Corelight: Open Network Detection And Response Company Secures $150 Million

By Amit Chowdhry • May 3, 2024

Corelight, a leader in open network detection and response (NDR), announced it had raised $150 million in Series E investment, led by its first capital investor, Accel. Cisco Investments and CrowdStrike Falcon Fund made additional strategic investments. 

This funding round will accelerate Corelight’s AI-driven security innovation, cloud-native security capabilities, and data fusion partnerships with leading cybersecurity platforms, delivering transformative capabilities for SOC analysts and incident response teams.

Corelight is the NDR platform of choice for renowned cybersecurity services teams at CrowdStrike, Mandiant, and the Black Hat NOC at Black Hat events. Plus, Corelight’s technology and partnerships have driven them to become the industry’s fastest-growing, scaled NDR platform, with over 40% YoY ARR growth and 300% YoY growth in the company’s AI and SaaS-driven NDR solutions.


“Corelight uses the network to provide ground truth evidence of adversarial movement, and the use case for that data is unbounded. Customers and partners are broadly adopting Corelight to drive advances in AI-driven security operations, cloud visibility and detection, and next-generation SIEM platforms. We are excited to collaborate with CrowdStrike, Cisco and Accel as we continue to innovate and serve the needs of our mutual customers.”

  • Brian Dye, CEO of Corelight

“What stood out about Corelight since the early days was its unusually strong enterprise traction, battle-hardened, open-source technology, and its delighted customers. Corelight is remarkably well positioned to modernize legacy technologies and deepen technology partnerships with the most significant cybersecurity organizations and platforms around the globe.”

  • Arun Mathew, partner at Accel

“Driving visibility across hybrid and multi-cloud environments helps customers solve key security challenges and amplify the power of their cybersecurity posture.” 

  • Janey Hoe, vice president, Cisco Investments

“Next-Gen SIEM will transform how security analysts detect, investigate and respond to attacks. Third party data from Corelight’s Open NDR Platform adds valuable context to the rich telemetry of the Falcon platform. We’re excited to increase our investment in Corelight, extending our partnership.”

Gur Talpaz, vice president of corporate development at CrowdStrike and head of Falcon Fund