Cisco Secure Network Analytics vs ExtraHop Reveal(x) 360 comparison

Cisco Secure Network Analytics vs. ExtraHop Reveal(x) 360

Download the complete report

Helped 914,322 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cisco Secure Network Analytics

Ranking in Network Traffic Analysis (NTA)

5th

Average Rating

8.2

Reviews Sentiment

6.6

Number of Reviews

Ranking in other categories

Network Monitoring Software (31st), Network Detection and Response (NDR) (6th), Cisco Security Portfolio (9th)

ExtraHop Reveal(x) 360

Ranking in Network Traffic Analysis (NTA)

9th

Average Rating

8.6

Reviews Sentiment

7.0

Number of Reviews

Ranking in other categories

Intrusion Detection and Prevention Software (IDPS) (16th), Container Security (35th), Extended Detection and Response (XDR) (25th)

Mindshare comparison

As of September 2026, in the Network Traffic Analysis (NTA) category, the mindshare of Cisco Secure Network Analytics is 8.4%, down from 14.5% compared to the previous year. The mindshare of ExtraHop Reveal(x) 360 is 3.6%, down from 3.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Network Traffic Analysis (NTA) Mindshare Distribution
Product	Mindshare (%)
Cisco Secure Network Analytics	8.4%
ExtraHop Reveal(x) 360	3.6%
Other	88.0%

Network Traffic Analysis (NTA)

Featured Reviews

Muhammad Harun-Owr-Roshid

CEO at BRIGHT-i SYSTEMS LIMITED

Have streamlined network visibility and troubleshooting while seeing benefits from AI integration

In terms of improvements for Cisco Secure Network Analytics, from the implementation point of view, now that AI is in use, some other features need to be upgraded considering AI solutions. Proper management of the database is also important; it should be centralized for easier data collection from a single database. When precise manual analysis is needed, it's sometimes difficult, so having a centralized database will allow network admins to find actual scenarios more effectively, especially since some information may not be visible on the GUI. Cisco should upgrade their hardware part to run the database, because sometimes it cannot handle the load while all features are running in the network. The database management should indeed be centralized because while AI runs behind the systems, central management is essential. For example, in a network with 100 Cisco switches, a few routers, firewalls, and access points, all data generated should be preserved in a central database. This approach simplifies management and analysis for troubleshooting, as GUI interfaces may not always provide visible information. Centralizing the database will allow for better understanding of which information is preserved for each specific device.

Read full review

reviewer2857197

Lead IT Service Analyst at a manufacturing company with 10,001+ employees

Cloud-native threat detection has improved incident investigations and now reduces breach risk

We have covered most of the features over the past three years and look forward to discovering more as we work closely with the ExtraHop technical team, who are open to sharing what they have developed. Pricing is on the higher side, typically based on load, volume of traffic, and deployment scale. The advanced detection capabilities provide significant value in reducing investigation time, making the licensing and pricing acceptable for larger organizations. ExtraHop Reveal(x) 360 has undeniably improved our security posture, reduced manual investigation efforts, and facilitated fast threat detection mechanisms, which all help prevent costly potential breaches in enterprise environments. ExtraHop Reveal(x) 360's SaaS environment is well-suited for cloud, on-premises, and hybrid environments, effectively addressing real-life scenarios involving east-west and north-south traffic. The platform is recommended for large organizations in need of comprehensive detection capabilities. I would rate this product overall as an 8 out of 10.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Stability is the most valuable feature we have seen in this solution."

"Cisco products are incredibly stable, boasting a 200% stability."

"Cisco Stealthwatch has reduced the amount of time to detect an immediate threat."

"It's easy to set up. The deployment takes one or two days. You need to collect the data from a device and then direct it to the portal."

"The most valuable feature of this solution is data hoarding because it catches threats on a frequent basis that we had no idea of."

"The most valuable features are encrypted threat analysis and the ability to run jobs on entire flows."

"Overall, It seemed like a good product."

"This solution gives our customers better visibility."

More Cisco Secure Network Analytics pros

"It is scalable."

"Their technical support is more effective and of better quality than other competitors."

"It is very easy to collect and handle data in ExtraHop Reveal(X) Cloud. Integration with Big Data is also easy. Many of our customers integrate it with Big Data platforms like Splunk or Elastic. It is also easy to handle and easy to understand."

"It stands out for its intuitive and efficient user interface, robust detection capabilities with minimal false positives, and the ability to handle encrypted traffic, making it a valuable asset for network security and management."

"ExtraHop Reveal(x) 360 has undeniably improved our security posture, reduced manual investigation efforts, and facilitated fast threat detection mechanisms, which all help prevent costly potential breaches in enterprise environments."

"ExtraHop Reveal(x) 360 has positively impacted my organization by helping us detect abnormal activity on our network that we could not detect through our SIEM or XDR platform."

Cons

"If they can make this product more web-based, that would be amazing."

"Stealthwatch is still maturing in AI. It uses artificial intelligence for predictions, but AI still needs to mature. It is in a phase where you get 95% correct detection. As its AI engine learns more, it will become more accurate. This is applicable to all the devices that are using AI because they support both supervised and unsupervised machine learning. The accuracy in the case of supervised machine learning is dependent on the data you feed into the box. The accuracy in the case of unsupervised machine learning is dependent on the algorithm. The algorithm matures depending on retrospective learning, and this is how it is able to detect zero-day attacks."

"The customizability of the UI should improve."

"I would like to see more expansion in artificial intelligence and machine learning features."

"There's a lot of traffic on our network that we don't see sometimes."

"Cisco Stealthwatch is scalable with money. It's expensive."

"The GUI could use some improvement. Being able to find features more easily would be a great improvement if it was simplified."

"Better integration between Cisco Secure Network Analytics and Cisco Secure Workload would be beneficial."

More Cisco Secure Network Analytics cons

"One challenge with ExtraHop Reveal(x) 360 is its pricing, which tends to be comparatively high in the marketplace."

"A drawback includes bucket storage limitations for payload data, necessitating timely extraction for thorough investigations."

"I would like to see ExtraHop Reveal(x) 360 improved by integrating XDR features with NDR."

"They can include integration with SAP. Currently, no vendor provides network performance monitoring in the SAP market. It is a very big market. We have around 400 customers for SAP in Korea. In the USA, there are more than 10,000 customers."

"There needs to be more support."

"Their professional service can be improved."

Pricing and Cost Advice

"Licensing is on a yearly basis."

"The yearly licensing cost is about $50,000."

"Licensing is done by flows per second, not including outside (in traffic)."

"The tool is not cheaply priced."

"It is worth the cost."

"On a yearly basis, licensing is somewhere around $30,000."

"One of the things which bugs me about Lancope is the licensing. We understand how licensing works. Our problem is when we bought and purchased most of these Lancope devices, we did so with our sister company. Somewhere within the purchase and distribution, licensing got mixed up. That is all on Cisco, and it is their responsibility. They allotted some of our sister company's equipment to us, and some of our equipment to them. To date, they have never been able to fix it."

"The pricing for this solution is good."

More Cisco Secure Network Analytics pricing and cost advice

"When compared to other solutions, it aligns with the market average, indicating a competitive pricing level."

See which vendors are best for you

Use our free recommendation engine to learn which Network Traffic Analysis (NTA) solutions are best for your needs.

See recommendations

914,322 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

10%

Manufacturing Company

10%

Construction Company

Outsourcing Company

Comms Service Provider

12%

Financial Services Firm

10%

Manufacturing Company

Outsourcing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	12
Midsize Enterprise	7
Large Enterprise	52

No data available

Questions from the Community

What is your experience regarding pricing and costs for Cisco Stealthwatch?

Regarding cost, for the Bangladesh context, Cisco Secure Network Analytics is a little bit high-priced because we are a developing country, making it tough to manage affordable solutions. However, ...

What needs improvement with Cisco Stealthwatch?

Several features often look very promising during evaluation or implementation but end up being used only lightly in day-to-day operations. Advanced reporting and scheduled compliance reports look ...

What is your primary use case for Cisco Stealthwatch?

My main use case for Cisco Secure Network Analytics has been network visibility and anomaly-based threat detection within the enterprise environment. In security operations and VAPT-related activit...

What needs improvement with ExtraHop Reveal(x) 360?

One challenge with ExtraHop Reveal(x) 360 is its pricing, which tends to be comparatively high in the marketplace. Initial setup requires significant effort to get the platform tuned up to speed, w...

What advice do you have for others considering ExtraHop Reveal(x) 360?

What is your primary use case for ExtraHop Reveal(X) Cloud?

I use ExtraHop Reveal(x) 360 as our cloud-native NDR platform, with primary use cases including monitoring real-time network traffic across the north-south environment. While we do not currently fo...

Darktrace vs Cisco Secure Network Analytics

Comparisons

Compared 7% of the time

Vectra AI vs Cisco Secure Network Analytics

Compared 4% of the time

ThousandEyes vs Cisco Secure Network Analytics

Compared 3% of the time

NetWitness Platform vs Cisco Secure Network Analytics

Compared 3% of the time

SolarWinds NPM vs Cisco Secure Network Analytics

Compared 3% of the time

More Cisco Secure Network Analytics Competitors

Vectra AI vs ExtraHop Reveal(x) 360

Compared 10% of the time

NetWitness NDR vs ExtraHop Reveal(x) 360

Compared 8% of the time

ExtraHop Reveal(x) vs ExtraHop Reveal(x) 360

Compared 6% of the time

Fortinet FortiGate vs ExtraHop Reveal(x) 360

Compared 5% of the time

TrendAI Vision One – Cloud Security vs ExtraHop Reveal(x) 360

Compared 5% of the time

More ExtraHop Reveal(x) 360 Competitors

Product Reports

Cisco Secure Network Analytics

Download Cisco Secure Network Analytics product report

ExtraHop Reveal(x) 360

Download ExtraHop Reveal(x) 360 product report

Also Known As

Cisco Stealthwatch, Cisco Stealthwatch Enterprise, Lancope StealthWatch

ExtraHop Reveal(X) Cloud, Reveal(X) Cloud

Overview

Cisco Secure Network Analytics enhances network security through integrated threat detection and detailed traffic visibility, optimizing performance with AI analytics and strong platform integrations.

Cisco Secure Network Analytics offers deep visibility into network traffic, with tools like network maps and server response times. Its AI-driven analytics help detect threats, focusing on east-west traffic. Integration with platforms such as pxGrid and ISE complements its capabilities. Reporting and telemetry help in identifying bandwidth issues, yet improvements are desired in AI for better data organization. Installation complexity and false positives present challenges, and managing network loads effectively is a recognized need.

What are the key features of Cisco Secure Network Analytics?

Deep Visibility: Provides comprehensive insights into network traffic and server behavior.
Network Maps: Enhances understanding of traffic flow and infrastructure layout.
AI Analytics: Uses AI for superior threat detection and anomaly recognition.
Integration: Compatible with platforms like pxGrid and ISE for enhanced security management.
Telemetry: Delivers detailed bandwidth usage and traffic analysis reports.

How does Cisco Secure Network Analytics provide value?

Enhanced Security: Elevates threat detection and response capabilities.
Traffic Insights: Identifies encrypted and anomalous network behaviors.
Compliance Support: Assists in meeting industry standards for data protection.
Endpoint Protection: Guards network endpoints against potential threats.

Industries such as banking, defense, and police rely on Cisco Secure Network Analytics for securing networks against threats. Its capability to provide insights into encrypted traffic and facilitate device auditing makes it a sought-after choice for those requiring extensive network visibility. Users appreciate its application for threat prevention and response in demanding sectors.

Cisco

ExtraHop Reveal(x) 360 offers advanced network detection and response capabilities, designed to provide real-time situational awareness and threat detection across hybrid and multi-cloud environments.

Built to meet the demands of modern enterprises, ExtraHop Reveal(x) 360 enhances visibility into network activities, delivering comprehensive security insights. It uses high-speed data analysis to identify anomalous behaviors and potential threats, helping security teams respond effectively. With centralized visibility, it ensures quick detection and thorough investigation of threats within complex infrastructures, including cloud, edge, and on-premises environments.

What key features does ExtraHop Reveal(x) 360 offer?

Real-Time Threat Detection: Monitors network traffic in real-time for immediate threat identification.
Centralized Visibility: Offers a unified dashboard for observing activities across diverse environments.
Automated Response: Enables predefined actions to mitigate threats swiftly without manual intervention.
Integration Capabilities: Seamlessly integrates with tools for enhanced incident management.
Advanced Analytics: Utilizes machine learning to detect sophisticated threats promptly.

What benefits should users look for in reviews of ExtraHop Reveal(x) 360?

Improved Security Posture: Evidence of enhanced organizational security through faster threat detection and response.
Operational Efficiency: Reduction in time and effort for IT teams due to automated processes.
Scalability: Flexibility to expand with organizational growth and technology changes.
Cost-Effectiveness: Attractive pricing compared to functionality and outcomes offered.

ExtraHop Reveal(x) 360 is implemented across industries such as financial services, healthcare, and retail, where robust security measures are paramount. In these sectors, the capabilities of ExtraHop Reveal(x) 360 align with the need for secure handling of sensitive data and compliance with industry regulations, providing valuable protection and detection capabilities.

ExtraHop Networks

Sample Customers

Edge Web Hosting, Telenor Norway, Ivy Tech Community College of Indiana, Webster Financial Corporation, Westinghouse Electric, VMware, TIAA-CREF

Wizards of the Coast

Cisco Secure Network Analytics vs. ExtraHop Reveal(x) 360