TrustRadius: an HG Insights company

ExtraHop Performance Platform vs. Splunk Enterprise vs. Vectra AI Platform

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    ExtraHop Performance Platform

    Score7.2 out of 10
    N/AExtraHop in Seattle, Washington offers an IT operations analytics platform via the ExtraHop Performance Platform, providing a dynamic, real-time view of all transactions in the IT environment, every team from NetOps to SecOps can spot and solve problems fast.

    $5.04

    Per Hour

    Splunk Enterprise

    Score8.6 out of 10
    N/ASplunk is software for searching, monitoring, and analyzing machine-generated big data, via a web-style interface. It captures, indexes and correlates real-time data in a searchable repository from which it can generate graphs, reports, alerts, dashboards and visualizations.N/A

    Vectra AI Platform

    Score10 out of 10
    N/ASan Jose-based Vectra AI offers their network traffic analysis (NTA) software, the Threat Detection & Response Platform, which is designed to detect and remediate intrusion, as well as supply context with incident investigation.N/A
    Pricing
    ExtraHop Performance PlatformSplunk EnterpriseVectra AI Platform
    Editions & Modules
    X- Small
    $5.04
    Per Hour
    Small
    $12.34
    Per Hour
    Medium
    $18.76
    Per Hour
    No answers on this topic
    No answers on this topic
    Offerings
    Pricing Offerings
    ExtraHop Performance PlatformSplunk EnterpriseVectra AI Platform
    Free Trial
    NoYesNo
    Free/Freemium Version
    NoYesNo
    Premium Consulting/Integration Services
    NoNoNo
    Entry-level Setup FeeNo setup feeNo setup feeOptional
    Additional Details———
    More Pricing Information
    Community Pulse
    ExtraHop Performance PlatformSplunk EnterpriseVectra AI Platform
    Considered Multiple Products
    ExtraHop
    Chose ExtraHop Performance Platform
    • Extrahop has more 'canned' reports out of the box than Splunk and is arguably easier to use.
    • Extrahop is more app-centric and less network-centric than NetScout.
    • Extrahop provides better Application transaction monitoring and analysis than Solarwinds.
    Incentivized
    Chose ExtraHop Performance Platform
    A new and very useful ability of ExtraHop [Performance Platform] is the single tool for cloud forensics. Cloud incidents can easily be determined with the ability to implement responses along with assessments to easy the burden of reports. In comparison to Netscout, ExtraHop's …
    Incentivized
    Cisco
    Chose Splunk Enterprise
    It’s not a true comparison as Splunk is focused on log data related to applications whereas ExtraHop is capturing network traffic and network metrics.
    Incentivized
    Vectra AI
    No answer on this topic
    Key User Insights
    Would buy again
    No answers on this topic
    97%
    Would buy again
    59 Answers
    No answers on this topic
    Delivers good value for the price
    No answers on this topic
    94%
    Delivers good value for the price
    49 Answers
    No answers on this topic
    Happy with the feature set
    No answers on this topic
    97%
    Happy with the feature set
    59 Answers
    No answers on this topic
    Lived up to sales and marketing promises
    No answers on this topic
    93%
    Lived up to sales and marketing promises
    43 Answers
    No answers on this topic
    Implementation went as expected
    No answers on this topic
    96%
    Implementation went as expected
    50 Answers
    No answers on this topic
    Features
    ExtraHop Performance PlatformSplunk EnterpriseVectra AI Platform
    Security Information and Event Management (SIEM)
    Comparison of Security Information and Event Management (SIEM) features of ExtraHop Performance Platform and Splunk Enterprise and Vectra AI Platform
    Feature
    ExtraHop Performance Platform
    -
    Ratings
    Splunk Enterprise
    8.2
    91 Ratings
    2% above category average
    Vectra AI Platform
    -
    Ratings
    Centralized event and log data collection00 Ratings9.085 Ratings00 Ratings
    Correlation00 Ratings8.487 Ratings00 Ratings
    Event and log normalization/management00 Ratings8.488 Ratings00 Ratings
    Deployment flexibility00 Ratings8.081 Ratings00 Ratings
    Integration with Identity and Access Management Tools00 Ratings8.282 Ratings00 Ratings
    Custom dashboards and workspaces00 Ratings8.887 Ratings00 Ratings
    Host and network-based intrusion detection00 Ratings7.865 Ratings00 Ratings
    Data integration/API management00 Ratings8.334 Ratings00 Ratings
    Behavioral analytics and baselining00 Ratings7.732 Ratings00 Ratings
    Rules-based and algorithmic detection thresholds00 Ratings7.933 Ratings00 Ratings
    Response orchestration and automation00 Ratings7.529 Ratings00 Ratings
    Reporting and compliance management00 Ratings8.634 Ratings00 Ratings
    Incident indexing/searching00 Ratings8.737 Ratings00 Ratings
    Best Alternatives
    ExtraHop Performance PlatformSplunk EnterpriseVectra AI Platform
    Small Businesses
    No answers on this topic
    No answers on this topic
    No answers on this topic
    Medium-sized Companies
    No answers on this topic
    IBM Security QRadar SIEM
    Score8.9 out of 10
    SolarWinds NetFlow Traffic Analyzer (NTA)
    Score8.5 out of 10
    Enterprises
    No answers on this topic
    SolarWinds Security Event Manager (SEM)
    Score8 out of 10
    SolarWinds NetFlow Traffic Analyzer (NTA)
    Score8.5 out of 10
    All AlternativesView all alternativesView all alternativesView all alternatives
    User Ratings
    ExtraHop Performance PlatformSplunk EnterpriseVectra AI Platform
    Likelihood to Recommend
    7.0
    (8 ratings)
    8.7
    (112 ratings)
    -
    (0 ratings)
    Likelihood to Renew
    -
    (0 ratings)
    8.5
    (25 ratings)
    -
    (0 ratings)
    Usability
    7.0
    (1 ratings)
    8.5
    (45 ratings)
    -
    (0 ratings)
    Availability
    -
    (0 ratings)
    10.0
    (1 ratings)
    -
    (0 ratings)
    Support Rating
    9.0
    (1 ratings)
    8.0
    (19 ratings)
    -
    (0 ratings)
    Online Training
    -
    (0 ratings)
    8.0
    (1 ratings)
    -
    (0 ratings)
    Implementation Rating
    -
    (0 ratings)
    7.0
    (3 ratings)
    -
    (0 ratings)
    Product Scalability
    -
    (0 ratings)
    9.1
    (1 ratings)
    -
    (0 ratings)
    User Testimonials
    ExtraHop Performance PlatformSplunk EnterpriseVectra AI Platform
    Likelihood to Recommend
    ExtraHop
    One very big use is the ability to resolve performance issues. One example used was with the performance of sql issues. ExtraHop [Performance Platform] gave us the packet tracing ability to see the database was being queried incorrectly. A programmer has written a query that would bring the database information local and one the queries instead of allowing the sql server itself to do the work and push out the information.
    Incentivized
    Read full review
    Cisco
    I'm liking the newer products, and I'm looking forward to how they integrate with the overall product when they come together. Just log in and be able to query a large number of systems for similar issues or a unique one. That is a great fit for Splunk Enterprise, looking for a simple case or a simple String or something of that nature across multiple machines. It's a great fit for that to identify issues or particular software, whatever your scenario is, String, to find it across any particular server or group of servers, so that you can update or do a deployment or whatever it is you're looking to do.
    Incentivized
    Read full review
    Vectra AI
    No answers on this topic
    Pros
    ExtraHop
    • It is very good at making it easy to find root cause for app issues.
    • It provides very good stats, graphs, and diagrams of IT utilization.
    Incentivized
    Read full review
    Cisco
    • It is very useful in creating custom rules for analyzing system logs and display relevant information. The query language is very easy to learn.
    • We can create custom UI to visualize the output of our data. The interface is very flexible. It also allows the sharing of rules among users.
    • There is an open online community to help others. Stackoverflow also has a splunk community. These resources make it more convenient to learn.
    Incentivized
    Read full review
    Vectra AI
    No answers on this topic
    Cons
    ExtraHop
    • Some person like me who want to see Extrahop can integrate better with other network analysis tools like Wireshark or TCPdump. The desired functionality I've been looking for is to program a kind of specific criteria to trigger the probe starts to run Wireshark or TCPdump to save the trace of a specific problematic session. Sometimes I want to see the evidence in a packet trace layer rather than just have the warning or error only presented in the dashboard.
    Incentivized
    Read full review
    Cisco
    • Splunk light limits number of users to 5. Wish there was a flexible license, where one could add more users.
    • Splunk light does not let you add > few realtime alerts. Wish there was a flexible license, where one could add as many realtime alerts as wanted.
    • Better insight into daily ingestion values
    Incentivized
    Read full review
    Vectra AI
    No answers on this topic
    Likelihood to Renew
    ExtraHop
    No answers on this topic
    Cisco
    We are using Splunk extensively in our projects and we have recently upgraded to Splunk version 6.0 which is quite efficient and giving expected results. We keep track of updates and new features Splunk introduces periodically and try to introduce those features in our day to day activities for improvement in our reporting system and other tasks.
    Read full review
    Vectra AI
    No answers on this topic
    Usability
    ExtraHop
    ExtraHop fits perfectly into the nist security framework to ensure the network is monitored and protected from anomalous behaviors.
    Incentivized
    Read full review
    Cisco
    You can literally throw in a single word into Splunk and it will pull back all instances of that word across all of your logs for the time span you select (provided you have permission to see that data). We have several users who have taken a few of the free courses from Splunk that are able to pull data out of it everyday with little help at all.
    Incentivized
    Read full review
    Vectra AI
    No answers on this topic
    Reliability and Availability
    ExtraHop
    No answers on this topic
    Cisco
    When properly setup and configured, Splunk is extremely reliable.
    Incentivized
    Read full review
    Vectra AI
    No answers on this topic
    Support Rating
    ExtraHop
    Documentation could be a lot better. Tech support is outstanding.
    Incentivized
    Read full review
    Cisco
    Splunk maintains a well resourced support system that has been consistent since we purchased the product. They help out in a timely manner and provide expert level information as needed. We typically open cases online and communicate when possible via e-mail and are able to resolve most issues with that method.
    Incentivized
    Read full review
    Vectra AI
    No answers on this topic
    Online Training
    ExtraHop
    No answers on this topic
    Cisco
    The online course was simple clear and described the main capabilities of the solution. There is also an initial module that can be done for free so anyone can familiarize themselves with the functionality of this solution. On the other hand, however, there could be more free online courses. Maybe even with a certificate, this would broaden the group of people who are familiar with the platform while increasing familiarity with the solution itself.
    Read full review
    Vectra AI
    No answers on this topic
    Implementation Rating
    ExtraHop
    No answers on this topic
    Cisco
    Smooth without too many major issues.
    Incentivized
    Read full review
    Vectra AI
    No answers on this topic
    Alternatives Considered
    ExtraHop
    We use ExtraHop specifically to monitor network traffic. It does many other things very well also, but it is the best network traffic analysis tool that we currently have in house. The fact that it is agentless also makes it more reliable and not dependent on agents running on devices throughout our enterprise.
    Incentivized
    Read full review
    Cisco
    A lot of products have natively inside their own dashboards and or their own logging repositories. And each one is difficult to learn or they're too complex or they're not verbose in the sense that they're not easy to mine the data that you're looking for. So that could be anything from the native logging that you find in other Cisco products. It's easier to use Splunk to draw the data that you're looking for as opposed to going to the individual's products themselves to get the logs that you're looking for.
    Incentivized
    Read full review
    Vectra AI
    No answers on this topic
    Scalability
    ExtraHop
    No answers on this topic
    Cisco
    Splunk can scale in to the petabyte per day range which of course is awesome
    Read full review
    Vectra AI
    No answers on this topic
    Return on Investment
    ExtraHop
    • Accelerated root cause analysis
    • Cut out time passing the hot potato, focused time on resolution
    • It's a good tool for change management, helping to transform a reactive culture to one that is more proactive
    • Enables early warning and visibility, prompts action before a system goes down
    Incentivized
    Read full review
    Cisco
    • Splunk has allowed developers to diagnose production issues when access of control was taken away from them to be allowed to view items in production environments and I believe that is invaluable.
    • At times some developers weren't super happy about using it, but it was more of the fact that they were used to having production access and not creating their splunk queries to get information.
    • Going one place to view logs was very beneficial to have.
    Incentivized
    Read full review
    Vectra AI
    No answers on this topic
    ScreenShots

    Vectra AI Platform Screenshots

    Screenshot of Vectra AI Platform - Respond page
Entity-centric prioritization.

What it means for Security Analysts:
"I have visibility into attacks across all our domains"
”I know with confidence what is relevant and important”
“I am laser focused on what is most critical and urgent”
“I know exactly where to start, what to focus on first"Screenshot of Vectra AI Platform - Hunt page
Threat Hunt across domains (network, cloud, identity, SaaS) and across entities (hosts and accounts).

What it means for Security Analysts:
“I have a unified view of all attack activity in our environment” 
“I finally have a system smart enough to know what is critical and what isn’t”
“I have a tool sophisticated enough to hunt effectively, simplistic enough to hunt efficiently”