Corelight vs mlab.sh

A side-by-side comparison built from both listings. Blank cells mean the company has not given that detail; we never guess.

Corelight compared with mlab.sh
Detail	Corelight	mlab.sh
What it does	Evidence-based network detection and response platform with AI-powered threat hunting	IOC and file intelligence platform for security teams to analyze threats and assess risk
Stage	Not given	Not given
Founded	Not given	Not given
Based in	Not given	FR
Pricing model	Contact for pricing	Freemium
Pricing	Not given	Free plan with basic limits (2 domain analyses/day, 5 IP analyses/day, 2 file analyses/day, 3 crypto analyses/day). Pro plan at 59€/month (first 2 months at 19.99€) with higher limits (25 domain analyses/day, 50 IP analyses/day, 50 file analyses/day, 30 crypto analyses/day). Team plan at 149€/month
Key features	Agentic Triage for 10x faster incident triage Evidence-based security backed by Zeek standard	IP, domain, URL and hash analysis File upload and malware scanning EML parser for phishing analysis Passive DNS history lookup YARA rules and malware detection MITRE ATT&CK mapping RedKit security audits REST API and CLI access Graded risk reports with severity levels AI integration via MCP server
What makes it different	Open-core NDR platform with evidence as foundation Expert-authored playbooks and on-prem AI agents for transparent AI Technical Account Management included for strategic partnership	Signal over noise: actionable findings rather than overwhelming data Evidence-based verdicts with full transparency Privacy-first: no tracking, no data resale Unified platform covering investigation to governance EU-hosted infrastructure operated by French company
Community votes	0	0
DR (Domain Rating by Ahrefs)	70 no change since last check	26 no change since last check
Trust Flow (Majestic)	30	7
Citation Flow (Majestic)	44	31
Referring domains (Majestic)	1132	46

4 details filled in for both companies.

More alternatives to Corelight More alternatives to mlab.sh