[ ExtraHop Reviews ](https://www.g2.com/products/extrahop/reviews) [ ExtraHop Reviews ](https://www.g2.com/products/extrahop/reviews) # ExtraHop Features ##### ## Management (12) Dashboards and Reports Access pre-built and custom reports and dashboards. Workflow Management Creates new or streamlines existing workflows to better handle IT support tickets and service. Administration Console Provides Administration tools/console that are easy to use and learn for routine maintenance tasks Performance Baseline Sets a standard performance baseline by which to compare live network activity. Data Visualization Charts or graphs live and historical network performance for quick status checking and analysis. Path Analysis Gives insights into which specific network paths are performing suboptimally. Real-Time Data Receive data and information in real time Historical Trend Analysis Review data from past periods to reveal recurring tendencies Extensibility Allows for customized support for hybrid environments Workflow Automation Streamline the flow of work processes by establishing triggers and alerts that notify and route information to the appropriate people when their action is required within the compensation process. Unified Visibility Provides all-encompassing display and analysis of environments, resources, traffic, and activity across networks. API Application programming interface that allows for integration with other systems/databases Show More ##### ## Operations (3) Governance Allows users to create, edit, and relinquish user access privileges. Logging and Reporting Provides required reports to manage business. Provides adequate logging to troubleshoot and support auditing. API / Integrations Application Programming Interface - Specification for how the application communicates with other software. API's typically enable integration of data, logic, objects, etc. with other software applications. Show More ##### ## Security Controls (4) Anomaly Detection Constantly monitors acivity related to user behavior and compares activity to benchmarked patterns. Data Loss Prevention Stores data securely either on premise or in an adjacent cloud database to prevent loss of data at rest. Security Auditing Analyzes data associated with security configurations and infrastructure to provide vulnerability insights and best practices. Cloud Gap Analytics Analyzes data associated with denied entries and policy enforcement, giving information of better authentication and security protocols. Show More ##### ## Administration (18) Risk Scoring Provides risk scoring for suspicious activity, vulnerabilities, and other threats. Secrets Management Provides tools for managing authentication credentials such as keys and passwords. Security Auditing Analyzes data associated with security configurations and infrastructure to provide vulnerability insights and best practices. Configuration Management Monitors configuration rule sets and policy enforcement measures and document changes to maintain compliance. Metadata Management Collect and maintain structured information that describes data or content Policy Management Create, manage, and track policies and procedures within an organization Incident Management Manage and track all disruptions and incidents Vulnerability Management Detect (and block) vulnerabilities and threats in your applications based on vulnerability information Compliance Management Track and manage adherence to policies for any service, product, process, or supplier User Management Manage user accounts, profiles, roles, permissions, and other details across applications, devices or networks Deployment Management Manage the processes involved when making the application ready for use Audit Management Plan, schedule, and execute organization's accounts and assets to ensure compliance with policies and laws Patch Management Install software updates and bug fixes remotely Application Security Identify and respond to security threats to developed applications Runtime Container Security Continuously vetting activities within the container application environment including hosts, open ports, protocols and payloads. Compliance Supports compliance with PII, GDPR, HIPPA, PCI, and other regulatory standards. Administration Console - Provides a centralized console for administation tasks and unified control. API / integrations Application Programming Interface - Specification for how the application communicates with other software. API's typically enable integration of data, logic, objects, etc. with other software applications. Show More ##### ## Monitoring (5) Continuous Image Assurance Provides image verification features to establish container approval requirements and continuously monitor for policy violations to identify containers with known vulnerabilities, malware, and other threats. Behavior Monitoring Constantly monitors acivity related to user behavior and compares activity to benchmarked patterns and fraud indicators. Observability Generate insights across IT systems utilizing event metrics, logging, traces, and metadata. Continuous Monitoring Conduct tracking and assessment of application and device behavior without breaks or interruptions Real-Time Monitoring Active monitoring of systems, applications, or networks Show More ##### ## Protection (6) Dynamic Image Scanning Scans application and image source code for security flaws without executing it in a live environment Runtime Protection Monitors container activities and detects threats across containers, networks, and cloud service providers. Workload Protection Protects compute resources across a networks and cloud service providers. Serves as Firewall and prompts additional authentication for suspicious users. Network Segmentation Allows administrative control over network components, mapping, and segmentation. Container Scanning Scans pods/images deployed to production for vulnerabilities or compliance issues Vulnerability Scanning Discover patch statuses and vulnerabilities Show More ##### ## Prevention (5) Intrusion Prevention Enforces security paramaters to prevent unauthorized access. Firewall Protects servers, data center infrastructure and information from a variety of attacks and malware threats. Encryption Provide some level of encryption of information, protecting sensitive data while it exists within the data center. Security hardening Facilitates system and network security by identifying and remediating vulnerabilities Cloud Data Protection Provides high quality and wide scope of in-cloud and offline data security capabilities. Show More ##### ## Detection (6) Intrusion Detection Detects unauthorized access and use of privileged systems. Security Monitoring Detects anomalies in functionality, user accessibility, traffic flows, and tampering. Anti-Malware / Malware Detection Provides multiple techniques and information sources to alert users of malware occurrences. Multi-Network Monitoring Provides monitoring capabilities for multiple networks at once. Asset Discovery Detect new assets as they enter a network and add them to asset inventory. Anomaly Detection Constantly monitors activity related to user behavior and compares activity to benchmarked patterns Show More ##### ## Functionality (12) Performance Monitoring Continuously monitors network performance across the entire span of a network. Alerting Sends alerts via pop-up notifications, texts, emails, or calls regarding network issues or failures. Improvement Suggestions Suggests potential remedies or improvements to slowdowns, errors, or failures. Multi-Network Capability Provides monitoring capabilities for multiple networks at once. Multi-Network Capability Provides monitoring capabilities for multiple networks at once. Anomaly Detection Constantly monitors activity related to user behavior and compares activity to benchmarked patterns. Network Visibility Provides all-encompassing display and analysis of environments, resources, traffic, and activity across networks. Scalability Provides features to allow scaling for large organizations. Incident Alerts Gives alerts when incidents arise. Some responses may be automated, but users will still be informed. Anomaly Detection Constantly monitors activity related to user behavior and compares activity to benchmarked patterns. Continuous Analysis Constantly monitors traffic and activity. Detects anomalies in functionality, user accessibility, traffic flows, and tampering. Decryption Facilitates the decryption of files and data stored using cryptographic algorithms. Show More ##### ## Automation (4) Metadata Management Indexes metadata descriptions for easier searching and enhanced insights Artificial Intelligence & Machine Learning Facilitates Artificial Intelligence (AI) or Machine Learning (ML) to enable data ingestion, performance suggestions, and traffic analysis. Response Automation Reduces time spent remedying issues manually. Resolves common network security incidents quickly. Continuous Analysis Constantly monitors traffic and activity. Detects anomalies in functionality, user accessibility, traffic flows, and tampering. Show More ##### ## Incident Management (3) Incident Logs Information on each incident is stored in databases for user reference and analytics. Incident Alerts Gives alerts when incidents arise. Some responses may be automated, but users will still be informed. Incident Reporting Produces reports detailing trends and vulnerabilities related to their network and infrastructure. Show More ##### ## Analysis (11) File Analysis Identifies potentially malicious files and applications for threats files and applications for abnormalities and threats. Memory Analysis Analyzes infortmation from a computer or other endpoint's memory dump for information removed from hard drive. Registry Analysis Identifies recently accessed files and applications for abnormalities and threats. Email Analysis Parses and/or extracts emails and associated content for malware, phishing, other data that can be used in investigations. Linux Analysis Allows for parsing and/or extraction of artifacts native to Linux OS including but not limited to system logs, SSH activity, and user accounts. Event Analysis Investigate security threats and validate malicious activity Network Analysis Run tests on a network to find the root cause of network issues Incident Reporting Produces reports detailing trends and vulnerabilities related to their network and infrastructur Network Visibility Provides all-encompassing display and analysis of environments, resources, traffic, and activity across networks. Metadata Enrichment Facilitates Artificial Intelligence (AI) such as Machine Learning (ML) to enable data ingestion, performance suggestions, and traffic analysis. Metadata Management Indexes metadata descriptions for easier searching and enhanced insight Show More ##### ## Remediation (4) Incident Reports Produces reports detailing trends and vulnerabilities related to their network and infrastructure. Remediation Suggestions Provides relevant and helpful suggestions for vulnerability remediation upon detection. Response Automation Reduces time spent remedying issues manually. Resolves common network security incidents quickly. Threat Response Identifying, analyzing, and mitigating security issues and taking appropriate action to protect systems and data from potential harm Show More ##### ## Response (3) Incident Alerts Gives alerts when incidents arise. Some responses may be automated, but users will still be informed. Response Orchestration Integrates additional security tools to automate security and incident response processes. Response Automation Reduces time spent remedying issues manually. Resolves common network security incidents quickly Show More ##### ## Detection & Response (5) Response Automation Reduces time spent remedying issues manually. Resolves common network security incidents quickly. Threat Hunting Facilitates the proactive search for emerging threats as they target servers, endpoints, and networks. Rule-Based Detection Allows administrators to set rules specified to detect issues related to issues such as sensitive data misuse, system misconfiguration, lateral movement, and/or non-compliance. Real-Time Detection Constantly monitors system to detect anomalies in real time. Threat Response Identifying, analyzing, and mitigating security issues and taking appropriate action to protect systems and data from potential harm Show More ##### ## Analytics (3) Threat Intelligence Stores information related to common threats and how to resolve them once incidents occur. Artificial Intelligence & Machine Learning Facilitates Artificial Intelligence (AI) such as Machine Learning (ML) to enable data ingestion, performance suggestions, and traffic analysis. Data Collection Collects information from multiple sources to cross reference and build contextual to correlate intelligence. Show More ##### ## Generative AI (4) AI Text Summarization Condenses long documents or text into a brief summary. AI Text Generation Allows users to generate text based on a text prompt. AI Text Summarization Condenses long documents or text into a brief summary. Generative AI Use AI to generate content in the form of text, images, videos, etc. Show More ##### ## Monitoring - Network Monitoring (4) 360-Degree Network Visibility Offers full observability of all network environments, including on-premises, cloud, SD-WAN, WLAN, and edge computing. Automated Network Discovery Automatically detects and maps all network devices and architectures, reducing manual effort and improving visibility. Real-Time Monitoring Provides true real-time network monitoring to detect and resolve issues instantly, rather than relying on near-time data. Bandwidth Monitoring Measure the actual bandwidth available on a local network (LAN or WiFi) Show More ##### ## Analytics - Network Monitoring (2) Predictive Performance Analytics Uses AI-driven analysis of historical and real-time data to forecast network issues before they impact performance. Packet & Flow Analysis Combines packet and flow analysis techniques to provide a comprehensive view of network traffic and performance. Show More ##### ## Security - Network Monitoring (16) Encrypted Data Transmission Ensures all monitored network data is securely encrypted both in transit and at rest. Zero Trust and Identity Management Supports integration with Zero Trust frameworks and identity management solutions to enhance network security. Integrated Network Security Unifies network performance monitoring with security intelligence to identify and mitigate threats in real-time. Service Level Agreement (SLA) Management Set and monitor service level agreements to ensure timely response and resolution Asset Lifecycle Management Manage assets throughout their lifecycle to optimize profit Application Management Track, manage and store the applications of potential future members, customers or candidates Configuration Management Identify component attributes like servers, hardware, software, and manage relationships across all services Data Storage Management Manage and store data in a database Calendar Management Track and manage schedules and meetings via an integrated calendar Workflow Management Create, design and manage workflows for repetitive tasks Compliance Management Track and manage adherence to policies for any service, product, process, or supplier Inventory Management Track and manage inventory levels to maintain proper supply Remote Monitoring & Management Remotely monitor and manage client networks, endpoints, systems, and devices via locally installed applications Capacity Management Monitor service demand and performance to plan for adequate resources that meet business needs Change Management Track and monitor efficient handling of all changes/transitions User Management Manage user accounts, profiles, roles, permissions, and other details across applications, devices or networks Show More ##### ## Network Performance - Network Monitoring (2) Dynamic Network Optimization Continuously analyzes and adjusts network configurations to optimize performance and reliability. Automated Tasks Routing Automates routine network monitoring tasks, reducing operational overhead and human error. Show More ##### ## AI Automation - Network Monitoring (3) Machine Learning-Based Anomaly Detection Uses machine learning to identify network anomalies, preventing security and performance issues before they escalate. Self-Healing Networks Automates corrective actions for common network issues, reducing downtime and manual intervention. Predictive Network Maintenance Leverages AI to anticipate hardware failures, capacity issues, and performance bottlenecks before they occur. Show More ##### ## Agentic AI - Intrusion Detection and Prevention Systems (IDPS) (2) Autonomous Task Execution Capability to perform complex tasks without constant human input Proactive Assistance Anticipates needs and offers suggestions without prompting Show More ##### ## Agentic AI - Extended Detection and Response (XDR) Platforms (3) Autonomous Task Execution Capability to perform complex tasks without constant human input Proactive Assistance Anticipates needs and offers suggestions without prompting Decision Making Makes informed choices based on available data and objectives Show More ##### ## Agentic AI - Cloud Detection and Response (CDR) (3) Autonomous Task Execution Capability to perform complex tasks without constant human input Proactive Assistance Anticipates needs and offers suggestions without prompting Decision Making Makes informed choices based on available data and objectives Show More ##### ## Agentic AI - Network Monitoring (8) Autonomous Task Execution Capability to perform complex tasks without constant human input Multi-step Planning Ability to break down and plan multi-step processes Cross-system Integration Works across multiple software systems or databases Adaptive Learning Improves performance based on feedback and experience Natural Language Interaction Engages in human-like conversation for task delegation Proactive Assistance Anticipates needs and offers suggestions without prompting Decision Making Makes informed choices based on available data and objectives Third-Party Integrations Set up connections to third-party platforms to improve business processes Show More ##### ## Services - Network Detection and Response (NDR) (1) Managed Services Offers managed network detection and response services. Show More ##### ## Services - Extended Detection and Response (XDR) (1) Managed Services Offers managed detection and response services. Show More ##### ## Services - Cloud Detection and Response (CDR) (1) Managed Services Offers managed detection and response services. Show More ##### ## Additional Functionality (151) Activity Dashboard Dashboard to view the status of ongoing processes, identify current incidents and track past activities Reporting/Analytics View and track pertinent metrics to find patterns and gain insights from data Threat Intelligence Information to prevent, understand and identify cyber threats AI Copilot A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users Secure Data Storage Securely stores data to prevent data loss or breaches Case Management Work on a set of tasks related to a particular charge, patient, legal issue or any other complex entity or process Text Extraction Process digital photos and/or scans of various document types and extract text from images (JPG, BMP, TIFF, GIF) Search/Filter Search and filter data across systems to locate required information by entering keywords or certain criteria Multiple File Format Support Supports multiple file formats, such as Doc, Docx, PDF, HTML, etc. Prioritization Arrange tasks based on the level of priority or urgency Web Data Extraction Extract data from any online source. Reporting & Statistics Collection, analysis, and representation of numerical data and generation of reports to understand various patterns Real-Time Chat Engage in direct, instant messaging with customers, users, etc. Optical Character Recognition Ability to recognize printed or written text within digital images or scanned documents Third-Party Integrations Set up connections to third-party platforms to improve business processes Access Management Control and manage access to company resources Task Management Create, manage and track all task activities and progression Data Extraction Automatically retrieve and pull information from documents, websites, images, data sets, and other sources Data Security Protect sensitive data for digital privacy Data Import/Export Import and export data to and from software applications Incident Management Manage and track all disruptions and incidents User Management Manage user accounts, profiles, roles, permissions, and other details across applications, devices or networks Web Threat Management API Application programming interface that allows for integration with other systems/databases IT Incident Management Manage incidents related to outages or breaches in functionality of IT systems Data Visualization Graphical representation of data Data Recovery Ability to restore deleted, hidden, or lost data from an email server/system Vulnerability/Threat Prioritization Classify levels of threat and organize actions based on priorities Real-Time Reporting Active reporting of data and metrics Investigation Management Oversee people and resources to carry out an investigation Incident Reporting Report and update incidents related to health or workplace injuries that occur on a job or en route to a job site Messaging Communicate using messages within the system Endpoint Protection Protect users working remotely and provide secure environments for personal devices to access company programs Analytics Tools for the systematic analysis of various types of data or statistics Dashboard Assembly of graphs and charts for visualizing and tracking statistics/metrics Threat Protection Protect incoming and outgoing communications against malware, spam, display spoofing, and other threats Access Control Regulate who can view information within the system Network Monitoring Tracks and makes accessible data on the health of servers and other network components. Behavioral Analytics Track and analyse user behavior within a system or network Customizable Dashboard Alter the layout and content of dashboards Access Controls/Permissions Define levels of authorization for access to specific files or systems Alerts/Notifications Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges Two-Factor Authentication Extra layer of security that requires not only a password and username but also something specific to that user Third-Party Integrations Set up connections to third-party platforms to improve business processes Intrusion Detection System Identify and alert about security breaches by third parties Continuous Integration A process to automatically integrate code changes from multiple contributors into a shared repository Customizable Reports Alter the layout and content of reports Continuous Delivery Process of building and deploying software from the build to the production environment Activity Dashboard Dashboard to view the status of ongoing processes, identify current incidents and track past activities Security Testing Uncovers vulnerabilities of the system and determines whether system data and resources are protected from possible intruders Audit Trail A record of all activities within the system, including user access, changes made, etc. Risk Alerts Notifying as a warning or reminder of a potential or imminent hazard Access Controls/Permissions Define levels of authorization for access to specific files or systems API Application programming interface that allows for integration with other systems/databases AI Copilot A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users Continuous Deployment A process to automatically release code changes from repository to production environment Threat Response Identifying, analyzing, and mitigating security issues and taking appropriate action to protect systems and data from potential harm Reporting & Statistics Collection, analysis, and representation of numerical data and generation of reports to understand various patterns Authentication Verify the identity of users/devices to enable secure access Encryption Convert data into a code for security Threat Intelligence Information to prevent, understand and identify cyber threats Risk Analysis Analyze potential risks across the organization For DevSecOps For development, security, and operations teams Generative AI Use AI to generate content in the form of text, images, videos, etc. Reporting/Analytics View and track pertinent metrics to find patterns and gain insights from data Container Isolation Isolating applications from their host and from each other to protect against vulnerabilities Risk Assessment Initiate collection and analysis of known risks Search/Filter Search and filter data across systems to locate required information by entering keywords or certain criteria Vulnerability/Threat Prioritization Classify levels of threat and organize actions based on priorities Mobile Access Access software remotely via mobile devices IT Asset Management Managing inventories and tracking changes to hardware and software configurations Reporting/Analytics View and track pertinent metrics to find patterns and gain insights from data Data Import/Export Import and export data to and from software applications Encryption Convert data into a code for security Remediation Management Identify and orchestrate execution of actions needed to restore systems to optimal conditions Root Cause Analysis Identify and analyse the reasons behind accidents Customization Create labels for products that contain required information such as colors, sizes, dates, etc. Workflow Management Create, design and manage workflows for repetitive tasks Incident Management Manage and track all disruptions and incidents User Management Manage user accounts, profiles, roles, permissions, and other details across applications, devices or networks Behavioral Analytics Track and analyse user behavior within a system or network Ransomware Protection Protects systems from ransomware attacks and mitigates attack risks Activity Dashboard Dashboard to view the status of ongoing processes, identify current incidents and track past activities AI Copilot A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users Data Security Protect sensitive data for digital privacy Authentication Verify the identity of users/devices to enable secure access Firewalls Monitor and control network/web traffic based on predetermined rules, protecting against unauthorized access and threats Collaboration Tools Provides a channel for team members to share media files, communicate, and work together Endpoint Protection Protect users working remotely and provide secure environments for personal devices to access company programs Cloud Application Security Identify and respond to security threats to cloud applications Third-Party Integrations Set up connections to third-party platforms to improve business processes Access Controls/Permissions Define levels of authorization for access to specific files or systems Alerts/Notifications Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges Data Analysis Tools Analyze survey results via statistical testing or crosstabs directly within the software Risk Management Process of identifying, evaluating, mitigating, addressing and reporting on potential risks or uncertainties Generative AI Use AI to generate content in the form of text, images, videos, etc. Network Scanning Scanning networks to identify security threats Vulnerability Management Detect (and block) vulnerabilities and threats in your applications based on vulnerability information Search/Filter Search and filter data across systems to locate required information by entering keywords or certain criteria Audit Trail A record of all activities within the system, including user access, changes made, etc. Collaboration Tools Provides a channel for team members to share media files, communicate, and work together Generative AI Use AI to generate content in the form of text, images, videos, etc. Mobile Access Access software remotely via mobile devices AI Copilot A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users Configurable Workflow Configure existing workflows to meet your organization's needs Data Extraction Automatically retrieve and pull information from documents, websites, images, data sets, and other sources Risk Assessment Initiate collection and analysis of known risks Charting Manage patient documentation describing all clinical interactions, diagnoses, procedures, medications, etc. Compliance Tracking Track and report regulatory data to either internal management or external stakeholders Reporting & Statistics Collection, analysis, and representation of numerical data and generation of reports to understand various patterns Self-Updating Maps Dynamic maps that update whenever network changes are made IT Asset Tracking Monitor the movement of one or more IT assets throughout the organization Dependency Tracking Track and manage task relationships and dependencies Data Import/Export Import and export data to and from software applications Data Connectors Connect to big data sources Drag & Drop Assemble applications and processes by dragging over and arranging pre-built components Map Exporting Export a map or layout to share API Application programming interface that allows for integration with other systems/databases Color Codes/Icons A way to visually represent data where different categories of items are marked with different colors Uptime Reporting Track the availability time for a designated network or website over a given period of time Document Storage Store and organize documents in a centralized system Activity Dashboard Dashboard to view the status of ongoing processes, identify current incidents and track past activities Scheduling Plan availability and assign specific time slots for tasks and resources Event Logs A chronological record of actions or occurrences within a network, software, or process Customizable Reports Alter the layout and content of reports Web Traffic Reporting Collect and analyze traffic data about website visitors Downtime Tracking Track unplanned equipment or network failures Threshold Alerts Alerts for when traffic utilization or network performance deviates from pre-defined threshold settings Simple Network Management Protocol (SNMP) Internet standard protocol for collecting information about managed devices on a network Access Controls/Permissions Define levels of authorization for access to specific files or systems Troubleshooting Take actions to troubleshoot issues for networks, devices, etc. Maintenance Scheduling Schedule predetermined or ad hoc maintenance services and labor requests Network Mapping Network topology maps providing infrastructure visualization for devices, connections, configurations, etc. Performance Metrics A set of indicators that tracks the performance of networks, applications, systems, teams, etc. Dashboard Assembly of graphs and charts for visualizing and tracking statistics/metrics Search/Filter Search and filter data across systems to locate required information by entering keywords or certain criteria Vulnerability Scanning Discover patch statuses and vulnerabilities Virtualization Create a virtual version of operating systems, storage devices, or computer network resources Baseline Manager Define network parameters and threshold settings to monitor network health and take necessary precautions Real-Time Notifications Notifications that are delivered to users as soon as an event occurs Mobile Alerts Notifications via mobile devices Alerts/Escalation System alerts about the need to escalate an issue or request Bug/Issue Capture The creation of a bug/issue ticket, submitted by a team member, customer or end user Mobile Network Troubleshooting Issue Auditing Inspecting the issue resolution process for compliance with related systems and regulatory guidelines Customizable Dashboard Alter the layout and content of dashboards Email Alerts Receive and/or send email notifications for urgent updates, requests, or other information Anti Virus Prevents, detects and removes malware Diagnostic Tools Access client's system information, including hardware and software configuration, to perform diagnostics Remote Update/Installation Deploy updates or install new software remotely Remote Access/Control Access work applications remotely, for when working away from the office and/or traveling Show More ## Top-Rated Alternatives [ ![Corelight](https://images.g2crowd.com/uploads/product/hd_favicon/16e5f0e16ef9e5c8b03223fc2ebd08ae/corelight.svg "Corelight") Corelight 4.6/5(20) ](https://www.g2.com/products/corelight/reviews) [ ![IBM QRadar SIEM](https://images.g2crowd.com/uploads/product/hd_favicon/7d76baae79036d41d25c4a6c46e5af43/ibm-ibm-qradar-siem.svg "IBM QRadar SIEM") IBM QRadar SIEM 4.4/5(338) ](https://www.g2.com/products/ibm-ibm-qradar-siem/reviews) [ ![Dynatrace](https://images.g2crowd.com/uploads/product/hd_favicon/1512659484/dynatrace.svg "Dynatrace") Dynatrace 4.5/5(1,366) ](https://www.g2.com/products/dynatrace/reviews) [ View All Alternatives ](https://www.g2.com/products/extrahop/competitors/alternatives) ExtraHop Comparisons ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_1c049e97363993e399a92bc1a8bcb96e/vectra-ai-platform.png "Product Avatar Image") Vectra AI Platform 4.3/5(20) [ Compare Now ](https://www.g2.com/compare/extrahop-vs-vectra-ai-platform) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_044cfbf6c03d107e5357e29e95fd9136/dynatrace.png "Product Avatar Image") Dynatrace 4.5/5(1,366) [ Compare Now ](https://www.g2.com/compare/dynatrace-vs-extrahop) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_271865c827673867bf2618b0fdfc2103/trellix-network-detection-and-response-ndr.png "Product Avatar Image") Trellix Network Detection... 4.1/5(66) [ Compare Now ](https://www.g2.com/compare/extrahop-vs-trellix-network-detection-and-response-ndr) ##### Categories on G2 [ Network Monitoring ](https://www.g2.com/categories/network-monitoring)[ Extended Detection and Response (XDR) Platforms ](https://www.g2.com/categories/extended-detection-and-response-xdr-platforms)[ Cloud Workload Protection Platforms ](https://www.g2.com/categories/cloud-workload-protection-platforms) [ Container Security ](https://www.g2.com/categories/container-security-tools)[ Network Traffic Analysis (NTA) ](https://www.g2.com/categories/network-traffic-analysis-nta)[ Cloud Detection and Response (CDR) ](https://www.g2.com/categories/cloud-detection-and-response-cdr)[ Network Detection and Response (NDR) ](https://www.g2.com/categories/network-detection-and-response-ndr)[ Intrusion Detection and Prevention Systems (IDPS) ](https://www.g2.com/categories/intrusion-detection-and-prevention-systems-idps)[ Digital Forensics ](https://www.g2.com/categories/digital-forensics) Show More ##### Explore More [ What is the best tool for recording webinars and tutorials? ](https://www.g2.com/discussions/what-is-the-best-tool-for-recording-webinars-and-tutorials)[ What connected worker platform works best for a mid-sized manufacturing company that wants real-time visibility on the shop floor without a 12-month digital transformation project? ](https://www.g2.com/discussions/what-connected-worker-platform-works-best-for-a-mid-sized-manufacturing-company-that-wants-real-time-visibility-on-the-shop-floor-without-a-12-month-digital-transformation-project)[ Which cloud edge security platforms are enterprises choosing for securing IoT and edge devices that sit outside the traditional network perimeter? ](https://www.g2.com/discussions/which-cloud-edge-security-platforms-are-enterprises-choosing-for-securing-iot-and-edge-devices-that-sit-outside-the-traditional-network-perimeter) [ What are the best reputation management services platforms for teams evaluating solutions before full commitment? ](https://www.g2.com/discussions/what-are-the-best-reputation-management-services-platforms-for-teams-evaluating-solutions-before-full-commitment)[ Which Google Workspace academic tools help organizations achieve streamlined workflows and better operational insights? ](https://www.g2.com/discussions/which-google-workspace-academic-tools-help-organizations-achieve-streamlined-workflows-and-better-operational-insights)[ Pros and Cons Details ](https://www.g2.com/products/extrahop/reviews?qs=pros-and-cons) Show More [ What is the best tool for recording webinars and tutorials? ](https://www.g2.com/discussions/what-is-the-best-tool-for-recording-webinars-and-tutorials)[ What connected worker platform works best for a mid-sized manufacturing company that wants real-time visibility on the shop floor without a 12-month digital transformation project? ](https://www.g2.com/discussions/what-connected-worker-platform-works-best-for-a-mid-sized-manufacturing-company-that-wants-real-time-visibility-on-the-shop-floor-without-a-12-month-digital-transformation-project)[ Which cloud edge security platforms are enterprises choosing for securing IoT and edge devices that sit outside the traditional network perimeter? ](https://www.g2.com/discussions/which-cloud-edge-security-platforms-are-enterprises-choosing-for-securing-iot-and-edge-devices-that-sit-outside-the-traditional-network-perimeter) [ What are the best reputation management services platforms for teams evaluating solutions before full commitment? ](https://www.g2.com/discussions/what-are-the-best-reputation-management-services-platforms-for-teams-evaluating-solutions-before-full-commitment)[ Which Google Workspace academic tools help organizations achieve streamlined workflows and better operational insights? ](https://www.g2.com/discussions/which-google-workspace-academic-tools-help-organizations-achieve-streamlined-workflows-and-better-operational-insights)[ Pros and Cons Details ](https://www.g2.com/products/extrahop/reviews?qs=pros-and-cons)