Try our new research platform with insights from 80,000+ expert users

NetWitness NDR vs ThreatBook Threat Intelligence Platform (TIP) comparison

NetWitness and ThreatBook are both solutions in the Threat Intelligence Platforms category. NetWitness is ranked #39, while ThreatBook is ranked #15 with an average rating of 9.5. Additionally, 87% of NetWitness users are willing to recommend the solution, compared to 100% of ThreatBook users who would recommend it.
NetWitness NDR
Read 15 NetWitness NDR reviews
  • 220 Views
  • 78 Comparison Views
87% willing to recommend
ThreatBook Threat Intellige...
Read 4 ThreatBook Threat Intelligence Platform (TIP) reviews
  • 77 Views
  • 14 Comparison Views
100% willing to recommend
 

Comparison Buyer's Guide

Download the report
Executive SummaryUpdated on Jun 24, 2025

NetWitness NDR and ThreatBook Threat Intelligence Platform compete in the cybersecurity sector, providing advanced threat detection and intelligence solutions. While NetWitness NDR leads with comprehensive network traffic analysis, ThreatBook TIP is preferred for its enriched threat intelligence feed despite higher costs.

Features:NetWitness NDR offers advanced network packet analytics, automated threat detection, and robust real-time security monitoring. ThreatBook TIP provides an extensive threat intelligence database, AI-driven threat prediction, and proactive defense mechanisms.

Ease of Deployment and Customer Service:NetWitness NDR includes a complex deployment model that requires time, supported by robust post-deployment service. ThreatBook TIP offers an efficient and streamlined deployment process with rapid integration, but may not provide as extensive service customization.

Pricing and ROI:NetWitness NDR needs significant initial setup costs but delivers long-term ROI through its comprehensive coverage. ThreatBook TIP's higher upfront cost is due to its advanced intelligence services, yet it offers compelling ROI with swift threat detection and prevention.

DOWNLOAD THE COMPLETE REPORT
To learn more, read our detailed NetWitness NDR vs. ThreatBook Threat Intelligence Platform (TIP) Report (Updated: June 2025).
Buyer's Guide
NetWitness NDR vs. ThreatBook Threat Intelligence Platform (TIP)
June 2025
Download the complete report
Helped 860,168 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

NetWitness NDR
Ranking in Threat Intelligence Platforms
39th
Average Rating
8.0
Reviews Sentiment
6.9
Number of Reviews
15
Ranking in other categories
Endpoint Protection Platform (EPP) (59th), Endpoint Detection and Response (EDR) (63rd), Security Orchestration Automation and Response (SOAR) (24th), Network Detection and Response (NDR) (20th), Extended Detection and Response (XDR) (38th)
ThreatBook Threat Intellige...
Ranking in Threat Intelligence Platforms
15th
Average Rating
9.6
Reviews Sentiment
7.6
Number of Reviews
4
Ranking in other categories
No ranking in other categories
 

Featured Reviews

SupravatMaji - PeerSpot reviewer
Beneficial single unified dashboard, good native application integration, and high availability
My advice to those wanting to implement RSA NetWitness Network is they have to first do a little due diligence, such as the exact requirement based on their needs. That will give them a direction for their investment because otherwise, the bill of material or bill of quantity (BOQ) may be higher side. It is important to do good due intelligence on the environment, see the exact requirement, and then go ahead with the solution. The solution is perfectly stable. I rate RSA NetWitness Network a nine out of ten.
Read full review
RG
Enhancement in incident response through reduced false positives and contextual intelligence
ThreatBook has positively impacted our organization by allowing us to detect all alerts and threats effectively. In the past, we needed to search logs from various sources, including terminals, DI servers, and firewalls, collecting a lot of logs and searching the internet for contextual information about threat actors. After using ThreatBook TDP, all alerts and contexts are easily displayed on the dashboard, making it very helpful for us. During the incident response scenario, ThreatBook saves us over 80% of the time for each incident. We usually took about one day or two days for attribution and understanding how the attacker attacked us, but after using ThreatBook TDP, we usually take around one or two hours to finish all these tasks. Additionally, their AI techniques save a lot of time, allowing me to ask in natural language for explanations about the meaning and target of the attacker.
Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable feature of RSA NetWitness Network is the single unified dashboard from which you can manage all the different products of RSA. Additionally, the integration with native applications is good."
"It is very easy to use, and its usability is great. The use cases are also very easy. The visualizations of the use cases are magnificent. You cannot find this in any other solution. From my point of view, it is great."
"It is stable. We have been using it for some time, without any issues."
"The interface of this solution is very flexible and easy to use."
"They have recently updated the features and the most valuable ones are the instant threat response, ease of use, web interface, integration, and easy access. RSA NetWitness Endpoint is very compatible with other solutions and technologies. However, they do not rely on third-party solutions and have most features built-in."
"NetWitness Endpoint's most valuable features are its interoperability across many different operating systems and the ease of pivoting from network to endpoint via a single console."
"We've contacted technical support several times. They've been very good. They have been able to help us resolve our issues."
"The stability of the RSA NetWitness Endpoint is very good."
More NetWitness NDR pros
"We have not suffered from any attack for the past few months, which has relatively improved our network security."
"ThreatBook saves us over 80% of the time for each incident."
"ThreatBook saves us over 80% of time for each incident, reducing the usual time taken from one or two days for attribution to just one or two hours, thanks to their AI techniques."
"ThreatBook Threat Intelligence Platform (TIP) has positively impacted our organization by helping us generate the strategic threat focus reports and aiding us in decision-making, leading to improved cybersecurity operation efficiency."
 

Cons

"Its price could be improved. It is an expensive product. Its training is also too expensive. It would be great if they can have a better pricing scheme for the training."
"Threat detection could be better."
"I would like to see Security Orchestration and Response Automation (SOAR) integration."
"The deployment process is complex. I don't know why, but this solution will suddenly stop working. Logs stop coming. Often, one thing or another stops working. Most of the time, one of my team members is working with troubleshooting and working with technical support. Log passing is also one of the biggest challenge."
"When analyzing something, you have to click several times. It requires a lot of effort to find something."
"The threat intelligence could improve in RSA NetWitness Endpoint."
"The integration of the solution needs to be improved. The dashboard needs lots of updates as well. In the next release, we would like to see advanced fraud detection features."
"NetWitness Endpoint's blocking feature does not work properly - if there's a malicious process, it's not possible to kill it via a custom rule unless and until it's flagged as malicious."
More NetWitness NDR cons
"It would be great if ThreatBook could integrate with our ITSM system to streamline the tasks and incident management"
"ThreatBook Threat Intelligence Platform (TIP) could be improved by providing more integrations to support additional platforms."
"I hope that ThreatBook can integrate a feature where if I detect any internal compromised hosts, I can block or isolate those compromised hosts within my internal network; that would be good."
"We’ve seen strong ROI through reduced incident response times, increased threat visibility, and less time wasted on false positives."
 

Pricing and Cost Advice

"I do not have any opinion on the pricing or licensing of the product."
"NetWitness Endpoint is less costly than its competitors, but it offers fewer features."
"With RSA, there is flexibility in choosing the service, products, and the range that meets your requirement, as well as they are flexible in terms of pricing."
"It is an expensive product."
"They can easily adjust if you have the requirements which are required. If you have a budget cut or a budget constraint, they can bend."
"The cost depends on the number of endpoints that you want to monitor, but it is not expensive."
"The pricing is not very economical. It is a quite costly product for India. One thing is that when you purchase it, you have to purchase a module separately."
"It is highly scalable. It can be bought based on your requirements."
More NetWitness NDR pricing and cost advice
Information not available
report
See which vendors are best for you
Use our free recommendation engine to learn which Threat Intelligence Platforms solutions are best for your needs.
See recommendations
860,168 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
16%
Computer Software Company
15%
Government
9%
Manufacturing Company
9%
No data available
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

Ask a question
Earn 20 points
What is your experience regarding pricing and costs for ThreatBook?
The procurement process is easy because ThreatBook is a subscription model, and when I need it, I just pay for it. The billing experience is clear with no extra fees; all the costs are clearly show...
See all answers
What needs improvement with ThreatBook?
It would be great if ThreatBook could integrate with our ITSM system to streamline the tasks and incident management, and I hope this feature will be provided in the future. Everything is perfect, ...
See all answers
What is your primary use case for ThreatBook?
Mainly, we use ThreatBook TDP to monitor the east-west and north-south network traffic, detect abnormal behaviors, and provide contextual intelligence to support our threat hunting and incident res...
See all answers
 

Comparisons

Darktrace vs NetWitness NDR Logo
Darktrace vs NetWitness NDR
Compared 13% of the time
Fidelis Elevate vs NetWitness NDR Logo
Fidelis Elevate vs NetWitness NDR
Compared 12% of the time
Vectra AI vs NetWitness NDR Logo
Vectra AI vs NetWitness NDR
Compared 9% of the time
Cortex XDR by Palo Alto Networks vs NetWitness NDR Logo
Cortex XDR by Palo Alto Networks vs NetWitness NDR
Compared 8% of the time
ExtraHop Reveal(x) vs NetWitness NDR Logo
ExtraHop Reveal(x) vs NetWitness NDR
Compared 7% of the time
More NetWitness NDR Competitors
No data available
 

Product Reports

Buyer's Guide
NetWitness NDR
June 2025
NetWitness NDR reportDownload NetWitness NDR product report
Buyer's Guide
ThreatBook Threat Intelligence Platform (TIP)
June 2025
ThreatBook Threat Intelligence Platform (TIP) reportDownload ThreatBook Threat Intelligence Platform (TIP) product report
 

Also Known As

RSA ECAT, NetWitness Network
No data available
 

Overview

Using a centralized combination of network and endpoint analysis, behavioral analysis, data science techniques and threat intelligence, NetWitness NDR helps analysts detect and resolve known and unknown attacks while automating and orchestrating the incident response lifecycle. With these capabilities on one platform, security teams can collapse disparate tools and data into a powerful, blazingly fast user interface.

NetWitness

ThreatBook Threat Intelligence Platform (TIP) serves as a sophisticated cybersecurity tool that empowers users with real-time threat analysis, helping organizations anticipate and mitigate cybersecurity risks efficiently.

This platform offers comprehensive threat intelligence capabilities designed to support cybersecurity teams in quickly identifying threats and automating responses. TIP aggregates vast threat data, providing enhanced visibility into potential attacks. Its integration capabilities allow seamless connections with existing security infrastructures, improving overall defensive measures and enhancing incident response strategies.

What are the most valuable features?
  • Real-Time Threat Detection: Provides continuous monitoring and instant alerts to help identify potential threats.
  • Automated Response: Streamlines incident management with predefined automated actions based on threat intelligence.
  • Comprehensive Data Integration: Seamlessly merges with existing systems to enhance the organization’s protective measures.
  • Global Threat Intelligence: Offers extensive datasets from diverse sources to broaden the threat landscape understanding.
What benefits and ROI should users seek?
  • Enhanced Security Posture: Users achieve improved threat prevention and response capabilities.
  • Increased Efficiency: Automating tasks reduces the burden on cybersecurity teams.
  • Cost Savings: Integrating TIP can lead to reduced financial risks from cyber incidents.
  • Scalability: Adapts to growing security needs, enabling operations without compromise.

In industries like finance and healthcare, ThreatBook TIP supports tailored implementations, addressing sector-specific threats through targeted intelligence feeds. Its adaptable architecture ensures that users can customize the platform to meet industry-specific challenges effectively, resulting in improved risk management and strategic threat handling.

ThreatBook
 

Sample Customers

ADP, Ameritas, Partners Healthcare
Information Not Available
Buyer's Guide
NetWitness NDR vs. ThreatBook Threat Intelligence Platform (TIP)
June 2025
Free Report: NetWitness NDR vs. ThreatBook Threat Intelligence Platform (TIP)
Find out what your peers are saying about NetWitness NDR vs. ThreatBook Threat Intelligence Platform (TIP) and other solutions. Updated: June 2025.
DOWNLOAD NOW
860,168 professionals have used our research since 2012.
See our NetWitness NDR vs. ThreatBook Threat Intelligence Platform (TIP) report.
See our list of best Threat Intelligence Platforms vendors.

We monitor all Threat Intelligence Platforms reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.