No more typing reviews! Try our Samantha, our new voice AI agent.

ExtraHop Reveal(x) vs Kaspersky Anti Targeted Attack comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

ExtraHop Reveal(x)
Ranking in Network Traffic Analysis (NTA)
7th
Ranking in Network Detection and Response (NDR)
5th
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
15
Ranking in other categories
No ranking in other categories
Kaspersky Anti Targeted Attack
Ranking in Network Traffic Analysis (NTA)
23rd
Ranking in Network Detection and Response (NDR)
29th
Average Rating
6.6
Reviews Sentiment
6.1
Number of Reviews
6
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of August 2026, in the Network Traffic Analysis (NTA) category, the mindshare of ExtraHop Reveal(x) is 6.5%, down from 15.1% compared to the previous year. The mindshare of Kaspersky Anti Targeted Attack is 1.4%, up from 0.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Network Traffic Analysis (NTA) Mindshare Distribution
ProductMindshare (%)
ExtraHop Reveal(x)6.5%
Kaspersky Anti Targeted Attack1.4%
Other92.1%
Network Traffic Analysis (NTA)
 

Featured Reviews

Henri Heuvel - PeerSpot reviewer
Technical Consultant at Axians
Cloud-based administration streamlines network security management
ExtraHop Reveal(x) can improve regarding integration capabilities. For instance, the market is getting really flooded with Microsoft Sentinel, and I know there is an integration possible, but the tools on the market right now indicate that integration should not be a skill from an integrator point of view. It should be quite easy for customers to integrate that solution into SOCs, SIEMs, or any other integration with other tools. There are various integrations from which there's a manual on how to do it, but specifically, the Microsoft portfolio, particularly Sentinel, integration is not yet there. If you score them on a scale of one to ten, ExtraHop scores around a 7.5 to an 8 on an integration basis, but there's actually room for improvement on that side. In the older days, ExtraHop had a license model where you could do all you can eat, so if you had a sensor with 10 gig of capacity, you could use all the entire 10 gig of throughput. They changed that to an asset-based license model, and that's an absolute downside of the solution, where it is harder for smaller companies to acquire the solution itself. That has given us quite some problems in positioning the solution properly within the network, so the licensing model is an absolute downside where they need to improve.
FarkhundAbbas - PeerSpot reviewer
Security Engineer at adcb
The tool provides excellent sandboxing and email security features, but the backup and recovery features are not good
If my primary solution is down, no backup solution is available to restore it. It is one of the biggest weaknesses of the platform. If I need to update the solution, there is no option to pick the events and the logs from it and deploy it in another solution. The backup and recovery features of the product are not good. I need backup. If the tool is down for some time, I cannot get the logs at that particular time.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The security features of this solution are the most valuable."
"We've done our due diligence and research on other products such as Riverbed and NetScout, and this product is by far the supreme leader."
"The solution's initial setup process is easy."
"ExtraHop Reveal(x) is highly recommended and very good."
"The best features of ExtraHop Reveal(x) include the cloud-based Reveal(x) 360, which is an absolute plus; you've got one point of administration where you can attach multiple vendors or solutions or sensors, and that's good."
"It's a wire analytics tool. We use it for isolating and determining issues on our network or applications. It does a lot for crediting the network as opposed to discrediting the network. A lot of people come along and say that it's a network issue. It's always considered to be a network issue, but by using ExtraHop, we can quickly tell them that it's not a networking issue. It's something to do with your application or something at the other end. It could be a database issue. This tool gives us the ability to pinpoint with great accuracy the comings and goings on our network."
"The most valuable features of ExtraHop Reveal(x) are the detection and alerting of network behavior and anomalies."
"ExtraHop Reveal(x) is one of the tools that works out of the box when it comes to threat hunting."
"The product's deployment phase is easy."
"The solution is very easy to use. Its interface is very simple, and you can build IOC's indicators. You can use your rules to detect these attacks because you can leverage threat intelligence. Y"
"The most valuable use is detailing metadata collection from the endpoint and network."
"I feel the anti-ransomware update is one of the tool's valuable features."
"Kaspersky Anti-Targeted Attack Platform is stable and runs all the time."
"The Kaspersky Anti-Targeted Attack Platform provides visibility into telemetry data, enabling comprehensive monitoring of environmental activities."
"The email security feature is really good."
 

Cons

"I think the tuning capabilities could be improved. We're working on minimizing false positives. Apart from that, everything seems fine to me."
"I would like to see improvements in areas where events are getting dropped; we're not able to view complete insights."
"Agent management could certainly use some focus. It should also be a little bit easier to work with collections. We should be able to nest collections within collections. There should be better nesting."
"It needs integration with more security vendors."
"There is a little training online, but it'd be cool if ExtraHop provided certifications. CrowdStrike does elective training that gives you a certification as a Falcon administrator. It'd be nice to see ExtraHop have something like that"
"The solution's reporting part and GUI are areas with certain shortcomings where improvements are required."
"The solution’s pricing could be improved."
"I would like to see more cloud capability."
"The backup and recovery features of the product are not good."
"The solution lacks cloud integrations."
"Kaspersky Anti-Targeted Attack Platform is not a good product. We had problems with endpoints and the solution did not detect it. We didn't get any alerts about the attack."
"I think the tool is still not really good enough for integration compared to other products."
"The blind spot or gap in the platform is network analysis functionality."
"In some of the places I have come across, even though they use Kaspersky, the ransomware enters their system."
 

Pricing and Cost Advice

"I would rate the price a three out of five. It could be less expensive."
"I rate the price of ExtraHop Reveal(x) a seven on a scale of one to ten, where one is a high price, and ten is a low price."
"The solution is based on an annual subscription model and is expensive."
"I rate ExtraHop Reveal(x) six out of 10 for affordability. We pay for an annual license. It's always one of those trade-offs. You get a lot of value, but ExtraHop isn't exorbitantly priced. You can pay extra for additional features like the ability to decode HL7 traffic, which is crucial for EMR environments."
"Kaspersky is one of the cheaper solutions."
"Kaspersky Anti-Targeted Attack Platform is cheap."
"The solution has competitive pricing."
report
Use our free recommendation engine to learn which Network Traffic Analysis (NTA) solutions are best for your needs.
910,479 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Manufacturing Company
9%
Government
8%
Healthcare Company
8%
Outsourcing Company
15%
Construction Company
13%
Comms Service Provider
10%
Retailer
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business3
Midsize Enterprise4
Large Enterprise9
No data available
 

Questions from the Community

What is the best network monitoring software for large enterprises?
We just did an assessment for our 47 datacenters around North America. The top two enterprise-level network monitoring solutions were ExtraHop first, Riverbed SteelCenter second. Their negotiated c...
What open source tool can one use to measure bandwidth from one's upstream service provider?
One I am looking closely at is AppNeta. They have an appliance that can digest the flow and do a better job than Netflow. The other one we are using is ExtraHop. This has both a Datacenter Hig...
What is your experience regarding pricing and costs for ExtraHop Reveal(x)?
We manage the setup cost ourselves, so I am quite happy with that. I also had engagement with professional services from ExtraHop, and it wasn't bad, but I was not impressed; it's not academic work...
Ask a question
Earn 20 points
 

Also Known As

Reveal(x), Revealx
Kaspersky Anti Targeted Attack
 

Overview

 

Sample Customers

Wood County Hospital
Republic of Serbia, Goods.ru, Tael, Insolar
Find out what your peers are saying about ExtraHop Reveal(x) vs. Kaspersky Anti Targeted Attack and other solutions. Updated: August 2026.
910,479 professionals have used our research since 2012.