Try our new research platform with insights from 80,000+ expert users

ESET Endpoint Protection Platform vs NetWitness Platform comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

ESET Endpoint Protection Pl...
Average Rating
8.2
Reviews Sentiment
7.0
Number of Reviews
102
Ranking in other categories
Endpoint Protection Platform (EPP) (17th), Advanced Threat Protection (ATP) (15th), Anti-Malware Tools (8th)
NetWitness Platform
Average Rating
7.4
Reviews Sentiment
7.4
Number of Reviews
36
Ranking in other categories
Log Management (34th), Security Information and Event Management (SIEM) (32nd)
 

Mindshare comparison

ESET Endpoint Protection Platform and NetWitness Platform aren’t in the same category and serve different purposes. ESET Endpoint Protection Platform is designed for Endpoint Protection Platform (EPP) and holds a mindshare of 3.0%, down 3.1% compared to last year.
NetWitness Platform, on the other hand, focuses on Log Management, holds 0.4% mindshare, up 0.3% since last year.
Endpoint Protection Platform (EPP) Market Share Distribution
ProductMarket Share (%)
ESET Endpoint Protection Platform3.0%
Microsoft Defender for Endpoint9.5%
CrowdStrike Falcon7.8%
Other79.7%
Endpoint Protection Platform (EPP)
Log Management Market Share Distribution
ProductMarket Share (%)
NetWitness Platform0.4%
Wazuh11.4%
Grafana Loki7.6%
Other80.6%
Log Management
 

Featured Reviews

Manikumar David - PeerSpot reviewer
Faced with deployment challenges but benefits from detailed reporting and cost efficiency
CrowdStrike sits at the kernel level and we don't know how it's operating, but we get the message; however, ESET Endpoint Protection Platform sometimes has issues with policies where users complain about popping up notifications. When we were using CrowdStrike, it used to detect and block pirated software, but ESET Endpoint Protection Platform is not doing that. The blocking notification in ESET Endpoint Protection Platform comes in when it is installed from the user; it should not disturb them because we are in a domain environment, and sometimes users are not able to bypass or minimize many things they are facing. Additionally, it is not detecting pirated software, which could be a bug. I trust ESET Endpoint Protection Platform, and they should ensure that software with bugs are not getting through. While it is cheap, ESET Endpoint Protection Platform sometimes makes the computer run slower and takes backup, which affects system performance. If the price is low, ESET Endpoint Protection Platform is saving money, but time-wise, we face problems because when users have issues, we need to spend time rectifying them.
MOTASHIM Al Razi - PeerSpot reviewer
It is a stable solution, but they should make the user interface easier to understand
The solution's initial setup takes work. We have to organize multiple paths and many features. The deployment process takes less than a week. But it takes a month to complete if we want to make the solution smarter by integrating it with various devices. I rate the process as a six out of ten.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It is absolutely invisible once running."
"Technical support has been very good. They're quick to respond to any problems."
"The inspection feature allows complete monitoring"
"It effectively catches unwanted stuff. It has saved our bacon over many years."
"They do a program where you can renew for three years. It's very reasonable, as far as the cost per year, because you can renew for three years. They will also do multiple computers, so I actually protect all my family computers, as well as my work computers, all under one license. This means I only have to deal with re-upping my license once every three years. That's the big thing for me."
"The most valuable features of ESET Endpoint Antivirus are the search engine, easy firewall setup, and ransomware scans."
"We use ESET, which is pretty much perfect for us. It is also absolutely simple and automatic once setup."
"I would say that this solution has the best support team in this kind of Endpoint protection product."
"It gives the capability for the incident response team to correlate logs to identify any kind of problem like malware and incidents in a general sense, both for logs and packets."
"The development of use cases on the SSA console is quite user friendly. This means that the security analyst or the researcher does not have to learn another language."
"The software is scalable to whatever is required, and you can also put a lot of resources in the cloud."
"Incident management is its most valuable feature."
"The most valuable features are the packet decoder, log decoder, and concentrator."
"The most valuable features are the packet inspection and the automated incident response."
"Their technical support responds quickly and are knowledgable."
"The most valuable feature of RSA NetWitness Logs and Packets are the alerts and correlations tools."
 

Cons

"The integration capabilities might be lacking a bit."
"The update process can be improved, and there could be an automatic update process when a new version comes out. For system updates or program updates, there could be more automation."
"The solution should offer more security surrounding blacklisted websites."
"The solution can improve the modules, and it is lacking centralized management and visibility of the endpoints."
"They could improve the solution by adding better ransomware features."
"Data Leak Protection is is what we are searching for at the moment. It is not included with ESET."
"We are looking to move towards an EDR solution rather than EPP. EDR is a solution that can dynamically detect threats based on the process behavior. It would be better if this solution was an EDR and an EPP solution, this would increase security protection."
"There are no areas for improvement. It does everything the consumer needs."
"RSA NetWitness Logs and Packets can improve the threat level aspect, it is lacking compared to other solutions. Whenever any hacking activity or any other threat factor occurred they used to provide the coverages very fast when comparing RSA NetWitness Logs and Packets. I heard the other three solutions, from a discussion with my team members who had experience in other solutions, they used to say that. Whenever any issues happened across the globe RSA NetWitness Logs and Packets are a little bit slow improving those detection mechanisms."
"The system looks like it is a mix of a bunch of different systems, and nothing looked like it was quite together."
"The product's licensing models are complex to understand. This particular area needs improvement."
"Its technical support could be better."
"The log system is a bit complex and has room for improvement."
"They should implement algorithms to digest that data and produce additional, more advanced reporting, alerting and support of internal security teams."
"Log aggregation is an issue with this solution because there are a huge number of alerts in a single instance."
"The threat detection capability and centralizing and upgrading capability need to be improved. The threat alert capability needs to be improved as well because there is some lag time at present. They need to work on their database search too."
 

Pricing and Cost Advice

"Pricing for ESET Endpoint Security could be lower because here in Hungary, it's expensive."
"The price of the solution is reasonable compared to competitors."
"The price could be a little lower."
"The pricing can be a bit more flexible."
"At first, we thought it was a bit expensive, but we negotiated a better price."
"ESET is perfect, if you can afford it."
"There is a license needed to use the solution and the price depends on the features you want to use. The overall price is reasonable."
"I do a two or three-year license for less than $100."
"In comparison to other SIEM solutions such as Splunk, NetWitness is less costly."
"We have yearly licensing costs. The license fee can be based on the volume of EPS. Some organizations may have, as a gentlemanly gesture, 10,000 EPS and get a 3,000 EPS license but actually use 5,000 EPS."
"The product is expensive."
"The licenses are good but the cost is very expensive."
"RSA NetWitness Logs and Packets do not have a subscription model, it's a one-time purchase. There is only a perpetual license."
"It’s cheaper to run virtual machines in a VMware environment."
"The NetWitness Platform may be affordable only for enterprise-level customers, as it may not be within the budget of small and medium-sized businesses."
"There is a licensing fee and the customer can choose whether he wishes this to be subscription-based or perpetual."
report
Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.
873,085 professionals have used our research since 2012.
 

Comparison Review

VS
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
Comms Service Provider
15%
Computer Software Company
13%
Manufacturing Company
7%
Financial Services Firm
6%
Financial Services Firm
12%
Computer Software Company
10%
Manufacturing Company
7%
Performing Arts
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business67
Midsize Enterprise17
Large Enterprise21
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise7
Large Enterprise20
 

Questions from the Community

What is your experience regarding pricing and costs for ESET LiveGuard Advanced?
I would rate ESET Endpoint Protection Platform a five for pricing on a scale from 1 to 10, where 1 is cheap and 10 is expensive.
What needs improvement with ESET LiveGuard Advanced?
The areas where ESET Endpoint Protection Platform could be improved include implementing single sign-on for the cloud environment, true multi-tenant options, and extensive APIs to easily integrate ...
What is your primary use case for ESET LiveGuard Advanced?
The main use case for ESET Endpoint Protection Platform is endpoint protection and blocking malware, making sure that the firewalls on the endpoints are correctly configured and allowing easy manag...
What do you like most about NetWitness Platform?
The product's initial setup phase was not at all difficult.
What is your experience regarding pricing and costs for NetWitness Platform?
The pricing is comparable to others, and I consider the cost to be intermediate. Specific cost details are unknown to me.
What needs improvement with NetWitness Platform?
There is currently no need for improvement in the SIEM ( /categories/security-information-and-event-management-siem ), though there could be potential enhancements by integrating with AI.
 

Also Known As

Smart Security, ESET PROTECT Advanced, ESET LiveGuard Advanced, ESET PROTECT Platform
RSA Security Analytics
 

Overview

 

Sample Customers

ERSTE Group Bank, Miller Solutions, Wesleyan University, The Hospital Center of Luxembourg, Deer Valley USD, SPAR, Industrial Federal Credit Union, Honda, City Hall of Palmela, Hays CISD, Lester B Pearson School Board
Los Angeles World Airports, Reply
Find out what your peers are saying about CrowdStrike, Microsoft, SentinelOne and others in Endpoint Protection Platform (EPP). Updated: October 2025.
873,085 professionals have used our research since 2012.