ExtraHop

Last Updated: 26th March 2024
Analyst Coverage: Fran Howarth

ExtraHop was founded in 2007. It has its headquarters in Seattle in the US, with further offices in London, Germany, France, Australia, Singapore and Japan.

It started out as a provider of network analysis and visibility, and network monitoring tools. However, it pivoted to being a provider of security tools in 2018, having realised that its customers were increasingly using its products for their security needs. It now offers its Reveal(x) platform, which at its core provides network detection and response (NDR) tools. Already well known in the NDR space, it has been adding a range of complementary tools to the platform to increase network visibility further.

Selling primarily to large enterprises, although it has a wide range of customers of various sizes, ExtraHop has seen high levels of revenue growth recently and has now the second highest market share in the NDR space. It continues to show high levels of innovation.

Company Info

Headquarters: 520 Pike St, Suite 1600, Seattle, WA 98101, United States
Telephone: +1 877 333 9872

ExtraHop Reveal(x)

Last Updated: 26th March 2024
Mutable Award: Gold 2024

What is it?

ExtraHop offers a platform, RevealX, that integrates network detection and response (NDR), network performance monitoring (NPM), intrusion detection (IDS) and packet forensics. This enables it to observe network traffic, detect threats, and investigate and respond to incidents.

It recently unveiled a further expansion of its integration with the CrowdStrike Falcon platform, giving joint customers the option to use CrowdStrike Falcon LogScale next-gen SIEM for its record store with on-premise deployments.

It has recently unveiled a major partnership with CrowdStrike to expand its offerings to include endpoint detection and response (EDR), security information and event management (SIEM) and threat intelligence to enable more extensive investigations to be conducted.

Customer Quotes

“We had tested a number of solutions but none of them offered us deep visibility without compromising on performance until we evaluated ExtraHop.”
Romain Verginol, CISO, Cegedim

“We had instant confidence in the tool. The ability to essentially plug and play meant we started to see returns on our investment almost right away.”
Richard Stepanek, CIO, Central Oregon Radiology Associates

“The benefit is clear – the ability to troubleshoot and get to the root cause of the problem ten times faster with ExtraHop allows us to quickly demonstrate its value back to the business.”
Steve Bamford, Senior network engineer, IG Group

What does it do?

Fig 01 - AI-assisted search

ExtraHop’s technology is cloud-native and extremely scalable. It enables threats to be detected throughout the network, including endpoints and traffic flows into and out of the network. It has recently expanded its offerings with some important new capabilities.

Its Smart Investigations capabilities enable automatic identification and generation of investigations of threats that have been detected, aided by contextual awareness of the customer’s environment. By correlating detections, it points analysts to the most critical events on which to focus, enabling greater efficiency and accelerating investigations to improve response times.

Fig 02 - ExtraHop product strategy

The RevealX platform utilises generative AI large language models with a natural language query capability to provide contextual awareness that suggests search queries of assets and detected threats. This reduces complexity for analysts and enables faster identification and resolution of security issues.

The partnership with CrowdStrike takes advantage of its threat intelligence capabilities, providing real-time network indicators and metadata to ExtraHop customers. It uses behavioural analysis to better detect threats and provide context related to the severity of the threat encountered and to accelerate investigations.

Why should you care?

ExtraHop has a long heritage in the market that it serves, shows high levels of innovation and has a strong roadmap, with enhancements made every quarter.

Its product components are tightly integrated into its RevealX platform and it has a wide roster of partnerships for added capabilities. Its features make it easy to use and its strong technology make it fit for its intended purposes. It reports high levels of growth and is well suited to a wide range of customers, from small companies to large multinationals for which it is highly scalable to meet their needs.

The bottom line

ExtraHop is positioned as a Champion in the NDR Market Updates published by Bloor Research. It is considered to be a leading player in the market, offering good value and performance.

Mutable Award: Gold 2024