List of Corelight NDR Customers
San Francisco, 94104, CA,
United States
Since 2010, our global team of researchers has been studying Corelight NDR customers around the world, aggregating massive amounts of data points that form the basis of our forecast assumptions and perhaps the rise and fall of certain vendors and their products on a quarterly basis.
Each quarter our research team identifies companies that have purchased Corelight NDR for Network Detection and Response (NDR) from public (Press Releases, Customer References, Testimonials, Case Studies and Success Stories) and proprietary sources, including the customer size, industry, location, implementation status, partner involvement, LOB Key Stakeholders and related IT decision-makers contact details.
Companies using Corelight NDR for Network Detection and Response (NDR) include: Carrefour France, a France based Retail organisation with 80000 employees and revenues of $46.02 billion, EF Education First, a Switzerland based Professional Services organisation with 52000 employees and revenues of $11.00 billion, Grand Canyon Education, a United States based Professional Services organisation with 4068 employees and revenues of $1.02 billion and many others.
Contact us if you need a completed and verified list of companies using Corelight NDR, including the breakdown by industry (21 Verticals), Geography (Region, Country, State, City), Company Size (Revenue, Employees, Asset) and related IT Decision Makers, Key Stakeholders, business and technology executives responsible for the software purchases.
The Corelight NDR customer wins are being incorporated in our Enterprise Applications Buyer Insight and Technographics Customer Database which has over 100 data fields that detail company usage of software systems and their digital transformation initiatives. Apps Run The World wants to become your No. 1 technographic data source!
Apply Filters For Customers
| Logo | Customer | Industry | Empl. | Revenue | Country | Vendor | Application | Category | When | SI | Insight | Insight Source |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
 |
Carrefour France | Retail | 80000 | $46.0B | France | Corelight | Corelight NDR | Network Detection and Response (NDR) | 2023 | n/a | In 2023, Carrefour France deployed Corelight NDR to expand network visibility across its highly distributed retail footprint, leveraging Network Detection and Response (NDR) capabilities to increase detection coverage for lateral movement and ransomware. The deployment was led by Carrefours Security Operations Center, which implemented Corelights Open NDR to surface richer network telemetry across store networks and partner interconnections. Corelight NDR was configured to collect and normalize network session metadata and contextualized logs, supporting detection workflows focused on lateral movement and ransomware behavior. The implementation emphasized sensor-level telemetry aggregation and centralized analysis to enable proactive threat hunting, faster triage, and accelerated investigation workflows. Operational coverage extended across Carrefour Frances distributed retail sites and partner links, with the SOC consuming NDR outputs to drive hunting and incident handling. The deployment was integrated into existing SOC workflows and incident response processes to ensure that network-derived detections and evidence were actionable during investigations. Governance and process changes accompanied the technical rollout, with the SOC shifting from a primarily reactive alert posture to routine proactive threat hunting using Corelight NDR outputs. The implementation delivered expanded detection coverage for lateral movement and ransomware and enabled the SOC to accelerate investigations, per the reported case details. | |
 |
EF Education First | Professional Services | 52000 | $11.0B | Switzerland | Corelight | Corelight NDR | Network Detection and Response (NDR) | 2023 | n/a | In 2023 EF Education First deployed Corelight NDR, Network Detection and Response (NDR), across multiple business sites in the Americas and the European Union to establish comprehensive, pivotable network evidence for its security operations center. The rollout was executed by EF's SOC team with a distributed sensor footprint to capture site level network telemetry and preserve forensic evidence for investigation and hunting. Corelight NDR was implemented via Corelight Sensors positioned at key network observation points, providing session level network metadata and raw traffic evidence to support incident validation and proactive threat hunting workflows. The implementation emphasized evidence capture and queryability, enabling analysts to pivot from alerts into deeper network context and investigative trails. Captured network evidence was consolidated into the SOC analysis and incident investigation workflows, enabling centralized access for threat analysts and faster alert validation across regional security operations. The deployment covered security operations, threat hunting, and incident response functions, aligning network detection and response capabilities with EF's operational security needs across Americas and the European Union. Operational changes included centralizing network evidence access for investigations and shifting SOC capacity toward proactive hunting and validation activities. The implementation reportedly reduced average incident response time by approximately 95 percent and unlocked SOC capacity for proactive threat hunting and faster alert validation. | |
 |
Grand Canyon Education | Professional Services | 4068 | $1.0B | United States | Corelight | Corelight NDR | Network Detection and Response (NDR) | 2023 | n/a | In 2023, Grand Canyon Education deployed Corelight NDR in its US-based shared-services environment to strengthen network visibility and evidence-based detection. Corelight NDR, classified as Network Detection and Response (NDR), was introduced by the security team to move away from a black-box approach and to surface richer network telemetry for security operations and incident response. The implementation emphasized Corelight's Open NDR capabilities for high-fidelity telemetry ingestion and evidence-based detections, enabling analysts to access raw network evidence alongside alerting. Configuration work focused on instrumenting network sensors across the shared-services network, tuning detection rules for the institutional environment, and operationalizing logs and telemetry for triage and forensic workflows. These functional capabilities were aligned to accelerate incident investigation and to increase detection confidence within security operations. Operational coverage targeted US-based shared-services sites and the central security operations function, with the security team leveraging Corelight NDR outputs to drive incident response workflows. During proof-of-concept testing the Corelight NDR deployment surfaced command-and-control activity that the prior black-box approach missed, and the production rollout accelerated incident response and improved detection confidence across monitored business functions. |
Buyer Intent: Companies Evaluating Corelight NDR
Discover Software Buyers actively Evaluating Enterprise Applications
| Logo | Company | Industry | Employees | Revenue | Country | Evaluated | ||
|---|---|---|---|---|---|---|---|---|
| No data found | ||||||||