ExtraHop Reveal(x) vs Lumu comparison

You must select at least 2 products to compare!
ExtraHop Networks Logo
2,943 views|2,157 comparisons
100% willing to recommend
Lumu Technologies Logo
412 views|156 comparisons
100% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between ExtraHop Reveal(x) and Lumu based on real PeerSpot user reviews.

Find out in this report how the two Network Detection and Response (NDR) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
To learn more, read our detailed ExtraHop Reveal(x) vs. Lumu Report (Updated: May 2024).
772,127 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
"With ExtraHop Reveal(x), it gives me more visibility into the packets. It doesn't provide the entire packet capture, but it offers more information on how connections are made at the network layer. This can be helpful for detecting network attacks. Additionally, I really like the customizable dashboards and reports. The incident dashboard and alerts provide a good summary initially, and diving deeper into them gives more detailed information. It's also great for analyzing specific attacks and victim logs. The feature that tracks the full attack chain makes it easier to monitor the progress of attacks. Plus, it's connected to the Netria.com app, which I find useful for certain tasks.""When there are performance issues with an HTTP app, ExtraHop enables us to identify the causes within a few minutes. We can see what transactions are being impacted by something that may be happening within the server environment.""Setting up the solution is relatively easy.""We had useful information within the hour of deployment. The ability to trace back for historical analysis, as well as the behavioral analysis done with the security information, puts the user in a position to make an informed decision to mitigate the performance or security incidents. Regarding the security incidents, Reveal (x) is able to create incident cards that guide your teams through the incidents and gives you the option to delve into the transaction detail to potentially view payloads as well.""The most valuable features of ExtraHop Reveal(x) are the detection and alerting of network behavior and anomalies.""The solution works well for sending sensors.""ExtraHop Reveal(x) is one of the tools that works out of the box when it comes to threat hunting.""The solution's initial setup process is easy."

More ExtraHop Reveal(x) Pros →

"Most of it is automated, so I do not have to watch it to get alerts.""You can access external links, playbooks, MITRE Matrix, and a lot of information.""It's been helpful for overall extended network visibility.""Lumu protects against threats immediately and handles them in time.""The context provided by the tool is very complete, it includes the miter matrix, playbooks, links, hashes, and much more."

More Lumu Pros →

"They used to have the ability to decode Citrix sign-on, setup, and tear down. Unfortunately, Citrix has stopped sharing that knowledge. Citrix has continued to change its model of processing, making it harder and harder to troubleshoot.""Netflow - Processing Netflow can be cumbersome as it requires triggers to truly gain value and insight. This in turn can add a bit of load to the hardware. The focus of ExtraHop Reveal (x) is live packet data.""ExtraHop Reveal(x) could improve by allowing a longer look back in the feature. Right now you have a limit of 30 days to look back on your activity. I've used Darktrace before, and they allow you the ability to play back events. This would be a good feature to have in ExtraHop Reveal(x).""The solution should include more support protocols.""I think the tuning capabilities could be improved. We're working on minimizing false positives. Apart from that, everything seems fine to me.""Agent management could certainly use some focus. It should also be a little bit easier to work with collections. We should be able to nest collections within collections. There should be better nesting.""I would like to see more cloud capability.""The solution's reporting part and GUI are areas with certain shortcomings where improvements are required."

More ExtraHop Reveal(x) Cons →

"The reports need improvement.""It would be good if we could access the physical logs.""I am happy with the current features. However, one important one is to improve the reports.""Nothing so far needs to be improved.""The integration with different vendors and endpoints could be improved."

More Lumu Cons →

Pricing and Cost Advice
  • "I would rate the price a three out of five. It could be less expensive."
  • "I rate ExtraHop Reveal(x) six out of 10 for affordability. We pay for an annual license. It's always one of those trade-offs. You get a lot of value, but ExtraHop isn't exorbitantly priced. You can pay extra for additional features like the ability to decode HL7 traffic, which is crucial for EMR environments."
  • "The solution is based on an annual subscription model and is expensive."
  • "I rate the price of ExtraHop Reveal(x) a seven on a scale of one to ten, where one is a high price, and ten is a low price."
  • More ExtraHop Reveal(x) Pricing and Cost Advice →

  • "It is the cheapest solution we found."
  • More Lumu Pricing and Cost Advice →

    Use our free recommendation engine to learn which Network Detection and Response (NDR) solutions are best for your needs.
    772,127 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:We just did an assessment for our 47 datacenters around North America. The top two enterprise-level network monitoring solutions were ExtraHop first, Riverbed SteelCenter second. Their negotiated cost… more »
    Top Answer:One I am looking closely at is AppNeta. They have an appliance that can digest the flow and do a better job than Netflow The other one we are using is ExtraHop.  This has both a Datacenter… more »
    Top Answer:With ExtraHop Reveal(x), it gives me more visibility into the packets. It doesn't provide the entire packet capture, but it offers more information on how connections are made at the network layer… more »
    Top Answer:Lumu protects against threats immediately and handles them in time.
    Top Answer:The integration with different vendors and endpoints could be improved. The reports are not so extensive, but they could be better.
    Top Answer:When Lumu sends us a report that something is unsound, we respond to it. Some of the things we have are automated, and some are not.
    Average Words per Review
    Average Words per Review
    Also Known As
    Reveal(x), Revealx
    Learn More

    ExtraHop Reveal(x) is a highly effective network traffic analysis (NTA) solution that leverages a cloud-native architecture to empower organizations to overcome a world filled with increasingly sophisticated threats. It identifies 25% more threats than its competitors. Additionally, organizations that employ Reveal(x) say they resolve issues 77% percent faster than they would if they were using other similar solutions.

    ExtraHop Reveal(x) Benefits

    Some of the ways that organizations can benefit by choosing to deploy ExtraHop Reveal(x) include:

    • Total network visibility. Reveal(x) gives users the ability to view every component of their network and devices connected to it in real time. It can automatically recognize and classify the devices that are communicating across an organization’s network. These devices are scanned by powerful decryption software that reveals hidden threats and the details of critical transactions without compromising privacy or compliance rules. Organizations are given full East-West visibility across both physical data centers and cloud environments. Threats that are on the periphery are brought to the attention of the administrators tasked with watching out for them.
    • Identify threats in real time. Reveal(x) extracts more than 5,000 features from the L2-L7 security layers at any given time, feeds them into its machine learning engine, and presents them to its rule-based detection feature. These features make it possible for the solution to identify the most severe threats. Users can conduct a threat triage and address the threats that their system detects in the order of severity that these threats represent.
    • Ease of use. Users of Reveal(x) can easily make full use of its event remediation features without expending long periods of time learning them. Its workflows are designed so that administrators can go from a security event to the cause of the event in only a couple of clicks. What would normally take hours can be completed in moments.

    ExtraHop Reveal(x) Features

    • Integration suite. Reveal(x) enables users to utilize a robust suite of integrations. If users feel they are missing important capabilities, they can bolster their security feature toolbox with those offered by third-party solutions. Phantom, Splunk, and Palo Alto are three examples of solutions that Reveal(x) enables users to connect to in order to fill in a gap in their security capabilities.
    • Automated inventory. Reveal(x) automatically creates a detailed inventory of all of the devices that it discovers and classifies. This keeps an always up-to-date record of all of the devices that are communicating in a given network.

    • Machine learning. Reveal(x)’s real-time application analytics is driven by a machine learning engine. It detects anomalies in an organization’s network traffic, thus enabling users to keep ahead of any and all threats while reducing the number of false positives that administrators have to sort through.

    Reviews from Real Users

    ExtraHop Reveal(x) is a solution that stands out when compared to many other similar solutions. Two major advantages that it offers are its versatility and its ability to quickly identify the root cause of an application’s issues.

    John B., the senior monitoring engineer at a financial services firm, says, “It's useful for different teams in our organization. The cybersecurity team uses it because it has got great analytics for anomaly detection, malware detection, and ransomware. It's used by the networking people because it's great to be able to get the three-way handshake between systems to see how your network is doing. The microservices for DNS use it because they like to be able to see how their DNS services are operating and how many DNS requests are being rejected, denied, or dropped. Application people love it because it fully decrypts their traffic.

    Henry S., a systems engineer at LifePoint Health, writes, "When there are performance issues with an HTTP app, ExtraHop enables us to identify the causes within a few minutes. We can see what transactions are being impacted by something that may be happening within the server environment."

    Lumu Technologies is a cyber-security company that illuminates threats, attacks, and adversaries affecting enterprises worldwide. Using actionable intelligence, Lumu provides a radical way to secure networks by enhancing and augmenting existing defense capabilities established over the past 25 years.

    Sample Customers
    Wood County Hospital
    Information Not Available
    Top Industries
    Security Firm22%
    Computer Software Company22%
    Financial Services Firm22%
    Educational Organization11%
    Computer Software Company15%
    Financial Services Firm14%
    Manufacturing Company6%
    Educational Organization13%
    Comms Service Provider10%
    Company Size
    Small Business23%
    Midsize Enterprise23%
    Large Enterprise54%
    Small Business22%
    Midsize Enterprise14%
    Large Enterprise64%
    Small Business43%
    Large Enterprise57%
    Small Business28%
    Midsize Enterprise19%
    Large Enterprise53%
    Buyer's Guide
    ExtraHop Reveal(x) vs. Lumu
    May 2024
    Find out what your peers are saying about ExtraHop Reveal(x) vs. Lumu and other solutions. Updated: May 2024.
    772,127 professionals have used our research since 2012.

    ExtraHop Reveal(x) is ranked 5th in Network Detection and Response (NDR) with 12 reviews while Lumu is ranked 6th in Network Detection and Response (NDR) with 5 reviews. ExtraHop Reveal(x) is rated 8.6, while Lumu is rated 9.8. The top reviewer of ExtraHop Reveal(x) writes "It helps you visualize how data moves across your network". On the other hand, the top reviewer of Lumu writes "Protects against threats and handles it in time with moderate pricing". ExtraHop Reveal(x) is most compared with Darktrace, Vectra AI, Corelight, Cisco Secure Network Analytics and Rapid7 InsightIDR, whereas Lumu is most compared with Darktrace, Stellar Cyber Open XDR, LogRhythm NDR, Fortinet FortiGate IPS and Splunk User Behavior Analytics. See our ExtraHop Reveal(x) vs. Lumu report.

    See our list of best Network Detection and Response (NDR) vendors.

    We monitor all Network Detection and Response (NDR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.