--- title: ExtraHop Reviews meta\_title: 'ExtraHop Reviews 2026: Details, Pricing, & Features | G2' meta\_description: Filter 68 reviews by the users' company size, role or industry to find out how ExtraHop works for a business like yours. aggregate\_rating: rating\_value: 4.6 review\_count: 68 scale: '5' date\_modified: '2026-08-07' parent\_category: name: Network Security url: https://www.g2.com/categories/network-security --- # ExtraHop Reviews & Product Details Claimed ###### Profile Status This profile is currently managed by ExtraHop but has limited features. Are you part of the ExtraHop team? [Upgrade your plan](https://sell.g2.com) to enhance your branding and engage with visitors to your profile! ExtraHop is the cybersecurity partner enterprises trust to reveal cyber risk and build business resilience. The ExtraHop RevealX platform for network detection and response and network performance management uniquely delivers the instant visibility and unparalleled decryption capabilities organizations need to expose the cyber risks and performance issues that other tools can’t see. When organizations have full network transparency with ExtraHop, they can investigate smarter, stop threats faster, and keep operations running. RevealX deploys on premises or in the cloud. It addresses the following use cases: - Ransomware - Zero trust - Software supply chain attacks - Lateral movement and C2 communication - Security hygiene - Network and Application Performance Management - IDS - Forensics and more A few of our differentiators: Continuous and on-demand PCAP: Full packet processing is superior to NetFlow and yields higher quality detections. Strategic decryption across a variety of protocols, including SSL/TLS, MS-RPC, WinRM, and SMBv3, gives you better visibility into early-stage threats hiding in encrypted traffic as they attempt to move laterally across your network. Protocol coverage: RevealX decodes more than 70 network protocols. Cloud-scale machine learning: Rather than relying on limited "on-box" compute power for analysis and detections, RevealX uses sophisticated cloud-hosted and cloud-scale machine learning workloads to identify suspicious behavior in real time and create high-fidelity alerts. ExtraHop was named a Leader in The Forrester Wave™: Network Analysis and Visibility, Q2 2023. Key Technology Integration and Go-to-Market Partners: CrowdStrike: RevealX integrates with CrowdStrike Falcon® LogScale, Falcon Insight XDR, Falcon Threat Graph, and Falcon Intelligence. Splunk SOAR AWS Google Cloud Security Founded in 2007, ExtraHop is privately held and headquartered in Seattle, Wash. To learn more, visit www.extrahop.com. * * * Seller [ExtraHop Networks](https://www.g2.com/sellers/extrahop-networks) Discussions [ExtraHop Community](https://www.g2.com/products/extrahop/discuss) Languages Supported English Solution Type All-in-One Overview by Meridith Levinson Show More ## Pricing Pricing provided by ExtraHop. ### AWS SaaS Sensor - 1 Gbps $5.04 HOUR ### AWS SaaS Sensor - 10 Gbps $18.76 HOUR [ View More Pricing Information ](https://www.g2.com/products/extrahop/pricing) ## Top-Rated Alternatives [ ![Corelight](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Corelight") Corelight 4.6/5(20) ](https://www.g2.com/products/corelight/reviews) [ ![IBM QRadar SIEM](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "IBM QRadar SIEM") IBM QRadar SIEM 4.4/5(338) ](https://www.g2.com/products/ibm-ibm-qradar-siem/reviews) [ ![Dynatrace](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Dynatrace") Dynatrace 4.5/5(1,366) ](https://www.g2.com/products/dynatrace/reviews) [ View All Alternatives ](https://www.g2.com/products/extrahop/competitors/alternatives) ## User Insights Average based on 68 real user reviews. Implementation Time 2 months Perceived Cost $$$$$ [Log in to unlock pricing and user insights](/login) ![Verified User in Insurance](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Insurance") AI Verified User in Insurance Mid-Market (51-1000 emp.) 7/31/2025 "Complete visibility on network activity" 5/5 What do you like best about ExtraHop? What I like most about ExtraHop is the ability to monitor and analyze all traffic passing through the network. Generally, companies have strong endpoint controls through tools like EDR; however, network is often limited to firewalls with intrusion detection and intrusion prevention rules. Where I find ExtraHop excels is through complete network visibility by mapping assets, learning network traffic and spotting anomalies, and giving Security Operations teams visibility into what is occurring on their network. ExtraHop is easy to deploy through either and appliance on physical networks our through a virtual appliance in the cloud. The Customer Success teams are deeply knowledgable and provide great support to customers. Review collected by and hosted on G2.com. What do you dislike about ExtraHop? Not a dislike but a feature I would like to see is ExtraHop move towards prevention. Currently, the product is good at identifying and detecting suspicious or malicious activity. Prevention can be achieved through integration with tools but it would be nice to have these native to ExtraHop. Review collected by and hosted on G2.com. What problems is ExtraHop solving and how is that benefiting you? Whenever we perform penetration tests, ExtraHop is always the first tool to detect the activity. Often times, the penetration testers will start their campaigns performing reconnaissance and trying to remain stealthy. Because they are not attempting to exploit vulnerabilities at this stage and may be using legitimate system tools, these actions would usually go unnoticed. By inspecting all network traffic, ExtraHop is quick to determine unusual activity on the network host even if it is not a managed device. The network traffic can be inspected by SOC teams and actions can be taken to contain the suspicious device. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerSource: Organic JH Jeff H. Small-Business (50 or fewer emp.) 2/5/2024 "One stop shop for network detections and notifications Easy to use and easy to understand." 5/5 What do you like best about ExtraHop? I like that ExtraHop identifies the alert in a mannert that is easy to follow. It gives the risk level of the alert, shows the metrics, breaks down the records for the incident, shows the packets involved, and even includes a pcap of the packets that can be used in WireShark to analyze further. It also gives the Mitre techniques as well as mitigation options to mitigate the attack. Review collected by and hosted on G2.com. What do you dislike about ExtraHop? I haven't found to many things I dislike about ExtraHop. It is not an automated system that will block an attack as it is happening, but it does e-mail out alerts so that I have the ability to begin investigating the incident as soon as possible leading to a faster mitigation scenario. Review collected by and hosted on G2.com. What problems is ExtraHop solving and how is that benefiting you? As an ISP our network security is very important. ExtraHop is a tool to help ensure we are seeing any attack in realtime, giving us the ability to troubleshoot and mitigate the issue in a speedy manner. We have the abilty to isolate traffic quickly when an issue arises. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: Seller invite ![Verified User in Telecommunications](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Telecommunications") IT Verified User in Telecommunications Enterprise (\> 1000 emp.) 2/28/2024 "RevealX from a daily user perspective" 5/5 What do you like best about ExtraHop? Overall, RevealX is easy to use and provides great visibility into the network. ExtraHop has very thorough documentation and if you can't find what you're looking for the support and training teams are always willing to help. I've experienced a quick turnaround for questions around the product. The training team is excellent at maintain user engagement in a virtual setting. The product is also super customizable which is great for unique use and abuse cases. I use RevealX almost daily, my top three pros from a technical perspective are the increased visibility of the network, customizing doesn't mean learning a new language, and low barrier to entry for analysts who are new to networking and security. Review collected by and hosted on G2.com. What do you dislike about ExtraHop? My top three cons for the product are that when adjusting baseline metrics, the baseline completely resets and there is a 3-4 week period before the baseline is calculated. Going off the above, it does not perform "lookback" searches for detections, meaning I can't craft a detection today and then see if the logic matches any stored data in the tool. Some of the customization areas need a bit of work so that they tie into the other features of the product. Review collected by and hosted on G2.com. What problems is ExtraHop solving and how is that benefiting you? ExtraHop enables us to have better visibility. This has resulted in us making configuration changes on hardware and network devices to decrease our attack surface. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: Seller invite ![Verified User in Higher Education](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Higher Education") AH Verified User in Higher Education Mid-Market (51-1000 emp.) 2/21/2024 "ExtraHOP provides visibility to quickly resolve performance and security issues" 5/5 What do you like best about ExtraHop? ExtraHOP provides great visibility for performance and security issues in our environment. Many of the detections, dashboards, and device groups provide easy starting points for learning to use extraHOP. Then, building custom dashboards and detections is very simple. We use extraHOP every day to assist us resolving problemes. The customer support and partnership we have with extraHOP has been key to our success. Review collected by and hosted on G2.com. What do you dislike about ExtraHop? You need to really understand your environment from the network layer to the application layers. extraHOP provides many options, but you need to determine what works best for your environment. It does take some time for planning the implementation properly but the planning and design time is worth it. Review collected by and hosted on G2.com. What problems is ExtraHop solving and how is that benefiting you? extraHOP has helped us solve authentication issues, storage issues, server issues, network performance issues, security problems and other application problems. We had many blind spots and extraHOP has helped us gain visibility to many of our services. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: Seller invite ![Verified User in Internet](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Internet") AI Verified User in Internet Small-Business (50 or fewer emp.) 2/14/2024 "you get what you pay for" 5/5 What do you like best about ExtraHop? We've tested the product using reputable 3rd party pentesters manual and automated. And we've compared it with other products. The difference between seeing that you are being compromised and not seeing it is huge. How do you choose a competitive product that is cheaper if it doesn't see that you are being compromised? Or how do you rest at night knowing that you've done everything you can to safeguard your network? Extrahop's visibility is far above the rest. Review collected by and hosted on G2.com. What do you dislike about ExtraHop? It is pricey. So if you are Misinformed and think that backups, firewalls, and anti-virus solutions are going to save you then you aren't going to understand the price of this product. Review collected by and hosted on G2.com. What problems is ExtraHop solving and how is that benefiting you? Mainly keeping our company from experiencing a ransomware event. We have staff dedicated to keeping their eye on the product and chasing down alerts 24/7/365. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: Seller invite ![Verified User in Computer Software](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Computer Software") AC Verified User in Computer Software Mid-Market (51-1000 emp.) 1/3/2024 "ExtraHop - Executive Network monitoring tool" 4/5 What do you like best about ExtraHop? With ExtraHop deployed in our network we now have real-time visibiltity and insights into network traffice and performance. Helps us troubleshoot, optimize and secure the network. ExtraHop platform is very easy to use, and has an intuitive easy to follow layout helping us review detections quickly. ExtraHop delivered on promises and provided excelent customer service. This is a tool that I use everyday to keep on eye on the network security. Deploying the devices in the infrastructure can be as simple as connecting to the network and mirroing all traffic to the device. This allows quick visability on the overall network performance and health. Review collected by and hosted on G2.com. What do you dislike about ExtraHop? It can be expensive to deploy, can generate many false positives and has limited integrations into other tools and platforms. Review collected by and hosted on G2.com. What problems is ExtraHop solving and how is that benefiting you? ExtraHop is helping us monitor network security, identify bottlenecks and improve overal performance and security related to overall network hygine. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: Seller invite KM Khaja Ahmed M. Enterprise (\> 1000 emp.) 1/30/2024 "Overall good product but needs more flexibility." 3.5/5 What do you like best about ExtraHop? 1. Seamless monitoring. 2. Simple and straightforward rule tuning. 3. Dashboard capabilities Review collected by and hosted on G2.com. What do you dislike about ExtraHop? 1. Lot of false positives. 2. Machine learning model is not flexible to the requirements. 3. Sometimes performance issues. Review collected by and hosted on G2.com. What problems is ExtraHop solving and how is that benefiting you? Its providing detections that are required to ensure all the permiters are covered. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: Seller invite ![Verified User in Hospital & Health Care](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Hospital & Health Care") UH Verified User in Hospital & Health Care Enterprise (\> 1000 emp.) 11/9/2022 "Network security monitoring" 4/5 What do you like best about ExtraHop? ExtraHop provides valuable insight into network activities and alerts on anomalies that you can't get from just monitoring logs. Review collected by and hosted on G2.com. What do you dislike about ExtraHop? Number one issue with ExtraHop is SIEM integration if there is no native connector available. building it through a java script trigger is not user friendly. Number two issue is threat feeds. We have a high-fidelity threat feed we'd like to add, but we have to make a cludgey system where we download the feed, gzip it, then upload it back to ExtraHop. Please build in native STIX/TAXII feeds to the product. I'd say trigger complexity is also a downside to ExtraHop. Not many security analysts will be able to understand and write the java code necessary for triggers. It would be nice to have a building block method for triggers where novices could build out most of it with pre-defined blocks fo code, something like a visual workflow. Review collected by and hosted on G2.com. What problems is ExtraHop solving and how is that benefiting you? There are activities that only occur on the network and will not show up in logs. ExtraHop is able to perform threat and anomaly detection on endopint and application communications that you won't get from your other security applications. Packet capture is not an easy system to setup. If you purchase the ETA, you have access to valuable packet information that can make a difference in a incident investigation. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: G2 invite on behalf of seller RT Rajiv T. Senior IT Security Engineer Mid-Market (51-1000 emp.) 11/17/2022 "Single Pane Visibility into the unknown parts of the network" 4.5/5 What do you like best about ExtraHop? Extrahop looks at both on-prem and cloud traffic. It analyzes packets for security anomalies at a scale that I have not seen happen before. It also does application performance at a level that gives a very detailed visibility Review collected by and hosted on G2.com. What do you dislike about ExtraHop? I do hope they would come up with their proprietary agents for the cloud nodes instead of using rpcapd, which I find can be a bit unstable especially in high-traffic scenarios Review collected by and hosted on G2.com. What problems is ExtraHop solving and how is that benefiting you? Extrahop was able to show us some east -west traffic that should not have been happening. We also had a constant stream of complaints about the datawarehouse being slow and always having the network blamed. But once we had Extrahop we were able to pin-point and prove that the delay was happening at the database level not at the network layer. We could never have seen this without Extrahop Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerSource: Organic ![Dev S.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Dev S.") DS Dev S. Security Lead Enterprise (\> 1000 emp.) 11/16/2022 "Extrahop Reveal(x) 360- An absolute must for Network Visibility" 5/5 What do you like best about ExtraHop? Extrahop provides East-West network visibility and can customize rules, providing deep packet inspection capability to our security team. Extrahop Packet capturing feature plays a vital role in network forensics. Review collected by and hosted on G2.com. What do you dislike about ExtraHop? Extrahop should extend its partnership with threat researchers and vendors to enrich its intel feeds and database for actionable intel on detections. Also, extend its partnership for API integration with tools like Tanium/SCCM, PAN firewalls etc Review collected by and hosted on G2.com. What problems is ExtraHop solving and how is that benefiting you? Extrahop provides visibility for network traffic that helps with East-West network segmentation. Extrahop Reveal(x) 360 helps during investigations and One-Click containment during an Incident reducing the response time to a greater extent. Review collected by and hosted on G2.com. Show More 11/7/2024 Current UserValidated ReviewerIncentivizedSource: G2 invite on behalf of seller ## Pricing Options Pricing provided by ExtraHop. ### AWS SaaS Sensor - 1 Gbps $5.04 HOUR ### AWS SaaS Sensor - 10 Gbps $18.76 HOUR ### AWS SaaS Sensor - 5 Gbps $12.34 HOUR [ View More Pricing Information ](https://www.g2.com/products/extrahop/pricing) ExtraHop Comparisons ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_1c049e97363993e399a92bc1a8bcb96e/vectra-ai-platform.png "Product Avatar Image") Vectra AI Platform 4.3/5(20) [ Compare Now ](https://www.g2.com/compare/extrahop-vs-vectra-ai-platform) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_044cfbf6c03d107e5357e29e95fd9136/dynatrace.png "Product Avatar Image") Dynatrace 4.5/5(1,366) [ Compare Now ](https://www.g2.com/compare/dynatrace-vs-extrahop) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_271865c827673867bf2618b0fdfc2103/trellix-network-detection-and-response-ndr.png "Product Avatar Image") Trellix Network Detection... 4.1/5(67) [ Compare Now ](https://www.g2.com/compare/extrahop-vs-trellix-network-detection-and-response-ndr) ##### ##### ExtraHop Features Detection Security Monitoring Multi-Network Monitoring Asset Discovery Functionality Network Visibility Scalability Incident Management Incident Alerts Incident Reporting Analysis Incident Reporting Network Visibility Metadata Enrichment [ View More Features ](https://www.g2.com/products/extrahop/features) ##### Categories on G2 [Network Monitoring](https://www.g2.com/categories/network-monitoring)[Extended Detection and Response (XDR) Platforms](https://www.g2.com/categories/extended-detection-and-response-xdr-platforms)[Cloud Workload Protection Platforms](https://www.g2.com/categories/cloud-workload-protection-platforms) [Network Monitoring](https://www.g2.com/categories/network-monitoring)[Extended Detection and Response (XDR) Platforms](https://www.g2.com/categories/extended-detection-and-response-xdr-platforms)[Cloud Workload Protection Platforms](https://www.g2.com/categories/cloud-workload-protection-platforms)[Container Security](https://www.g2.com/categories/container-security-tools)[Network Traffic Analysis (NTA)](https://www.g2.com/categories/network-traffic-analysis-nta)[Cloud Detection and Response (CDR)](https://www.g2.com/categories/cloud-detection-and-response-cdr)[Network Detection and Response (NDR)](https://www.g2.com/categories/network-detection-and-response-ndr)[Intrusion Detection and Prevention Systems (IDPS)](https://www.g2.com/categories/intrusion-detection-and-prevention-systems-idps)[Digital Forensics](https://www.g2.com/categories/digital-forensics) [Show MoreShow Less](javascript:void(0);) ##### Explore More [Which encryption key management platforms automate certificate lifecycle and key rotation scheduling?](https://www.g2.com/discussions/which-encryption-key-management-platforms-automate-certificate-lifecycle-and-key-rotation-scheduling%20)[Should teams choose UKG Marketplace integrations over custom development for connecting UKG with other enterprise systems?](https://www.g2.com/discussions/should-teams-choose-ukg-marketplace-integrations-over-custom-development-for-connecting-ukg-with-other-enterprise-systems)[Which application release orchestration tools integrate well with existing Kubernetes and Helm-based infrastructure so teams do not have to choose between their orchestration tool and their deployment platform?](https://www.g2.com/discussions/which-application-release-orchestration-tools-integrate-well-with-existing-kubernetes-and-helm-based-infrastructure-so-teams-do-not-have-to-choose-between-their-orchestration-tool-and-their-deployment-platform) [Best EOR software for tech startups](https://www.g2.com/discussions/what-s-the-best-eor-software-for-tech-startups)[Which eTMF systems include integrated quality event tracking and customisable workflow routing for complex multi-department approval chains?](https://www.g2.com/discussions/which-etmf-systems-include-integrated-quality-event-tracking-and-customisable-workflow-routing-for-complex-multi-department-approval-chains%20)[Pros and Cons Details](https://www.g2.com/products/extrahop/reviews?qs=pros-and-cons) [Show MoreShow Less](javascript:void(0);)