834367 - PeerSpot reviewer
Growth And Strategy Lead at a computer software company with 51-200 employees
Apr 29, 2026
Before Corelight recently started pushing some of the agentic features, querying at times could be a little difficult, depending on your mastery of log scale.
Dan Jeske - PeerSpot reviewer
Account Executive at Fishtech Group
Aug 18, 2023
Corelight hasn’t added features in a long time.
HamadaElewa - PeerSpot reviewer
Technical Sales Manager at Spire Solutions
Feb 13, 2024
The solution’s architecture is complex and difficult to understand. There are multiple machines and VMs.
Learn what your peers think about Corelight Open NDR. Get advice and tips from experienced pros sharing their opinions. Updated: May 2026.
896,803 professionals have used our research since 2012.
Muteb Alqahtani - PeerSpot reviewer
Manage Consultant at SITE
Jul 18, 2022
They can enhance the interface of the product. They can make it more interactive and also easier to use for feature access.
JP
Pre Sales Technician at DotForce
Aug 26, 2021
Machine learning could be a good improvement, but it's very costly.
it_user1356657 - PeerSpot reviewer
Chief Executive Officer at NetMetrix
Sep 27, 2020
In the next release, building a graphical user interface would be helpful.