# Corelight vs ExtraHop Reveal(x)

| Attribute | Corelight | ExtraHop Reveal(x) |
|---|---|---|
| **Vioscale score** | 37.2 (15% (low)) | 50.1 (13% (low)) |
| deployment.options | `{"cloud":true,"hybrid":true,"on_prem":true,"air_gapped":true,"self_hosted":true}` | `{"cloud":true,"hybrid":true,"self_hosted":true}` |
| description.long | Platform that monitors network traffic to identify security threats and accelerate incident response. Uses machine learning, behavioral analytics, and protocol-level analysis built on the open-source Zeek framework to deliver actionable intelligence for security operations centers. | A network detection and response platform that analyzes encrypted and unencrypted network traffic in real-time, detects advanced threats and lateral movement, and provides network performance monitoring. Deployed as cloud or self-hosted infrastructure for hybrid, on-premises, and air-gapped environments. |
| integrations.count | 18 | 28 |
| integrations.list | `[{"name":"Splunk"},{"name":"Splunk Enterprise Security"},{"name":"Splunk SOAR"},{"name":"Microsoft Defender"},{"name":"Microsoft Sentinel"},{"name":"Microsoft Entra ID"},{"name":"CrowdStrike"},{"name":"Google Cloud Security"},{"name":"Elastic"},{"name":"Kafka"},{"name":"Syslog"},{"name":"AWS"},{"name":"Azure"},{"name":"Google Cloud"},{"name":"VMware"},{"name":"Hyper-V"},{"name":"S3"},{"name":"Zeek"}]` | `[{"name":"CrowdStrike Falcon"},{"name":"Microsoft Sentinel"},{"name":"Splunk"},{"name":"Google Cloud Platform"},{"name":"Google Security Operations"},{"name":"Cisco Meraki"},{"name":"Cisco ISE"},{"name":"Check Point Smart-1"},{"name":"IBM QRadar"},{"name":"Microsoft Defender for Endpoint"},{"name":"Red Hat Ansible"},{"name":"ServiceNow"},{"name":"Slack"},{"name":"Grafana"},{"name":"Netskope"},{"name":"Tines"},{"name":"Tenable"},{"name":"Red Canary"},{"name":"Symantec"},{"name":"Paessler PRTG"},{"name":"Netscaler"},{"name":"F5 iRules"},{"name":"FortiGate"},{"name":"HPE Aruba ClearPass"},{"name":"Microsoft Power BI"},{"name":"Microsoft Entra ID"},{"name":"Microsoft Teams"},{"name":"Kubernetes"}]` |
| market.availability | `{"hqCountry":"US","primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` | - |
| platform.support | - | `{"web":true}` |
| pricing | `{"type":"quote","freeTier":false,"sourceUrl":"https://corelight.com","retrievedAt":"2026-08-19T14:44:31.898Z"}` | - |
| pricing.free_tier | no | - |
| pricing.model | quote | commercial |
| pricing.price_level | unknown | - |
| pricing.transparent | no | - |
| security.disclosure_policy | yes | - |
| security.gdpr | - | yes |
| security.hipaa | - | yes |
| security.soc2 | - | yes |

## Capabilities (Network Security)

| Capability | Corelight | ExtraHop Reveal(x) |
|---|:--:|:--:|
| **Capabilities** |  |  |
| Deployment model | - | - |
| Behavioral anomaly detection | - | - |
| Full packet pcap retention | - | - |
| Encrypted traffic metadata analysis | - | - |
| Active endpoint containment response | - | - |
| Host microsegmentation | - | - |
| Network access control 802 1x | - | - |
| EDR crowdstrike sentinelone integration | - | - |
| Iot ot device discovery | - | - |
| Fips 140 2 certification | - | - |
| SOC2 type ii | - | - |
| ISO 27001 | - | - |
| Pricing model | - | - |

*Source: Vioscale. Generated 2026-09-01T17:57:25.458Z. "-" = undocumented, not absent.*