Corelight extends open NDR platform with new software sensor

Corelight extends open NDR platform with new software sensor



Corelight today released new capabilities that provide users with greater network security visibility and the ability to support advanced threat analysis across their entire environment, from physical to cloud. Corelight’s new Software Sensor and Corelight Cloud Sensor for Google Cloud Platform (GCP) deliver comprehensive security insights into network traffic on any platform.  


“Organizations today are faced with the challenge of limited visibility across distributed locations, or they have built their network infrastructure in the cloud using Google Cloud or other platform providers,” said Vijit Nair, senior director of product management for Corelight. “With the Corelight Software Sensor and Corelight Cloud Sensor for GCP, customers can now confidently normalize their network visibility across all platforms and truly benefit from Corelight ‘anytime, anywhere.’” 


The Corelight Software Sensor is a lightweight standalone application, which can be deployed on any Linux platform, in containers or in the cloud, and is suitable for remote branch offices or low-bandwidth sites. In addition, the Corelight Software Sensor integrates easily with, and provides streaming log support for, KafkaJSONSplunkREDIS, and syslog


The Corelight Cloud Sensor for GCP brings high-performance Zeek monitoring to the cloud, making it possible to ingest traffic directly from GCP Packet Mirroring for compute or Kubernetes instances, or from third-party agents. In addition,  corelight extends platform software sensor