Corelight_Master Logo_RGB_Green and Black (1).png
Source: Corelight, Inc.

Corelight Earns FIPS 140-2 Certification for Full Portfolio of Network Sensors

Corelight Helps Public Sector Organizations and Institutions to defend themselves against attackers by providing complete network visibility: the ‘right data at the right time.’

SAN FRANCISCO, July 23, 2018 (GLOBE NEWSWIRE) -- Corelight, providers of the most powerful network visibility solution for cybersecurity, today announced its products have been verified to comply with the Federal Information Processing Standard 140-2 (FIPS 140-2) security certification from the National Institute of Standards and Technology (NIST).

FIPS 140-2 is a computer security standard that specifies the requirements for cryptographic modules -- including both hardware and software components -- used within a security system to protect sensitive, but unclassified information. This certification ensures that organizations deploying Corelight Sensors can trust that their data is protected, whether at rest or in transit.

“FIPS certification is an expression of our company’s unwavering commitment to supporting federal agencies and missions,” said Greg Bell, CEO of Corelight. “Corelight understands mission organizations because we are one, with many team members coming from the federal environment. This independent FIPS certification demonstrates our ongoing commitment to delivering highly secure technology that greatly accelerates the work of incident response, threat hunting, and forensics.”

Corelight has achieved FIPS 140-2 certification for its full portfolio of network sensors including:

  • Corelight AP 200 Sensor
  • Corelight AP 1000 Sensor
  • Corelight AP 3000 Sensor

Corelight was founded by Dr. Vern Paxson (a Professor of Computer Science at UC Berkeley and Chief Scientist at Corelight), Robin Sommer (CTO) and Seth Hall (Chief Evangelist) to deliver network visibility solutions for cybersecurity built on an open source framework called Bro. Paxson began developing Bro in 1995 when he was working at Lawrence Berkeley National Laboratory (LBNL); the name refers to George Orwell's "Big Brother" as it signals the need for operators of network monitoring to remain mindful of their users' rights and privacy.

Corelight Sensors also offer features and support designed for public sector organizations, including:

  • Streaming data export, including direct integration with Splunk, Elasticsearch, Kafka and more
  • Partnerships with resellers under preferred government contracts and schedules including:
    • GSA
    • NASA SEWP
    • DHS Eagle
    • CHESS
  • Support for air-gapped environments
  • Traffic shunting for high volume traffic analysis
  • Restful API for flexible integration
  • Optimized file extraction
  • Highly flexible log export and filtering options

FIPS 140-2 validation is required by U.S. law when information systems use cryptography to protect sensitive government information. In order to achieve FIPS 140-2 certification, cryptographic modules are subject to rigorous testing by independent Cryptographic and Security Testing Laboratories, accredited by NIST. The validation for Corelight’s implementation of cryptographic modules (certifications 2398 and 2657) was performed by Acumen Security, an end-to-end security certification solutions provider in Rockville, MD.

About Corelight
Corelight delivers the most powerful network visibility solutions for information security professionals, helping them understand network traffic and defend their organizations more effectively. Corelight solutions are built on a foundation of Bro, the powerful and widely-used open source network analysis framework that generates actionable, real-time data for thousands of security teams worldwide. Its first product, the Corelight Sensor, is a high-performance, turn-key appliance with numerous integrations and capabilities enterprises need for deployment at scale. The Bro project was initially developed at Lawrence Berkeley National Laboratory (LBNL), and has been supported by the US Department of Energy (DOE), the National Science Foundation (NSF), and the International Computer Science Institute (ICSI). Corelight is based in San Francisco, Calif. For more information, visit https://www.corelight.com or follow @corelight_inc.