The product
by Corelight
Open source network security monitoring tool for traffic analysis
The closest Corelight Zeek alternatives are Exabeam NetMon, Stamus Networks Clear NDR and Absolute Insights for Network. Picking a Corelight Zeek alternative comes down to fit: Network Detection and Response coverage, your environment, your integrations and your budget. So each option below shows what it covers, how it deploys, its pricing model and the company behind it.
44 alternativesClosest matches: Exabeam NetMon, Stamus Networks Clear NDR, Absolute Insights for NetworkPage updated Nov 2026
The product
by Corelight
Open source network security monitoring tool for traffic analysis
Corelight Zeek is a free Network Detection and Response solution made by Corelight. The closest matches by shared tags and NIST CSF 2.0 coverage are Exabeam NetMon, Stamus Networks Clear NDR, Absolute Insights for Network, ManageEngine NetFlow Analyzer, and Array NTB Series. All 44 alternatives on this page are ranked the same way.
These 8 solutions overlap most with Corelight Zeek. Each row says what the product does and, when the overlap is big enough, which capabilities it shares.
Network monitoring and detection solution for threat analysis
Key features: 4 listed. See them on the Exabeam NetMon page.
View Exabeam NetMonExabeam NetMon alternativesCorelight Zeek vs Exabeam NetMon
Network detection and response platform for threat detection and analysis
Key features: 10 listed. See them on the Stamus Networks Clear NDR page.
View Stamus Networks Clear NDRStamus Networks Clear NDR alternativesCorelight Zeek vs Stamus Networks Clear NDR
Digital experience monitoring for network, device, and app performance
Key features: 10 listed. See them on the Absolute Insights for Network page.
View Absolute Insights for NetworkAbsolute Insights for Network alternativesCorelight Zeek vs Absolute Insights for Network
Flow-based network traffic monitoring and bandwidth analysis tool
Key features: 10 listed. See them on the ManageEngine NetFlow Analyzer page.
View ManageEngine NetFlow AnalyzerManageEngine NetFlow Analyzer alternativesCorelight Zeek vs ManageEngine NetFlow Analyzer
Network traffic broker for visibility, monitoring, and traffic optimization
Key features: 10 listed. See them on the Array NTB Series page.
View Array NTB SeriesArray NTB Series alternativesCorelight Zeek vs Array NTB Series
Network traffic analysis tool for real-time intrusion detection and monitoring
Key features: 10 listed. See them on the TEHTRIS NTA page.
View TEHTRIS NTATEHTRIS NTA alternativesCorelight Zeek vs TEHTRIS NTA
Qualified network TAPs for traffic duplication and network monitoring
Key features: 10 listed. See them on the Gatewatcher TAP Qualifié page.
View Gatewatcher TAP QualifiéGatewatcher TAP Qualifié alternativesCorelight Zeek vs Gatewatcher TAP Qualifié
Real-time network security monitoring for threat detection using DPI and sandbox
Key features: 10 listed. See them on the Viettel VCS-NSM page.
View Viettel VCS-NSMViettel VCS-NSM alternativesCorelight Zeek vs Viettel VCS-NSM
Network monitoring and detection solution for threat analysis
Network detection and response platform for threat detection and analysis
Digital experience monitoring for network, device, and app performance
Flow-based network traffic monitoring and bandwidth analysis tool
Network traffic broker for visibility, monitoring, and traffic optimization
Network traffic analysis tool for real-time intrusion detection and monitoring
Qualified network TAPs for traffic duplication and network monitoring
Real-time network security monitoring for threat detection using DPI and sandbox
TLS/SSL decryption for network traffic visibility and security analysis
Flow-based network monitoring platform for performance and security visibility
Network visibility and security insights platform for IT environments
DNS-layer network visibility and monitoring with query logging and analytics
TLS decryption solution that extracts session keys from memory for traffic inspection
Modular network observability platform for packet brokering, capture & analytics.
Polish NDR appliance for network threat detection, forensics & GDPR compliance.
Passive network intelligence platform for gov/defense with real-time visibility.
Flow load balancer for distributing & filtering NetFlow records to collectors.
Network intelligence platform for detecting, and responding to security incidents
Network security monitoring platform with IDS, PCAP capture, and asset discovery.
Enterprise network monitoring via deep packet inspection & traffic classification.
Flow-based network security monitoring tool using anomaly detection.
Network defense platform with real-time content inspection & threat blocking
Protocol-layer network fingerprinting suite for bot, proxy & malware detection.
AI-driven network security platform for MSPs serving SMBs.
Passive copper TAP range for non-intrusive Ethernet traffic monitoring.
Bypass TAP/packet broker hybrid for before-and-after inline tool traffic analysis.
Managed NDR solution delivering network threat hunting via passive traffic metadata.
NDR platform fusing network traffic with identity, endpoint & cloud signals.
Network detection and response platform for IT, IoT, and OT threat monitoring
Network probe providing traffic visibility and analysis via NetFlow and IPFIX protocols
DDI platform with DNS security, DHCP, and IPAM for enterprise networks.
Plug&play NDR for internal network visibility across IT, OT, IoT, medical
AI-driven NDR platform detecting threats across network, identity, and cloud
NDR solution providing network visibility, threat detection, and intrusion prevention
Security controller for policy mgmt, orchestration & log management
AI-powered threat detection platform using self-supervised learning for NDR
NDR platform with NGIPS, NetFlow/sFlow analysis, SIEM, and correlation engine
NDR solution with threat intelligence, PCAP analysis, and SOC services
WDR platform for Wi-Fi security protecting IT/OT assets wirelessly
A network detection and response solution that uses AI and machine learning to monitor network traffic, identify malicious behavior, and connect related security events to reveal attack patterns without requiring endpoint agents.
Network detection and response system for threat detection and analysis
Cloud-native NDR with AI-based threat detection for SMBs
NDR platform for threat detection and response via network traffic monitoring
Common questions when weighing alternatives to Corelight Zeek.
The closest matches to Corelight Zeek by shared tags and NIST CSF 2.0 coverage are Exabeam NetMon, Stamus Networks Clear NDR, Absolute Insights for Network, ManageEngine NetFlow Analyzer, and Array NTB Series. All of them are Network Detection and Response products.
This page shows 44 alternatives to Corelight Zeek, all in the Network Detection and Response category. Each one is matched on shared tags and NIST CSF 2.0 areas, and the closest matches rank first.
Corelight Zeek is a free Network Detection and Response product. You can use it at no cost. Only commercial alternatives are listed here. Free and open source products are under /free.
Corelight Zeek is a Network Detection and Response product in the Network Security category. You can compare it with the 44 other Network Detection and Response products on this page.
No Network Detection and Response shortlist yet. This is the closest one.
Updated 2026-11-02
See the shortlist
