{"id":"FR2621342703","name":"Corelight Open NDR Platform","provider":"Corelight","providerSlug":"corelight","status":"Agency In Process","impact":"Moderate","authType":"Agency","serviceModel":["SaaS"],"deployment":"Hybrid Cloud","businessFunctions":["Analytics","Artificial Intelligence (AI)","Cybersecurity & Risk Management","Data Management","Network Management","Operations Management","System Administration"],"assessor":"Fortreum, LLC","assessorId":"201664","smallBusiness":false,"website":"https://corelight.com/ ","description":"Corelight Open NDR is delivered as a SaaS offering using a multi-\ntenant SaaS cloud computing environment. It is an open, evidence-\nbased Network Detection and Response platform built on community-\ndriven open-source technologies like Zeek and Suricata, designed to\nprovide comprehensive network visibility, detect advanced threats\nusing multi-layered analytics (AI/ML, behavioral, signatures), and\naccelerate incident response by generating enriched, forensic-grade\nnetwork telemetry.\n\nOpen NDR focuses on providing open core and open data for\nflexibility, customization, and seamless integration with existing\nsecurity tools like SIEM, EDR, and XDR. It is available to federal\ngovernment agencies, as well as government contractors etc.).","logo":"https://www.fedramp.gov/assets/img/logos/CSP_logos/Corelight%20Logo.png","inMarketplace":true,"agencies":[],"reuseCount":0,"leverages":[],"leveragedBy":[],"timeline":[{"date":"2026-06-02","to":"Agency Authorization In Process","certType":"Rev5"}],"cr26":{"type":"Rev5","ocrOverdue":false,"valid":true,"findings":[{"level":"warning","message":"no UEI number; include it if you have one","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no business category listed","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no trust center link; CR26 requires one with access instructions","rule":"CDS-CSO-UTC"},{"level":"warning","message":"no link to secure configuration guidance","rule":"SCG-CSO-RSC"},{"level":"warning","message":"no next Ongoing Certification Report date","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no service list; CR26 requires the services in scope","rule":"CDS-CSO-SVC"},{"level":"warning","message":"no documentation overview (repositories) listed","rule":"CDS-CSO-PUB"}],"assessor":"Fortreum, LLC"},"trustCenterCheck":null}