The ExtraHop Architecture

The ExtraHop platform was built to deliver visibility, detection, and investigation at massive scale. We consume a copy of unstructured network traffic from across your entire environment – from the data center, to the cloud, to the remote site – using a tap or port mirror.

Cloud Computing has rapidly changed the way we do business, but regulations like GDPR have placed a spotlight on the importance of designing security into the cloud from the start.

The ExtraHop stream processor performs line-rate decryption, decoding, and full-stream reassembly for every transaction. The end result is structured wire data that can be analyzed, explored, and fully leveraged for investigation and remediation. It’s our wire data that keeps our machine learning focused, precise, and uniquely reliable.