Try our new research platform with insights from 80,000+ expert users

Cisco Secure Network Analytics vs ExtraHop Reveal(x) 360 comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Aug 6, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cisco Secure Network Analytics
Ranking in Network Traffic Analysis (NTA)
4th
Average Rating
8.2
Reviews Sentiment
6.9
Number of Reviews
61
Ranking in other categories
Network Monitoring Software (37th), Network Detection and Response (NDR) (9th), Cisco Security Portfolio (9th)
ExtraHop Reveal(x) 360
Ranking in Network Traffic Analysis (NTA)
11th
Average Rating
8.6
Reviews Sentiment
6.9
Number of Reviews
3
Ranking in other categories
Intrusion Detection and Prevention Software (IDPS) (25th), Container Security (51st), Extended Detection and Response (XDR) (40th)
 

Mindshare comparison

As of January 2026, in the Network Traffic Analysis (NTA) category, the mindshare of Cisco Secure Network Analytics is 11.5%, down from 15.5% compared to the previous year. The mindshare of ExtraHop Reveal(x) 360 is 4.1%, up from 2.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Network Traffic Analysis (NTA) Market Share Distribution
ProductMarket Share (%)
Cisco Secure Network Analytics11.5%
ExtraHop Reveal(x) 3604.1%
Other84.4%
Network Traffic Analysis (NTA)
 

Featured Reviews

Muhammad Harun-Owr-Roshid - PeerSpot reviewer
CEO at BRIGHT-i SYSTEMS LIMITED
Have streamlined network visibility and troubleshooting while seeing benefits from AI integration
In terms of improvements for Cisco Secure Network Analytics, from the implementation point of view, now that AI is in use, some other features need to be upgraded considering AI solutions. Proper management of the database is also important; it should be centralized for easier data collection from a single database. When precise manual analysis is needed, it's sometimes difficult, so having a centralized database will allow network admins to find actual scenarios more effectively, especially since some information may not be visible on the GUI. Cisco should upgrade their hardware part to run the database, because sometimes it cannot handle the load while all features are running in the network. The database management should indeed be centralized because while AI runs behind the systems, central management is essential. For example, in a network with 100 Cisco switches, a few routers, firewalls, and access points, all data generated should be preserved in a central database. This approach simplifies management and analysis for troubleshooting, as GUI interfaces may not always provide visible information. Centralizing the database will allow for better understanding of which information is preserved for each specific device.
Maksym Toporkov - PeerSpot reviewer
Head of Research And Development at Quipu GmbH
A competitive choice for network detection and response with exceptional user interface, ease of implementation and minimal false positives
The NDR feature analyzes network traffic, creating records with connection details. While these records offer insights, there's a limitation in investigating payloads directly. ExtraHop provides an option for an additional server to save payloads, but its temporary storage has constraints. Unlike some competitors, it lacks an automatic payload-saving feature for each detection, presenting an improvement opportunity. Suggested enhancement involves the main sensor prompting payload storage for specific detections, streamlining the investigation process, and contributing to a more efficient workflow. A drawback includes packet storage limitations for payload data, necessitating timely extraction for thorough investigations.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Ease of deployment, once you get your ducks in a row."
"This product alleviates the day-to-day headaches for us, in regards to metrics."
"The most valuable feature of this solution is the way the net flow is being merged together in a single pane. That's been extremely useful for us, because can see what's going on with traffic in one single place."
"Able to drill down into a center's utilization, then create reports based on it."
"The most valuable feature is having visibility into the data segments throughout our network."
"There are already many functionalities, so I don't think there is anything to improve."
"I believe this solution has reduced our incident response time."
"It's easy to set up. The deployment takes one or two days. You need to collect the data from a device and then direct it to the portal."
"It is very easy to collect and handle data in ExtraHop Reveal(X) Cloud. Integration with Big Data is also easy. Many of our customers integrate it with Big Data platforms like Splunk or Elastic. It is also easy to handle and easy to understand."
"It stands out for its intuitive and efficient user interface, robust detection capabilities with minimal false positives, and the ability to handle encrypted traffic, making it a valuable asset for network security and management."
"It is scalable."
 

Cons

"We determined that Stealthwatch wouldn't provide the machine learning model that we required."
"The customizability of the UI should improve."
"We've had problems with element licensing costs so scalability is a concern."
"The solution should have the ability to analyze security events not only at the network layer but also at the application and OS layers."
"I would like to see it better organized when I'm looking at it."
"Cisco could improve the administration for the customers."
"There's a lot of traffic on our network that we don't see sometimes."
"I would like to see more and cleaner reporting. For example, if I pull up Steven and I want to look and maybe compare him to what you've done in the past week, and compare that to the past six months, the point would be to see what the difference in activity looks like over this time. I don't see that capability in reporting to date. You see that trend but you don't really see a straightforward comparison. That right there is key to what we want to see about the normal activity."
"They can include integration with SAP. Currently, no vendor provides network performance monitoring in the SAP market. It is a very big market. We have around 400 customers for SAP in Korea. In the USA, there are more than 10,000 customers."
"There needs to be more support."
"A drawback includes bucket storage limitations for payload data, necessitating timely extraction for thorough investigations."
 

Pricing and Cost Advice

"​Licensing is done by flows per second, not including outside (in traffic)."
"The licensing costs are outrageous."
"NetFlow is very expensive."
"The pricing for this solution is good."
"Pricing is much higher compared to other solutions."
"Our fees are approximately $3,000 USD."
"There are additional licenses needed for the number of so-called network flows. It's hard to plan the number of flows you need in the network, this is a problem. The price of the Cisco Stealthwatch is relatively inexpensive"
"The yearly licensing cost is about $50,000."
"When compared to other solutions, it aligns with the market average, indicating a competitive pricing level."
report
Use our free recommendation engine to learn which Network Traffic Analysis (NTA) solutions are best for your needs.
881,078 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
17%
Government
11%
Manufacturing Company
10%
Financial Services Firm
8%
Financial Services Firm
11%
Government
10%
Computer Software Company
9%
Comms Service Provider
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business11
Midsize Enterprise7
Large Enterprise52
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Cisco Stealthwatch?
Regarding cost, for the Bangladesh context, Cisco Secure Network Analytics is a little bit high-priced because we are a developing country, making it tough to manage affordable solutions. However, ...
What needs improvement with Cisco Stealthwatch?
In terms of improvements for Cisco Secure Network Analytics, from the implementation point of view, now that AI is in use, some other features need to be upgraded considering AI solutions. Proper m...
What is your primary use case for Cisco Stealthwatch?
Our customers mainly use Cisco Secure Network Analytics to get whole network visibility and easy troubleshooting to find actual problems and also to mitigate loopholes or findings immediately to pr...
Ask a question
Earn 20 points
 

Also Known As

Cisco Stealthwatch, Cisco Stealthwatch Enterprise, Lancope StealthWatch
ExtraHop Reveal(X) Cloud, Reveal(X) Cloud
 

Overview

 

Sample Customers

Edge Web Hosting, Telenor Norway, Ivy Tech Community College of Indiana, Webster Financial Corporation, Westinghouse Electric, VMware, TIAA-CREF
Wizards of the Coast
Find out what your peers are saying about Cisco Secure Network Analytics vs. ExtraHop Reveal(x) 360 and other solutions. Updated: December 2025.
881,078 professionals have used our research since 2012.