Cloud-Native Security

AWS Security Solution

Detection, Investigation, and Response for AWS Workloads

Secure Your Investment in AWS

Reveal(x) Surface


Reveal(x) 360 Arrow Link

While the cloud and expanded use of remote workforces may be force multipliers for DevOps and IT Ops, for security teams, they can also leave organizations more vulnerable to advanced threats. Enterprises are recognizing the need to take a cloud-native approach to securing data and workloads rather than trying to retrofit old technology to new cloud security best practices. For example, most legacy tools can't provide complete visibility into network traffic, hampering their ability to detect, investigate, and respond to complex threats at the speed and scale the hybrid attack surface demands. Security teams are also struggling with visibility into containers such as Amazon Elastic Kubernetes Service (EKS), orchestration platforms like Amazon Elastic Container Service (ECS), and compute engines like AWS Fargate.

ExtraHop Reveal(x) 360 is a SaaS-based network detection and response (NDR) solution that helps organizations in AWS adopt a cloud-native approach to securing the hybrid enterprise, even if workloads are deployed in services such as Amazon EKS, Amazon ECS, or AWS Fargate.

ExtraHop sensors decrypt and process network traffic and extract metadata for behavioral analysis, real-time threat detection, and investigation performed in Reveal(x) 360. ExtraHop offers two purchase models for sensors—reserved priced and on-demand billed by the hour— and you can also leverage our on-demand pricing for a cloud-based record warehouse that enables index record search, query, and drill-down investigation in every segment of your hybrid environment for situational intelligence. Additionally, Reveal(x) 360 for AWS also offers sensors with continuous packet capture (PCAP) for in-depth forensics.

By natively integrating with Amazon VPC Traffic Mirroring, Reveal(x) 360 provides agentless visibility to eliminate friction from DevOps processes. With real-time threat detection and intelligent response capabilities at scale, Reveal(x) NDR lets you secure your applications and confidently scale your hybrid business.

Ready for a Real-World Example?

Complete Visibility

Automatically discover and classify every asset in your cloud infrastructure, including rogue instances. Reveal(x) provides deep, continuous visibility—including into SSL/TLS encrypted traffic—and situational intelligence across hybrid, multicloud, IoT, and remote work environments from a single management pane accessible from anywhere.

Real-Time Detection

Harden your attack surface with immediate detection of anomalous behaviors and malicious activity that indicate unauthorized access and attempts to exploit misconfigurations and insecure APIs. Reveal(x) uses cloud-based machine learning that leverages more than 5,000 wire data features to accurately identify threats whenever they occur within or across cloud workloads.

Intelligent Response

Take a nuanced approach to incident response with Reveal(x). Guided investigative workflows enable you to pivot from detection to forensic evidence in 3 or fewer clicks. Native integrations with AWS EC2, S3, Amazon CloudWatch and CloudTrail, Amazon VPC Flow Logs, and Lambda give your team the comprehensive insight and automation you need to protect your infrastructure in the cloud.


SSRF Attack — AWS Instance Metadata Service (IMDS)

Why Cloud-Native?

Agentless Visibility, Threat Detection, and Response

Tools that rely on fixed agents or logs can leave visibility gaps, miss critical threats, and introduce unnecessary friction to DevOps processes. Reveal(x) leverages Amazon VPC Traffic Mirroring to provide agentless visibility, packet-level granularity, and security at scale.

For a real-world example of how Reveal(x) helps international fantasy adventure game maker Wizards of the Coast remove layers of security complexity from their DevOps processes and empower developers to create with speed, read the case study and watch the video.

Customer LogoCustomer Story

Removing Friction From The Development Cycle

Quote Icon

ExtraHop allowed me to work natively with my platforms. That's critical, rather than having other third-party add-ons or agents that you have to plug in.

Dan McDaniel
Chief Architect & Information Security Officer, Wizards of the Coast

Reveal(x) Security Solutions for AWS

Reveal(x) 360 covers AWS—and provides unified security across on-premises and cloud environments, 360-degree visibility and situational intelligence without friction, and immediate value with a low management burden.


Reserved-price cloud sensors
On-demand sensors billed hourly
Simplified sensor deployment via Cloud Console
Cloud-scale ML
ExtraHop-managed record warehouse
Control plane for unified visibility (hybrid and multicloud)
Amazon VPC Traffic Mirroring integration
Trial Image

Try Reveal(x) 360
for Free

Request a free trial to discover how our SaaS-based solution works in AWS without the complexity of a traditional proof of concept.

Request Free Trial

AWS Marketplace