Try our new research platform with insights from 80,000+ expert users

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the report

Prominent pros & cons

PROS

Setting up ExtraHop Reveal(x) is relatively easy with useful information available shortly after deployment.
ExtraHop Reveal(x) excels in historical and behavioral analysis, aiding in informed decisions to mitigate performance or security incidents.
ExtraHop Reveal(x) offers excellent detection and alerting of network behavior and anomalies.
ExtraHop Reveal(x) integrates seamlessly with CrowdStrike to enhance security measures by quarantining devices when necessary.
The detailed tracking of attacks, packet visibility, customizable dashboards, and the ability to decrypt SSL traffic are standout features of ExtraHop Reveal(x).

CONS

ExtraHop Reveal(x) is expensive and costs increase significantly if scaling is necessary.
Processing Netflow is cumbersome, requiring triggers for valuable insights and adding hardware load.
Agent management needs improvement, especially with collections and nesting capabilities.
More cloud capability would be beneficial.
There are limitations with the look-back feature, with only 30 days available; a longer duration is desirable.
 

ExtraHop Reveal(x) Pros review quotes

it_user1366029 - PeerSpot reviewer
Technical Account Manager at a security firm with 501-1,000 employees
Jul 5, 2020
Setting up the solution is relatively easy.
DV
Sales Engineer | Technical Sales | Pre-Sales at SUSE
Aug 12, 2020
We had useful information within the hour of deployment. The ability to trace back for historical analysis, as well as the behavioral analysis done with the security information, puts the user in a position to make an informed decision to mitigate the performance or security incidents. Regarding the security incidents, Reveal (x) is able to create incident cards that guide your teams through the incidents and gives you the option to delve into the transaction detail to potentially view payloads as well.
John Boake - PeerSpot reviewer
Senior monitoring engineer at a financial services firm with 10,001+ employees
Jul 11, 2022
It's a wire analytics tool. We use it for isolating and determining issues on our network or applications. It does a lot for crediting the network as opposed to discrediting the network. A lot of people come along and say that it's a network issue. It's always considered to be a network issue, but by using ExtraHop, we can quickly tell them that it's not a networking issue. It's something to do with your application or something at the other end. It could be a database issue. This tool gives us the ability to pinpoint with great accuracy the comings and goings on our network.
Learn what your peers think about ExtraHop Reveal(x). Get advice and tips from experienced pros sharing their opinions. Updated: January 2026.
880,745 professionals have used our research since 2012.
it_user1366029 - PeerSpot reviewer
Technical Account Manager at a security firm with 501-1,000 employees
Aug 2, 2022
The security features of this solution are the most valuable.
Jordan Swanson - PeerSpot reviewer
Information Security Assurance Engineer at School District of Lee County
Sep 7, 2022
Reveal X integrates seamlessly with CrowdStrike. If you see something sketchy on the network, you can quarantine devices through ExtraHop and it'll push to the CrowdStrike server.
Henry-Steinhauer - PeerSpot reviewer
Systems Engineer at LifePoint Health
Sep 21, 2022
When there are performance issues with an HTTP app, ExtraHop enables us to identify the causes within a few minutes. We can see what transactions are being impacted by something that may be happening within the server environment.
Serena Bryson - PeerSpot reviewer
Information Security Program Manager at a non-profit with 11-50 employees
Oct 4, 2022
The most valuable features of ExtraHop Reveal(x) are the detection and alerting of network behavior and anomalies.
SS
Business Development Manager at Westcon-Comstor
Feb 3, 2023
The solution works well for sending sensors.
reviewer2181960 - PeerSpot reviewer
Presales Consultant at a tech services company with 201-500 employees
May 11, 2023
The solution's initial setup process is easy.
reviewer2283003 - PeerSpot reviewer
Cyber Security Engineer II at a healthcare company with 10,001+ employees
Sep 26, 2023
ExtraHop Reveal(x) is one of the tools that works out of the box when it comes to threat hunting.
 

ExtraHop Reveal(x) Cons review quotes

it_user1366029 - PeerSpot reviewer
Technical Account Manager at a security firm with 501-1,000 employees
Jul 5, 2020
The solution is expensive and gets more expensive if a company needs to scale it.
DV
Sales Engineer | Technical Sales | Pre-Sales at SUSE
Aug 12, 2020
Netflow - Processing Netflow can be cumbersome as it requires triggers to truly gain value and insight. This in turn can add a bit of load to the hardware. The focus of ExtraHop Reveal (x) is live packet data.
John Boake - PeerSpot reviewer
Senior monitoring engineer at a financial services firm with 10,001+ employees
Jul 11, 2022
Agent management could certainly use some focus. It should also be a little bit easier to work with collections. We should be able to nest collections within collections. There should be better nesting.
Learn what your peers think about ExtraHop Reveal(x). Get advice and tips from experienced pros sharing their opinions. Updated: January 2026.
880,745 professionals have used our research since 2012.
it_user1366029 - PeerSpot reviewer
Technical Account Manager at a security firm with 501-1,000 employees
Aug 2, 2022
I would like to see more cloud capability.
Jordan Swanson - PeerSpot reviewer
Information Security Assurance Engineer at School District of Lee County
Sep 7, 2022
There is a little training online, but it'd be cool if ExtraHop provided certifications. CrowdStrike does elective training that gives you a certification as a Falcon administrator. It'd be nice to see ExtraHop have something like that
Henry-Steinhauer - PeerSpot reviewer
Systems Engineer at LifePoint Health
Sep 21, 2022
They used to have the ability to decode Citrix sign-on, setup, and tear down. Unfortunately, Citrix has stopped sharing that knowledge. Citrix has continued to change its model of processing, making it harder and harder to troubleshoot.
Serena Bryson - PeerSpot reviewer
Information Security Program Manager at a non-profit with 11-50 employees
Oct 4, 2022
ExtraHop Reveal(x) could improve by allowing a longer look back in the feature. Right now you have a limit of 30 days to look back on your activity. I've used Darktrace before, and they allow you the ability to play back events. This would be a good feature to have in ExtraHop Reveal(x).
SS
Business Development Manager at Westcon-Comstor
Feb 3, 2023
The solution should include more support protocols.
reviewer2181960 - PeerSpot reviewer
Presales Consultant at a tech services company with 201-500 employees
May 11, 2023
It needs integration with more security vendors.
reviewer2283003 - PeerSpot reviewer
Cyber Security Engineer II at a healthcare company with 10,001+ employees
Sep 26, 2023
The solution’s pricing could be improved.