Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Corelight Investigator by Corelight View product | ExtraHop RevealX by ExtraHop View product |
|---|---|---|
| Overview | ||
| What it is | Looking for Network Security software? Corelight Investigator by Corelight provides entity tracking for Incident Investigation. Compare features and alternatives. | Looking for Network Security software? ExtraHop RevealX by ExtraHop provides 1-click triage for network detection and response. Compare features and alternatives. |
| Product type | Cloud-Native Network Detection and Response (NDR) | Network Detection & Response (NDR) & Deep Packet Observability |
| Best for | Enterprise Security Operations, Banking, Tech, Healthcare, Public | Financial Services, Healthcare, Government, Retail, Critical Infrastructure, Energy |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | SaaSCloud | CloudHybridOn-Premise |
| Deployment details | Cloud (SaaS); Sensor-Backed Analytics; Cloud SaaS; Sensor-backed network analytics | On-premises; Cloud; Hybrid; Virtual Appliance (VMware/KVM); Cloud Virtual Appliance (AWS/Azure); Hardware |
| Data residency | US; EU; Global | Customer Datacenter / Private Cloud / Hosted Cloud Regions |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: yes |
| Single sign-on (SSO) | SSO: yes | SSO: yes |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: yes |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | Corelight SensorsAWSAzureGCPOn-premises Networks | Hybrid Enterprise NetworksMulti-Cloud VPCsDatacenter Fabrics |
| Compliance | SOC 2 Type IIISO 27001GDPRHIPAA | SOC 2 Type IIISO 27001HIPAAPCI-DSSGDPRNIST 800-53 |
| Integrations & coverage | ||
| Integrations | Corelight SensorsCrowdStrike FalconMicrosoft SentinelSplunk | CrowdStrikePalo Alto NetworksMicrosoft SentinelSplunkServiceNowCisco |
| Industries | Enterprise Security OperationsBankingTechHealthcarePublic | Financial ServicesHealthcareGovernmentRetailCritical InfrastructureEnergy |
| Regions | GlobalUSEU | Global |
| Vendor | ||
| Company | Corelight | ExtraHop |
| Headquarters | San Francisco, California, USA | Seattle, Washington, USA |
| Company size | 201-500 | 1,000+ |
| Founded | 2013 | 2007 |
Overview
What it is
Corelight Investigator
Looking for Network Security software? Corelight Investigator by Corelight provides entity tracking for Incident Investigation. Compare features and alternatives.ExtraHop RevealX
Looking for Network Security software? ExtraHop RevealX by ExtraHop provides 1-click triage for network detection and response. Compare features and alternatives.Product type
Corelight Investigator
Cloud-Native Network Detection and Response (NDR)ExtraHop RevealX
Network Detection & Response (NDR) & Deep Packet ObservabilityBest for
Corelight Investigator
Enterprise Security Operations, Banking, Tech, Healthcare, PublicExtraHop RevealX
Financial Services, Healthcare, Government, Retail, Critical Infrastructure, EnergyPricing
Pricing model
Corelight Investigator
Contact VendorExtraHop RevealX
Contact VendorFree trial
Corelight Investigator
Free trial: yesExtraHop RevealX
Free trial: yesDeployment
Deployment options
Corelight Investigator
ExtraHop RevealX
Deployment details
Corelight Investigator
Cloud (SaaS); Sensor-Backed Analytics; Cloud SaaS; Sensor-backed network analyticsExtraHop RevealX
On-premises; Cloud; Hybrid; Virtual Appliance (VMware/KVM); Cloud Virtual Appliance (AWS/Azure); HardwareData residency
Corelight Investigator
US; EU; GlobalExtraHop RevealX
Customer Datacenter / Private Cloud / Hosted Cloud RegionsKey features
What it offers
Corelight Investigator
- Cloud-native NDR
- Zeek network telemetry
- MITRE ATT&CK threat detections
- Entity tracking
- Rapid network query pivots
- NDR
- Network Security
- Threat Detection
ExtraHop RevealX
- Line-rate TLS 1.3 decryption
- ML-based behavioral anomaly detection
- MITRE ATT&CK threat mapping
- Full-fidelity forensic packet capture
- 1-click triage
- Network detection and response
- Lateral movement detection
- Ransomware early containment
Platform & access
API access
Corelight Investigator
API access: yesExtraHop RevealX
API access: yesSingle sign-on (SSO)
Corelight Investigator
SSO: yesExtraHop RevealX
SSO: yesRole-based access (RBAC)
Corelight Investigator
RBAC: yesExtraHop RevealX
RBAC: yesMulti-tenant
Corelight Investigator
Multi-tenant: yesExtraHop RevealX
Multi-tenant: yesMobile app
Corelight Investigator
Mobile app: noExtraHop RevealX
Mobile app: noSupported platforms
Corelight Investigator
ExtraHop RevealX
Compliance
Corelight Investigator
ExtraHop RevealX
Integrations & coverage
Integrations
Corelight Investigator
ExtraHop RevealX
Industries
Corelight Investigator
ExtraHop RevealX
Regions
Corelight Investigator
ExtraHop RevealX
Vendor
Company
Corelight Investigator
CorelightExtraHop RevealX
ExtraHopHeadquarters
Corelight Investigator
San Francisco, California, USAExtraHop RevealX
Seattle, Washington, USACompany size
Corelight Investigator
201-500ExtraHop RevealX
1,000+Founded
Corelight Investigator
2013ExtraHop RevealX
2007