# Darktrace vs Vectra AI vs ExtraHop

> Darktrace, Vectra AI and ExtraHop side by side from their public sources: focus, pricing, deployment, data location and OT, plus NetSenX.

Source page: https://netsenx.com/en/compare/darktrace-vs-vectra-vs-extrahop

Last reviewed: September 24, 2026

Darktrace, Vectra AI and ExtraHop all sell network detection and response, each with its own emphasis. The table puts their own public descriptions side by side, row by row, with NetSenX in the last column so you can see where a smaller, EU-hosted option fits. Where a vendor does not publish something, the table says so.

Every statement about the three vendors comes from the public sources listed below, as checked on September 24, 2026. Products change; check each vendor's current documentation before you decide.

| Aspect | Darktrace | Vectra AI | ExtraHop | NetSenX |
|---|---|---|---|---|
| Focus | Self-Learning AI that learns each organisation's normal “pattern of life”, within a platform covering network, email, cloud, identity, OT and endpoint, with autonomous response. | AI-driven detection across network, identity and cloud — including Active Directory, Entra ID, Microsoft 365, AWS and Azure — prioritised by what the vendor calls Attack Signal Intelligence. | RevealX: network detection and response with deep packet analysis across many protocols, including decryption of traffic for inspection, plus forensics. | Behavioural NDR for EU mid-market organisations: a plain-language explanation on every alert, a conformal false-positive bound once your own data supports it, NIS2 Article 23 deadline tracking. |
| Published pricing | No public price list; pricing is quoted per deployment. | No public price list; pricing is quoted per deployment. | No public price list; RevealX 360 is priced by discovered devices, daily record ingest and lookback period. | Yes. Free plan; Starter €49 to Business €249 per month; Enterprise from €999 per month (excluding VAT). |
| Deployment | Appliances on port mirrors or network taps, plus virtual and cloud sensors; cloud-only deployments are also offered. | Physical, virtual (VMware, Hyper-V, KVM, Nutanix) and cloud (AWS, Azure, GCP) sensors feeding an on-premises or cloud “Brain”. | SaaS (RevealX 360) or on-premises (RevealX Enterprise), with physical or virtual sensors. | EU-hosted dashboard (SaaS). One agent on a SPAN/TAP port per network segment, or on the hosts you choose (Linux, macOS). On-premises on the Enterprise plan. |
| Where data is kept | Depends on the deployment: on-premises appliances keep data on site; ask the vendor where cloud components are hosted. | Depends on the deployment: an on-premises Brain keeps network metadata on site; SaaS data sources are processed in the vendor's cloud. | Depends on the deployment: RevealX Enterprise keeps data on site; ask the vendor where RevealX 360 data is hosted. | Database in Ireland (AWS eu-west-1), API in Frankfurt (Germany) and Paris (France). |
| OT / industrial networks | Covered by a dedicated OT product within the platform. | Not a stated focus in the sources reviewed. | Not a stated focus in the sources reviewed. | From the Pro plan: Modbus/TCP, DNP3, BACnet/IP, EtherNet/IP and S7comm read passively; OT devices are never actively probed. |

## Which one fits

- Darktrace, if you want one vendor's platform across network, email, cloud, identity, OT and endpoint, with autonomous response.
- Vectra AI, if identity and cloud are central: its detection spans Active Directory, Entra ID, Microsoft 365, AWS and Azure alongside the network.
- ExtraHop, if you want deep packet analysis and forensics, including decryption of traffic for inspection.
- NetSenX, if you are an EU mid-market team that wants published prices, EU hosting, no decryption and a plain-language explanation on every alert, starting from a Free plan.

## Questions buyers ask

### What is the difference between Darktrace and Vectra AI?

Darktrace describes Self-Learning AI that learns each organisation's normal pattern of life, within a platform that also covers email, cloud, identity, OT and endpoint. Vectra AI describes AI-driven detection across network, identity and cloud, prioritised by what it calls Attack Signal Intelligence. Both quote prices per deployment.

### Do Darktrace, Vectra AI or ExtraHop publish prices?

Not as a price list, in the sources reviewed: all three quote per deployment. ExtraHop states that RevealX 360 is priced by discovered devices, daily record ingest and lookback period. NetSenX publishes its prices, from a Free plan upwards.

### Which of them decrypts traffic?

ExtraHop RevealX includes decryption of traffic for inspection, according to its product pages. NetSenX never decrypts: it works from flow metadata and the TLS handshake. Check each vendor's current documentation for your own case.

### Which one suits a small or mid-sized company?

It depends on what you already run and who will read the alerts. A team of one or two administrators should weigh published prices, how alerts are explained and what the deployment needs. NetSenX was built for that case, and its Free plan lets you try it on your own network.

## Sources

- [Darktrace — products](https://www.darktrace.com/products)
- [Darktrace — ActiveAI Security Platform](https://www.darktrace.com/platform)
- [Darktrace — Cyber AI Analyst](https://www.darktrace.com/cyber-ai-analyst)
- [Darktrace — sensors data sheet](https://assets-global.website-files.com/626ff4d25aca2edf4325ff97/62ae4ce1b8d59a8e5b1d39ec_Darktrace%20Sensors.pdf)
- [Vendr — Darktrace pricing (buyer-reported, no public list price)](https://www.vendr.com/marketplace/darktrace)
- [Vectra AI — platform](https://www.vectra.ai/platform)
- [Vectra AI — identity coverage](https://www.vectra.ai/products/identity)
- [Vectra AI docs — deployment overview (Brain and Sensors)](https://docs.vectra.ai/deployment/getting-started/quadrant-ux-deployment/introduction-and-overview)
- [Vectra AI docs — NDR physical appliances](https://docs.vectra.ai/deployment/ndr-physical-appliances)
- [Software Finder — Vectra AI pricing (quoted per customer, no public list price)](https://softwarefinder.com/cybersecurity/vectra-ai)
- [ExtraHop — RevealX network detection and response](https://www.extrahop.com/products/security)
- [ExtraHop — product FAQ (pricing basis, deployment models)](https://www.extrahop.com/products/faq)
- [ExtraHop — RevealX 360 data sheet](https://assets.extrahop.com/datasheets/Revealx360-datasheet.pdf)

Darktrace, Vectra AI and ExtraHop are trademarks of their respective owners. NetSenX is not affiliated with, endorsed or sponsored by any of them.