ExtraHop has pioneered an innovative approach that transforms unstructured packets into structured wire data, and presents that information—in real-time—for all teams to explore and visualize. This is possible through new technology that reassembles packets into complete sessions and flows between devices, and then extracts key data from those communications as they occur.
The ExtraHop platform is a passive network appliance that uses a network tap to receive network traffic, and then performs real-time full-stream reassembly to extract application-level protocol metrics and other custom-specified information contained in the transaction payload. IT operations teams use this data to monitor the performance of the applications running on the network and detect anomalous behavior that could indicate a data breach, for example. The ExtraHop appliance can be deployed on-premises or in public cloud services such as Amazon Web Services (AWS).