What is the biggest difference between Corelight and Vectra AI?

I have around ten years of experience working in the finance industry.

I am currently evaluating Corelight and Vectra AI. What is the biggest difference between the two? Which would you recommend?

Thanks! I appreciate the help.

55 Answers

author avatar
Top 20User

Corelight is a Zeek based solution for network behavior analysis and Vectra AI is a User Behavior based solution. If you are comparing these 2 systems you are comparing apples to oranges. You shouldn't be evaluating these products against each other as they address different use cases for your network. My guess is you are either looking for better network visibility and possibly network detection or you need to understand insider threats (User Behavior). If you need both then you need both tools.

author avatar
author avatar
Top 5LeaderboardReal User

Corelight. Its based on bro. Most top SIEMS using bro as engine. Corelight owns it. they develop it. Easy to deploy, amazing threat hunting, Threat detection and response. The list is endless but TCO better with Corelight as well.

author avatar
Top 10Reseller

I would recommend you look at Darktrace instead. Extrahop and the new kid on the block, Awake security are also recommended.

Find out what your peers are saying about Cisco, Darktrace, Vectra AI and others in Network Traffic Analysis (NTA). Updated: November 2020.
447,228 professionals have used our research since 2012.