NetWitness Platform provides seamless threat intelligence integration and robust log/packet ingestion. It enhances network visibility and incident management through automated threat detection, ideal for enterprises seeking scalability and security intelligence.
| Product | Mindshare (%) |
|---|---|
| NetWitness Platform | 1.0% |
| Splunk Enterprise Security | 6.8% |
| Wazuh | 5.4% |
| Other | 86.8% |
| Type | Title | Date | |
|---|---|---|---|
| Category | Log Management | May 2, 2026 | Download |
| Product | Reviews, tips, and advice from real users | May 2, 2026 | Download |
| Comparison | NetWitness Platform vs Splunk Enterprise Security | May 2, 2026 | Download |
| Comparison | NetWitness Platform vs Wazuh | May 2, 2026 | Download |
| Comparison | NetWitness Platform vs Cribl | May 2, 2026 | Download |
| Title | Rating | Mindshare | Recommending | |
|---|---|---|---|---|
| Wazuh | 3.7 | 5.4% | 81% | 50 interviewsAdd to research |
| Datadog | 4.3 | 4.0% | 97% | 208 interviewsAdd to research |
NetWitness Platform has proven to be financially beneficial for users. Many have reported positive returns on investment, indicating that the platform has helped them achieve their desired outcomes.
| Company Size | Count |
|---|---|
| Small Business | 4 |
| Midsize Enterprise | 6 |
| Large Enterprise | 18 |
| Company Size | Count |
|---|---|
| Small Business | 100 |
| Midsize Enterprise | 37 |
| Large Enterprise | 93 |
NetWitness Platform offers a comprehensive suite of tools designed to tackle security challenges within Security Operations Centers. It integrates data from endpoints, networks, and other sources, ensuring in-depth security analysis. By supporting features like XDR and UEBA, it grants a unified view of security events. Its capabilities extend to threat hunting, malware analysis, and network forensics, assisting organizations in managing incidents, ensuring compliance with regulations like GDPR, and detecting cyber threats. Users appreciate its ease of deployment, flexibility, and threat prediction capabilities, although improvements in integration, documentation, and AI are desired.
What are the key features of NetWitness Platform?In finance and health sectors, NetWitness Platform aids significantly by providing comprehensive threat analysis, ensuring compliance, and facilitating rapid incident management. Enterprises in these industries benefit by maintaining robust security postures and meeting regulatory demands.
NetWitness Platform was previously known as RSA Security Analytics.
Los Angeles World Airports, Reply
| Author info | Rating | Review Summary |
|---|---|---|
| Head of Information Security, Cyber Defense and IT Risk Management at HCT. at a transportation company with 201-500 employees | 3.5 | I use the NetWitness Platform as a key SIEM solution for my company, particularly because it excels in rule creation. However, its lack of local support and AI features hinders ease of implementation and operational flexibility in Israel. |
| Information Technology Security and Infrastructure Expert at a government with 201-500 employees | 3.5 | I primarily use NetWitness Platform for packet and log analytics, but I find it lacks valuable features and has stagnated over the past years. It needs improved log correlation, better cloud integration, and enhanced usability. I'm considering alternatives like Splunk and Sentinel. |
| Security Analyst at HeiTech Padu Berhad | 3.5 | I find NetWitness Platform's user-friendly interface and threat intelligence integration valuable, but making changes to playbooks is tedious. Enhancing AI, machine learning capabilities, and adding a monitoring feature would improve threat analysis and response efficiency. |
| CISO at One Bank Limited | 3.0 | I use the NetWitness Platform for incident management and find it valuable for enhancing incident workflows. However, the user interface needs improvement to enhance usability. Currently, no other solutions or cloud providers have been considered or previously used. |
| Senior Assistant Vice President at a financial services firm with 1,001-5,000 employees | 2.5 | I find RSA NetWitness easy to implement, consolidating security logs for correlation. However, it struggles with Windows integration error logging, lacks asset tagging and SOAR, and needs better workflow automation for compliance, which impacts my rating. |
| Manager at a comms service provider with 10,001+ employees | 4.0 | I value RSA NetWitness for its alerts and correlation tools in monitoring. However, its threat detection speed, scalability, and occasional stability issues require improvement, making it feel somewhat outdated compared to newer solutions. |
| Presales Manager at a tech services company with 51-200 employees | 4.0 | I rate this on-premise solution 8/10 for its strong incident response capabilities, log/packet correlation, and data visibility. I desire an integrated dynamic malware analysis sandbox, as its current correlation engine is less robust. |
| Solution Architect at NASK | 5.0 | I find the NetWitness Platform valuable for its unified approach to security monitoring, especially in large company SOCs, offering simultaneous data collection and analysis. However, its licensing is complex, and careful evaluation is needed to compare it with alternatives. |