Machine Learning

Surface vital threats and insights within your enterprise.
Finally, machine learning for the masses.

Always On, So You Don't Have to Be

There is so much happening in your IT environment that it can seem overwhelming. Imagine you had a partner that never slept, stayed vigilant, and identified and surfaced legitimate performance and security issues instantly. ExtraHop Addy is always on, always learning, and ready to kick off response workflows based on real security and performance anomalies.

New: Addy Automated Investigation!

Addy now surfaces detailed metrics within an anomaly's description, no drill-down required. Here's a full, graphical overview.

Giving IT Superpowers

Spidey-Sense for IT

Providing real-time situational insight so you can take a proactive, data-driven approach, Addy guarantees you'll never get blindsided. ExtraHop may not give you actual superpowers but with Addy as your eyes and ears, no one will be able to tell the difference!

Take Addy for a Spin

ExtraHop Addy brings our environment into focus. With this service, we're alerted to issues we didn't know we had, and it makes us much more proactive in resolving them before the effects are widespread. We now have the data we need to be smarter about how we operate.

David Johnson
Enterprise Systems Support Specialist
State of Washington

Built on Wire Data icon

Built on the Wire

In the machine learning game, data source is what separates a level up from a waste of time for IT. Addy applies machine learning to wire data, your most comprehensive, real-time source of insight.

Easy to get started icon

Easy to Start

Addy will start learning what's "normal" for your enterprise right out of the box, and only gets smarter with time. You don't have to worry about configuring or managing Addy at all.

Cut out Noise icon

Cuts Through the Noise

By only surfacing real anomalies, Addy helps you spend your time effectively instead of sifting through false-positives: the perfect early warning complement to cross-tier visibility.

How Does ExtraHop Addy Work?

Addy takes lightweight wire data metrics and shoots them up into the cloud where a suite of machine-learning algorithms detect anomalies in time-series data for every device, network, and application. Addy learns what is normal—and more importantly, what's not—and continuously benefits from crowd-sourced feedback to get better at understanding what's routine and what requires human attention.

With Addy, your team can rest assured it will always be the first to know when there's a problem—so you can solve it quickly and proactively, before hearing from frustrated users.

Machine Learning for Security

Within three days of deploying ExtraHop's anomaly detection solution, it alerted on an anomaly that, an hour later, turned into a Sev-1 incident ... The fact that ExtraHop caught these things before they turned into major incidents tells us just how accurate the machine learning is. Knowing we can trust these alerts is going to make us much more proactive in averting these issues in the future.

IT Operations Manager
Large Canadian Financial Institution

How Customers Are Using Addy

Scan Detection

A large cable provider averted a potential breach when Addy detected a compromised server that was unexpectedly probing systems in another major datacenter, enabling the team to shut down the server and investigate the incident.

Malicious DNS Activity Alerts

A national medical institution averted two potential security breaches when Addy detected international servers probing their DNS, as well as reverse DNS look-ups.

Real-Time Analytics

Data Exploration