Netsurion vs RSA enVision comparison

Why PeerSpot?

Netsurion and RSA are both solutions in the Security Information and Event Management (SIEM) category. Netsurion is ranked #50, while RSA is ranked #51. Netsurion holds a 0.9% mindshare in SIEM, compared to RSA’s 0.9% mindshare. Additionally, 92% of Netsurion users are willing to recommend the solution, compared to 83% of RSA users who would recommend it.

Netsurion

Read 24 Netsurion reviews

6,639 Views
2,921 Comparison Views

92% willing to recommend

RSA enVision

Read 6 RSA enVision reviews

3,093 Views
2,969 Comparison Views

83% willing to recommend

Netsurion

RSA enVision

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jun 3, 2026

RSA enVision and Netsurion are strong contenders in the cybersecurity landscape. User reviews suggest Netsurion has an edge in ease of use and customer satisfaction.

Features: RSA enVision offers robust security analytics, extensive log management, and comprehensive monitoring. Netsurion provides managed threat protection, network monitoring, and seamless integration capabilities.

Room for Improvement: RSA enVision could improve scalability, be more intuitive in configuration settings, and enhance user onboarding. Netsurion needs more detailed reporting, better alert management, and additional customization options for advanced users.

Ease of Deployment and Customer Service: RSA enVision requires extensive setup efforts and offers satisfactory but not exceptional customer service. Netsurion is praised for its seamless deployment and highly responsive customer service, making it less resource-intensive to deploy and better supported post-deployment.

Pricing and ROI: RSA enVision has a high setup cost with mixed feelings about its ROI. Netsurion offers more competitive pricing and reports a stronger ROI, providing overall better value for money.

To learn more, read our detailed Netsurion vs. RSA enVision Report (Updated: November 2026).

Buyer's Guide

Netsurion vs. RSA enVision

November 2026

Download the complete report

Helped 921,523 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Netsurion

Ranking in Security Information and Event Management (SIEM)

50th

Average Rating

8.4

Reviews Sentiment

7.1

Number of Reviews

Ranking in other categories

Managed Security Services Providers (MSSP) (21st), SOC as a Service (9th), Managed Detection and Response (MDR) (31st), Extended Detection and Response (XDR) (46th)

RSA enVision

Ranking in Security Information and Event Management (SIEM)

51st

Average Rating

7.2

Reviews Sentiment

6.7

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of November 2026, in the Security Information and Event Management (SIEM) category, the mindshare of Netsurion is 0.9%, up from 0.6% compared to the previous year. The mindshare of RSA enVision is 0.9%, up from 0.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Security Information and Event Management (SIEM) Mindshare Distribution
Product	Mindshare (%)
Netsurion	0.9%
RSA enVision	0.9%
Other	98.2%

Security Information and Event Management (SIEM)

Featured Reviews

John-Berry

Information Technology Manager at ProfitSolv

The SOC center monitors, hunts, and notifies us of threats around the clock

I know they are working to resolve this issue, but Netsurion is currently unable to retrieve logs from S3 buckets. We use WP Engine for a lot of web hosting as well as AWS, and both of these platforms use S3 buckets. I would like Netsurion to be able to pull logs from Linux devices. We have some of that capability, and I believe they can do it. However, the way it works with Amazon is strange and glitchy. Therefore, working something out with Amazon would be great. Netsurion's SOC can be a bit too aggressive at times. We have asked them to adjust their playbook because I am tired of being notified about the same issue multiple times a day. I am aware of the issue, and it is not a cause for concern. Let's only take action on this issue if we see an actual problem.

Read full review

Simon Fontaine

Président at ARS Solutions

Support both French and English, which is important for us and adapted to the evolving security landscape over time in my experience

You need a skilled engineer to deploy it because you can do anything with this tool. You can see everything on the network. A good engineer will be surprised and have fun using this tool because it's very powerful. Deployment process: You need to build a recipe/layout when you want to deploy something. Once the recipe is done, you just have to copy it. So you really need a good engineer at first, but then any other technician can copy the recipe. You don't need to be an expert once the recipe is finalized. So, once you have it set up, it's easy to deploy. But you need a good engineer to deploy it correctly. You will get alerts from the system, but if you want to fully explore and maximize the tool, the engineering needs are different.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The biggest lesson I have learned is that the outsourcing of this service has a dramatic impact on the organization."

"We don't have the eyeballs available to stare and watch for things, or even have the capability of building internal alert systems. So, the managed SOC has been huge for freeing up staff to work on other responsibilities. We are saving on at least one full-time employee."

"When I looked last week, we probably averaged about 20 million log entries a day. So, we certainly can't individually manage that. Just looking at the reports, then trying to go back and find anything that was questionable, was a challenge. Therefore, the managed service has been invaluable to us in terms of being able to narrow the scope of what really needs to be looked at and bringing those things to our attention to be dealt with."

"I like EventTracker's dashboard. I see it every time I log in because it's the first thing you get to. We have our own widgets that we use. For the sake of transparency, there are a few widgets that we look at there and then we move out from there... Among the particularly helpful widgets, the not-reporting widget is a big one. The number-of-logs-processed is also a good one."

"The solution provides actionable threat intelligence, it is not a passive service, they go in and perform mitigations on whatever they find, it is timely, and they provide context so it is understood by anyone who receives these reports."

"The network alert is the most valuable feature. That way, we in the IT department are aware of user lockout and invalid password attempts way before a user ever even calls in."

"The managed service is great value which saves you a full-time employee on your staff by being able to outsource it to EventTracker to review all the logs and cull through the data to make recommendations and identify threats, then how to remediate them."

"Netsurion's security operations center is critical for us because they provide 24/7 monitoring, we've never had another company meet the same need in the past, and it's a valuable tool to have."

More Netsurion pros

"The most valuable feature of this solution is the reporting."

"We developed around this solution and received excellent support from the company."

"The most valuable feature is the management features. It's capable of managing large enterprises."

"RSA enVision provides the full system visibility of your events within your IT ecosystem."

"The ease of log collection and stability of the platform are the most valuable features."

"The custom dashboard and correlation alerts in this solution improved our incident response process."

"The configuration part is very easy...The technical support was sincere in their responses...I rate the technical support a nine out of ten."

Cons

"There are some issues with searches taking a long period of time, but they assured me that they have implemented a new search function that's available in version 9, but which requires a solid-state hard drive... Depending on how many logs you have it could take a long time to return the results if you're looking back prior to the last 30 days."

"The upfront costs have increased, and we have been locked into this contract."

"They have their programs and tools that you have to put into your own environment. We basically ingest all the log data and then push it out to them. I wish it was a little bit different than that where we just push directly towards them. I do not know if that is a function that they thought would be better in terms of security, but I wish that instead of doing that, it should go from the device to them and not from the device to another system and then out to them. There seem to be some drawbacks to doing that."

"Probably the biggest thing is just: Can I search for this and what's the best way to do it? If I'm looking for two events versus a singular event, I just throw it back at them. They're the experts on it."

"With version 8, there are quite a few things. The query tool was one of the big ones, and the query speed was one of the big ones, but they've made some great strides between versions 8 and 9. There were also issues in version 8 around the ability to get the data back out. It's one thing to collect data, but it's a whole other thing to be able to present it or run it in a timely manner. The old tool, depending on how far back I was looking, might even time out and I would have to run it again."

"Their SOC team can't understand our network because they haven't worked in the actual company. This does negatively affect security posture, e.g., if you don't have knowledge about the network, then you will miss things."

"The biggest problem is that we have too many domain controllers. So, we have to keep all the clients and main system updated with the latest versions along with making sure all the firewalls are open."

"I would like to see the dashboard come up more quickly."

More Netsurion cons

"In general, the solution currently isn't user-friendly."

"Licensing could be improved to be more oriented towards Managed Service Providers (MSPs)."

"RSA enVision log manager is out of date and is not in use anymore."

"Whenever you perform the query, it takes too long."

"The integration could be easier, it should support more products."

"There is no future for this solution. It does not exist anymore."

"Sometimes the investigation panel and reporting engine work very slowly."

Pricing and Cost Advice

"I don't know if the pricing is by the seat but we're paying about $20,000 to 25,000 a year. On top of that, we pay for the managed support services. That runs us about another $35,000 or $40,000 a year."

"You are paying for different levels, especially as far as the monitoring goes and how often you review it with the team. The other factor that figures in is how many nodes are on your network, such as clients, network equipment, servers, etc. There are some additional pieces on top of that, but it's laid out pretty simply, as far as how much you're going to pay for a node."

"We put together the package of what we needed. It was based pretty much on the number of agents that we were deploying. If we needed to manage logging from certain specific applications, like Active Directory and SQL Server, there has been no additional cost for that. We had agents deployed for those specific servers and the applications were included, then there was just an additional installation that they had to do for us."

"Our budget follows the calendar year. We just started a new budget year at the beginning of the month. We did budget for an increase in our threat management system selection. Therefore, we have the budget to implement and accommodate a threat management system change, including an increase for the quoted actions that we received to improve EventTracker. We are just waiting on our council to approve that budget, which might not be for a little while. Hopefully, when they do, we will be able to jump on doing something."

"EventTracker's subscription-based model is interesting as far as yearly license type stuff. It's nice because you know what it's going to be next year. We haven't really looked at any other solutions. The pricing at the time compared to the other solutions was a lot less. A couple of years ago, we actually looked at Splunk. The amount in Splunk's licensing model is based on 20 gigs a day, or something like that. Based on our number of logs and stuff that we were already generating, the costs would be substantially more for the amount of logs that we would be getting."

"When we first got the EventTracker product, we were using SIEM Simplified. At the time they didn't call it that, but it was more of a service thing. So, there was a bit more hand-holding and getting stuff set up, along with failure reports, that they did during the first one to two years. Then, we decided that the the additional money to have someone do these daily reports wasn't terribly useful, so we discontinued that service."

"In the security space, it's hard to quantify your return on investment. So, I don't. We spend about $40,000 a year and so. It's hard to say if the SIEM saved that much money."

"The solution is fairly expensive, but in my experience, all of the SIEM applications that I've evaluated or looked at cost about the same."

More Netsurion pricing and cost advice

"On a scale of one to ten, where one is low, and ten is high price, I rate the pricing a six."

"We no longer pay a licensing fee because it is out of date and don't pay for support."

See which vendors are best for you

Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.

See recommendations

921,523 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Outsourcing Company

19%

Construction Company

11%

Manufacturing Company

Performing Arts

Comms Service Provider

15%

Manufacturing Company

13%

Outsourcing Company

13%

Construction Company

12%

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	10
Midsize Enterprise	7
Large Enterprise	7

No data available

Comparisons

IBM Security QRadar vs Netsurion

Compared 7% of the time

GoSecure Titan Platform vs Netsurion

Compared 7% of the time

Rapid7 InsightIDR vs Netsurion

Compared 6% of the time

Splunk Enterprise Security vs Netsurion

Compared 6% of the time

Arctic Wolf Managed Detection and Response vs Netsurion

Compared 4% of the time

More Netsurion Competitors

Splunk Enterprise Security vs RSA enVision

Compared 14% of the time

NetWitness Platform vs RSA enVision

Compared 12% of the time

IBM Security QRadar vs RSA enVision

Compared 6% of the time

IBM Watson for Cyber Security vs RSA enVision

Compared 5% of the time

Wazuh vs RSA enVision

Compared 4% of the time

More RSA enVision Competitors

Product Reports

Buyer's Guide

Netsurion

October 2026

Download Netsurion product report

Buyer's Guide

Security Information and Event Management (SIEM)

October 2026

Download RSA enVision product report

Also Known As

Netsurion Managed Threat Protection, Netsurion EventTracker

No data available

Overview

Netsurion offers real-time alerts, weekly reports, and a user-friendly interface, facilitating security event visibility and threat detection. Its capabilities include seamless platform integration, quick setup, 24/7 SOC monitoring, and fast data retrieval via Elasticsearch.

Netsurion enhances IT security by providing centralized log management, abnormal activity alerts, and compliance reports. Users often employ it for VPN monitoring, firewall scrutiny, and vulnerability assessment. The system's frequent updates ensure effective cybersecurity management, while its managed SOC service supports ongoing threat monitoring and response. Despite its strengths, users suggest improvements in interface simplicity, report generation speed, and search functionalities.

What are Netsurion's key features?

Real-Time Alerts: Instant notifications for security incidents and activities.
Weekly Reports: Regular updates on security events and system performance.
User-Friendly Interface: Easy navigation and setup for fast implementation.
24/7 SOC Monitoring: Around-the-clock security operations center support.
Elasticsearch: Quick data retrieval and processing for efficient analysis.

What benefits should users look for?

Streamlined Threat Detection: Efficiently identifies and responds to threats.
Enhanced Data Retrieval: Faster access to logs and security data.
Improved Compliance Management: Meets regulatory requirements with ease.
Seamless Platform Integration: Easy connection with multiple platforms.
Insight into Network Activities: Provides detailed analysis of network behavior.

Netsurion is implemented across diverse industries to provide comprehensive security monitoring and compliance management. Companies use it to gather and analyze log data, manage firewall activities, assess vulnerabilities, and facilitate event logging. This aids in enhancing security posture and ensuring compliance with industry standards.

Netsurion

RSA enVision is a robust security information and event management (SIEM) platform designed to provide comprehensive log management and compliance support, helping organizations gain critical insights into their IT environments.

RSA enVision delivers a centralized platform that allows organizations to monitor, analyze, and respond to security threats efficiently. It offers detailed visibility into network operations by collecting and analyzing log data from diverse sources. This enables organizations to enhance their threat detection and response capabilities significantly. The integration of automated processes in RSA enVision streamlines compliance reporting and audit procedures, thereby reducing complexity in handling security incidents.

What are the key features of RSA enVision?

Log Management: Centralizes log data collected from multiple sources for easy analysis and monitoring.
Real-Time Monitoring: Provides continuous real-time insights into network activities to identify potential security threats.
Automated Compliance Reporting: Streamlines generation of compliance reports to ensure adherence to industry standards.
Event Correlation: Analyzes log data to identify patterns indicating potential security incidents.

Which benefits should users look for in RSA enVision reviews?

Enhanced Security Posture: Better threat detection capabilities can significantly fortify an organization's security infrastructure.
Operational Efficiency: Automating tasks eases the workload on IT teams, allowing them to focus on critical tasks.
Cost Reduction: Efficient log management and reporting can lower operational costs and improve overall resource utilization.
Ease of Integration: Seamless integration with existing IT systems ensures smooth deployment without major disruptions.

RSA enVision is implemented across diverse industry sectors, including healthcare, finance, and retail, where security and compliance are critical. By offering tailored security insights and compliance aids, it helps organizations meet specific industry requirements efficiently and effectively. Financial institutions use RSA enVision for monitoring transaction logs, while healthcare organizations benefit from its ability to manage sensitive patient data logs safely.

RSA

Sample Customers

The Salvation Army, The FRESH Market, Pacific Western Bank, NASA, American Academy of Orthopaedic Surgeons (AAOS), and Talbot’s Stores

BPS (SUISSE), Hypovereinsbank Germany, MAX Hamburgers, Infoplex, Neotel, Telus

Buyer's Guide

Netsurion vs. RSA enVision

November 2026

Free Report: Netsurion vs. RSA enVision

Find out what your peers are saying about Netsurion vs. RSA enVision and other solutions. Updated: November 2026.

DOWNLOAD NOW

921,523 professionals have used our research since 2012.

See our Netsurion vs. RSA enVision report.

See our list of best Security Information and Event Management (SIEM) vendors.

We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.