No more typing reviews! Try our Samantha, our new voice AI agent.

NetMon vs Vectra AI comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

NetMon
Ranking in Identity Threat Detection and Response (ITDR)
12th
Average Rating
7.6
Reviews Sentiment
6.1
Number of Reviews
12
Ranking in other categories
Network Monitoring Software (45th)
Vectra AI
Ranking in Identity Threat Detection and Response (ITDR)
10th
Average Rating
8.6
Reviews Sentiment
7.0
Number of Reviews
48
Ranking in other categories
Intrusion Detection and Prevention Software (IDPS) (6th), Network Detection and Response (NDR) (3rd), Extended Detection and Response (XDR) (19th), AI-Powered Cybersecurity Platforms (7th)
 

Mindshare comparison

As of November 2026, in the Identity Threat Detection and Response (ITDR) category, the mindshare of NetMon is 2.4%, up from 0.4% compared to the previous year. The mindshare of Vectra AI is 4.1%, up from 2.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Identity Threat Detection and Response (ITDR) Mindshare Distribution
ProductMindshare (%)
Vectra AI4.1%
NetMon2.4%
Other93.5%
Identity Threat Detection and Response (ITDR)
 

Featured Reviews

SR
Pan India IT Infrastructure Management / End-user Services at Tata Group
Has supported real-time event detection and reporting accuracy while database integration has required extra effort
Sometimes it may be difficult to incorporate new additional databases in NetMon, and we faced some challenges at that time. However, currently, it is not giving many challenges.It is difficult to integrate NetMon with other databases. We can customize NetMon's monitoring views, but it is done by the team who handles it, as it is outsourced.
reviewer2783214 - PeerSpot reviewer
Strategic RAN Lead | Network Transformation & Optimization | Philippines & South Africa at a tech vendor with 10,001+ employees
AI‑driven threat detection has transformed alert fatigue and now enables faster response and leaner soc operations
The best features of Vectra AI are related to AI. For the NDR part, Attack Signal Intelligence features were mainly responsible for behavior AI, high-fidelity signaling, and prioritization. These features were great for anomaly detection and behavioral-based detection, able to catch zero-day attacks and living-off-the-land attacks. For high-fidelity signaling, it automatically triaged, filtered, and correlated signals, which dramatically reduced alert fatigue noise on the customer side by approximately 80% and eliminated alert fatigue on the SOC teams. Regarding the identity detection and response IDR solution, it monitored Active Directory and Entra ID for any attacks, allowing the SOC to detect any compromised credentials. Alert noise was dramatically reduced by nearly 80%, allowing SOC analysts to focus more on true threats, which made them more productive and resulted in higher operational efficiency. Attack Signal Intelligence helped reduce irrelevant alerts by 80% to 90%, with metrics showing a 100-plus reduction in investigation workloads and roughly saving about 55,000 hours of investigation time. Investigation time has decreased significantly, empowering analysts with detection and advanced unknown threats that Vectra AI provided. Its knowledge base and database are very up to date, allowing for spotting zero-day attacks with full visibility and helping to stop attacks in minutes. Vectra AI has reduced the MTTD and MTTR, increasing operational and process efficiency, and has helped reduce the number of SOC analysts that needed to be hired. Thanks to the AI features, the number of employees and SOC analysts hired has been reduced.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Compared to many other products in the market, I think LogRhythm has the highest cost to performance ratio in terms of its value."
"The analytics feature is the most valuable feature."
"We were sold on the product based on the fairly narrow use cases that the sales reps gave us, and what we're seeing during our usage is that we can get there, and we're very excited about the potential."
"It is a stable solution...It is a scalable solution."
"It has a very strong artificial intelligence engine."
"The most valuable feature is the log, which can be analyzed by our SIEM solution."
"Visibility is a valuable feature, the ability to see even if the traffic is not going into the firewall"
"In general, this is a good product."
"The dashboard gives me a scoring system that allows me to prioritize things that I should look at. I may not necessarily care so much about one event, whereas if I have a single botnet detection or a brute force attack, I really want to get on top of those."
"Vectra AI enables you to see more; it is their visibility strength that makes the platform so great."
"Vectra AI has positively impacted my organization; last year while using it, we received many malicious email threats and virus incidents, including a trojan virus that had reportedly been deployed by someone, and our company used Vectra AI to detect the malicious threats and viruses before they could cause more damage, and we successfully stopped the threats."
"We have been extremely happy with the solution; it's been one of the best solutions we have in our enterprise and I would put it at the top of the list."
"Vectra AI helped our team be more productive and save time. We have less work thanks to it."
"Cognito Streams gives you a detailed view of what happens in the network in the form of rich metadata. It is just a super easy way to capture network traffic for important protocols, giving us an advantage. This is very helpful on a day-to-day basis."
"I can't even explain how happy we are with the amount of time it has saved us."
"After we deployed the solution it instantly began to add value to our security operations."
 

Cons

"The platform's integration features often need to be improved."
"I would like to see better integration with multiple products. Integration is not something that is readily available for most of the products."
"Sometimes it may be difficult to incorporate new additional databases in NetMon, and we faced some challenges at that time."
"The main concern is that LogRhythm has not improved NetMon but instead introduced a separate product, which many customers, including us, would prefer to be integrated into a single platform for easier management."
"The training for this product is not very good and needs to be improved."
"Our customers would always like to see additional features."
"One thing that surprised me was the current version of LogRhythm does not natively support Windows 2016."
"There is an issue with tunneling in relation to how the connectivity is established between the end devices and where NetMon is installed. On the console, I often observe that there's a difference of a few seconds or maybe a minute, and this lag time should not be there."
"One of the things that we are missing a bit is the capability to add our own rules to it. At the moment, the tech engine does its thing, but we have some cool ideas to make additional rules. There should be an option in the platform to add custom rules, or there should be some kind of user group where we can suggest them for the roadmap and see if they get evaluated and get transparent communication on whether they will be implemented in the product or not."
"A blind spot that I have is around the ease with which you can automate threat intervention."
"I would like more integrations with IOCs and threats currently on the Internet. I would also like to know which threats are based on zero-day attacks, current botnets, etc. Therefore, I would like more information on external threats."
"Cost-wise, they're not cheap. They were definitely the most expensive option, but you get what you pay for."
"An area for improvement in Vectra AI is reporting because it currently lacks some details."
"The solution has not reduced the security analyst workload in our organization because we still need to SIEM. Unfortunately, while Vectra, for us, is a brilliant tool for network investigations, giving wonderful visibility, it doesn't go the whole way to replace our SIEM that is needed for compliance. So, I still have the same amount of alerting and logging that I did before. It gives us more defined ability to see incidents, but it doesn't give us enough information to satisfy a PCI or 27001 audit."
"We would like to see more information with the syslogs. The syslogs that they send to our SIEM are a bit short compared to what you can see. It would be helpful if they send us more data that we can incorporate into our SIEM, then can correlate with other events."
"I think one area that could be improved about Vectra AI is their marketing."
 

Pricing and Cost Advice

"NetMon's licensing costs about $85k per year, with some extra costs for support."
"I don't have visibility into the pricing of LogRhythm NetMon as it's handled through our commercial partnerships."
"Pricing is okay. There were some competitors that were extremely expensive and there were some which were really inexpensive but LogRhythm stayed in the middle of them."
"The price of this solution is too high, so it should be made more practical and more valuable for the customer."
"The product is expensive for smaller companies."
"LogRhythm's licensing part is something that depends on the license you want since they offer it on a perpetual and subscription basis."
"At the time of purchase, we found the pricing acceptable. We had an urgency to get something in place because we had a minor breach that occurred at the tail end of 2016 to the beginning of 2017. This indicated we had a lack of ability to detect things on the network. Hence, why we moved quickly to get into the tool in place. We found things like Bitcoin mining and botnets which we closed quickly. In that regard, it was worth the money."
"The upfront pricing model that we have would have been more beneficial if it had been a recurring license fee, but that wasn't a massive issue for us. It's fairly priced."
"The pricing is high."
"The licensing is on an annual basis."
"It's relatively on the pricier side, but when compared to other solutions. It's not the most budget-friendly option, but it can be considered somewhat more cost-effective in comparison to other alternatives."
"We are running at about 90,000 pounds per year. The solution is a licensed cost. The hardware that they gave us was pretty much next to nothing. It is the license that we're paying for."
"The pricing is very good. It's less expensive than many of the tools out there."
"Vectra AI's pricing is cheaper than that of Darktrace."
report
Use our free recommendation engine to learn which Identity Threat Detection and Response (ITDR) solutions are best for your needs.
921,523 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
12%
Construction Company
10%
Transportation Company
10%
Comms Service Provider
10%
Financial Services Firm
10%
Manufacturing Company
9%
Comms Service Provider
7%
Computer Software Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business2
Midsize Enterprise2
Large Enterprise7
By reviewers
Company SizeCount
Small Business10
Midsize Enterprise10
Large Enterprise29
 

Questions from the Community

What needs improvement with LogRhythm NetMon?
Sometimes it may be difficult to incorporate new additional databases in NetMon, and we faced some challenges at that time. However, currently, it is not giving many challenges.It is difficult to i...
What is your primary use case for LogRhythm NetMon?
We have outsourced our SIEM solutions at the moment, and we are using it.We have been using LogRhythm in our organization as a SaaS offering. We have outsourced it as part of the actual scope where...
What advice do you have for others considering LogRhythm NetMon?
We use AWS as our cloud provider in a private cloud environment.It completely depends upon when incidents happen. To find the root cause analysis, we need to first gather the logs from the team. It...
What is your experience regarding pricing and costs for Vectra AI?
I find the pricing of Vectra AI to be one of the best we have seen as feedback from customers and partners indicates it is very competitive for an EDR solution.
What needs improvement with Vectra AI?
I think one area that could be improved about Vectra AI is their marketing. One of the aspects that Darktrace excels at is their marketing, and I do not feel Vectra AI is on that level yet, leading...
What is your primary use case for Vectra AI?
I primarily use Vectra AI for customers, and I only provide Vectra AI.
 

Also Known As

LogRhythm Network Monitor
Vectra Networks, Vectra AI NDR
 

Overview

 

Sample Customers

Sera-Brynn
Tribune Media Group, Barry University, Aruba Networks, Good Technology, Riverbed, Santa Clara University, Securities Exchange, Tri-State Generation and Transmission Association
Find out what your peers are saying about NetMon vs. Vectra AI and other solutions. Updated: September 2026.
921,523 professionals have used our research since 2012.