--- title: ExtraHop Reviews meta_title: 'ExtraHop Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 68 reviews by the users' company size, role or industry to find out how ExtraHop works for a business like yours. aggregate_rating: rating_value: 4.6 review_count: 68 scale: '5' date_modified: '2026-07-13' parent_category: name: Network Security url: https://www.g2.com/categories/network-security --- # ExtraHop Reviews **Vendor:** ExtraHop Networks **Category:** [Network Detection and Response (NDR) Software](https://www.g2.com/categories/network-detection-and-response-ndr) **Average Rating:** 4.6/5.0 **Total Reviews:** 68 ## About ExtraHop ExtraHop is the cybersecurity partner enterprises trust to reveal cyber risk and build business resilience. The ExtraHop RevealX platform for network detection and response and network performance management uniquely delivers the instant visibility and unparalleled decryption capabilities organizations need to expose the cyber risks and performance issues that other tools can’t see. When organizations have full network transparency with ExtraHop, they can investigate smarter, stop threats faster, and keep operations running. RevealX deploys on premises or in the cloud. It addresses the following use cases: - Ransomware - Zero trust - Software supply chain attacks - Lateral movement and C2 communication - Security hygiene - Network and Application Performance Management - IDS - Forensics and more A few of our differentiators: Continuous and on-demand PCAP: Full packet processing is superior to NetFlow and yields higher quality detections. Strategic decryption across a variety of protocols, including SSL/TLS, MS-RPC, WinRM, and SMBv3, gives you better visibility into early-stage threats hiding in encrypted traffic as they attempt to move laterally across your network. Protocol coverage: RevealX decodes more than 70 network protocols. Cloud-scale machine learning: Rather than relying on limited "on-box" compute power for analysis and detections, RevealX uses sophisticated cloud-hosted and cloud-scale machine learning workloads to identify suspicious behavior in real time and create high-fidelity alerts. ExtraHop was named a Leader in The Forrester Wave™: Network Analysis and Visibility, Q2 2023. Key Technology Integration and Go-to-Market Partners: CrowdStrike: RevealX integrates with CrowdStrike Falcon® LogScale, Falcon Insight XDR, Falcon Threat Graph, and Falcon Intelligence. Splunk SOAR AWS Google Cloud Security Founded in 2007, ExtraHop is privately held and headquartered in Seattle, Wash. To learn more, visit www.extrahop.com. ## ExtraHop Pros & Cons **What users like:** - Users value the **all-in-one monitoring solution** of ExtraHop, appreciating its comprehensive traffic analysis and visibility. (1 reviews) - Users value the **comprehensive monitoring** capabilities of ExtraHop, enabling thorough analysis and visibility of network traffic. (1 reviews) - Users find ExtraHop’s deployment to be **simple and effective** , whether on physical or virtual cloud appliances. (1 reviews) - Users value the **responsive support** from ExtraHop, appreciating the knowledgeable Customer Success teams that enhance their experience. (1 reviews) ## ExtraHop Reviews ### 1. Network Detection Response with RevealX **Rating:** 4.0/5.0 stars **Reviewed by:** Shane G. | Cyber Security Consultant, Enterprise (> 1000 emp.) **Reviewed Date:** January 27, 2021 **What do you like best about ExtraHop?** Good use of network data to provide info on a given IP. Is it a AD server or endpoint, what protocols is it using. A strong set of "out of the box" Security alerts with little to no configuration. Machine learning or deviation from normal alerts + threat specific alerts like "cobalt-strike" Realtime analysis of network data such as DNS requests without storing all the DNS data **What do you dislike about ExtraHop?** RevealX security detections are usually correct but still point to some legitimate network traffic. There high threat detections like "DNS C2 channel" are effective but there is still work to be done. Especially at the lower end of there threat score modeling. These low threat alerts are more like "notable behavior" and they provide great info when investigating an end point but there not worth the analyst time to investigate each one individually. I would like to see more intelligence in there detection algorithms, whereby and endpoint with 4 or 5 suspicious behaviors would score higher then an endpoint with 2. Extrahop needs to work on presenting there alert data in a more meaningful way and reduce the signal to noise ratio. **What problems is ExtraHop solving and how is that benefiting you?** Visibility is always a good thing of course but from a security point of view RevealX fills in the gaps that our EDR cannot. If our EDR is bypassed or compromised which is often the case in dev environments we still catch threats like "connection's to an internet DB" or "inbound RDP connections from the internet" ### 2. Great network analysis tool **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Hospital & Health Care | Enterprise (> 1000 emp.) **Reviewed Date:** August 19, 2021 **What do you like best about ExtraHop?** The most helpful thing about ExtraHop is the user interface and the comprehensive search bar. **What do you dislike about ExtraHop?** The Reveal(x) needs a lot of fine-tuning **What problems is ExtraHop solving and how is that benefiting you?** We are looking into network flows and network traffic statistics as our primary use case. The dashboards have been great for giving us this information. ### 3. Network Detection & Response - Essential for Cyber Security Defense **Rating:** 5.0/5.0 stars **Reviewed by:** Nemi G. | Vice President, Information Security Officer | Service Operations, Enterprise (> 1000 emp.) **Reviewed Date:** April 13, 2021 **What do you like best about ExtraHop?** Truly offers a single pane of glass for IT and CyberSecurity monitoring, performance & response. **What do you dislike about ExtraHop?** Heavy investment in infrastructure is required to support a large-scale distributed enterprise. **What problems is ExtraHop solving and how is that benefiting you?** ExtraHop offers clear visibility into network traffic at the enterprise and branch level, including encrypted traffic. The speed and efficacy of NDR solutions such as ExtraHop is key for offering near wirespeed detections and response. It is an essential tool for the Operations team. ### 4. key to success in monitoring and response **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Transportation/Trucking/Railroad | Enterprise (> 1000 emp.) **Reviewed Date:** August 04, 2021 **What do you like best about ExtraHop?** this tool gives me key insight into my network and helps me identify unknown assets and compromises in real time where i have gaps in my edr coverage. it also provides more data when pivoting from my edr tool. i deploy this tool at every company i work at. **What do you dislike about ExtraHop?** i love everything about this tool, great alerts, easy to tune and great interface. **What problems is ExtraHop solving and how is that benefiting you?** unknown assets, provide extra network data when investigating any alerts. ### 5. NIDS like no other **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Translation and Localization | Enterprise (> 1000 emp.) **Reviewed Date:** August 04, 2021 **What do you like best about ExtraHop?** ExtraHop gives you insight into your network like no other. This tool provides you with actionable information without the noise. The threat briefs allow you to see if your exposure to current significant threats quickly. **What do you dislike about ExtraHop?** Not much that I do not like about the tool, the issues that I have experienced with it were dealing with engineers deploying the tool and not the tool itself. **What problems is ExtraHop solving and how is that benefiting you?** Significantly enhanced network visibility, asset inventory. ### 6. Visibility into network activities that we've never had before **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Defense & Space | Enterprise (> 1000 emp.) **Reviewed Date:** September 16, 2021 **What do you like best about ExtraHop?** Network mapping and notification of anomolous/potentially harmful traffic **What do you dislike about ExtraHop?** Our network is constantly changing, so constant reconfiguration of nTAPs and aggregators to achieve most comprehensive visibility is time consuming. **What problems is ExtraHop solving and how is that benefiting you?** ExtraHop allows our Authorizing Official to feel more comfortable accepting some risk when temporarily hosting systems that we do not own/manage. ### 7. Visibility you didn't know you needed **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Financial Services | Enterprise (> 1000 emp.) **Reviewed Date:** August 05, 2021 **What do you like best about ExtraHop?** It provides a clear indication of what is going on; on the wire, the network, app dev and security teams can see the same unbiased point of view **What do you dislike about ExtraHop?** It takes additional infrastructure to get the most value out of the tool. **What problems is ExtraHop solving and how is that benefiting you?** Application performance problems to time to resolution decreased by 40%, since everyone can agree on what it is not. Less finger-pointing about where the problem lies. ### 8. Chief Information Security Officer **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Hospital & Health Care | Enterprise (> 1000 emp.) **Reviewed Date:** August 05, 2021 **What do you like best about ExtraHop?** RevealX's ability to clear out the white noise and correlate events to pinpoint threat activities on my networks. **What do you dislike about ExtraHop?** The need for multiple taps to help data correlation activities. Unfortunately, I do not see a way around this currently. **Recommendations to others considering ExtraHop:** Ensure that you scope your environments appropriately and size your appliance accordingly. **What problems is ExtraHop solving and how is that benefiting you?** Identification and correlation activities. ### 9. Security Analyst **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Education Management | Enterprise (> 1000 emp.) **Reviewed Date:** August 04, 2021 **What do you like best about ExtraHop?** Simplicity. It was very easy and fast to get Reveal(x) and trace up and running. All you need to get right is the feed. Dashboards are easy to use and follow up on alerts. **What do you dislike about ExtraHop?** false positives are sometimes hard to filter out. **What problems is ExtraHop solving and how is that benefiting you?** Visibility into network activity and forensics. ### 10. Great visibility into network traffic **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Hospital & Health Care | Enterprise (> 1000 emp.) **Reviewed Date:** February 05, 2021 **What do you like best about ExtraHop?** I most like the granularity with which we can see and identify traffic patterns. It allows us visibility into the types of traffic on our network and where the traffic is going. **What do you dislike about ExtraHop?** There is a bit of a learning curve when trying to do some more complex filtering, using scripting to aid in that. **What problems is ExtraHop solving and how is that benefiting you?** We recently replaced our previous network traffic analysis vendor for ExtraHop because of the additional insight into East-West traffic, helping to understand the "soft underbelly" a bit better. ### 11. Powerful analytics **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Telecommunications | Small-Business (50 or fewer emp.) **Reviewed Date:** February 04, 2021 **What do you like best about ExtraHop?** - Well designed/Intuitive/responsive GUI - Can be used right out of the box - Auto discover features -Security detections **What do you dislike about ExtraHop?** In general, I think it is an amazing tool, but the pricing is high **What problems is ExtraHop solving and how is that benefiting you?** -The tool speeds up troubleshooting process, which is very useful in our daily operations -Also the security detections allow us to improve our security posture ### 12. It's an awesome platform, easy out of the box usage **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Telecommunications | Enterprise (> 1000 emp.) **Reviewed Date:** February 02, 2021 **What do you like best about ExtraHop?** EAsy to use, intuitive platform, drill downs **What do you dislike about ExtraHop?** Need more possibilities for the price models **Recommendations to others considering ExtraHop:** Easy out of the box platform, learning curve is smooth. Drill downs makes troubleshooting very easy. **What problems is ExtraHop solving and how is that benefiting you?** Baseline our network,analyse our traffic, alerting ### 13. Great equipment & local Support **Rating:** 5.0/5.0 stars **Reviewed by:** Alberto M. | Enterprise (> 1000 emp.) **Reviewed Date:** February 26, 2020 **Describe the project or task ExtraHop helped with:** We have been monitoring each location with Extrahop. We have found several remediation that needed to be addressed. the product has performed better than i expected **What do you like best about ExtraHop?** the easy interface & the support from the team **What do you dislike about ExtraHop?** Nothing that I can think, everything has been great **Recommendations to others considering ExtraHop:** I highly recommend extrahop, now they are shifting to a more security model **What problems is ExtraHop solving and how is that benefiting you?** The accuracy of the reports & the way the report was created for our local team ### 14. A Network Time Machine and Protocol Guru **Rating:** 4.5/5.0 stars **Reviewed by:** Benjamin S. | Technical Analyst III, Enterprise (> 1000 emp.) **Reviewed Date:** April 25, 2019 **What do you like best about ExtraHop?** My favorite feature is the packet capture and storage. I can go back within a day and look at any packet that ExtraHop saw based on time and IP address searches. This has allowed me to lower my troubleshooting time by not having to wait for something to happen again and hope that I catch it. **What do you dislike about ExtraHop?** The pricing of the infrastructure required in terms of taps to get all of the packets to the system. **Recommendations to others considering ExtraHop:** The tool is good, but sometimes sales oversell capabilities. Make sure that you understand the technical of what is possible. **What problems is ExtraHop solving and how is that benefiting you?** Our teams have used ExtraHop to solve a multitude of problems. The network team uses it to analyze packets and troubleshooting. The HL7 team is using it to analyze the records that are already flowing across the network for healthcare related fields. ### 15. Great tool for watching your network **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Financial Services | Mid-Market (51-1000 emp.) **Reviewed Date:** June 04, 2019 **What do you like best about ExtraHop?** Very easy to use, there is near zero learning curve as long as the user have some very basic network knowledge for basic functions. Easy filter based on domain, IP, and different network protocols and connection types. Graphical representation. **What do you dislike about ExtraHop?** Not much at this moment but I am not an advanced user of the system. **What problems is ExtraHop solving and how is that benefiting you?** Realtime check and verification about connections. Traffic pattern alert. Application/network load monitoring. ### 16. Perfect tool to monitor on wire traffic **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Hospital & Health Care | Enterprise (> 1000 emp.) **Reviewed Date:** March 18, 2019 **What do you like best about ExtraHop?** Capture the real time network packets and split into metrics, and records. No agent installation is required. Extra hop Team's sets an example for great coordination and team work. We are really impressed with the way support, service, sales and training stays in sync, and provides great focus to its clients. **What do you dislike about ExtraHop?** The tools needs to lots of configuration and console presented too much details. One have to have in depth knowledge of environment and network protocols. But they does provides great documentations. **What problems is ExtraHop solving and how is that benefiting you?** We are monitoring tier 1 applications. Extrahop has provided live diagnosis and troubleshooting for existing issues. ### 17. A very good tool to help you out for end to end IT service's health monitoring and trouble shooting **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Telecommunications | Enterprise (> 1000 emp.) **Reviewed Date:** April 03, 2018 **What do you like best about ExtraHop?** The capability of deep dive into any OSI Layer's protocol to match your pre-configured triggers for abnormal network pattern and potential issue and generate alarms and report for you to quick action. **What do you dislike about ExtraHop?** Basically from technical perspective I don't see any weakness however not sure if the cost is high or not as I'm just a user and not the business owner in my organization. **What problems is ExtraHop solving and how is that benefiting you?** I've been using extrahop for a couple of years to monitor the network and application performance of our offshore call center's VPN and Citrix/VDI solutions, giving me the best solution to quick respond to any network and application performance degrade and trouble shoot the issue in protocol/transaction layer. ### 18. I'd take an extra hop to utilize extrahops services **Rating:** 3.5/5.0 stars **Reviewed by:** Charles C. | Logistics, Transportation/Trucking/Railroad, Small-Business (50 or fewer emp.) **Reviewed Date:** April 04, 2016 **What do you like best about ExtraHop?** Due to every transaction happening and being able to be seen as wire data, analyzing this information can provide insight into every single event that happens on a network. You are able to see performance by tier and troubleshoot precisely by what the issue is. Wire data analytics allows a holistic view of every transaction that happens on a network and be able to see that information in a structured way. **What do you dislike about ExtraHop?** Although there is a slew of reputable and fantastic clients for extrahop, I myself think its running a bit expensive for over 7k for a 1 yr subscription. **Recommendations to others considering ExtraHop:** This is not a bad route to go, so I'd consider using it on a trial basis like myself. I think with some time and effort into implementing it and taking it seriously you may have a winner here. **What problems is ExtraHop solving and how is that benefiting you?** We receive network traffic, and then performs real-time full-stream reassembly to extract application-level protocol metrics and other custom-specified information contained in the transaction payload. IT operations teams use this data to monitor the performance of the applications running on the network and detect anomalous behavior that could indicate a data breach, for example. **Official Response from Tyson Supasatit:** > Thanks for your honest feedback, Charles! ## ExtraHop Discussions - [Is ExtraHop a startup?](https://www.g2.com/discussions/is-extrahop-a-startup) - [What is ExtraHop appliance?](https://www.g2.com/discussions/what-is-extrahop-appliance) - [Is ExtraHop a SIEM?](https://www.g2.com/discussions/is-extrahop-a-siem) - [What is ExtraHop?](https://www.g2.com/discussions/what-is-extrahop) - [How well did extrahop help you during log4j?](https://www.g2.com/discussions/how-well-did-extrahop-help-you-during-log4j) - 1 upvote - [View ExtraHop pricing details and edition comparison](https://www.g2.com/products/extrahop/reviews?page=2§ion=pricing&secure%5Bexpires_at%5D=2026-07-16+03%3A06%3A47+-0500&secure%5Bsession_id%5D=ab6c7ea8-58dc-4f29-896f-62f9005c5035&secure%5Btoken%5D=6ea095d023cad001ea4ef5fde0412b9b39b0c8a50da2d84dea832a3d42e8c050&format=llm_user) ## ExtraHop Integrations - [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) ## ExtraHop Features **Management** - Dashboards and Reports - Workflow Management - Administration Console **Administration** - Risk Scoring - Secrets Management - Security Auditing - Configuration Management **Prevention** - Intrusion Prevention - Firewall - Encryption - Security hardening - Cloud Data Protection **Functionality** - Performance Monitoring - Alerting - Improvement Suggestions - Multi-Network Capability **Automation** - Metadata Management - Artificial Intelligence & Machine Learning - Response Automation - Continuous Analysis **Analysis** - File Analysis - Memory Analysis - Registry Analysis - Email Analysis - Linux Analysis **Analysis** - Incident Reporting - Network Visibility - Metadata Enrichment - Metadata Management **Detection & Response** - Response Automation - Threat Hunting - Rule-Based Detection - Real-Time Detection **Monitoring - Network Monitoring** - 360-Degree Network Visibility - Automated Network Discovery - Real-Time Monitoring **Cloud Visibility** - Data Discovery - Cloud Registry - Cloud Gap Analytics **Operations** - Governance - Logging and Reporting - API / Integrations **Monitoring** - Continuous Image Assurance - Behavior Monitoring - Observability **Detection** - Intrusion Detection - Security Monitoring - Anti-Malware / Malware Detection **Management** - Performance Baseline - Data Visualization - Path Analysis **Functionality** - Multi-Network Capability - Anomaly Detection - Network Visibility - Scalability **Functionality** - Incident Alerts - Anomaly Detection - Continuous Analysis - Decryption **Response** - Incident Alerts - Response Orchestration - Response Automation **Management** - Extensibility - Workflow Automation - Unified Visibility **Analytics - Network Monitoring** - Predictive Performance Analytics - Packet & Flow Analysis **Security** - Data Security - Data loss Prevention - Security Auditing **Security Controls ** - Anomaly Detection - Data Loss Prevention - Security Auditing - Cloud Gap Analytics **Protection** - Dynamic Image Scanning - Runtime Protection - Workload Protection - Network Segmentation **Administration** - Compliance - Administration Console - - API / integrations **Incident Management** - Incident Logs - Incident Alerts - Incident Reporting **Remediation** - Incident Reports - Remediation Suggestions - Response Automation **Detection** - Multi-Network Monitoring - Asset Discovery - Anomaly Detection **Analytics** - Threat Intelligence - Artificial Intelligence & Machine Learning - Data Collection **Security - Network Monitoring** - Encrypted Data Transmission - Zero Trust and Identity Management - Integrated Network Security **Identity** - SSO - Governance - User Analytics **Generative AI** - AI Text Summarization **Generative AI** - AI Text Generation - AI Text Summarization **Network Performance - Network Monitoring** - Dynamic Network Optimization - Automated Tasks Routing **Agentic AI - Extended Detection and Response (XDR) Platforms** - Autonomous Task Execution - Proactive Assistance - Decision Making **Agentic AI - Cloud Detection and Response (CDR)** - Autonomous Task Execution - Proactive Assistance - Decision Making **Services - Network Detection and Response (NDR)** - Managed Services **AI Automation - Network Monitoring** - Machine Learning-Based Anomaly Detection - Self-Healing Networks - Predictive Network Maintenance **Agentic AI - Intrusion Detection and Prevention Systems (IDPS)** - Autonomous Task Execution - Proactive Assistance **Services - Extended Detection and Response (XDR)** - Managed Services **Services - Cloud Detection and Response (CDR) ** - Managed Services **Agentic AI - Network Monitoring** - Autonomous Task Execution - Multi-step Planning - Cross-system Integration - Adaptive Learning - Natural Language Interaction - Proactive Assistance - Decision Making ## Top ExtraHop Alternatives - [Dynatrace](https://www.g2.com/products/dynatrace/reviews) - 4.5/5.0 (1,232 reviews) - [IBM QRadar SIEM](https://www.g2.com/products/ibm-ibm-qradar-siem/reviews) - 4.4/5.0 (282 reviews) - [Corelight](https://www.g2.com/products/corelight/reviews) - 4.6/5.0 (20 reviews)