Platform
Solutions
Modern NDR
Resources
Company

ExtraHop’s Modern NDR Platform

Network Detection & Response

Network Performance Management

Modules

Intrusion Detection

Packet Forensics

Modern NDR

Modern NDR is critical to securing today’s modern infrastructure.

Key Use Cases

Threat Detection & Response Threat Hunting SOC Modernization Incident Response & Investigation Performance Monitoring

View All Use Cases

Industries

Education Defense and Intelligence Financial Services Healthcare Public Sector Retail

View All Industries

Integrations

Cloud Service Provider EDR SASE SIEM SOAR Ticketing

View All Integrations

CrowdStrike & ExtraHop

CrowdStrike & ExtraHop

Team up to modernize your SOC and maximize protection

Professional Services

Partners

Partner Login

Partner Finder

ABOUT US

Our Story

Leadership

Industry Recognition

Careers

Blog

Newsroom

Events

In-Person Events

Virtual Events

Leadership Team

Leadership Team

Get to know ExtraHop's Executive Leadership and Board of Directors

Black Hat 2025 - Las Vegas

Black Hat 2025 - Las Vegas

August 2 - 7, 2025 Mandalay Bay, Las Vegas

Platform
Solutions
Modern NDR
Resources
Company

Platform

ExtraHop’s Modern NDR Platform

Network Detection & Response

Network Performance Management

Modules

Intrusion Detection

Packet Forensics

Modern NDR

Modern NDR is critical to securing today’s modern infrastructure.

Solutions

Key Use Cases

Threat Detection & Response Threat Hunting SOC Modernization Incident Response & Investigation Performance Monitoring

View All Use Cases

Industries

Education Defense and Intelligence Financial Services Healthcare Public Sector Retail

View All Industries

Integrations

Cloud Service Provider EDR SASE SIEM SOAR Ticketing

View All Integrations

CrowdStrike & ExtraHop

Team up to modernize your SOC and maximize protection

Professional Services

Partners

Partner Login

Partner Finder

Modern NDR

Resources

Company

ABOUT US

Our Story

Leadership

Industry Recognition

Careers

Blog

Newsroom

Events

In-Person Events

Virtual Events

Leadership Team

Get to know ExtraHop's Executive Leadership and Board of Directors

Black Hat 2025 - Las Vegas

August 2 - 7, 2025 Mandalay Bay, Las Vegas

Back to the top

Products

Network Detection and Response
RevealX™ NDR
Network Performance Monitoring
RevealX™ NPM
RevealX™ Platform

Company

About Us
Leadership
Careers
Blog
Newsroom

Products

Network Detection and Response
RevealX™ NDR
Network Performance Monitoring
RevealX™ NPM
RevealX™ Platform

Company

About Us
Leadership
Careers
Blog
Newsroom

© 2025 ExtraHop Networks, Inc.

Terms of Use

Trust Center

Privacy Notice

Do Not Sell My Personal Information

Vulnerability Disclosure

How it Works

Broad visibility, deep analysis with RevealX™

Transform network traffic analysis into decisive action that reduces risk and accelerates response.

Gartner® named ExtraHop a leader in network detection and response.

Overview Collect Process Inventory Analyze Enrich

Overview

Learn How RevealX Works

RevealX leverages the network as the ultimate source of truth. You get broad visibility across all assets—from on-premises to cloud and unmanaged devices. By decrypting and decoding protocols, RevealX delivers the deep analysis you need to reveal and respond to cyber risk and ensure uninterrupted network operations.

ExtraHop consolidates NDR, NPM, IDS, and network forensics into a single, powerful platform. Our passive sensors, deployed on-prem and in the cloud, deliver context-rich, network driven insights. With turnkey integrations into your existing security stack, you can maximize ROI and operationalize the intelligence of your network across your Security and Operations teams.

COLLECTING DATA

Traffic monitoring across on-prem, cloud, and multi-cloud networks

Packets Go In, Visibility Comes Out

RevealX sensors receive network packets via port mirroring, physical and virtual network taps, SPANs, and aggregation switches. Sensors are not inline like a firewall, and can not bring the network down.

packet visibility on web, file and database servers going into a RevealX sensor graphic

Image of the physical and virtual ExtraHop sensors

Sensor Form Factors

RevealX sensors come in a variety of virtual and physical form factors to best fit that cloud or physical network, from virtual sensors for AWS, Azure, and GCP to physical sensors designed for full 100G line rate high speed networks.

STREAM PROCESSING

Real-Time Insights at up to 100 Gbps

RevealX sensors passively ingest traffic at up to 100 gigabits per second (Gbps), and then automatically transform and reassemble the unstructured packets into structured wire data and transaction streams.

Auto Discovery and Analysis

We see it all: our sensors automatically discover and profile every device, user, and application, analyzing over 5,000 metrics to detect threats and reduce risk.

Autodiscovery & PROFILING

Faster Investigations, Reduced MTTR

RevealX continuously discovers and profiles devices communicating on the network, collecting over 5000 metrics about your endpoints, servers, identities, services and more. Combining this context-rich data with AI powered anomaly detection and natural language search gives your team concrete answers - in much less time.

Asset Autodiscovery

RevealX provides automatic and continuous inventory of every asset communicating on your network. Devices profiles built over time rapidly identify changes, risks, and anomalies that help you investigate faster.

Image of devices by role in the ExtraHop Platform

Image of device groups in the RevealX platform

Aligning Devices To Your Business

RevealX leverages static and dynamic Device Groups - which allow you to group devices according to their business function or role. RevealX will then watch over those C-level devices, critical locations, VIP user identities, and high risk employees for you.

Analysis & Visualization

Less Risk, Faster Answers

From weak cipher suites, out of date certs, to unsanctioned AI, and suspicious RMM tools - RevealX will point out the risks and weaknesses across all your on-prem and cloud networks. Let RevealX show you what you’ve been missing and how it can accelerate investigations.

AI Assisted Analysis

Put your network data to work for you! RevealX collects over 5000 metrics about all the devices and conversations across your networks. ML models use that data to baseline performance and behaviors, which are then used to spot anomalies, unexpected changes, and risks.

Integration & Correlation

Uplevel Your Entire Stack

You can consolidate many tools with RevelaX: IDS, network monitoring, NDR, ITDR. But it doesn’t replace ALL tools. So it was designed to combine with key tools like EDR, SIEM, SOAR, SASE and automate workflows across tools - making them all more effective.

A Force Multiplier For Your Team

RevealX has a natural language UI and extensive tunability options, helping every member of your team to reduce noise and focus on the data that counts.

Image of management RevealX console

Image of example workflows in the UI interface

Automate Workflows For Faster Results

RevealX supports automating many of the steps in an investigation. Combine packaged automations with vendors like Crowdstrike and Splunk, or build your own. RevealX makes it easy to get the answers out and into other tools.

Featured resources

Want to learn more about what RevealX can do for you?

Online Demo

See how RevealX can solve your specific challenges

Learn more

Gartner MQ For Network Detection and Response

See why ExtraHop was named a leader in Gartner’s Magic Quadrant for NDR.

Learn more

The Buyer’s Guide for Network Detection and Response

Better understand the market, the choices, and outcomes you should expect.

Learn more

Stop Lateral Movement Fast—Start Now