No more typing reviews! Try our Samantha, our new voice AI agent.

Filigran vs NetWitness NDR comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Filigran
Ranking in Threat Intelligence Platforms (TIP)
42nd
Average Rating
0.0
Number of Reviews
0
Ranking in other categories
No ranking in other categories
NetWitness NDR
Ranking in Threat Intelligence Platforms (TIP)
34th
Average Rating
8.0
Reviews Sentiment
6.9
Number of Reviews
15
Ranking in other categories
Endpoint Protection Platform (EPP) (48th), Endpoint Detection and Response (EDR) (58th), Security Orchestration Automation and Response (SOAR) (23rd), Network Detection and Response (NDR) (19th), Extended Detection and Response (XDR) (40th)
 

Mindshare comparison

As of November 2026, in the Threat Intelligence Platforms (TIP) category, the mindshare of Filigran is 0.9%, down from 1.1% compared to the previous year. The mindshare of NetWitness NDR is 1.5%, up from 0.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Threat Intelligence Platforms (TIP) Mindshare Distribution
ProductMindshare (%)
NetWitness NDR1.5%
Filigran0.9%
Other97.6%
Threat Intelligence Platforms (TIP)
 

Featured Reviews

Use Filigran?
Leave a review
reviewer1259418 - PeerSpot reviewer
Senior Cyber Security Analyst (SAFe Agile) at a transportation company with 1,001-5,000 employees
Advanced threat detection undermined by issues with blocking
NetWitness Endpoint's blocking feature does not work properly - if there's a malicious process, it's not possible to kill it via a custom rule unless and until it's flagged as malicious. For example, if you put IOCs in the form of hashes, it's not possible to block those IOCs - the system will alert you, but they can't be blocked. In the next release, NetWitness Endpoint should include regular expressions for blocking processes and sub-processes, the ability to block IPs, and scalability and integration with the ServiceNow platform or other ticketing solutions.
report
Use our free recommendation engine to learn which Threat Intelligence Platforms (TIP) solutions are best for your needs.
920,336 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
31%
Construction Company
14%
Comms Service Provider
9%
University
5%
Financial Services Firm
11%
Comms Service Provider
10%
Outsourcing Company
10%
Manufacturing Company
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business10
Midsize Enterprise2
Large Enterprise6
 

Also Known As

No data available
RSA ECAT, NetWitness Network
 

Overview

 

Sample Customers

Information Not Available
ADP, Ameritas, Partners Healthcare
Find out what your peers are saying about Recorded Future, SOCRadar, Anomali and others in Threat Intelligence Platforms (TIP). Updated: October 2026.
920,336 professionals have used our research since 2012.