Corelight Reviews

Embedded IDS from Suricata is highly valued. Quick deployment and ease of use are frequently mentioned. Corelight offers great visibility and comprehensive data including proactive defense and forensics. Users appreciate its low-cost, open-source nature with Zeek code. It easily tracks traffic and integrates with multiple threat feeds, simplifying analysis. The ease of creating dashboards for specific tasks is also highlighted.

• "It's easy to create additional dashboards specific to supporting specific tasks."
• "It's an easy way for us to get visibility in a client's environment."
• "It is easy to deploy and easy to handle."

Corelight's high cost and lack of a graphical user interface are main concerns. The architecture is complex and difficult to understand, leading to increased pricing. Users seek a unified platform with improved interactivity and easier feature access. Despite initial disappointment with the absence of machine learning-based detection, it's understood that this feature might inflate costs without substantial benefit. Recent updates, such as Smart PCAP and service catalogs, show progress but more frequent feature additions are desired.

• "The solution’s architecture is complex and difficult to understand. There are multiple machines and VMs."
• "Corelight hasn’t added features in a long time."
• "They can enhance the interface of the product. They can make it more interactive and also easier to use for feature access."