No more typing reviews! Try our Samantha, our new voice AI agent.

ExtraHop Reveal(x) vs Zscaler Cloud IPS comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

ExtraHop Reveal(x)
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
15
Ranking in other categories
Network Traffic Analysis (NTA) (6th), Network Detection and Response (NDR) (5th)
Zscaler Cloud IPS
Average Rating
9.0
Reviews Sentiment
6.8
Number of Reviews
5
Ranking in other categories
Intrusion Detection and Prevention Software (IDPS) (20th)
 

Mindshare comparison

While both are Network Security Systems solutions, they serve different purposes. ExtraHop Reveal(x) is designed for Network Traffic Analysis (NTA) and holds a mindshare of 9.6%, down 17.5% compared to last year.
Zscaler Cloud IPS, on the other hand, focuses on Intrusion Detection and Prevention Software (IDPS), holds 1.7% mindshare, up 0.8% since last year.
Network Traffic Analysis (NTA) Mindshare Distribution
ProductMindshare (%)
ExtraHop Reveal(x)9.6%
Darktrace18.0%
Cisco Secure Network Analytics11.2%
Other61.2%
Network Traffic Analysis (NTA)
Intrusion Detection and Prevention Software (IDPS) Mindshare Distribution
ProductMindshare (%)
Zscaler Cloud IPS1.7%
Fortinet FortiGate12.6%
Darktrace11.2%
Other74.5%
Intrusion Detection and Prevention Software (IDPS)
 

Featured Reviews

Henri Heuvel - PeerSpot reviewer
Technical Consultant at Axians
Cloud-based administration streamlines network security management
ExtraHop Reveal(x) can improve regarding integration capabilities. For instance, the market is getting really flooded with Microsoft Sentinel, and I know there is an integration possible, but the tools on the market right now indicate that integration should not be a skill from an integrator point of view. It should be quite easy for customers to integrate that solution into SOCs, SIEMs, or any other integration with other tools. There are various integrations from which there's a manual on how to do it, but specifically, the Microsoft portfolio, particularly Sentinel, integration is not yet there. If you score them on a scale of one to ten, ExtraHop scores around a 7.5 to an 8 on an integration basis, but there's actually room for improvement on that side. In the older days, ExtraHop had a license model where you could do all you can eat, so if you had a sensor with 10 gig of capacity, you could use all the entire 10 gig of throughput. They changed that to an asset-based license model, and that's an absolute downside of the solution, where it is harder for smaller companies to acquire the solution itself. That has given us quite some problems in positioning the solution properly within the network, so the licensing model is an absolute downside where they need to improve.
Utpal Sinha - PeerSpot reviewer
Sr Network Engineer at Momentive
Stable product with valuable SSL inspection features
We use Zscaler Cloud IPS for threat protection, full SSL inspection, and data center scalability. It integrates with multiple products, including cloud firewalls, cloud sandboxing, Cloud Security Broker (CSB), and Data Loss Prevention (DLP). It helps us allow or block specific TCP or UDP ports…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"With ExtraHop Reveal(x), it gives me more visibility into the packets. It doesn't provide the entire packet capture, but it offers more information on how connections are made at the network layer. This can be helpful for detecting network attacks. Additionally, I really like the customizable dashboards and reports. The incident dashboard and alerts provide a good summary initially, and diving deeper into them gives more detailed information. It's also great for analyzing specific attacks and victim logs. The feature that tracks the full attack chain makes it easier to monitor the progress of attacks. Plus, it's connected to the Netria.com app, which I find useful for certain tasks."
"The solution works well for sending sensors."
"We had useful information within the hour of deployment."
"Reveal X integrates seamlessly with CrowdStrike. If you see something sketchy on the network, you can quarantine devices through ExtraHop and it'll push to the CrowdStrike server."
"The most valuable features of ExtraHop Reveal(x) are the detection and alerting of network behavior and anomalies."
"The solution's initial setup process is easy."
"The solution's ability to decrypt SSL traffic is its most valuable feature."
"The security features of this solution are the most valuable."
"The best feature is that Zscaler allows for a separation between cloud applications and URL filtering. For example, under the cloud application segment, I can bypass Microsoft Office 365 without the need to add URLs manually. It's one click, so that's handy."
"The best feature is that Zscaler allows for a separation between cloud applications and URL filtering."
"Cloud IPS integration is seamless, and it uses a Zero Trust model. It also simplifies overall user access management."
"The initial setup is straightforward and easy in comparison with other solutions."
"The initial setup process is easy."
"The initial setup is straightforward and easy in comparison with other solutions."
"The product's most valuable feature is complete SSL inspection."
"Cloud IPS integration is seamless, and it uses a Zero Trust model, and it also simplifies overall user access management."
 

Cons

"The solution's reporting part and GUI are areas with certain shortcomings where improvements are required."
"Agent management could certainly use some focus. It should also be a little bit easier to work with collections."
"I would rate the price a three out of five. It could be less expensive."
"There is a little training online, but it'd be cool if ExtraHop provided certifications. CrowdStrike does elective training that gives you a certification as a Falcon administrator. It'd be nice to see ExtraHop have something like that"
"I would like to see more cloud capability."
"Agent management could certainly use some focus. It should also be a little bit easier to work with collections. We should be able to nest collections within collections. There should be better nesting."
"The solution is expensive and gets more expensive if a company needs to scale it."
"Currently, we have to check manually as we do not receive any notifications about new patches, maintenance, or firmware releases."
"They have given limited free access for a year. Instead, they should increase the file size and give limited free access for around two months. It will allow engineers to evaluate the product."
"There is always room for improvement."
"We recently had a significant issue with Zscaler. I think they have too many customers and some of their connection edge nodes went down because there were too many requests."
"When it comes to scalability, the IPsec could be improved."
"There is always room for improvement."
"When it comes to scalability, the IPsec could be improved."
"We recently had a significant issue with Zscaler. I think they have too many customers and some of their connection edge nodes went down because there were too many requests. I think they aren't scaling enough to keep up with the demand in some areas. That's one thing they should improve."
"We encounter issues sharing IP addresses with other companies using the software."
 

Pricing and Cost Advice

"I would rate the price a three out of five. It could be less expensive."
"I rate ExtraHop Reveal(x) six out of 10 for affordability. We pay for an annual license. It's always one of those trade-offs. You get a lot of value, but ExtraHop isn't exorbitantly priced. You can pay extra for additional features like the ability to decode HL7 traffic, which is crucial for EMR environments."
"The solution is based on an annual subscription model and is expensive."
"I rate the price of ExtraHop Reveal(x) a seven on a scale of one to ten, where one is a high price, and ten is a low price."
"Zscaler has so far been solely responsible for all the sales we have done with it, so it would be more suited than us to address any issues concerning the pricing."
"The software has become more expensive at present."
"The product is not affordable for small and medium enterprises."
report
Use our free recommendation engine to learn which Network Traffic Analysis (NTA) solutions are best for your needs.
885,667 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
14%
Manufacturing Company
8%
Healthcare Company
8%
Computer Software Company
8%
Healthcare Company
12%
Manufacturing Company
9%
Construction Company
9%
University
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business3
Midsize Enterprise4
Large Enterprise9
No data available
 

Questions from the Community

What is the best network monitoring software for large enterprises?
We just did an assessment for our 47 datacenters around North America. The top two enterprise-level network monitoring solutions were ExtraHop first, Riverbed SteelCenter second. Their negotiated c...
What open source tool can one use to measure bandwidth from one's upstream service provider?
One I am looking closely at is AppNeta. They have an appliance that can digest the flow and do a better job than Netflow. The other one we are using is ExtraHop. This has both a Datacenter Hig...
What is your experience regarding pricing and costs for ExtraHop Reveal(x)?
We manage the setup cost ourselves, so I am quite happy with that. I also had engagement with professional services from ExtraHop, and it wasn't bad, but I was not impressed; it's not academic work...
Ask a question
Earn 20 points
 

Also Known As

Reveal(x), Revealx
No data available
 

Overview

 

Sample Customers

Wood County Hospital
Zenith Live, Azure, Carlsberg Group
Find out what your peers are saying about Darktrace, Auvik, Cisco and others in Network Traffic Analysis (NTA). Updated: March 2026.
885,667 professionals have used our research since 2012.