News

Softprom Becomes Official Corelight Distributor to Deliver Advanced Network Detection and Response Solutions.

News | 12.07.2026

VIENNA, AUSTRIA – Softprom, a leading Value Added IT Distributor, announces the signing of a partnership agreement with Corelight, a leader in fueling today’s AI SOC.

Under the agreement, Softprom is granted the status of Official Distributor for Corelight. The partnership covers a wide territory encompassing the regions of Central and Eastern Europe, the Caucasus, and Central Asia, namely: Poland, Romania, Hungary, Bulgaria, Greece & Cyprus, Moldova, Ukraine, Georgia, Azerbaijan, Armenia, Kazakhstan, Uzbekistan, Kyrgyzstan, and Mongolia.

Modern cybersecurity teams frequently struggle with network blind spots, lacking the clear, actionable data required to detect, investigate, and mitigate complex cyber threats. Corelight solves this critical problem by providing comprehensive network visibility and advanced threat detection. By transforming network traffic into comprehensive, structured evidence, the solution enables security operations centers (SOCs) to accelerate incident response, proactively hunt for threats, and neutralize attacks before they can cause business disruption.

This agreement enables Softprom to offer partners and customers a unified portfolio for building resilient network security infrastructure.

Corelight's Open NDR Platform combines open-source technologies like Zeek and Suricata with AI and machine learning to deliver comprehensive network visibility, threat detection, and incident response across hybrid, cloud, and on-premises environments. It transforms network traffic into structured evidence, fuses signature-based IDS alerts with rich network context, and integrates with SIEM, XDR, and SOAR tools to accelerate investigations, reduce false positives, and support advanced threat hunting and compliance needs, enriched with threat intelligence and analytics from the global security community.

In addition, Corelight’s Open NDR Platform includes native network performance monitoring and passive asset classification capabilities. Corelight combines complete asset visibility with its existing anomaly detection foundation that security teams need to defend against AI-powered threats, enabled by Mythos-class models, that are capable of discovering and weaponizing vulnerabilities faster than any patching program can respond.

This new AI-driven threat landscape renders strategies that rely on endpoint controls and patching alone insufficient. The same Zeek-based analysis engine that powers Corelight's detections continuously classifies every communicating asset and AI service all from traffic already being collected, with no active polling agents or dedicated infrastructure required. In an era where vulnerability scores alone are no longer an adequate map of immediate risk, Corelight provides a critical signal in the form of real-time evidence about which hosts are reachable and under active attack, giving security teams a stronger foundation for prioritization and leadership more confidence about what is actually happening in critical environments.

Corelight's Open NDR Platform delivers comprehensive network detection and response capabilities designed to accelerate incident response for security teams, including:

  • Agentic Triage: A category-first automated investigation capability that helps security teams move from high-volume alert noise to rapid, evidence-backed containment, making triage up to 10x faster, powered by a modern GenAI agent architecture and driven by expert-written investigative playbooks.
  • AI-Assisted Workflows: Plain language summaries of alerts, payloads, and contextual data that turn expert-level network data into actionable intelligence, directing analysts to next steps.
  • Prioritized, High-Fidelity Alerts: Intelligent alert scoring with customizable severity levels reduces false positives and focuses teams on what matters most.
  • Comprehensive Detection Coverage: A full suite of detection methods including transparent AI/ML models, behavioral analysis, threat intelligence, and comprehensive MITRE ATT&CK mapping covering 80+ adversary techniques.
  • Complete Visibility: Consolidates NSM, IDS, and PCAP functionality in a single platform with unified datasets across hybrid and multi-cloud environments.
  • Open Platform: Security teams maintain complete control over their data with the ability to create custom detections, integrate with existing security stacks, and avoid vendor lock-in.

This partnership allows Softprom customers to access cutting-edge solutions for modernizing their cybersecurity posture, bringing deep visibility and evidence-based threat defense to their networks.

About Corelight

Corelight transforms network and cloud activity into evidence that security teams use to proactively hunt for threats, accelerate response to incidents, gain complete network visibility, and create powerful analytics. Corelight's customers include Global 2000 companies, major government agencies, and large research universities. Based in San Francisco, Corelight is an open-core security company founded by the creators of Zeek®, the widely used open-source network security technology.  www.corelight.com.

About Softprom

Softprom is a leading Value Added IT Distributor in Central and Eastern Europe, the Caucasus, and Central Asia. Founded in 1999, the company is represented in over 30 countries and trusted by more than 1,200 partners. Softprom's mission is to enhance customer effectiveness by providing high-quality IT solutions and services across key areas, including Cybersecurity, Cloud, IT Infrastructure, Security Systems, and CAD & Engineering. The company's core values — Trust, Innovativeness, and Competence — drive its commitment to supporting partners with financial, logistical, marketing, and technical expertise. https://www.softprom.com