Corelight / PRNewswire · Jul 2026
Corelight appointed Amanda Berger chief customer officer to lead customer success and expansion as the company scales its AI-SOC platform.
Company research
Public company, workplace, funding, and market signals
Updated Aug 2, 2026
Overview
Corelight is a privately held, open-core cybersecurity company that turns network and cloud activity into high-fidelity evidence for threat detection, investigation, threat hunting, and AI-assisted SOC workflows. It was incorporated in 2016 by the creators of Zeek and serves large enterprises, government agencies, and research universities in more than 15 countries. [Corelight About; Corelight newsroom]
Primary product
Corelight Open NDR Platform: an evidence-first Network Detection and Response platform built around Zeek and Suricata, with cloud/software/virtual/physical sensors, network detection, investigation, threat hunting, packet capture, encrypted-traffic analytics, machine learning, scalable search, and Agentic AI capabilities.
Founded
2016
Headquarters
San Francisco, California, United States (548 Market St, PMB 77799, San Francisco, CA 94104-5401)
Team size
201–500; third-party estimates range approximately 300–420
Work style
Remote
Industry
Computer and network security / cybersecurity
Sub-industry
Network Detection and Response (NDR), network security monitoring, threat hunting, security analytics
Offices
San Francisco, California, United States
Vienna, Virginia, United States
London, United Kingdom
Dubai, United Arab Emirates
Sydney, Australia
Worthington, Ohio, United States
Business model
Enterprise B2B cybersecurity software and SaaS
Open-core commercial model built around the Zeek open-source ecosystem
Subscription/platform licensing for cloud and hosted services
On-premises, virtual, software, and appliance sensor deployments
Professional services, support, training, and partner/channel sales
Funding
Stage
Series E / late-stage private company
Total raised
$309.2M
Latest round
Series E · Apr 2024
Latest amount
$150M
Apr 2024 · Accel
Dec 2021
Sep 2021 · Energy Impact Partners
Oct 2019 · Insight Partners
Sep 2018 · General Catalyst
Jul 2017 · Accel
Dec 2015 · National Science Foundation
People & investors
Leadership
Chief Executive Officer
Co-Founder & Chief Scientist
Co-Founder & Chief Strategy Officer
Robin Sommer
Co-Founder
Amanda Berger
Chief Customer Officer
Steve Smoot
Chief Technology Officer
Russ Keefe
Chief Financial Officer
Bernard Brantley
Chief Information Security Officer
Vice President, Product / VP Product Management
Strategist and Author in Residence
Founders
Co-Founder and Chief Strategy Officer
Co-Founder
Co-Founder and Chief Scientist
Seth Hall
Co-Founder
Work & culture
Corelight describes a distributed, remote-first culture centered on “Low ego results,” “Applied curiosity,” and “Tireless service,” with emphasis on diversity of background and thought, collaboration, open-source community, cyber defense, volunteering, ERGs, and sustainable employee fulfillment.
Work style
Remote
Compensation
Public job and benefits material confirms equity may be offered and some sales roles use commission/variable compensation; third-party compensation reporting describes competitive base pay and benefits but variable-pay reliability and pay alignment as potential concerns. Role-specific salary bands and a company-wide compensation table were not found.
Benefits
Remote work and work-from-home stipend
Employee Resource Groups and local meetups
Quarterly or semiannual team offsites and annual company offsite
Medical, dental, and vision coverage for employees and dependents
FSA, HSA, and DCA accounts
Headspace or Calm, One Medical, virtual therapy through Talkspace, and travel insurance
401(k) matching for U.S. employees; pensions for international employees
Paid parental leave, adoption and fertility benefits through Carrot, and reservist leave
U.S. legal benefits and financial-planning resources
Service awards
Product & market
Pricing
Enterprise quote-based pricing; public list pricing was not found. Commercial packaging spans hosted/cloud services, software and virtual sensors, physical appliances, platform capabilities, support, and services.
Differentiators
- —Open-core foundation and stewardship of Zeek, a widely used open-source network-security technology
- —High-fidelity, evidence-first network telemetry rather than endpoint-only signals
- —Zeek- and Suricata-based detections plus proprietary VPN, encrypted-collection, and packet-capture capabilities
- —Coverage across physical, virtual, software, cloud, hybrid, and multi-cloud environments
- —Smart PCAP and encrypted-traffic visibility for deeper investigation
- —Integrations with Splunk, CrowdStrike, Microsoft Defender/Sentinel/Entra ID, Elastic, Google Cloud, and other SOC ecosystems
- —Agentic AI and evidence-backed investigative workflows designed to reduce analyst triage time
- —Passive asset classification and network-performance monitoring without agents or active scanning
Technology
Zeek
Suricata
YARA
Open NDR
Smart PCAP / packet capture
Encrypted-traffic analytics
Machine learning and behavioral analytics
Agentic AI / GenAI investigative playbooks
Kubernetes
Docker
Terraform
AWS Lambda
Istio
Elasticsearch
Logstash
Prometheus
Helm
React
TypeScript
GitHub
Customers
Global 2000 and Fortune 500 enterprises
Major government agencies and federal organizations
Large research universities
Financial-services organizations
Energy and critical-infrastructure organizations
Healthcare, education, and retail organizations
CrowdStrike
Mandiant
Black Hat NOC
Competitors
ExtraHop
Darktrace
Vectra AI
Cisco Secure Network Analytics
Arista Awake Security
Gigamon
Corelight-adjacent SIEM and NDR alternatives such as Splunk and Microsoft Sentinel
Scale & contact
Estimated revenue
Approximately $70M–$100M annually based on third-party estimates ($76.7M and $98.2M figures); not company-reported or audited.
Estimated monthly visits
49.7K
Latest news
Corelight / PRNewswire · Jun 2026
The Open NDR platform added passive asset classification and native network-performance monitoring, using traffic-derived evidence without agents or active scanning.
Corelight / PRNewswire · Jun 2026
Corelight’s Open NDR Platform, Investigator, and Hosted Fleet Manager were listed as FedRAMP In Process at the Class C/Moderate level.
Corelight / PRNewswire · May 2026
The company added cybersecurity executives Hatem Naguib to its board and Tenable co-founder Jack Huffard as an advisor for its next growth phase.
Corelight / PRNewswire · Mar 2026
Corelight launched Agentic Triage, new ML models for encrypted blind spots, and ecosystem integrations intended to automate repetitive SOC investigation and containment workflows.
Jobs and careers at Corelight
13 jobs at Corelight
Enterprise Account Executive - UAE
On-site
Sales
EMEA; EMEA Region
1w ago
On-site
Full-time
DoD SkillBridge Opportunities at Corelight
On-site
Sales
North America; North America Region
2w ago
On-site
Full-time
Military & Veteran Talent Opportunities
On-site
Sales
North America; North America Region
2w ago
On-site
Full-time
Sr. Escalations Engineer
On-site
Customer Success
Australia; Sydney, New South Wales, Australia
2w ago
On-site
Full-time
Sr. Director, Product Marketing
On-site
Marketing
United States; North America Region
1mo ago
On-site
Full-time
Sr. Sales Engineer - SLED Central
On-site
Sales
North America
1mo ago
On-site
Full-time
Lead Software Engineer (Frontend) Fleet
On-site
Engineering
North America
1mo ago
On-site
Full-time
Strategic Account Executive - NA WEST
On-site
Sales
North America
1mo ago
On-site
Full-time
Enterprise Account Executive - NA East
On-site
Sales
North America
1mo ago
On-site
Full-time
Strategic Account Executive - Central
On-site
Sales
Dallas, Texas
1mo ago
On-site
Full-time
Enterprise Account Executive - NorCal
On-site
Sales
North America
1mo ago
On-site
Full-time
Enterprise Account Executive - SoCal
On-site
Sales
North America
1mo ago
On-site
Full-time
Account Development Representative (Join our Talent Community)
On-site
Sales
North America
3mo ago
On-site
Full-time