Cisco Secure Network Analytics vs ExtraHop Reveal(x) 360 comparison

Cisco Secure Network Analytics vs. ExtraHop Reveal(x) 360

Download the complete report

Helped 909,725 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cisco Secure Network Analytics

Ranking in Network Traffic Analysis (NTA)

5th

Average Rating

8.2

Reviews Sentiment

6.6

Number of Reviews

Ranking in other categories

Network Monitoring Software (33rd), Network Detection and Response (NDR) (6th), Cisco Security Portfolio (8th)

ExtraHop Reveal(x) 360

Ranking in Network Traffic Analysis (NTA)

10th

Average Rating

8.6

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

Intrusion Detection and Prevention Software (IDPS) (17th), Container Security (34th), Extended Detection and Response (XDR) (29th)

Mindshare comparison

As of August 2026, in the Network Traffic Analysis (NTA) category, the mindshare of Cisco Secure Network Analytics is 8.6%, down from 14.1% compared to the previous year. The mindshare of ExtraHop Reveal(x) 360 is 3.5%, down from 3.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Network Traffic Analysis (NTA) Mindshare Distribution
Product	Mindshare (%)
Cisco Secure Network Analytics	8.6%
ExtraHop Reveal(x) 360	3.5%
Other	87.9%

Network Traffic Analysis (NTA)

Featured Reviews

Muhammad Harun-Owr-Roshid

CEO at BRIGHT-i SYSTEMS LIMITED

Have streamlined network visibility and troubleshooting while seeing benefits from AI integration

In terms of improvements for Cisco Secure Network Analytics, from the implementation point of view, now that AI is in use, some other features need to be upgraded considering AI solutions. Proper management of the database is also important; it should be centralized for easier data collection from a single database. When precise manual analysis is needed, it's sometimes difficult, so having a centralized database will allow network admins to find actual scenarios more effectively, especially since some information may not be visible on the GUI. Cisco should upgrade their hardware part to run the database, because sometimes it cannot handle the load while all features are running in the network. The database management should indeed be centralized because while AI runs behind the systems, central management is essential. For example, in a network with 100 Cisco switches, a few routers, firewalls, and access points, all data generated should be preserved in a central database. This approach simplifies management and analysis for troubleshooting, as GUI interfaces may not always provide visible information. Centralizing the database will allow for better understanding of which information is preserved for each specific device.

Read full review

reviewer2857197

Lead IT Service Analyst at a manufacturing company with 10,001+ employees

Cloud-native threat detection has improved incident investigations and now reduces breach risk

We have covered most of the features over the past three years and look forward to discovering more as we work closely with the ExtraHop technical team, who are open to sharing what they have developed. Pricing is on the higher side, typically based on load, volume of traffic, and deployment scale. The advanced detection capabilities provide significant value in reducing investigation time, making the licensing and pricing acceptable for larger organizations. ExtraHop Reveal(x) 360 has undeniably improved our security posture, reduced manual investigation efforts, and facilitated fast threat detection mechanisms, which all help prevent costly potential breaches in enterprise environments. ExtraHop Reveal(x) 360's SaaS environment is well-suited for cloud, on-premises, and hybrid environments, effectively addressing real-life scenarios involving east-west and north-south traffic. The platform is recommended for large organizations in need of comprehensive detection capabilities. I would rate this product overall as an 8 out of 10.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Cisco Secure Network Analytics has increased the visibility of what is happening in our network, and I think that's the most important reason to use it. We can see what is really happening instead of just looking at numbers from routers or switches."

"The most valuable features are encrypted threat analysis and the ability to run jobs on entire flows."

"The most valuable feature is its alerts and dashboard."

"Stealthwatch has definitely reduced the incident response time, making troubleshooting now only minutes instead of a couple of hours and increasing our threat detection rate by around 25-30%."

"There are already many functionalities, so I don't think there is anything to improve."

"The most valuable feature is anomaly detection, where it finds things that are not allowed internally."

"From what I understand, you can encrypt and unencrypt traffic moving in transit. This is one of the features that we liked about it."

"The most valuable feature about this solution is that it gives me insight of my network."

More Cisco Secure Network Analytics pros

"Their technical support is more effective and of better quality than other competitors."

"It is scalable."

"ExtraHop Reveal(x) 360 has undeniably improved our security posture, reduced manual investigation efforts, and facilitated fast threat detection mechanisms, which all help prevent costly potential breaches in enterprise environments."

"ExtraHop Reveal(x) 360 has positively impacted my organization by helping us detect abnormal activity on our network that we could not detect through our SIEM or XDR platform."

"It stands out for its intuitive and efficient user interface, robust detection capabilities with minimal false positives, and the ability to handle encrypted traffic, making it a valuable asset for network security and management."

"It is very easy to collect and handle data in ExtraHop Reveal(X) Cloud. Integration with Big Data is also easy. Many of our customers integrate it with Big Data platforms like Splunk or Elastic. It is also easy to handle and easy to understand."

Cons

"This is a good solution, but Java is still in the SMC, the Firepower integration is not really there, and I would really appreciate people being told about the necessity of ISE beforehand."

"Cisco Stealthwatch needs more integration with device discovery. We have to do a lot of hard work to figure out what things are. Better service integration is required."

"Improvements are needed on the application layer for complete security analysis."

"Cisco Stealthwatch has increased the administrative time required just to get everything up and running smoothly."

"We are continuing down the road of ACI and ISE with Cisco, so we would like to see the continuation of Stealthwatch integrating into ISE for exchange of information, and also, more into the ACI environment too."

"We've had problems with element licensing costs so scalability is a concern."

"Their response capability and the ability to push out responses along with changes in the network is important. This is something lacking, they don't have a lot of that, it's a passive tool."

"This solution is a little expensive."

More Cisco Secure Network Analytics cons

"There needs to be more support."

"I would like to see ExtraHop Reveal(x) 360 improved by integrating XDR features with NDR."

"They can include integration with SAP. Currently, no vendor provides network performance monitoring in the SAP market. It is a very big market. We have around 400 customers for SAP in Korea. In the USA, there are more than 10,000 customers."

"Their professional service can be improved."

"One challenge with ExtraHop Reveal(x) 360 is its pricing, which tends to be comparatively high in the marketplace."

"A drawback includes bucket storage limitations for payload data, necessitating timely extraction for thorough investigations."

Pricing and Cost Advice

"The licensing costs are outrageous."

"Licensing is done by flows per second, not including outside (in traffic)."

"One of the things which bugs me about Lancope is the licensing. We understand how licensing works. Our problem is when we bought and purchased most of these Lancope devices, we did so with our sister company. Somewhere within the purchase and distribution, licensing got mixed up. That is all on Cisco, and it is their responsibility. They allotted some of our sister company's equipment to us, and some of our equipment to them. To date, they have never been able to fix it."

"Our fees are approximately $3,000 USD."

"Pricing is much higher compared to other solutions."

"The yearly licensing cost is about $50,000."

"The tool is not cheaply priced."

"This is an expensive product. We have quit paying for support because we don't want to have to upgrade it and keep paying for it."

More Cisco Secure Network Analytics pricing and cost advice

"When compared to other solutions, it aligns with the market average, indicating a competitive pricing level."

See which vendors are best for you

Use our free recommendation engine to learn which Network Traffic Analysis (NTA) solutions are best for your needs.

See recommendations

909,725 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

10%

Manufacturing Company

10%

Construction Company

Government

Financial Services Firm

11%

Manufacturing Company

Construction Company

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	12
Midsize Enterprise	7
Large Enterprise	52

No data available

Questions from the Community

What is your experience regarding pricing and costs for Cisco Stealthwatch?

Regarding cost, for the Bangladesh context, Cisco Secure Network Analytics is a little bit high-priced because we are a developing country, making it tough to manage affordable solutions. However, ...

What needs improvement with Cisco Stealthwatch?

Several features often look very promising during evaluation or implementation but end up being used only lightly in day-to-day operations. Advanced reporting and scheduled compliance reports look ...

What is your primary use case for Cisco Stealthwatch?

My main use case for Cisco Secure Network Analytics has been network visibility and anomaly-based threat detection within the enterprise environment. In security operations and VAPT-related activit...

What needs improvement with ExtraHop Reveal(x) 360?

One challenge with ExtraHop Reveal(x) 360 is its pricing, which tends to be comparatively high in the marketplace. Initial setup requires significant effort to get the platform tuned up to speed, w...

What advice do you have for others considering ExtraHop Reveal(x) 360?

What is your primary use case for ExtraHop Reveal(X) Cloud?

I use ExtraHop Reveal(x) 360 as our cloud-native NDR platform, with primary use cases including monitoring real-time network traffic across the north-south environment. While we do not currently fo...

Darktrace vs Cisco Secure Network Analytics

Comparisons

Compared 7% of the time

Vectra AI vs Cisco Secure Network Analytics

Compared 4% of the time

ThousandEyes vs Cisco Secure Network Analytics

Compared 3% of the time

Nmap vs Cisco Secure Network Analytics

Compared 3% of the time

SolarWinds NPM vs Cisco Secure Network Analytics

Compared 3% of the time

More Cisco Secure Network Analytics Competitors

Vectra AI vs ExtraHop Reveal(x) 360

Compared 12% of the time

NetWitness NDR vs ExtraHop Reveal(x) 360

Compared 9% of the time

ExtraHop Reveal(x) vs ExtraHop Reveal(x) 360

Compared 6% of the time

Fortinet FortiGate vs ExtraHop Reveal(x) 360

Compared 6% of the time

TrendAI Vision One – Cloud Security vs ExtraHop Reveal(x) 360

Compared 6% of the time

More ExtraHop Reveal(x) 360 Competitors

Product Reports

Cisco Secure Network Analytics

Download Cisco Secure Network Analytics product report

ExtraHop Reveal(x) 360

Download ExtraHop Reveal(x) 360 product report

Also Known As

Cisco Stealthwatch, Cisco Stealthwatch Enterprise, Lancope StealthWatch

ExtraHop Reveal(X) Cloud, Reveal(X) Cloud

Overview

Cisco Secure Network Analytics enhances network security through integrated threat detection and detailed traffic visibility, optimizing performance with AI analytics and strong platform integrations.

Cisco Secure Network Analytics offers deep visibility into network traffic, with tools like network maps and server response times. Its AI-driven analytics help detect threats, focusing on east-west traffic. Integration with platforms such as pxGrid and ISE complements its capabilities. Reporting and telemetry help in identifying bandwidth issues, yet improvements are desired in AI for better data organization. Installation complexity and false positives present challenges, and managing network loads effectively is a recognized need.

What are the key features of Cisco Secure Network Analytics?

Deep Visibility: Provides comprehensive insights into network traffic and server behavior.
Network Maps: Enhances understanding of traffic flow and infrastructure layout.
AI Analytics: Uses AI for superior threat detection and anomaly recognition.
Integration: Compatible with platforms like pxGrid and ISE for enhanced security management.
Telemetry: Delivers detailed bandwidth usage and traffic analysis reports.

How does Cisco Secure Network Analytics provide value?

Enhanced Security: Elevates threat detection and response capabilities.
Traffic Insights: Identifies encrypted and anomalous network behaviors.
Compliance Support: Assists in meeting industry standards for data protection.
Endpoint Protection: Guards network endpoints against potential threats.

Industries such as banking, defense, and police rely on Cisco Secure Network Analytics for securing networks against threats. Its capability to provide insights into encrypted traffic and facilitate device auditing makes it a sought-after choice for those requiring extensive network visibility. Users appreciate its application for threat prevention and response in demanding sectors.

Cisco

ExtraHop Reveal(x) 360 offers advanced network detection and response capabilities, designed to provide real-time situational awareness and threat detection across hybrid and multi-cloud environments.

Built to meet the demands of modern enterprises, ExtraHop Reveal(x) 360 enhances visibility into network activities, delivering comprehensive security insights. It uses high-speed data analysis to identify anomalous behaviors and potential threats, helping security teams respond effectively. With centralized visibility, it ensures quick detection and thorough investigation of threats within complex infrastructures, including cloud, edge, and on-premises environments.

What key features does ExtraHop Reveal(x) 360 offer?

Real-Time Threat Detection: Monitors network traffic in real-time for immediate threat identification.
Centralized Visibility: Offers a unified dashboard for observing activities across diverse environments.
Automated Response: Enables predefined actions to mitigate threats swiftly without manual intervention.
Integration Capabilities: Seamlessly integrates with tools for enhanced incident management.
Advanced Analytics: Utilizes machine learning to detect sophisticated threats promptly.

What benefits should users look for in reviews of ExtraHop Reveal(x) 360?

Improved Security Posture: Evidence of enhanced organizational security through faster threat detection and response.
Operational Efficiency: Reduction in time and effort for IT teams due to automated processes.
Scalability: Flexibility to expand with organizational growth and technology changes.
Cost-Effectiveness: Attractive pricing compared to functionality and outcomes offered.

ExtraHop Reveal(x) 360 is implemented across industries such as financial services, healthcare, and retail, where robust security measures are paramount. In these sectors, the capabilities of ExtraHop Reveal(x) 360 align with the need for secure handling of sensitive data and compliance with industry regulations, providing valuable protection and detection capabilities.

ExtraHop Networks

Sample Customers

Edge Web Hosting, Telenor Norway, Ivy Tech Community College of Indiana, Webster Financial Corporation, Westinghouse Electric, VMware, TIAA-CREF

Wizards of the Coast

Cisco Secure Network Analytics vs. ExtraHop Reveal(x) 360