Recorded Future and NetWitness NDR are leading products in the threat intelligence and network detection sectors. Recorded Future appears to have the upper hand in terms of dashboard personalization and alert system effectiveness. However, NetWitness NDR stands out with its robust incident response and integration capabilities.
Features: Recorded Future offers robust threat intelligence capabilities, comprehensive data mining, and social media investigations, along with an effective alert system and dashboard personalization. NetWitness NDR enhances detection features, excels in incident response, and supports integration with third-party apps while providing interoperability across operating systems.
Room for Improvement: Recorded Future could improve automation, user experience, and reduce false positives while also addressing pricing complexities. NetWitness NDR needs better threat intelligence feeds, improved scalability, and reduced manual detection efforts. Users also suggest it could offer advanced reporting and integration.
Ease of Deployment and Customer Service: Recorded Future operates mainly in cloud environments with various deployment options, whereas NetWitness NDR is mostly on-premises. While technical support for both is generally positive, Recorded Future tends to have slightly higher ratings. Some users appreciate the straightforward explanations provided by NetWitness NDR's support team.
Pricing and ROI: Recorded Future is regarded as expensive, suitable for large enterprises due to high licensing fees, though with strong ROI potential if utilized effectively. NetWitness NDR offers more flexible pricing tailored to organizational needs, yet it remains costly for smaller entities. Both solutions demonstrate good ROI potential, though price is a key consideration for users.
The customer support is frustrating and not efficient.
Being a SaaS, Recorded Future generally does a good job in terms of scalability.
Recorded Future is very stable, with a rating of nine.
The Insikt Group covers a narrow range of areas, which doesn't reflect my needs.
Recorded Future is expensive, with a personal rating of eight for cost.
Having a layer of intelligence within my SIEM that reflects in Recorded Future, and being able to enrich the data at my SIEM, offers various angles that I wouldn't be able to see without it.
| Product | Market Share (%) |
|---|---|
| Recorded Future | 7.9% |
| NetWitness NDR | 0.9% |
| Other | 91.2% |
| Company Size | Count |
|---|---|
| Small Business | 10 |
| Midsize Enterprise | 2 |
| Large Enterprise | 5 |
| Company Size | Count |
|---|---|
| Small Business | 2 |
| Midsize Enterprise | 3 |
| Large Enterprise | 9 |
Using a centralized combination of network and endpoint analysis, behavioral analysis, data science techniques and threat intelligence, NetWitness NDR helps analysts detect and resolve known and unknown attacks while automating and orchestrating the incident response lifecycle. With these capabilities on one platform, security teams can collapse disparate tools and data into a powerful, blazingly fast user interface.
Recorded Future is a powerful and effective cyber threat intelligence (CTI) platform that aims to empower administrators to protect their organizations from threats, both known and unknown. The machine learning engine that Recorded Future utilizes can process the same amount of data that 9,000 analysts working five days a week, eight hours a day for an entire year can process. It simplifies threat detection and remediation so that organizations can focus on other tasks.
Recorded Future Benefits
Some of the ways that organizations can benefit by choosing to deploy Recorded Future include:
Recorded Future Features
Some of the many features Recorded Future offers include:
Reviews from Real Users
Recorded future is a solution that stands out when compared to its top competitors. Two major advantages it offers are the threat research tools that it provides and the threat monitoring capabilities that it enables users to leverage.
A security operations lead at a comms service provider writes, “Recorded Future covers a lot of different use cases. For example, we are using it for threat intelligence research. We do use the tool to make active research on what is found around the threat. We look at patterns, for example, and see what can be elaborated on from that.”
They also write, “We can also use it for active monitoring in the customer interface. We can monitor the business side of a campaign. We can monitor for specific threats or market activity on the dashboard. We can develop queries to run in a continuous mode in order to get the best reviews.”
We monitor all Threat Intelligence Platforms (TIP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
