No more typing reviews! Try our Samantha, our new voice AI agent.

ExtraHop Reveal(x) vs Trellix Network Detection and Response comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Nov 6, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
6.5
ExtraHop Reveal(x) enhances MTTR and ROI by swiftly identifying issues, benefiting finance firms but costly for healthcare.
Sentiment score
7.0
Trellix NDR boosts ROI by improving security, reducing response times, and enabling efficient threat management and cost savings.
Investigations are generally faster because analysts have immediate access to relevant network context instead of manually piecing together information from multiple sources.
Senior Business Development Associate at DigitalTrack Solutions ind pvt ltd
The time was reduced because of the automated detections.
Associate Cybersecurity Analyst at a tech vendor with 10,001+ employees
If a threat can enter any endpoint that is exposed to the internal network, there is a potential gateway for hackers, leading to a loss of production or significant financial impact to the network.
Security Engineer at Digitaltrack
 

Customer Service

Sentiment score
7.6
Users highly rate ExtraHop Reveal(x) support for reliable, knowledgeable, and efficient issue resolution, despite occasional time zone delays.
Sentiment score
7.2
Trellix Network Detection and Response support is praised for knowledgeable service, though response times need improvement during severe incidents.
I would rate their technical support nine out of ten.
Network Consultant at a non-profit with 201-500 employees
The support team was responsive and knowledgeable.
Business development executive at Digitaltrack solution Pvt Ltd
Technical support needs improvement as sometimes engineers are not available promptly, especially during high-severity incidents.
Information Security Engineer at Nhq Distribution Ltd
They were constantly relaying our message to the engineering team and the engineering team was looping that back to them and then to us.
Associate Cybersecurity Analyst at a tech vendor with 10,001+ employees
 

Scalability Issues

Sentiment score
6.5
ExtraHop Reveal(x) is scalable and manages up to 100GB, though cost and upgrades may pose challenges for some users.
Sentiment score
8.0
Trellix Network Detection and Response is scalable and reliable, efficiently handling complex configurations and high bandwidth in large networks.
The scalability of Trellix Network Detection and Response is easy; I just have to add another license in the same cloud, and I can easily increase the number of endpoints.
Cyber Security Engineer at a retailer with 51-200 employees
Trellix Network Detection and Response has handled that growth while continuing to provide consistency, visibility, threat detection, and investigation capabilities.
Business development executive at Digitaltrack solution Pvt Ltd
The connectors were always out of sync and we have had multiple noise floods from these connectors which were not configured well.
Associate Cybersecurity Analyst at a tech vendor with 10,001+ employees
 

Stability Issues

Sentiment score
7.5
ExtraHop Reveal(x) is highly stable and reliable, consistently performing well with regular updates, despite minor hardware issues.
Sentiment score
8.0
Trellix Network Detection and Response is highly stable and reliable, with minimal downtime and consistently praised by users.
In my day-to-day use, it has consistently provided the visibility and detection capabilities we rely on for security monitoring and investigations.
Senior Business Development Associate at DigitalTrack Solutions ind pvt ltd
In our experience, it has had a positive impact on our production environment and has proven to be a dependable part of our security operations.
Business development executive at Digitaltrack solution Pvt Ltd
I encounter no issues with health or reliability when the recommended specifications are met.
CyberSecurity Architect at a comms service provider with 51-200 employees
 

Room For Improvement

ExtraHop Reveal(x) needs improvements in integrations, flexibility, reporting, pricing, and cloud capabilities, while offering better training options.
Trellix needs improved customization, integration, and usability in its detection, reporting, and policy management for enhanced user experience.
Currently, we have to check manually as we do not receive any notifications about new patches, maintenance, or firmware releases.
Network Consultant at a non-profit with 201-500 employees
I would like to see improvements in areas where events are getting dropped; we're not able to view complete insights.
Assistant VP, Idm Compliance at a financial services firm with 1,001-5,000 employees
There should be improvements in AI intelligence, faster decision-making, and a more responsive technical support team.
Information Security Engineer at Nhq Distribution Ltd
It would be best if Trellix Network Detection and Response sensors were converted into a next-generation firewall with built-in capabilities for routing, switching, and Layer 7 functionality, as most next-generation firewalls today include these features.
Network & Security Lead at Net-International
Regarding needed improvements for Trellix Network Detection and Response, there is always room for enhancement in terms of AI capability to include proactive triggers based on historical data, enabling AI to learn patterns and detect threats before they manifest.
Presales Manager
 

Setup Cost

Enterprise buyers find ExtraHop Reveal(x) costly, with escalating costs for scaling and specific features, despite robust capabilities.
Trellix's pricing is considered competitive but expensive, with straightforward licensing and efficient setup, potentially deterring smaller businesses.
Trellix Network Detection and Response is an enterprise-grade security solution, so it represents a significant investment, but we believe that the value it provides in terms of threat detection, network visibility, and incident response justifies the cost.
Business development executive at Digitaltrack solution Pvt Ltd
The pricing model is not transparent, as they do not provide pricing ranges upfront, complicating the evaluation of costs across regions.
CyberSecurity Architect at a comms service provider with 51-200 employees
My experience with the pricing, setup cost, and licensing of Trellix Network Detection and Response is that they are very good and affordable for the customer range.
Network & Security Lead at Net-International
 

Valuable Features

ExtraHop Reveal(x) offers seamless integration, powerful analytics, and machine learning for effective threat detection and comprehensive network visibility.
Trellix Network Detection and Response enhances security with real-time detection, automation, and integration, reducing manual monitoring by 50%.
If I want to know a specific IP and which server it has been connected to, it's easy to gather those kinds of trees from the NDR.
Assistant VP, Idm Compliance at a financial services firm with 1,001-5,000 employees
The solution offers a friendly GUI for security features.
Network Consultant at a non-profit with 201-500 employees
Per day we used to have 70 to 80 alerts and those could be reduced up to 40 to 30 a day. This is almost a 40 to 50% decrease.
Associate Cybersecurity Analyst at a tech vendor with 10,001+ employees
Trellix Network Detection and Response has positively impacted my organization by addressing performance issues, specifically by offloading heavy traffic inspection and SSL inspection through sensors due to the limitations of the firewall.
Network & Security Lead at Net-International
Visibility is very important as it empowers users to understand what is happening; therefore, detection is one of the strongest features of Trellix Network Detection and Response.
Presales Manager
 

Categories and Ranking

ExtraHop Reveal(x)
Ranking in Network Detection and Response (NDR)
4th
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
15
Ranking in other categories
Network Traffic Analysis (NTA) (6th)
Trellix Network Detection a...
Ranking in Network Detection and Response (NDR)
7th
Average Rating
8.4
Reviews Sentiment
7.2
Number of Reviews
54
Ranking in other categories
Advanced Threat Protection (ATP) (10th)
 

Mindshare comparison

As of June 2026, in the Network Detection and Response (NDR) category, the mindshare of ExtraHop Reveal(x) is 5.9%, down from 8.7% compared to the previous year. The mindshare of Trellix Network Detection and Response is 3.0%, up from 2.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Network Detection and Response (NDR) Mindshare Distribution
ProductMindshare (%)
ExtraHop Reveal(x)5.9%
Trellix Network Detection and Response3.0%
Other91.1%
Network Detection and Response (NDR)
 

Featured Reviews

Henri Heuvel - PeerSpot reviewer
Technical Consultant at Axians
Cloud-based administration streamlines network security management
ExtraHop Reveal(x) can improve regarding integration capabilities. For instance, the market is getting really flooded with Microsoft Sentinel, and I know there is an integration possible, but the tools on the market right now indicate that integration should not be a skill from an integrator point of view. It should be quite easy for customers to integrate that solution into SOCs, SIEMs, or any other integration with other tools. There are various integrations from which there's a manual on how to do it, but specifically, the Microsoft portfolio, particularly Sentinel, integration is not yet there. If you score them on a scale of one to ten, ExtraHop scores around a 7.5 to an 8 on an integration basis, but there's actually room for improvement on that side. In the older days, ExtraHop had a license model where you could do all you can eat, so if you had a sensor with 10 gig of capacity, you could use all the entire 10 gig of throughput. They changed that to an asset-based license model, and that's an absolute downside of the solution, where it is harder for smaller companies to acquire the solution itself. That has given us quite some problems in positioning the solution properly within the network, so the licensing model is an absolute downside where they need to improve.
Twinkle Solanki - PeerSpot reviewer
Business development executive at Digitaltrack solution Pvt Ltd
Continuous network insight has improved early threat detection and streamlined investigations
Overall, we have a positive experience with Trellix Network Detection and Response, but like any enterprise security solution, there are areas where it can continue to improve. One area would be user interface and dashboard customization. While the platform provides a lot of valuable information, new users can sometimes face a learning curve when navigating and investigating and creating customized views. More intuitive dashboards would simplify workflows and help analysts access critical information even faster. Another area for improvement is reporting and analytics. The existing reporting capabilities are useful, but more flexibility and customizable reporting options would make it easier to generate executive-level summaries, compliance reports, and operational metrics for different audiences.
report
Use our free recommendation engine to learn which Network Detection and Response (NDR) solutions are best for your needs.
900,838 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
16%
Manufacturing Company
9%
Healthcare Company
8%
Government
7%
Manufacturing Company
16%
Financial Services Firm
13%
Comms Service Provider
9%
Outsourcing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business3
Midsize Enterprise4
Large Enterprise9
By reviewers
Company SizeCount
Small Business32
Midsize Enterprise14
Large Enterprise23
 

Questions from the Community

What is the best network monitoring software for large enterprises?
We just did an assessment for our 47 datacenters around North America. The top two enterprise-level network monitoring solutions were ExtraHop first, Riverbed SteelCenter second. Their negotiated c...
What open source tool can one use to measure bandwidth from one's upstream service provider?
One I am looking closely at is AppNeta. They have an appliance that can digest the flow and do a better job than Netflow. The other one we are using is ExtraHop. This has both a Datacenter Hig...
What is your experience regarding pricing and costs for ExtraHop Reveal(x)?
We manage the setup cost ourselves, so I am quite happy with that. I also had engagement with professional services from ExtraHop, and it wasn't bad, but I was not impressed; it's not academic work...
What is your experience regarding pricing and costs for FireEye Network Security?
My experience with pricing, setup cost, and licensing for Trellix Network Detection and Response is positive, as the setup process was straightforward, licensing was flexible, and the value deliver...
What needs improvement with FireEye Network Security?
Based on my experience with the solution, I do not see any improvements needed for Trellix Network Detection and Response at present; it might be required in the future, but there is no space to im...
What is your primary use case for FireEye Network Security?
Our main use case for Trellix Network Detection and Response is to maintain oversight of our network traffic and catch any threats or unusual activity as early as possible. Trellix Network Detectio...
 

Also Known As

Reveal(x), Revealx
FireEye Network Security, FireEye
 

Overview

 

Sample Customers

Wood County Hospital
FFRDC, Finansbank, Japan Advanced Institute of Science and Technology, Investis, Kelsey-Seybold Clinic, Bank of Thailand, City of Miramar, Citizens National Bank, D-Wave Systems
Find out what your peers are saying about ExtraHop Reveal(x) vs. Trellix Network Detection and Response and other solutions. Updated: June 2026.
900,838 professionals have used our research since 2012.