Try our new research platform with insights from 80,000+ expert users

Corelight vs VMware NSX comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Aug 6, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Corelight
Ranking in Network Traffic Analysis (NTA)
7th
Ranking in Network Detection and Response (NDR)
13th
Average Rating
9.0
Reviews Sentiment
7.6
Number of Reviews
5
Ranking in other categories
No ranking in other categories
VMware NSX
Ranking in Network Traffic Analysis (NTA)
5th
Ranking in Network Detection and Response (NDR)
6th
Average Rating
8.0
Reviews Sentiment
6.8
Number of Reviews
106
Ranking in other categories
Network Virtualization (2nd), Cloud and Data Center Security (2nd), Network Automation (3rd), Microsegmentation Software (1st)
 

Mindshare comparison

As of January 2026, in the Network Traffic Analysis (NTA) category, the mindshare of Corelight is 8.0%, down from 10.5% compared to the previous year. The mindshare of VMware NSX is 2.6%, up from 1.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Network Traffic Analysis (NTA) Market Share Distribution
ProductMarket Share (%)
VMware NSX2.6%
Corelight8.0%
Other89.4%
Network Traffic Analysis (NTA)
 

Featured Reviews

HamadaElewa - PeerSpot reviewer
Technical Sales Manager at Spire Solutions
An expensive solution to monitor internet traffic with multiple dashboards
The huge library especially the open source link, makes it the main engine for Corelight with some enhancements in the commercial version. It has a very powerful level, such as signature-based attacks or behavioral attacks, with enhancements in the design. It is very flexible for intelligent implementations like IPs, especially between big companies and banks. Corelight is easy to understand and monitor what is going on behind the team. The solution is already integrated with other systems like Suricata, Elastic, and Microsoft tools. It's very easy to integrate signature-based or behavior-based engines. You can use Elastic for the dashboards to get it from Corelight, along with all the benefits and expandability.
TAIYAB HASAN - PeerSpot reviewer
Windows Redhat Linux Vmware & Azure & Cloud & Nutanix Ahv-Vmware & Backup Senior System Administrator at AlDawaa Medical Services
Has improved network visibility and security through micro-segmentation and SDN capabilities
This feature gives us flexibility and allows us to manage everything under one pane. We can see everything on one console, including network operations and behavior. Monitoring and security are among the best features for VMware NSX. For micro-segmentation, it's integrated with our endpoint security. If there are any issues with servers or VMs, it notifies us so we can isolate the servers and investigate. It provides distributed security features such as firewall and intrusion, IDS, IPS. The security level with IPS and IDS in VMware NSX is excellent. It also provides logical switching and routing which gives an extra layer for Layer 2 and Layer 3 switching requirements. The solution provides flexibility, automation, and self-service capabilities, resulting in cost savings as extensive expertise isn't required. Once automation and self-service are implemented, many tasks can be completed automatically. Load balancing is another excellent feature. Multiple servers can run on load balancing features, which is particularly useful since we have many application servers running. Sharing loads between servers provides the best performance.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It is easy to deploy and easy to handle."
"The most valuable feature is the embedded IDS from Suricata."
"Corelight is easy to use."
"It's an easy way for us to get visibility in a client's environment."
"It's easy to create additional dashboards specific to supporting specific tasks."
"The most valuable features are stability and low cost."
"The installation is straightforward, it took a couple of hours."
"Provides flexibility to deploy and have network virtualization on different types of firewalls."
"This feature gives us flexibility and allows us to manage everything under one pane; we can see everything on one console, including network operations and behavior."
"The solution is very stable and reliable."
"The performance is good."
"It's a beneficial tool."
"We like that everything is integrated."
 

Cons

"Corelight hasn’t added features in a long time."
"They can enhance the interface of the product. They can make it more interactive and also easier to use for feature access."
"Machine learning could be a good improvement, but it's very costly."
"The solution’s architecture is complex and difficult to understand. There are multiple machines and VMs."
"In the next release, building a graphical user interface would be helpful."
"They have to work more and more on the integration for public cloud services and have cyber security platform integration."
"The price is rather high."
"I would like to have automating reporting built into common service management platforms, such as JIRA, Serviceaide, and ServiceNow."
"The solution is quite complex. You need to keep your thinking cap on and know what you are doing: Go to the training and listen to the solution architects when they come in because they have a lot of knowledge."
"The licensing model is expensive and could be more flexible, especially after Broadcom bought VMware. It made it an expensive licensing model with no other options to take something specific from the license itself."
"One drawback is this solution requires a lot of other products in the VMware ecosystem to have a full end-to-end operation orchestration monitoring. You have to buy a lot of add-ons to fully utilize the functionality."
"The support needs improvement."
"The vendor should integrate a basic load balancer in future versions"
 

Pricing and Cost Advice

"It's a yearly fee and depends on what you are looking for."
"We are using the free version of the solution."
"The subscription is on a yearly basis."
"The licensing is renewed every three years. The cost for implementation and renovation are a huge portion of that price."
"I would rate the pricing of VMware NSX as seven out of ten"
"The solution is reasonable at the local level."
"VMware has always been geared towards enterprise and their pricing options are a bit high. Their price is higher than other options in the market."
"The price of VMware NSX is reasonable."
"The tool's pricing is reasonable."
report
Use our free recommendation engine to learn which Network Traffic Analysis (NTA) solutions are best for your needs.
881,082 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
14%
Government
11%
Computer Software Company
9%
Real Estate/Law Firm
9%
Financial Services Firm
12%
Computer Software Company
12%
Manufacturing Company
10%
Government
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business33
Midsize Enterprise23
Large Enterprise69
 

Questions from the Community

What is the biggest difference between Corelight and Vectra AI?
The two platforms take a fundamentally different approach to NDR. Corelight is limited to use cases that require the eventual forwarding of events and parsed data logs to a security team’s SIEM or ...
What do you like most about Corelight?
It's easy to create additional dashboards specific to supporting specific tasks.
What is your experience regarding pricing and costs for Corelight?
The solution is too expensive compared to others. If you have the technical knowledge, it's good. Corelight is a very big gap between you and others if you’re new.
What are the biggest differences between Cisco ACI and VMware NSX?
There are some very major differences between both the Products and to name a few. -Cisco ACI have physical network gear (9K Switches) where the Code runs in ACI Policy Mode & the UCS server wh...
What are the biggest differences between Cisco ACI and VMware NSX?
Once you know your way around the Cisco ecosystem, using Cisco ACI is not so difficult. It is a global product, so when you change one interface, changes are automatically reflected on every switch...
What do you like most about VMware NSX?
The product has valuable features for security and network extension.
 

Comparisons

 

Also Known As

No data available
VMware Nicira, Lastline Defender
 

Overview

 

Sample Customers

Education First
City of Avondale, Lumeta, Kroll Ontrack, Heartland Payment Systems, Baystate Heallth, Exostar, Tribune Media, iGATE, NTT Communications, Synergent, California Natural Resources Agency, Bloomington Public Schools, Columbia Sportswear, Join Experience S.A, Schuberg Philis
Find out what your peers are saying about Corelight vs. VMware NSX and other solutions. Updated: December 2025.
881,082 professionals have used our research since 2012.