SAN FRANCISCO, Jan. 22, 2018 (GLOBE NEWSWIRE) -- Corelight, provider of the most powerful network visibility solution for cybersecurity, today announced record growth in 2017 and that it now has 10 of the Fortune 200 as customers. The growth is attributed to increasing demand for its enterprise solution built on battle-hardened open source software.

“We see attacks growing more sophisticated, and their consequences more severe. Corelight aims to level the playing field, by helping incident responders and threat hunters defend their organizations much more effectively,” said Greg Bell, CEO of Corelight.

This January Corelight has been listed as a Vendor to Watch in Gartner’s 2018 Magic Quadrant for Intrusion Detection and Prevention Systems.1 As Gartner stated in the report, “Startups in recent years have taken advantage of a historical problem with IDPS: event fatigue. New startups are using IDS engine technology, like Snort / Suricata / Bro IDS, and are feeding this telemetry into advanced analytics and machine learning engines, which has proven effective in reducing event fatigue. This is a disruptor in this market, and Gartner expects this trend to continue.”

“With Corelight, the ability to track lateral movement in your network skyrockets,” said Ken Hanson, Sr. Security Engineer at Education First, a global education services company with more than 40,000 employees. “It’s like Google, but for your network traffic. Our average time to resolve security incidents has dropped from three hours to under 10 minutes with Corelight.”

2017 Corelight highlights include:

  • Announcing $9.2 million funding in a Series A growth round led by Accel Partners, with participation from Osage University Partners and Riverbed Technology Co-founder Dr. Steve McCanne
  • Growing the team from five to 30 employees, including VP of Engineering Eddie Tsiao, VP of Sales Steve Mallard, CMO Alan Saldich, VP of Customer Success Dr. Steve Smoot and VP of Finance Russ Keefe
  • Signing on dozens of new customers including 10 of the Fortune 200 (7 are Fortune 50) along with a host of government agencies and research universities
  • Shipping the Corelight Sensor, the company’s first product that is like a “flight data recorder” for the network because users can easily go back in time to quickly understand sophisticated cyber attacks more effectively than ever before
  • Adding a continual stream of new sensor features and functionality in 2017, including custom scripting, advanced log filtering, high performance file extraction and integration with Splunk, Amazon S3 and Kafka
  • A paper “Detecting Credential Spear Phishing Attacks in Enterprise Settings” co-authored by Corelight co-founder and Chief Scientist Vern Paxson winning Facebook’s Internet Defense Prize at the USENIX Security Symposium
  • Moving from its origins at ICSI in Berkeley to a new headquarters in San Francisco

“2017 was a fantastic year for our company. Headcount doubled twice, and we saw gratifying market acceptance of our product in all kinds of organizations, including some of the world’s largest enterprises,” said Greg Bell. “As we enter 2018, our entire team is excited to broaden our product offerings and tackle bigger opportunities,” said Vern Paxson.

1 Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner's research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.

About Corelight
Corelight delivers the most powerful network visibility solutions for information security professionals, helping them understand network traffic to detect, stop and remediate cyber attacks. Corelight built its first solution incorporating Bro, the powerful and widely-used open source framework that provides wide-ranging real-time understanding of the traffic on the network. Its first product, the Corelight Sensor, is an appliance that provides detailed information organized in ways to help users understand network traffic deeply and take action to stop and prevent cyber attacks. The company has been supported by an SBIR grant, and the Bro project was initially funded by the National Science Foundation (NSF) at the International Computer Science Institute (ICSI). Corelight is based in San Francisco, CA. For more information, visit or follow @corelight_inc.

Media and Analyst Contact:
Amber Rowland