Try our new research platform with insights from 80,000+ expert users

Cisco Secure Network Analytics vs Cloudflare One vs ExtraHop Reveal(x) comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Mindshare comparison

Network Monitoring Software Market Share Distribution
ProductMarket Share (%)
Cisco Secure Network Analytics1.2%
Zabbix11.4%
SolarWinds NPM4.4%
Other83.0%
Network Monitoring Software
Secure Access Service Edge (SASE) Market Share Distribution
ProductMarket Share (%)
Cloudflare One7.9%
Prisma Access by Palo Alto Networks15.3%
Netskope12.2%
Other64.6%
Secure Access Service Edge (SASE)
Network Traffic Analysis (NTA) Market Share Distribution
ProductMarket Share (%)
ExtraHop Reveal(x)14.1%
Darktrace23.9%
Cisco Secure Network Analytics14.6%
Other47.4%
Network Traffic Analysis (NTA)
 

Featured Reviews

Muhammad Harun-Owr-Roshid - PeerSpot reviewer
Have streamlined network visibility and troubleshooting while seeing benefits from AI integration
In terms of improvements for Cisco Secure Network Analytics, from the implementation point of view, now that AI is in use, some other features need to be upgraded considering AI solutions. Proper management of the database is also important; it should be centralized for easier data collection from a single database. When precise manual analysis is needed, it's sometimes difficult, so having a centralized database will allow network admins to find actual scenarios more effectively, especially since some information may not be visible on the GUI. Cisco should upgrade their hardware part to run the database, because sometimes it cannot handle the load while all features are running in the network. The database management should indeed be centralized because while AI runs behind the systems, central management is essential. For example, in a network with 100 Cisco switches, a few routers, firewalls, and access points, all data generated should be preserved in a central database. This approach simplifies management and analysis for troubleshooting, as GUI interfaces may not always provide visible information. Centralizing the database will allow for better understanding of which information is preserved for each specific device.
Carlos Alam Hernandez Baruch - PeerSpot reviewer
The solution enables seamless security management and fosters a learning environment
Feedback could be enhanced. While I work efficiently with Clover as a partner in Mexico City, sometimes the information and requests are easier to manage with more concrete solutions. For the solution stopping us for e-learning, I appreciate the concept yet need more resources or courses in Mexico, preferably in Spanish. Certifications are easy, however, I require more real-world environments and instructors.
Henri Heuvel - PeerSpot reviewer
Cloud-based administration streamlines network security management
ExtraHop Reveal(x) can improve regarding integration capabilities. For instance, the market is getting really flooded with Microsoft Sentinel, and I know there is an integration possible, but the tools on the market right now indicate that integration should not be a skill from an integrator point of view. It should be quite easy for customers to integrate that solution into SOCs, SIEMs, or any other integration with other tools. There are various integrations from which there's a manual on how to do it, but specifically, the Microsoft portfolio, particularly Sentinel, integration is not yet there. If you score them on a scale of one to ten, ExtraHop scores around a 7.5 to an 8 on an integration basis, but there's actually room for improvement on that side. In the older days, ExtraHop had a license model where you could do all you can eat, so if you had a sensor with 10 gig of capacity, you could use all the entire 10 gig of throughput. They changed that to an asset-based license model, and that's an absolute downside of the solution, where it is harder for smaller companies to acquire the solution itself. That has given us quite some problems in positioning the solution properly within the network, so the licensing model is an absolute downside where they need to improve.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It works efficiently for encrypted traffic analysis."
"I believe this solution has reduced our incident response time."
"The solution reduces the amount of time it takes to detect and remediate threats."
"This product alleviates the day-to-day headaches for us, in regards to metrics."
"It's a dependable product that is able to pinpoint where we have vulnerabilities if they occur."
"The most valuable features include encrypted traffic analytics and the ability to fulfill requirements at the network level."
"It has been pretty stable since we deployed it, and everything seems to be working fine."
"Being able to identify specific date closed across the network is invaluable."
"For Cloudflare Access, I am using the free plan...The most valuable feature is their protection."
"The best feature is rate limiting. If I'm expecting 500 visits per hour, Cloudflare will limit the requests if I suddenly get 50,000."
"It will take the blow rather than our applications should an attack occur."
"Cloudflare DDoS is better than its competitors for its security, deployment, and scalability."
"This solution is easy to understand and easy to configure."
"Enables me to work from two locations."
"Clover is the best product globally."
"The blocking feature is very good."
"The solution works well for sending sensors."
"ExtraHop Reveal(x) is one of the tools that works out of the box when it comes to threat hunting."
"The best features of ExtraHop Reveal(x) for me are the depth it provides, especially the picturization where the connection is established; it's absolutely remarkable."
"When there are performance issues with an HTTP app, ExtraHop enables us to identify the causes within a few minutes. We can see what transactions are being impacted by something that may be happening within the server environment."
"Reveal X integrates seamlessly with CrowdStrike. If you see something sketchy on the network, you can quarantine devices through ExtraHop and it'll push to the CrowdStrike server."
"With ExtraHop Reveal(x), it gives me more visibility into the packets. It doesn't provide the entire packet capture, but it offers more information on how connections are made at the network layer. This can be helpful for detecting network attacks. Additionally, I really like the customizable dashboards and reports. The incident dashboard and alerts provide a good summary initially, and diving deeper into them gives more detailed information. It's also great for analyzing specific attacks and victim logs. The feature that tracks the full attack chain makes it easier to monitor the progress of attacks. Plus, it's connected to the Netria.com app, which I find useful for certain tasks."
"The most valuable features of ExtraHop Reveal(x) are the detection and alerting of network behavior and anomalies."
"The security features of this solution are the most valuable."
 

Cons

"It's a good solid solution but integration with Network Access Control products with Cisco ISE would be good."
"The version with the Dell server had iDRAC problems. Often, it reported iDRAC failure."
"Stealthwatch needs improvement when it comes to speed."
"The customizability of the UI should improve."
"It's too complicated to install, when starting out."
"I think the interface is a little lacking. The interface seems like it just needs to be modernized. It's been the same interface now, ever since I've seen it probably four years ago."
"We would like the solution to make more advances in the way that Extreme Networks has been doing."
"We haven't seen ROI."
"For the topic of improvement, providing some training material is one of my suggestions."
"Feedback could be enhanced. While I work efficiently with Clover as a partner in Mexico City, sometimes the information and requests are easier to manage with more concrete solutions."
"There are premium tier live service and lower tier live service, so we opted for the lower tier. But there is no medium tier where we pay a little extra and get a bit more service. So if that can be improved."
"Lacks a VPN feature to provide a secure connection to the data center."
"They don't have a person to provide support for customers using the solution under their free plan."
"Our customers no longer use Cloudflare because its service is subpar."
"The free plan has limitations. For example, I can only set up three rules, and the application firewall is unavailable."
"The onboarding process can be improved a little bit."
"I would like to see improvements in areas where events are getting dropped; we're not able to view complete insights."
"ExtraHop Reveal(x) could improve by allowing a longer look back in the feature. Right now you have a limit of 30 days to look back on your activity. I've used Darktrace before, and they allow you the ability to play back events. This would be a good feature to have in ExtraHop Reveal(x)."
"The solution's reporting part and GUI are areas with certain shortcomings where improvements are required."
"Agent management could certainly use some focus. It should also be a little bit easier to work with collections. We should be able to nest collections within collections. There should be better nesting."
"The solution is expensive and gets more expensive if a company needs to scale it."
"Currently, we have to check manually as we do not receive any notifications about new patches, maintenance, or firmware releases."
"There is a little training online, but it'd be cool if ExtraHop provided certifications. CrowdStrike does elective training that gives you a certification as a Falcon administrator. It'd be nice to see ExtraHop have something like that"
"I would like to see more cloud capability."
 

Pricing and Cost Advice

"The yearly licensing cost is about $50,000."
"It is worth the cost."
"Licensing is done by flows per second, not including outside>in traffic."
"One of the things which bugs me about Lancope is the licensing. We understand how licensing works. Our problem is when we bought and purchased most of these Lancope devices, we did so with our sister company. Somewhere within the purchase and distribution, licensing got mixed up. That is all on Cisco, and it is their responsibility. They allotted some of our sister company's equipment to us, and some of our equipment to them. To date, they have never been able to fix it."
"The tool is not cheaply priced."
"On a yearly basis, licensing is somewhere around $30,000."
"Pricing is much higher compared to other solutions."
"The solution is expensive. It costs several hundred thousand dollars per year (depending on how many flows you are collecting)."
"My company has to make yearly payments towards the licensing costs attached to the solution. There are no hidden charges apart from the licensing costs of the solution."
"The pricing is somewhere in the middle. I would rate the pricing a seven out of ten."
"The solution is not that expensive."
"The price tag is no longer $200,000, but rather $300,000 to $400,000. It's twice."
"The prices are slightly expensive."
"The solution's pricing lacks transparency."
"Cloudflare Zero Trust Platform's pricing is good."
"The pricing of the solution is cheap. The licensing cost is also very low. I rate the cost and pricing a three out of ten."
"I rate ExtraHop Reveal(x) six out of 10 for affordability. We pay for an annual license. It's always one of those trade-offs. You get a lot of value, but ExtraHop isn't exorbitantly priced. You can pay extra for additional features like the ability to decode HL7 traffic, which is crucial for EMR environments."
"I would rate the price a three out of five. It could be less expensive."
"The solution is based on an annual subscription model and is expensive."
"I rate the price of ExtraHop Reveal(x) a seven on a scale of one to ten, where one is a high price, and ten is a low price."
report
Use our free recommendation engine to learn which Network Monitoring Software solutions are best for your needs.
869,095 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
22%
Government
11%
Manufacturing Company
9%
Financial Services Firm
9%
Computer Software Company
15%
Comms Service Provider
11%
Financial Services Firm
10%
Manufacturing Company
6%
Financial Services Firm
15%
Computer Software Company
12%
Healthcare Company
7%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business11
Midsize Enterprise7
Large Enterprise52
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise2
Large Enterprise10
By reviewers
Company SizeCount
Small Business3
Midsize Enterprise4
Large Enterprise9
 

Questions from the Community

What do you like most about Cisco Stealthwatch?
The most valuable feature of Cisco Secure Network Analytics is the Threat Intelligence integration.
What is your experience regarding pricing and costs for Cisco Stealthwatch?
Regarding cost, for the Bangladesh context, Cisco Secure Network Analytics is a little bit high-priced because we are...
What needs improvement with Cisco Stealthwatch?
In terms of improvements for Cisco Secure Network Analytics, from the implementation point of view, now that AI is in...
What do you like most about Cloudflare Access?
The tool also offers good scalability, and the dashboard, along with real-time analytics, is very good.
What is your experience regarding pricing and costs for Cloudflare Access?
The price of Cloudflare Access is the same as compared to Akamai, but I get better performance from Cloudflare. My co...
What needs improvement with Cloudflare Access?
Cloudflare Access has strong integration with Microsoft, among other platforms. However, when it comes to Kaspersky, ...
What is the best network monitoring software for large enterprises?
We just did an assessment for our 47 datacenters around North America. The top two enterprise-level network monitorin...
What open source tool can one use to measure bandwidth from one's upstream service provider?
One I am looking closely at is AppNeta. They have an appliance that can digest the flow and do a better job than N...
What do you like most about ExtraHop Reveal(x)?
With ExtraHop Reveal(x), it gives me more visibility into the packets. It doesn't provide the entire packet capture, ...
 

Also Known As

Cisco Stealthwatch, Cisco Stealthwatch Enterprise, Lancope StealthWatch
Cloudflare Area 1 Email Security, Cloudflare Bot Management, Cloudflare Gateway, Cloudflare Zero Trust Platform, Cloudflare DDoS, Cloudflare SASE & SSE Platform
Reveal(x), Revealx
 

Overview

 

Sample Customers

Edge Web Hosting, Telenor Norway, Ivy Tech Community College of Indiana, Webster Financial Corporation, Westinghouse Electric, VMware, TIAA-CREF
23andMe
Wood County Hospital
Find out what your peers are saying about Zabbix, Auvik, SolarWinds and others in Network Monitoring Software. Updated: September 2025.
869,095 professionals have used our research since 2012.