ExtraHop Reveal(x) 360 vs Vectra AI comparison

Read 45 Vectra AI reviews

5,133 Views
2,624 Comparison Views

97% willing to recommend

ExtraHop Reveal(x) 360

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 8, 2024

Vectra AI and ExtraHop Reveal(x) 360 are leading solutions in the network detection and response category. ExtraHop is often preferred due to its comprehensive features and network visibility, although Vectra offers attractive pricing and customer support.

Features: Vectra AI is recognized for its effective threat detection, AI-driven insights integration, and user-friendly interface. ExtraHop Reveal(x) 360 shines with real-time packet-level analytics, comprehensive network visibility, and extensive data handling capabilities.

Room for Improvement: Vectra AI users suggest enhancing third-party integrations, improving reporting functionalities, and increasing customization options. ExtraHop Reveal(x) 360 users look for better dashboard customizability, more advanced automation options, and expanded scalability features.

Ease of Deployment and Customer Service: Vectra AI is noted for its straightforward deployment and responsive customer service. ExtraHop Reveal(x) 360, while praised for its support, is said to have a more complex setup process. Both have commendable service, though Vectra is slightly simpler to deploy.

Pricing and ROI: Vectra AI provides a cost-effective solution with favorable returns on investment. ExtraHop Reveal(x) 360, though requiring a higher initial investment, offers substantial long-term benefits, justifying its costs due to the extensive feature set offered.

To learn more, read our detailed ExtraHop Reveal(x) 360 vs. Vectra AI Report (Updated: April 2025).

ExtraHop Reveal(x) 360 vs. Vectra AI

Download the complete report

Helped 849,686 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

ExtraHop Reveal(x) 360

Ranking in Intrusion Detection and Prevention Software (IDPS)

19th

Ranking in Extended Detection and Response (XDR)

24th

Average Rating

8.6

Reviews Sentiment

6.9

Number of Reviews

Ranking in other categories

Container Security (25th), Network Traffic Analysis (NTA) (9th)

Vectra AI

Ranking in Intrusion Detection and Prevention Software (IDPS)

3rd

Ranking in Extended Detection and Response (XDR)

15th

Average Rating

8.6

Reviews Sentiment

7.1

Number of Reviews

Ranking in other categories

Network Detection and Response (NDR) (2nd), Identity Threat Detection and Response (ITDR) (10th), AI-Powered Cybersecurity Platforms (6th)

Mindshare comparison

As of May 2025, in the Intrusion Detection and Prevention Software (IDPS) category, the mindshare of ExtraHop Reveal(x) 360 is 0.7%, up from 0.6% compared to the previous year. The mindshare of Vectra AI is 11.3%, up from 11.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Intrusion Detection and Prevention Software (IDPS)

Featured Reviews

Maksym Toporkov

Head of Research And Development at Quipu GmbH

A competitive choice for network detection and response with exceptional user interface, ease of implementation and minimal false positives

The NDR feature analyzes network traffic, creating records with connection details. While these records offer insights, there's a limitation in investigating payloads directly. ExtraHop provides an option for an additional server to save payloads, but its temporary storage has constraints. Unlike some competitors, it lacks an automatic payload-saving feature for each detection, presenting an improvement opportunity. Suggested enhancement involves the main sensor prompting payload storage for specific detections, streamlining the investigation process, and contributing to a more efficient workflow. A drawback includes packet storage limitations for payload data, necessitating timely extraction for thorough investigations.

Read full review

Mohammad Alkurdi

Owner at Fortibits

Innovative detection features enhance monitoring

The advantages of the integration are not entirely out-of-the-box. You have to do it manually. When I'm doing tier response, an out-of-the-box solution is not available. You need to have a Linux server, and from the Linux server, you must perform AI tasks, and there is a lot to be handled in the back end. This is a major consideration about them. The recall feature, if it can be placed in some areas instead of the cloud, and charged for, would be better. Recall the storage where you watch all the traffic, and you can recall it and try to analyze it in the back end. It’s cloud-based. If they offer it on-prem, it would be better. I think they have a solution, but I have never tested it, to be honest with you.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It is scalable."

"It is very easy to collect and handle data in ExtraHop Reveal(X) Cloud. Integration with Big Data is also easy. Many of our customers integrate it with Big Data platforms like Splunk or Elastic. It is also easy to handle and easy to understand."

"It stands out for its intuitive and efficient user interface, robust detection capabilities with minimal false positives, and the ability to handle encrypted traffic, making it a valuable asset for network security and management."

"One of the most valuable features of the platform is its ability to provide you with aggregated risk scores based on impact and certainty of threats being detected. This is both applied to individual and host detections. This is important because it enables us to use this platform to prioritize the most likely imminent threats. So, it reduces alert fatigue follow ups for security operation center analysts. It also provides us with an ability to prioritize limited resources."

"Vectra AI is the best. It is a major product in our cybersecurity."

"The biggest feature for us, because we are heavy Microsoft users, is its integration with Office 365. On top of Vectra AI, we use all of the Microsoft security platforms, such as Defender ATP and Sentinel. Having full integration and a central platform to look at all of the threats that are coming through from the different platforms is a huge benefit for us."

"Vectra produces actionable data using automation. That has helped us. It's less manpower now to look at incidents, which has definitely increased efficiency. Right now, in a lot of cases, our mean time to detection is within zero days. This tells me by the time something happened, and we were able to detect it, it was within the same day."

"Scalability wise, we have many sensors, and Vectra AI seems to handle them all very well."

"One of the things that we didn't expect to happen was that our network team also jumped on it faster than we thought. In most cases, if it's a security tool that's working on the network part, they can also use it to find out certain flaws that have been in the system. Certain flaws, related to some legacy stuff, were already there for quite a few years, which they couldn't explain at first, but we could explain them based on the timing of certain things."

"The automatic filtering that they provide is valuable. The logic inside that makes some detections instead of us is very useful. We are confident that if we are just looking into it and there is nothing, nothing could happen."

"Most of their use cases, including deployment, are managed by the tool itself, requiring less manual input from our team."

More Vectra AI pros

Cons

"A drawback includes bucket storage limitations for payload data, necessitating timely extraction for thorough investigations."

"There needs to be more support."

"They can include integration with SAP. Currently, no vendor provides network performance monitoring in the SAP market. It is a very big market. We have around 400 customers for SAP in Korea. In the USA, there are more than 10,000 customers."

"Some of the customization could be improved. Everything is provided for you as an easy solution to use, but working with it and doing specific development could be worked on a bit more in the scope of an incident response team."

"It does a little bit of packet capture on alert so you can look at the packet capture activity going on, but it doesn't collect a whole lot of data. Sometimes it's only one or two frames, sometimes it does collect more. That's why they have the addition of their Recall platform, because that really does help expand the capability."

"Vectra Recall could be utilized much more, and I'm seeing some indications of that today with the investigative components. I use the Visualize feature to visualize components and dashboards a lot. I'm interested in new ways to build automated searches or having them leveraged already from Vectra."

"If you hit a certain number of rules, triage filters, or groups, the UX responds more slowly. However, we have a complex network and a lot of rules. So, our setup might not be a typical implementation example. We even had UX engineers onsite, and they looked at issues, improvements, and user feedback. Since then, it has gotten a lot better, they even built in features that we specifically requested for our company."

"In education as a sector, we are looking at AI a lot in terms of how it can be used as part of the teaching and learning side of things. It would be great to have Vectra AI look at a better way to enhance the security posture related to the AI tools in our portfolio."

"The advantages of the integration are not entirely out-of-the-box. You have to do it manually."

"We are using SMB 3.0, which is an encrypted protocol. When we get some alerts or something, we cannot go deep into the protocol to see what's wrong because it's encrypted. We need to decrypt the protocol in another way, which is quite difficult. We might go back to SMB 2.0 just for this reason, but that's not a good solution."

"They use a proprietary logging format that is probably 90% similar to Bro Logs. Their biggest area of improvement is finishing out the remaining 10%. That 10% might not be beneficial to their ML engine, but that's fine. The industry standard is Zeek Logs or Bro Logs, or Bro or Zeek, depending on how old you are. While they have 90% of those fields, they're still missing some fields. In very rare instances, some community rules do not have the fields that they need, and we had to modify community rules for our logs. So, their biggest area of improvement would be to just finish their matching of the Zeek standard."

More Vectra AI cons

Pricing and Cost Advice

"When compared to other solutions, it aligns with the market average, indicating a competitive pricing level."

"It is an expensive solution, but it's not the most expensive we've seen. We also know how much we're going to pay, unlike with some other providers where all of a sudden our license explodes."

"The license is based on the concurrent IP addresses that it's investigating. We have 9,800 to 10,000 IP addresses."

"The licensing is on an annual basis."

"Vectra is a bit on the higher side in terms of price, but they have always been transparent. The reason that they are this good is that they invest, so they need to charge accordingly."

"We are running at about 90,000 pounds per year. The solution is a licensed cost. The hardware that they gave us was pretty much next to nothing. It is the license that we're paying for."

"The solution is low-cost and affordable."

"Vectra's licensing model could scale to our research network, which has multiple, 100-gigabit links."

"Vectra AI's pricing is cheaper than that of Darktrace."

More Vectra AI pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Intrusion Detection and Prevention Software (IDPS) solutions are best for your needs.

See recommendations

849,686 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

10%

University

Computer Software Company

Insurance Company

Financial Services Firm

13%

Computer Software Company

13%

Manufacturing Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

Questions from the Community

What do you like most about ExtraHop Reveal(x) 360?

It stands out for its intuitive and efficient user interface, robust detection capabilities with minimal false positives, and the ability to handle encrypted traffic, making it a valuable asset for...

What needs improvement with ExtraHop Reveal(x) 360?

What advice do you have for others considering ExtraHop Reveal(x) 360?

I recommend prioritizing demos over POCs when engaging with vendors. Organizing POCs involves significant time and resource investments for both parties. Instead, invest time in multiple demo sessi...

What is the biggest difference between Corelight and Vectra AI?

The two platforms take a fundamentally different approach to NDR. Corelight is limited to use cases that require the eventual forwarding of events and parsed data logs to a security team’s SIEM or ...

What do you like most about Vectra AI?

The solution is currently used as a central threat detection and response system.

What is your experience regarding pricing and costs for Vectra AI?

It is very acceptable when you compare it with Darktrace, for example.

ExtraHop Reveal(x) vs ExtraHop Reveal(x) 360

Comparisons

Compared 32% of the time

Wiz vs ExtraHop Reveal(x) 360

Compared 17% of the time

Corelight vs ExtraHop Reveal(x) 360

Compared 16% of the time

Stellar Cyber Open XDR vs ExtraHop Reveal(x) 360

Compared 14% of the time

Forescout Platform vs ExtraHop Reveal(x) 360

Compared 13% of the time

More ExtraHop Reveal(x) 360 Competitors

Darktrace vs Vectra AI

Compared 31% of the time

ExtraHop Reveal(x) vs Vectra AI

Compared 11% of the time

Corelight vs Vectra AI

Compared 7% of the time

Cisco Secure Network Analytics vs Vectra AI

Compared 6% of the time

Arista NDR vs Vectra AI

Compared 6% of the time

More Vectra AI Competitors

Product Reports

Intrusion Detection and Prevention Software (IDPS)

Download ExtraHop Reveal(x) 360 product report

Download Vectra AI product report

Also Known As

ExtraHop Reveal(X) Cloud, Reveal(X) Cloud

Vectra Networks, Vectra AI NDR

Overview

Cloud is where your business operates, where it innovates, how it enables employees, and how it connects with customers. Adversaries know this, and that's why attacks against cloud assets in IaaS, PaaS, and SaaS environments are increasing. With Reveal(x) 360, you can mitigate the blast radius of advanced threats like ransomware and supply chain attacks with unified security across multicloud and hybrid environments in a single management pane.

ExtraHop Networks

Vectra AI is used for detecting network anomalies and potential malicious activities, providing visibility into network traffic and enhancing threat detection across environments.

Organizations deploy Vectra AI mainly on-premises with additional cloud components. It helps with compliance, incident response, security monitoring, detecting insider threats, and correlating network events. Vectra AI captures and enriches network metadata, provides detailed dashboards, reduces false positives, and supports cross-environment behavioral analysis to enhance threat detection and prioritization. While valued for its high accuracy and alert aggregation, it has room for improvement in UI/UX, packet management, and integration with SIEMs and other tools. It is noted for expensive pricing and limited proactive threat response features.

What are Vectra AI's most valuable features?

High accuracy in identifying threat locations
Aggregation of alerts into single incidents
24/7 threat detection
Visibility into the entire attack lifecycle
Risk score aggregation
Effective triaging of alerts
Integration with other tools

What benefits or ROI should users look for?

Enhanced threat detection and prioritization
Comprehensive network visibility
Reduction in false positives
Better incident response capabilities
Improved compliance monitoring

In specific industries, Vectra AI is deployed to monitor complex networks and alleviate challenges in threat detection. It is particularly effective in sectors requiring stringent compliance and security measures, offering insights and capabilities crucial for protecting sensitive data and maintaining operational integrity.

Sample Customers

Wizards of the Coast

Tribune Media Group, Barry University, Aruba Networks, Good Technology, Riverbed, Santa Clara University, Securities Exchange, Tri-State Generation and Transmission Association

ExtraHop Reveal(x) 360 vs. Vectra AI