--- title: ExtraHop Reviews meta\_title: 'ExtraHop Reviews 2026: Details, Pricing, & Features | G2' meta\_description: Filter 68 reviews by the users' company size, role or industry to find out how ExtraHop works for a business like yours. aggregate\_rating: rating\_value: 4.6 review\_count: 68 scale: '5' date\_modified: '2026-08-07' parent\_category: name: Network Security url: https://www.g2.com/categories/network-security --- ### ExtraHop Pros and Cons: Top Advantages and Disadvantages #### Quick AI Summary Based on G2 Reviews Generated from real user reviews Users appreciate the **all-in-one solution** of ExtraHop, enabling complete network visibility and excellent support from knowledgeable teams. [(1 mentions)](https://www.g2.com/products/extrahop/reviews?filters%5Bsentiment_snippet%5D=2172340&qs=pros-and-cons#reviews) Users value the **comprehensive monitoring** provided by ExtraHop, enabling detailed traffic analysis and enhanced network visibility. [(1 mentions)](https://www.g2.com/products/extrahop/reviews?filters%5Bsentiment_snippet%5D=1505393&qs=pros-and-cons#reviews) Users find **Easy Deployment** of ExtraHop to be seamless, enhancing network visibility with excellent support from the Customer Success teams. [(1 mentions)](https://www.g2.com/products/extrahop/reviews?filters%5Bsentiment_snippet%5D=2172424&qs=pros-and-cons#reviews) Users value the **responsive support** from ExtraHop's knowledgeable Customer Success teams, enhancing their overall experience. [(1 mentions)](https://www.g2.com/products/extrahop/reviews?filters%5Bsentiment_snippet%5D=1505563&qs=pros-and-cons#reviews) ### Top Pros or Advantages of ExtraHop ##### 1. All-in-One Solution Users appreciate the **all-in-one solution** of ExtraHop, enabling complete network visibility and excellent support from knowledgeable teams. [ See 1 mentions ](https://www.g2.com/products/extrahop/reviews?filters%5Bsentiment_snippet%5D=2172340&qs=pros-and-cons#reviews) See Related User Reviews ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") A Verified User Mid-Market (51-1000 emp.) 5.0/5 "Complete visibility on network activity" What do you like about ExtraHop? What I like most about ExtraHop is the ability to monitor and analyze all traffic passing through the network. Generally, companies have strong endpoi ##### 2. Comprehensive Monitoring Users value the **comprehensive monitoring** provided by ExtraHop, enabling detailed traffic analysis and enhanced network visibility. [ See 1 mentions ](https://www.g2.com/products/extrahop/reviews?filters%5Bsentiment_snippet%5D=1505393&qs=pros-and-cons#reviews) See Related User Reviews ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") A Verified User Mid-Market (51-1000 emp.) 5.0/5 "Complete visibility on network activity" What do you like about ExtraHop? What I like most about ExtraHop is the ability to monitor and analyze all traffic passing through the network. Generally, companies have strong endpoi ##### 3. Easy Deployment Users find **Easy Deployment** of ExtraHop to be seamless, enhancing network visibility with excellent support from the Customer Success teams. [ See 1 mentions ](https://www.g2.com/products/extrahop/reviews?filters%5Bsentiment_snippet%5D=2172424&qs=pros-and-cons#reviews) See Related User Reviews ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") A Verified User Mid-Market (51-1000 emp.) 5.0/5 "Complete visibility on network activity" What do you like about ExtraHop? What I like most about ExtraHop is the ability to monitor and analyze all traffic passing through the network. Generally, companies have strong endpoi ##### 4. Responsive Support Users value the **responsive support** from ExtraHop's knowledgeable Customer Success teams, enhancing their overall experience. [ See 1 mentions ](https://www.g2.com/products/extrahop/reviews?filters%5Bsentiment_snippet%5D=1505563&qs=pros-and-cons#reviews) See Related User Reviews ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") A Verified User Mid-Market (51-1000 emp.) 5.0/5 "Complete visibility on network activity" What do you like about ExtraHop? What I like most about ExtraHop is the ability to monitor and analyze all traffic passing through the network. Generally, companies have strong endpoi ## Top-Rated Alternatives [ ![Corelight](https://images.g2crowd.com/uploads/product/hd_favicon/16e5f0e16ef9e5c8b03223fc2ebd08ae/corelight.svg "Corelight") Corelight 4.6/5(20) ](https://www.g2.com/products/corelight/reviews) [ ![IBM QRadar SIEM](https://images.g2crowd.com/uploads/product/hd_favicon/7d76baae79036d41d25c4a6c46e5af43/ibm-ibm-qradar-siem.svg "IBM QRadar SIEM") IBM QRadar SIEM 4.4/5(338) ](https://www.g2.com/products/ibm-ibm-qradar-siem/reviews) [ ![Dynatrace](https://images.g2crowd.com/uploads/product/hd_favicon/1512659484/dynatrace.svg "Dynatrace") Dynatrace 4.5/5(1,366) ](https://www.g2.com/products/dynatrace/reviews) [ View All Alternatives ](https://www.g2.com/products/extrahop/competitors/alternatives) ![Verified User in Insurance](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Insurance") AI Verified User in Insurance Mid-Market (51-1000 emp.) 7/31/2025 "Complete visibility on network activity" 5/5 What do you like best about ExtraHop? What I like most about ExtraHop is the ability to monitor and analyze all traffic passing through the network. Generally, companies have strong endpoint controls through tools like EDR; however, network is often limited to firewalls with intrusion detection and intrusion prevention rules. Where I find ExtraHop excels is through complete network visibility by mapping assets, learning network traffic and spotting anomalies, and giving Security Operations teams visibility into what is occurring on their network. ExtraHop is easy to deploy through either and appliance on physical networks our through a virtual appliance in the cloud. The Customer Success teams are deeply knowledgable and provide great support to customers. Review collected by and hosted on G2.com. What do you dislike about ExtraHop? Not a dislike but a feature I would like to see is ExtraHop move towards prevention. Currently, the product is good at identifying and detecting suspicious or malicious activity. Prevention can be achieved through integration with tools but it would be nice to have these native to ExtraHop. Review collected by and hosted on G2.com. What problems is ExtraHop solving and how is that benefiting you? Whenever we perform penetration tests, ExtraHop is always the first tool to detect the activity. Often times, the penetration testers will start their campaigns performing reconnaissance and trying to remain stealthy. Because they are not attempting to exploit vulnerabilities at this stage and may be using legitimate system tools, these actions would usually go unnoticed. By inspecting all network traffic, ExtraHop is quick to determine unusual activity on the network host even if it is not a managed device. The network traffic can be inspected by SOC teams and actions can be taken to contain the suspicious device. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerSource: Organic JH Jeff H. Small-Business (50 or fewer emp.) 2/5/2024 "One stop shop for network detections and notifications Easy to use and easy to understand." 5/5 What do you like best about ExtraHop? I like that ExtraHop identifies the alert in a mannert that is easy to follow. It gives the risk level of the alert, shows the metrics, breaks down the records for the incident, shows the packets involved, and even includes a pcap of the packets that can be used in WireShark to analyze further. It also gives the Mitre techniques as well as mitigation options to mitigate the attack. Review collected by and hosted on G2.com. What do you dislike about ExtraHop? I haven't found to many things I dislike about ExtraHop. It is not an automated system that will block an attack as it is happening, but it does e-mail out alerts so that I have the ability to begin investigating the incident as soon as possible leading to a faster mitigation scenario. Review collected by and hosted on G2.com. What problems is ExtraHop solving and how is that benefiting you? As an ISP our network security is very important. ExtraHop is a tool to help ensure we are seeing any attack in realtime, giving us the ability to troubleshoot and mitigate the issue in a speedy manner. We have the abilty to isolate traffic quickly when an issue arises. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: Seller invite ![Verified User in Telecommunications](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Telecommunications") IT Verified User in Telecommunications Enterprise (\> 1000 emp.) 2/28/2024 "RevealX from a daily user perspective" 5/5 What do you like best about ExtraHop? Overall, RevealX is easy to use and provides great visibility into the network. ExtraHop has very thorough documentation and if you can't find what you're looking for the support and training teams are always willing to help. I've experienced a quick turnaround for questions around the product. The training team is excellent at maintain user engagement in a virtual setting. The product is also super customizable which is great for unique use and abuse cases. I use RevealX almost daily, my top three pros from a technical perspective are the increased visibility of the network, customizing doesn't mean learning a new language, and low barrier to entry for analysts who are new to networking and security. Review collected by and hosted on G2.com. What do you dislike about ExtraHop? My top three cons for the product are that when adjusting baseline metrics, the baseline completely resets and there is a 3-4 week period before the baseline is calculated. Going off the above, it does not perform "lookback" searches for detections, meaning I can't craft a detection today and then see if the logic matches any stored data in the tool. Some of the customization areas need a bit of work so that they tie into the other features of the product. Review collected by and hosted on G2.com. What problems is ExtraHop solving and how is that benefiting you? ExtraHop enables us to have better visibility. This has resulted in us making configuration changes on hardware and network devices to decrease our attack surface. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: Seller invite ![Verified User in Higher Education](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Higher Education") AH Verified User in Higher Education Mid-Market (51-1000 emp.) 2/21/2024 "ExtraHOP provides visibility to quickly resolve performance and security issues" 5/5 What do you like best about ExtraHop? ExtraHOP provides great visibility for performance and security issues in our environment. Many of the detections, dashboards, and device groups provide easy starting points for learning to use extraHOP. Then, building custom dashboards and detections is very simple. We use extraHOP every day to assist us resolving problemes. The customer support and partnership we have with extraHOP has been key to our success. Review collected by and hosted on G2.com. What do you dislike about ExtraHop? You need to really understand your environment from the network layer to the application layers. extraHOP provides many options, but you need to determine what works best for your environment. It does take some time for planning the implementation properly but the planning and design time is worth it. Review collected by and hosted on G2.com. What problems is ExtraHop solving and how is that benefiting you? extraHOP has helped us solve authentication issues, storage issues, server issues, network performance issues, security problems and other application problems. We had many blind spots and extraHOP has helped us gain visibility to many of our services. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: Seller invite ![Verified User in Internet](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Internet") AI Verified User in Internet Small-Business (50 or fewer emp.) 2/14/2024 "you get what you pay for" 5/5 What do you like best about ExtraHop? We've tested the product using reputable 3rd party pentesters manual and automated. And we've compared it with other products. The difference between seeing that you are being compromised and not seeing it is huge. How do you choose a competitive product that is cheaper if it doesn't see that you are being compromised? Or how do you rest at night knowing that you've done everything you can to safeguard your network? Extrahop's visibility is far above the rest. Review collected by and hosted on G2.com. What do you dislike about ExtraHop? It is pricey. So if you are Misinformed and think that backups, firewalls, and anti-virus solutions are going to save you then you aren't going to understand the price of this product. Review collected by and hosted on G2.com. What problems is ExtraHop solving and how is that benefiting you? Mainly keeping our company from experiencing a ransomware event. We have staff dedicated to keeping their eye on the product and chasing down alerts 24/7/365. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: Seller invite ![Verified User in Computer Software](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Computer Software") AC Verified User in Computer Software Mid-Market (51-1000 emp.) 1/3/2024 "ExtraHop - Executive Network monitoring tool" 4/5 What do you like best about ExtraHop? With ExtraHop deployed in our network we now have real-time visibiltity and insights into network traffice and performance. Helps us troubleshoot, optimize and secure the network. ExtraHop platform is very easy to use, and has an intuitive easy to follow layout helping us review detections quickly. ExtraHop delivered on promises and provided excelent customer service. This is a tool that I use everyday to keep on eye on the network security. Deploying the devices in the infrastructure can be as simple as connecting to the network and mirroing all traffic to the device. This allows quick visability on the overall network performance and health. Review collected by and hosted on G2.com. What do you dislike about ExtraHop? It can be expensive to deploy, can generate many false positives and has limited integrations into other tools and platforms. Review collected by and hosted on G2.com. What problems is ExtraHop solving and how is that benefiting you? ExtraHop is helping us monitor network security, identify bottlenecks and improve overal performance and security related to overall network hygine. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: Seller invite KM Khaja Ahmed M. Enterprise (\> 1000 emp.) 1/30/2024 "Overall good product but needs more flexibility." 3.5/5 What do you like best about ExtraHop? 1. Seamless monitoring. 2. Simple and straightforward rule tuning. 3. Dashboard capabilities Review collected by and hosted on G2.com. What do you dislike about ExtraHop? 1. Lot of false positives. 2. Machine learning model is not flexible to the requirements. 3. Sometimes performance issues. Review collected by and hosted on G2.com. What problems is ExtraHop solving and how is that benefiting you? Its providing detections that are required to ensure all the permiters are covered. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: Seller invite ![Verified User in Hospital & Health Care](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Hospital & Health Care") UH Verified User in Hospital & Health Care Enterprise (\> 1000 emp.) 11/9/2022 "Network security monitoring" 4/5 What do you like best about ExtraHop? ExtraHop provides valuable insight into network activities and alerts on anomalies that you can't get from just monitoring logs. Review collected by and hosted on G2.com. What do you dislike about ExtraHop? Number one issue with ExtraHop is SIEM integration if there is no native connector available. building it through a java script trigger is not user friendly. Number two issue is threat feeds. We have a high-fidelity threat feed we'd like to add, but we have to make a cludgey system where we download the feed, gzip it, then upload it back to ExtraHop. Please build in native STIX/TAXII feeds to the product. I'd say trigger complexity is also a downside to ExtraHop. Not many security analysts will be able to understand and write the java code necessary for triggers. It would be nice to have a building block method for triggers where novices could build out most of it with pre-defined blocks fo code, something like a visual workflow. Review collected by and hosted on G2.com. What problems is ExtraHop solving and how is that benefiting you? There are activities that only occur on the network and will not show up in logs. ExtraHop is able to perform threat and anomaly detection on endopint and application communications that you won't get from your other security applications. Packet capture is not an easy system to setup. If you purchase the ETA, you have access to valuable packet information that can make a difference in a incident investigation. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: G2 invite on behalf of seller RT Rajiv T. Senior IT Security Engineer Mid-Market (51-1000 emp.) 11/17/2022 "Single Pane Visibility into the unknown parts of the network" 4.5/5 What do you like best about ExtraHop? Extrahop looks at both on-prem and cloud traffic. It analyzes packets for security anomalies at a scale that I have not seen happen before. It also does application performance at a level that gives a very detailed visibility Review collected by and hosted on G2.com. What do you dislike about ExtraHop? I do hope they would come up with their proprietary agents for the cloud nodes instead of using rpcapd, which I find can be a bit unstable especially in high-traffic scenarios Review collected by and hosted on G2.com. What problems is ExtraHop solving and how is that benefiting you? Extrahop was able to show us some east -west traffic that should not have been happening. We also had a constant stream of complaints about the datawarehouse being slow and always having the network blamed. But once we had Extrahop we were able to pin-point and prove that the delay was happening at the database level not at the network layer. We could never have seen this without Extrahop Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerSource: Organic ![Dev S.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Dev S.") DS Dev S. Security Lead Enterprise (\> 1000 emp.) 11/16/2022 "Extrahop Reveal(x) 360- An absolute must for Network Visibility" 5/5 What do you like best about ExtraHop? Extrahop provides East-West network visibility and can customize rules, providing deep packet inspection capability to our security team. Extrahop Packet capturing feature plays a vital role in network forensics. Review collected by and hosted on G2.com. What do you dislike about ExtraHop? Extrahop should extend its partnership with threat researchers and vendors to enrich its intel feeds and database for actionable intel on detections. Also, extend its partnership for API integration with tools like Tanium/SCCM, PAN firewalls etc Review collected by and hosted on G2.com. What problems is ExtraHop solving and how is that benefiting you? Extrahop provides visibility for network traffic that helps with East-West network segmentation. Extrahop Reveal(x) 360 helps during investigations and One-Click containment during an Incident reducing the response time to a greater extent. Review collected by and hosted on G2.com. Show More 11/7/2024 Current UserValidated ReviewerIncentivizedSource: G2 invite on behalf of seller ##### Categories on G2 [Network Monitoring](https://www.g2.com/categories/network-monitoring)[Extended Detection and Response (XDR) Platforms](https://www.g2.com/categories/extended-detection-and-response-xdr-platforms)[Cloud Workload Protection Platforms](https://www.g2.com/categories/cloud-workload-protection-platforms) [Network Monitoring](https://www.g2.com/categories/network-monitoring)[Extended Detection and Response (XDR) Platforms](https://www.g2.com/categories/extended-detection-and-response-xdr-platforms)[Cloud Workload Protection Platforms](https://www.g2.com/categories/cloud-workload-protection-platforms)[Container Security](https://www.g2.com/categories/container-security-tools)[Network Traffic Analysis (NTA)](https://www.g2.com/categories/network-traffic-analysis-nta)[Cloud Detection and Response (CDR)](https://www.g2.com/categories/cloud-detection-and-response-cdr)[Network Detection and Response (NDR)](https://www.g2.com/categories/network-detection-and-response-ndr)[Intrusion Detection and Prevention Systems (IDPS)](https://www.g2.com/categories/intrusion-detection-and-prevention-systems-idps)[Digital Forensics](https://www.g2.com/categories/digital-forensics) [Show MoreShow Less](javascript:void(0);) ##### Explore More [What are the best web acceleration solutions compared to content delivery networks for teams evaluating options?](https://www.g2.com/discussions/what-are-the-best-web-acceleration-solutions-compared-to-content-delivery-networks-for-teams-evaluating-options)[Which autonomous endpoint management platforms eliminate the need for manual patch cycles so IT teams are not spending hours pushing updates across devices?](https://www.g2.com/discussions/which-autonomous-endpoint-management-platforms-eliminate-the-need-for-manual-patch-cycles-so-it-teams-are-not-spending-hours-pushing-updates-across-devices)[Checkr vs HireRight for a mid-size company that needs reliable background screening with a clean candidate experience and solid ATS integration?](https://www.g2.com/discussions/checkr-vs-hireright-for-a-mid-size-company-that-needs-reliable-background-screening-with-a-clean-candidate-experience-and-solid-ats-integration%20) [Which presales management platforms are considered the gold standard for supporting sales engineers through complex enterprise deals?](https://www.g2.com/discussions/which-presales-management-platforms-are-considered-the-gold-standard-for-supporting-sales-engineers-through-complex-enterprise-deals)[What Java Development Kit distributions are highest rated for enterprise deployments and performance?](https://www.g2.com/discussions/what-java-development-kit-distributions-are-highest-rated-for-enterprise-deployments-and-performance)[Pros and Cons Details](https://www.g2.com/products/extrahop/reviews?qs=pros-and-cons) [Show MoreShow Less](javascript:void(0);)