Corelight Investigator vs Corelight Open NDR Platform: side-by-side comparison (2026)

Corelight Investigator: SaaS-based NDR platform for threat investigation and Tier 1 workflows. Built by Corelight.

Corelight Open NDR Platform: Network detection and response platform with IDS, NSM, and threat intel. Built by Corelight.

The table above shows where their features, integrations, deployment and company size fit differ.

Corelight Investigator is made by Corelight. Corelight Open NDR Platform is made by Corelight. The vendor behind a product decides its roadmap, support, and longevity, so check each company's profile before you commit.

Often, yes. Corelight Investigator and Corelight Open NDR Platform are both Network Detection and Response products, and both cover YARA, Network Monitoring. Use the table above to see where features, deployment and company size fit differ.