View source for Company:ExtraHop Networks

{{Infobox company
| name   = ExtraHop Networks, Inc.
| logo   = ExtraHop logo black.png
| type   = Private
| foundation     = 2007
| location       = Seattle, WA
| founders        = Jesse Rothstein<br />Raja Mukerji
| key_people = Greg Clark, CEO
| industry       = [[Computer security|Cybersecurity]]
| products = Reveal(x); Reveal(x) 360
| owners = Bain Capital Private Equity, Crosspoint Capital Partners
| num_employees = 501 to 1,000
| homepage       = [http://www.extrahop.com www.extrahop.com]
}}

'''ExtraHop''' is a cybersecurity company providing AI-based network intelligence that stops advanced threats across cloud, hybrid, and distributed environments. 

==History==

Jesse Rothstein and Raja Mukerji founded ExtraHop in 2007 in Seattle, Washington, USA.  The co-founders were
formerly senior engineers at [[Company:F5 Networks|F5 Networks]] and architects of the
[[Company:F5 Networks#BIG-IP v9|BIG-IP v9]] product.

Early on, ExtraHop acquired $6.6 million in funding from the Madrona Venture Group and other private investors including Marc Andreessen and [[Biography:Ben Horowitz|Ben Horowitz]].<ref>{{cite web|url=https://www.bizjournals.com/seattle/blog/techflash/2009/04/Marc_Andreessen_Madrona_back_ExtraHop_Networks_42923387.html|title=Marc Andreessen, Madrona back ExtraHop Networks with $5 mil.}}</ref> In May 2014, the company closed a $41 million Series C round led by Technology Crossover Ventures (TCV). Other participants in this round included existing investors Meritech Capital Partners and Madrona Venture Group, as well as private investors including Sujal Patel, former CEO and founder of Isilon Systems. This round brought ExtraHop’s total venture funding to $61.6 million.<ref>{{Cite web|url=https://social.techcrunch.com/2014/05/29/extrahop-raises-41m-series-c-round-for-its-real-time-it-analytics-service/|title=ExtraHop Raises $41M Series C Round For Its Real-Time IT Analytics Service}}</ref>

After debuting as a Visionary in the Gartner Magic Quadrant for Network Performance Monitoring and Diagnostics in 2017, <ref>{{cite web|url=https://www.extrahop.com/company/press-releases/extrahop-debuts-as-a-visionary-in-the-gartner-magic-quadrant-for-npmd/ |title=ExtraHop Debuts as a Visionary in the Gartner Magic Quadrant for Network Performance Monitoring and Diagnostics |publisher=ExtraHop |date=February 27, 2017}}</ref> in 2018 ExtraHop formally expanded into the cyber security market with the release of the Reveal(x) product, followed 2 years later by the launch of SaaS-based Reveal(x) 360. In January 2019, the company announced having booked $100 million in revenue for the previous year.<ref>{{cite web|url=https://www.geekwire.com/2019/seattle-hybrid-cloud-security-startup-extrahop-touts-bookings-growth-says-ipo-path/|title=Seattle hybrid cloud security startup ExtraHop touts bookings growth, says it's on an IPO path |publisher=GeekWire |date=January 15, 2019}}</ref> 

In July 2021, ExtraHop was acquired by Bain Capital Private Equity and Crosspoint Capital Partners for $900 million.<ref>{{cite web|url=https://www.wsj.com/articles/bain-capital-and-crosspoint-capital-partners-buy-extrahop-networks-11623128400|title=Bain Capital and Crosspoint Capital Partners Buy ExtraHop Networks |publisher=Wall Street Journal |date=June 8, 2021}}</ref> In February 2022, the company announced that it had appointed Patrick Dennis as CEO.<ref>{{Cite web|url=https://www.extrahop.com/company/press-releases/2022/extrahop-appoints-new-ceo-patrick-dennis/|title=ExtraHop Grows Annual Recurring Revenue by 47%, Names Patrick Dennis Chief Executive Officer &#124; ExtraHop|website=www.extrahop.com}}</ref> By October 2023, Dennis was moved to an advisory role with co-founder and managing partner at Crosspoint Greg Clark taking over as ExtraHop CEO.<ref>{{Cite web|url=https://www.extrahop.com/company/blog/2023/an-exciting-future-for-extrahop/|title=ExtraHop's Exciting Future|website=www.extrahop.com}}</ref> Clark had prior CEO roles at Forescout Technologies and [[Company:Blue Coat Systems|Blue Coat Systems]].

ExtraHop operates globally with offices in Seattle, Washington (HQ); London, UK; Germany; France; Australia; Singapore; and Japan.

==Products==
[[File:520 Pike Tower.jpg|thumb|ExtraHop is headquartered on the 16th floor of 520 Pike Tower in downtown Seattle]]

ExtraHop sells products for Enterprise Security and IT Operations use cases. The company launched the Reveal(x)<ref>{{Cite web|title=Reveal(x) Enterprise: Network Detection and Response {{!}} ExtraHop|url=https://www.extrahop.com/products/security/|access-date=2021-04-29|website=www.extrahop.com|language=en}}</ref> network intelligence
product for Security Operations teams in 2018. <ref>{{Cite web|url=https://www.extrahop.com/company/press-releases/extrahop-introduces-reveal-x-to-expose-attacks-on-critical-assets-and-automate-investigations/|title=ExtraHop Introduces Reveal(x) to Expose Attacks on Critical Assets and Automate Investigations}}</ref> In 2020, the company introduced Reveal(x) 360,<ref>{{Cite web|title=Reveal(x) 360: SaaS-Based Network Detection & Response {{!}} ExtraHop|url=https://www.extrahop.com/products/cloud/|access-date=2021-04-29|website=www.extrahop.com|language=en}}</ref> a fully SaaS-based version of their network detection and response platform. 

Reveal(x) and Reveal(x) 360 (hereinafter referred to as "Reveal(x)") use what the company calls "cloud-scale machine learning" (ML) algorithms and rule-based techniques to detect behaviors, anomalies,  and software vulnerabilities to provide security recommendations in actionable Detection Cards, and curate threat intelligence indicators of compromise of known threats. 

Reveal(x) securely decrypts and analyzes traffic in real time, to collect intelligence and network threat telemetry that drive ML detections. These include:

–Detection of encrypted lateral movement, living off the land, and encrypted exploit attempts of CVEs such as [[PrintNightmare]], ProxyLogon,<ref>{{Cite web|url=https://proxylogon.com/|title=ProxyLogon|website=ProxyLogon}}</ref> [[Log4Shell]], and Spring4Shell.<ref>{{Cite web|url=https://www.trendmicro.com/en_us/research/22/d/cve-2022-22965-analyzing-the-exploitation-of-spring4shell-vulner.html|title=CVE-2022-22965 Analyzing the Exploitation of Spring4Shell Vulnerability in Weaponizing and Executing the Mirai Botnet Malware|date=April 8, 2022|website=Trend Micro}}</ref> 

–Detection of cloud attack techniques (eg, AWS IMDS proxying, AWS services enumeration)

–Hygiene detections (eg, insecure protocols, passwords in plaintext)

–IoT detections (abnormal behavior observed on an IoT device of a specific make and model)

–Network-based detection of abuse of encrypted Microsoft protocols (Active Directory, Kerberos, SMBv3, MSRPC),<ref>{{Cite web|url=https://www.extrahop.com/company/press-releases/2021/extrahop-introduces-decryption-detection/|title=ExtraHop Introduces Breakthrough Decryption and Threat Detection Capabilities for Microsoft Environments &#124; ExtraHop|website=www.extrahop.com}}</ref> as well as TLS 1.3

–User behavior (eg, abnormal login behavior)

ExtraHop Reveal(x) works by extracting metadata from raw network traffic across more than 70 protocols, including the ability to decrypt Microsoft application and authentication protocols<ref>{{Cite web|url=https://www.information-age.com/extrahop-expands-decryption-capabilities-microsoft-environments-123497534/|title=ExtraHop expands decryption capabilities in Microsoft environments|date=November 2, 2021}}</ref> and [[Transport Layer Security]]. This data includes natively discovered information about endpoints/users such as MAC, Hostname, OS, software, application layer information, usernames, geolocation, passive DNS, and whois. Reveal(x) data can be enriched with threat intelligence and endpoint process data from partner products. ExtraHop detections include a timeline of related events, MITRE ATT&CK techniques, next steps for investigation and remediation, and 1-click access to forensic data such as transaction records and decrypted packets. These data can also be explored/filtered as a starting point for threat hunts. Customers can build, reuse, and share libraries of saved queries to speed recurring threat hunting tasks.
 
The core of ExtraHop technology is a passive network appliance that uses a [[Network tap|network tap]] or [[Port mirroring|port mirroring]] to receive network traffic, and then performs full-stream reassembly to extract application-level protocol metrics and other custom-specified information contained in the transaction payload.<ref>{{Cite web|url=https://www.extrahop.com/products/security/how-it-works/|title=How Reveal(x) Enterprise Detects Threats in Real Time &#124; ExtraHop|website=www.extrahop.com}}</ref> A subset of these metrics is sent to the cloud where they are used as machine learning features to proactively detect anomalous behavior that could indicate data breaches, ransomware, and other threats as well as performance issues.<ref>{{cite web|url=
http://www.networkworld.com/article/2170569/lan-wan/extrahop-mines-the-network-to-glean-operations-intelligence.html |title=ExtraHop mines the network to glean operations intelligence |publisher=NetworkWorld.com |date=2013-10-04 |accessdate=2015-03-05}}</ref> 

The ExtraHop network sensors can be deployed with self-managed physical and virtual appliances, or as a zero-infrastructure SaaS product. Network sensors can be deployed on-premises in data centers, on campus, at remote sites, and in cloud environments including [[Company:Amazon Web Services|Amazon Web Services]] (AWS), [[Software:Microsoft Azure|Microsoft Azure]], and [[Google Cloud Platform]] (GCP).

==Integrations==
ExtraHop Reveal(x) natively integrates with a number of technology products, including endpoint security (CrowdStrike<ref>{{Cite web|url=https://www.extrahop.com/partners/tech-partners/crowdstrike/|title=Technology Partner: CrowdStrike &#124; ExtraHop|website=www.extrahop.com}}</ref>), threat intelligence, and Saas/IaaS/PaaS platforms such as Microsoft 365<ref>{{Cite web|url=https://www.extrahop.com/partners/tech-partners/microsoft/|title=Technology Partner: Microsoft &#124; ExtraHop|website=www.extrahop.com}}</ref> and AWS native telemetry.<ref>{{Cite web|url=https://www.extrahop.com/partners/tech-partners/amazon-web-services/|title=Technology Partner: Amazon Web Services &#124; ExtraHop|website=www.extrahop.com}}</ref> 

A sample list of known integrations includes: CrowdStrike; Microsoft Defender Security Center; Windows Defender ATP; Microsoft 365; AWS quarantine; Azure Sentinel; Cisco ISE; Palo Alto NGFW, Panorama, Demisto; Splunk SIEM & Phantom; Exabeam; IBM Qradar; ServiceNow; and Check Point.<ref>{{Cite web|url=https://www.extrahop.com/products/integrations/|title=Explore ExtraHop Reveal(x) Integrations &#124; ExtraHop|website=www.extrahop.com}}</ref>

==Certifications==

ExtraHop holds a number of industry certifications. These include SOC 2 Type II, SOC 3, GDPR, HIPAA and US Privacy Shield.<ref>{{Cite web|url=https://www.extrahop.com/compliance/|title=&#124; ExtraHop|website=www.extrahop.com}}</ref>

==Customers==
Known ExtraHop customers include Ulta Beauty,<ref>{{Cite web|url=https://www.extrahop.com/company/press-releases/2020/extrahop-helps-ulta-beauty-deliver-exceptional-guest-experiences/|title=ExtraHop Helps Ulta Beauty Deliver Exceptional and Secure Guest Experiences &#124; ExtraHop|website=www.extrahop.com}}</ref> The Home Depot,<ref>{{Cite web|url=https://www.extrahop.com/customers/stories/home-depot/|title=The Home Depot Builds Unified Customer Experience with Visibility from ExtraHop &#124; ExtraHop|website=www.extrahop.com}}</ref> and The City of Dallas.<ref>{{Cite web|url=https://www.extrahop.com/customers/stories/city-of-dallas/|title=City of Dallas Customer Solution Video Page &#124; ExtraHop|website=www.extrahop.com}}</ref> 

==Funding==

On July 22, 2021, Bain Capital Private Equity and Crosspoint Capital Partners acquired ExtraHop for $900M,<ref>{{Cite web|url=https://www.extrahop.com/company/press-releases/2021/extrahop-announces-completion-of-acquisition/|title=ExtraHop Announces Completion of Acquisition by Bain Capital Private Equity and Crosspoint Capital Partners &#124; ExtraHop|website=www.extrahop.com}}</ref> marking a significant shift in the market away from a prevention-and-protection model and toward a detection-and-response approach. After extensive due diligence and market research, Bain and Crosspoint determined that Network Detection and Response (NDR) is poised to be the next major cybersecurity category, a segment that is already growing fast at 24% CAGR. Both parties agreed, ExtraHop provides the best-in-class team and the best-in-class product in the NDR market and entered into an agreement to acquire ExtraHop in June 2021. 

Prior to the acquisition, ExtraHop’s last funding was in 2014, a $41M Series C round<ref>{{Cite web|url=http://www.extrahop.com/post/press-releases/extrahop-closes-41-million-in-series-c-funding/|title=ExtraHop Closes $41 Million in Series C Funding &#124; ExtraHop|website=www.extrahop.com}}</ref> that brought total funding to just over $61M. The company's Series B was a $14M round closed in May 2011,<ref>{{Cite web|url=http://www.extrahop.com/post/press-releases/extrahop-networks-secures-14-million-series-financing-led-latestage-venture-capital-firm-meritech-capital-partners/|title=ExtraHop Networks Secures $14 Million Series B Financing Led By Late-Stage Venture Capital Firm Meritech Capital Partners &#124; ExtraHop|website=www.extrahop.com}}</ref> preceded by a $5.1M Series A in April 2009.<ref>{{Cite web|url=http://www.extrahop.com/post/press-releases/extrahop-raises-51-million-series-funding/|title=ExtraHop Raises $5.1 Million in Series A Funding &#124; ExtraHop|website=www.extrahop.com}}</ref> Unlike many technology companies that exit at comparable valuations, ExtraHop raised very limited capital and was largely self-funded.<ref>{{Cite web|url=https://social.techcrunch.com/2020/01/14/seattles-extrahop-expects-100m-arr-in-2020-ipo/|title=Seattle's ExtraHop expects $100M ARR in 2020, IPO the following year}}</ref>

On January 9, 2024, Extrahop announced an addition $100M investment from their existing investors.<ref>{{cite web | url=https://www.extrahop.com/company/press-releases/2024/extrahop-secures-100m-in-growth-capital-from-existing-investors | title=ExtraHop Secures $100M in Growth Capital from Existing Investors and Strengthens Leadership Team to Accelerate NDR Market Growth &#124; ExtraHop }}</ref>

==References==

<references/>

[[Category:Security technology]]
[[Category:Network management]]
[[Category:Companies (Engineering)]]
[[Category:Companies]]

{{Sourceattribution|ExtraHop Networks}}