Best Corelight: Evidence-Based NDR and Threat Hunting Platform alternatives and competitors

Valitrix

Valitrix is a continuous Breach & Attack Simulation platform that validates your security controls across endpoint, email, network, and AI surfaces — every test mapped to the MITRE ATT&CK framework.

Gatewatcher NDR Platform

See the product page for description, features, and integrations.

TLS Fingerprinting

TLS Fingerprinting on SecurityListing: A technique to associate applications with TLS parameters for identifying malware and vulnerable applications.

Exeon NDR

Exeon NDR on SecurityListing: AI-powered NDR platform with UEBA for threat detection and network visibility

Arkime

Arkime on SecurityListing: Arkime is an open-source network capture and analysis tool that provides comprehensive network visibility, facilitating swift identification and resolution of security and network issues.

Stamus Networks Clear NDR

Stamus Networks Clear NDR on SecurityListing: Network detection and response platform for threat detection and analysis

LogRythm NetMon

LogRythm NetMon on SecurityListing: LogRhythm NetMon is a network traffic analytics tool that provides real-time visibility, automated threat detection, and investigation capabilities for organizational networks.

Corelight Zeek

Corelight Zeek on SecurityListing: Open source network security monitoring tool for traffic analysis

Lumifi Network Detection & Response (NDR)

Lumifi Network Detection & Response (NDR) on SecurityListing: Managed NDR service monitoring network traffic for threats via co-managed model

RedBorder Cybersecurity

RedBorder Cybersecurity on SecurityListing: NDR platform with NGIPS, NetFlow/sFlow analysis, SIEM, and correlation engine

Stamus Clear NDR Community

Stamus Clear NDR Community on SecurityListing: Open source Suricata-based NDR system with threat detection and analysis

Exeon Exeon.NDR

Exeon Exeon.NDR on SecurityListing: AI-driven NDR platform for detecting APTs and network threats in hybrid envs

Logpoint NDR

Logpoint NDR on SecurityListing: A network detection and response solution that uses AI and machine learning to monitor network traffic, identify malicious behavior, and connect related security events to reveal attack patterns without requiring endpoint agents.

IronNet IronDefense

IronNet IronDefense on SecurityListing: Network detection and response platform for threat detection and visibility

Stamus Clear NDR

Stamus Clear NDR on SecurityListing: Network Detection and Response system for threat detection and response

PF_RING

PF_RING on SecurityListing: High-speed packet capture library with user-level network socket.

PF_RING ZC (Zero Copy)

PF_RING ZC (Zero Copy) on SecurityListing: High-performance packet capture library with zero copy functionality.

Sniff

Sniff on SecurityListing: Makes output from the tcpdump program easier to read and parse.

ThreatBook Threat Detection Platform (TDP)

ThreatBook Threat Detection Platform (TDP) on SecurityListing: Network detection and response platform with threat intel fusion and automation

tcpdump

tcpdump on SecurityListing: Tcpdump is a command-line packet analyzer for capturing and analyzing network traffic.

Tstat

Tstat on SecurityListing: Passive sniffer tool for analyzing traffic patterns.

tcptraceroute

tcptraceroute on SecurityListing: A TCP-based traceroute implementation that bypasses firewall filters to trace the path to a destination.