Corelight Enhances Open NDR for AI Threat Detection

Corelight announced an expansion of its Open NDR platform on June 17, 2026, to include native network performance monitoring and passive asset classification. This enhancement aims to provide security teams with improved visibility over assets and AI services, crucial for defending against AI-powered threats that can exploit vulnerabilities faster than traditional patching methods. The updated platform utilizes a Zeek-based analysis engine to continuously classify every communicating asset, including unmanaged devices and unauthorized AI tools. This development addresses the limitations of conventional endpoint controls and patching strategies, which are now deemed insufficient in the face of advanced AI-driven attacks. Corelight's solution aims to close visibility gaps, ensuring that organizations can detect and respond to potential threats effectively. The platform's capabilities are designed to help organizations prioritize their defenses based on real-time evidence of active attacks.

Key Points: • Corelight's Open NDR platform now includes passive asset classification and monitoring. • The update addresses AI-driven threats that can exploit vulnerabilities faster than patches. • Visibility into all network assets is crucial for effective cybersecurity in the current landscape.