The Network Performance Monitoring (NPM) market consists of tools that leverage a combination of data sources to provide a holistic view of how networks (including corporate on-premises, cloud, multicloud, hybrid and other networks) are performing. Data sources include:
Network-device-generated traffic data
Raw network packets
Network-device-generated health metrics and events
NPM tools provide diagnostic workflows and forensic data to identify the root causes of performance degradations — increasingly through the adoption of advanced technology, such as artificial intelligence (AI) or machine learning algorithms (ML). Finally, based on network-derived performance data, NPM tools provide insight into the quality of the end-user experience.

Network Performance Monitoring

NDR solutions primarily use non-signature-based techniques (for example, machine learning or other analytical techniques) to detect suspicious traffic on enterprise networks. NDR tools continuously analyze raw traffic and/or flow records (for example, NetFlow) to build models that reflect normal network behavior. When the NDR tools detect suspicious traffic patterns, they raise alerts. In addition to monitoring north/south traffic that crosses the enterprise perimeter, NDR solutions can also monitor east/west communications by analyzing traffic from strategically placed network sensors.
Response is also an important function of NDR solutions. Automatic responses (for example, sending commands to a firewall so that it drops suspicious traffic) or manual responses (for example, providing threat hunting and incident response tools) are common elements of NDR tools

Network Detection and Response

UCaaS monitoring tools measure the UCaaS user experience by providing key performance indicators (KPIs), visibility and insight based on application, session and network availability, performance, and health from multiple sources. An instantiation of digital experience monitoring, UCaaS monitoring tools combine elements of application and network performance monitoring capabilities.
Strong tools continually collect packet trace data, decode and play back captured voice and video streams, interrogate network infrastructure, and assess the functional status of bidirectional sessions, segments and endpoints. They gather and assess data in real time and perform synthetic call testing for service initiation and change/contingency management purposes.

UCaaS Monitoring

UCaaS Monitoring Tools

Top ExtraHop Reveal(x) Likes and Dislikes

Darktrace Enterprise Immune System

Darktrace

Vectra Cognito Platform

Vectra

ExtraHop Reveal(x)

ExtraHop

Sangfor Cyber Command

Sangfor Technologies

ThreatBook Threat Detection Platform

ThreatBook

Scrutinizer

Plixer

Cisco Secure Network Analytics

Cisco

Cynamics

LinkShadow Security Analytics Platform

LinkShadow

IronDefense

IronNet

500M - 1B USD

50M - 250M USD

<50M USD

1B - 3B USD

3B - 10B USD

10B - 30B USD

250M - 500M USD

30B + USD

Gov't/PS/ED <5,000 Employees

Gov't/PS/ED 5,000 - 50,000 Employees

Healthcare

Finance

Retail

Services

Energy and Utilities

Manufacturing

Education

Government

Miscellaneous

Transportation

Communications

Media

Security Engineer

the product has been fine to work with.  Using it is an average experience

MIDDLEWARE ENGINEERING

We have been using ExtraHop for five years.  Within two weeks of its initial installation, we used it to identify the root cause of an issue for which our other tools could provide no insight.  Since that time, it has become an absolutely indispensable tool for troubleshooting, for managing infrastructure, and for detecting, identifying, and mitigating attempted security intrusions.

Gigamon

FireEye

Other...

LogRhythm

Broadcom (Symantec)

Corelight

VMware

Arista Networks

Kemp (Flowmon)

Awake Security

Security On-Demand

Stellar Cyber

Associate Analyst

+ Threat Intelligence analysis and network insight to a new level with flexible auditing capabilities that stands out from the crowd. The best part of it was all their CTF events. The very first experience I had with ExtraHop was in a CTF event hosted by them, and although I saw the console for the first time I placed in the top 10 because the team had put so much thought into the UI as well and the user experience was awesome since the first day!
+I'm always impressed by the search features and capabilities, you may utilize the search function to narrow down your analysis down to asset levels of any kind. Extrahop offers extensive training and support in many mediums to assist users in understanding while enhancing the product.
+It also gives a clear picture of what's going on in the network, and it allows all teams to see the same

Information Security Sr Manager

This vendor continually works above and beyond to understand their customer's needs. They're very receptive to feedback and feature requests. This tool has given us unparalleled views into our network and includes a lot of features that we have not seen replicated in any other tools.

Network Architect

The dashboard and UI takes a little getting used to, but that is not a critique of its user-friendliness, just a statement of fact regarding most dashboards and Extrahop is no different, so don't expect immediate intuition.

VP-INFORMATION SECURITY ENGINEERING TEAM

Performing the eval and purchasing directly from Extrahop was a mostly smooth experience.  They made it easy and cost effective to upgrade to the RevealX platform.  They had a systematic method and documentation to perform the evaluation and provided a report at the end of the eval.  Deployment with PS was also well structured and straightforward along with integration.  We were able to install and start to operationalize soon after deployment of the platform.

Active

Read Network Detection and Response reviews verified by Gartner. Compare and find the best Network Detection and Response for your organization.