Start Demo

Wire Data for Defense and Intelligence

Maintain situational awareness and information dominance.

AFCEA Corporate Member Logo

The cyber landscape grows more complex and murky every day, so maintaining situational awareness is more important than ever for defense organizations' initiatives. Now is the time for more capable and scalable platforms that can achieve information dominance.

Your network is your richest source of real-time insight: Everything, from IT assets to cyber threats, transacts on the wire. ExtraHop observes and analyzes this data in flight across every system and application tier:

  • Auto-discover and map dependencies across the whole distributed environment
  • Detect suspicious network traffic patterns and rapidly drill down to transaction details
  • Equip all teams with an open, extensible source of insight

ExtraHop delivers real-time analytics backed by machine learning for anomaly detection so you can easily and efficiently control your mission critical infrastructure. Ensure compliance, strengthen security, and support large and dynamic environments with end-to-end visibility.

ExtraHop Contacts for Federal Sales

Mike Ernst, Manager, Federal Sales Engineers
m.ernst@extrahop.com | 206.474.2181 | Florida

Mary Oliva, Regional Sales Manager, DoD & Intelligence
m.oliva@extrahop.com | 202.725.5292 | Virginia

Matt Schneider, Regional Sales Manager, Federal Civilian
m.schneider@extrahop.com | 281.798.9291 | Virginia

Mitchell Schwartz, Sales Engineer, Federal Civilian
m.schwartz@extrahop.com | 703.334.1301 | Maryland

Sam Richman, Sales Engineer, DoD & Intelligence
richmans@extrahop.com | 240.361.8613 | Maryland

Kevin Gallagher, Channel Sales Manager, Southeast
kevingallagher@extrahop.com | 727.808.4052 | Tampa

Curtis Walters, Area Vice President, Southeast & Federal
cwalters@extrahop.com | 678.780.2116 | Atlanta

With ExtraHop you can:

  • Deploy rapidly and get actionable insights within hours or even minutes with no agents to instrument.
  • Automatically map activity and dependencies to assure continuous knowledge of everything happening on your network.
  • Audit security certificates and file access activity to assure regulatory compliance and that sensitive data is only being accessed by authorized users.
  • Get detailed application-level transaction metrics such as specific users, files, errors, and methods to help isolate the root cause of problems quick.

Use Cases

Advanced Persistent Visibility

Using ExtraHop, the team quickly identified the compromised hosts, which data was exposed, and malicious servers involved. They discovered a compromised internal server being used to stage a brute force login attack on the database, and examined subsequent database queries to understand what the attackers were up to. Then they isolated how the breach occurred and strengthened their security accordingly.

Correlating Revenue with Payment Transactions

A financial company used ExtraHop application inspection triggers to show all unique orders and total revenue by merchant, as well as the transaction times with SLA thresholds so they could identify real-time purchasing trends. It gave them insight they needed to justify budget for architecture improvements.

Detecting Data Exfiltration

A large government agency needed a way to identify the source of a data leak and detect any future data exfiltration. The security team used the ExtraHop platform to identify a specific machine with abnormal DNS activity as the source of the leak, and they now use ExtraHop as an integral part of their security monitoring and analytics.

Infrastructure Performance Monitoring (IPM)

The ExtraHop platform makes it easier to manage increasingly complex physical, virtual, and cloud environments by providing deep insight into wire data, all L2-L7 communications between servers…

Ransomware Prevention

The ExtraHop platform alerts incident response teams about a ransomware attack within minutes so they can take quick action to mitigate the impact.

Real-User Monitoring

ExtraHop created end-to-end workflow tracking and reporting for a technology services company, making it easy for their IT team to see what contributes to user-perceived load times and perform real-time analysis of how users are experiencing their site.

SSL Certificate Management

Situation Managing SSL certificates is one of the many mundane but important IT management tasks that weigh on IT Operations teams. ExtraHop makes these tasks easier, helping IT teams to proactively…

Security / Encryption Auditing

A large enterprise with both incoming and outgoing SSL traffic used ExtraHop to view the entire set of SSL behaviors on their network, so they could see how certificates were being used, plan SSL hardware purchases, and remove unused certificates.

Additional Resources