Try our new research platform with insights from 80,000+ expert users

NetWitness NDR vs ThreatBook Threat Intelligence Platform (TIP) comparison

NetWitness and ThreatBook are both solutions in the Threat Intelligence Platforms category. NetWitness is ranked #40, while ThreatBook is ranked #16 with an average rating of 9.5. Additionally, 87% of NetWitness users are willing to recommend the solution, compared to 100% of ThreatBook users who would recommend it.
NetWitness NDR
Read 15 NetWitness NDR reviews
  • 1,789 Views
  • 233 Comparison Views
87% willing to recommend
ThreatBook Threat Intellige...
Read 4 ThreatBook Threat Intelligence Platform (TIP) reviews
  • 201 Views
  • 121 Comparison Views
100% willing to recommend
 

Comparison Buyer's Guide

Download the report
Executive SummaryUpdated on Jun 24, 2025

NetWitness NDR and ThreatBook Threat Intelligence Platform compete in the cybersecurity sector, providing advanced threat detection and intelligence solutions. While NetWitness NDR leads with comprehensive network traffic analysis, ThreatBook TIP is preferred for its enriched threat intelligence feed despite higher costs.

Features:NetWitness NDR offers advanced network packet analytics, automated threat detection, and robust real-time security monitoring. ThreatBook TIP provides an extensive threat intelligence database, AI-driven threat prediction, and proactive defense mechanisms.

Ease of Deployment and Customer Service:NetWitness NDR includes a complex deployment model that requires time, supported by robust post-deployment service. ThreatBook TIP offers an efficient and streamlined deployment process with rapid integration, but may not provide as extensive service customization.

Pricing and ROI:NetWitness NDR needs significant initial setup costs but delivers long-term ROI through its comprehensive coverage. ThreatBook TIP's higher upfront cost is due to its advanced intelligence services, yet it offers compelling ROI with swift threat detection and prevention.

DOWNLOAD THE COMPLETE REPORT
To learn more, read our detailed NetWitness NDR vs. ThreatBook Threat Intelligence Platform (TIP) Report (Updated: July 2025).
Buyer's Guide
NetWitness NDR vs. ThreatBook Threat Intelligence Platform (TIP)
July 2025
Download the complete report
Helped 865,384 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

NetWitness NDR
Ranking in Threat Intelligence Platforms
40th
Average Rating
8.0
Reviews Sentiment
6.9
Number of Reviews
15
Ranking in other categories
Endpoint Protection Platform (EPP) (59th), Endpoint Detection and Response (EDR) (61st), Security Orchestration Automation and Response (SOAR) (25th), Network Detection and Response (NDR) (19th), Extended Detection and Response (XDR) (39th)
ThreatBook Threat Intellige...
Ranking in Threat Intelligence Platforms
16th
Average Rating
9.6
Reviews Sentiment
7.6
Number of Reviews
4
Ranking in other categories
No ranking in other categories
 

Featured Reviews

SupravatMaji - PeerSpot reviewer
Beneficial single unified dashboard, good native application integration, and high availability
My advice to those wanting to implement RSA NetWitness Network is they have to first do a little due diligence, such as the exact requirement based on their needs. That will give them a direction for their investment because otherwise, the bill of material or bill of quantity (BOQ) may be higher side. It is important to do good due intelligence on the environment, see the exact requirement, and then go ahead with the solution. The solution is perfectly stable. I rate RSA NetWitness Network a nine out of ten.
Read full review
RG
Enhancement in incident response through reduced false positives and contextual intelligence
ThreatBook has positively impacted our organization by allowing us to detect all alerts and threats effectively. In the past, we needed to search logs from various sources, including terminals, DI servers, and firewalls, collecting a lot of logs and searching the internet for contextual information about threat actors. After using ThreatBook TDP, all alerts and contexts are easily displayed on the dashboard, making it very helpful for us. During the incident response scenario, ThreatBook saves us over 80% of the time for each incident. We usually took about one day or two days for attribution and understanding how the attacker attacked us, but after using ThreatBook TDP, we usually take around one or two hours to finish all these tasks. Additionally, their AI techniques save a lot of time, allowing me to ask in natural language for explanations about the meaning and target of the attacker.
Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Ability to isolate the machine when there are malicious files."
"The most valuable feature is the way it captures the traffic, and it contains every detail of the communication."
"This solution allows us to locate the malware in real-time."
"They have recently updated the features and the most valuable ones are the instant threat response, ease of use, web interface, integration, and easy access. RSA NetWitness Endpoint is very compatible with other solutions and technologies. However, they do not rely on third-party solutions and have most features built-in."
"We've contacted technical support several times. They've been very good. They have been able to help us resolve our issues."
"It helps our security team respond more accurately when there are threats, then we get less false positives or negatives."
"NetWitness Endpoint's most valuable features are its interoperability across many different operating systems and the ease of pivoting from network to endpoint via a single console."
"The stability of the RSA NetWitness Endpoint is very good."
More NetWitness NDR pros
"ThreatBook Threat Intelligence Platform (TIP) has positively impacted our organization by helping us generate the strategic threat focus reports and aiding us in decision-making, leading to improved cybersecurity operation efficiency."
"ThreatBook saves us over 80% of time for each incident, reducing the usual time taken from one or two days for attribution to just one or two hours, thanks to their AI techniques."
"ThreatBook saves us over 80% of the time for each incident."
"We have not suffered from any attack for the past few months, which has relatively improved our network security."
 

Cons

"The integration of the solution needs to be improved. The dashboard needs lots of updates as well. In the next release, we would like to see advanced fraud detection features."
"The deployment process is complex. I don't know why, but this solution will suddenly stop working. Logs stop coming. Often, one thing or another stops working. Most of the time, one of my team members is working with troubleshooting and working with technical support. Log passing is also one of the biggest challenge."
"Its price could be improved. It is an expensive product. Its training is also too expensive. It would be great if they can have a better pricing scheme for the training."
"I would like to see Security Orchestration and Response Automation (SOAR) integration."
"RSA NetWitness Network could improve on integration with non-native application integration."
"The initial setup requires a high level of skill."
"We would like to see the hunting and investigation features of this solution improved, in order to provide better visibility of issues."
"NetWitness Endpoint's blocking feature does not work properly - if there's a malicious process, it's not possible to kill it via a custom rule unless and until it's flagged as malicious."
More NetWitness NDR cons
"We’ve seen strong ROI through reduced incident response times, increased threat visibility, and less time wasted on false positives."
"I hope that ThreatBook can integrate a feature where if I detect any internal compromised hosts, I can block or isolate those compromised hosts within my internal network; that would be good."
"ThreatBook Threat Intelligence Platform (TIP) could be improved by providing more integrations to support additional platforms."
"It would be great if ThreatBook could integrate with our ITSM system to streamline the tasks and incident management"
 

Pricing and Cost Advice

"They can easily adjust if you have the requirements which are required. If you have a budget cut or a budget constraint, they can bend."
"We are on a three-year contract to use RSA NetWitness Network."
"With RSA, there is flexibility in choosing the service, products, and the range that meets your requirement, as well as they are flexible in terms of pricing."
"The pricing is not very economical. It is a quite costly product for India. One thing is that when you purchase it, you have to purchase a module separately."
"The price of the solution depends on the environment. If the environment is large then it will cost more. However, the larger the environment with more endpoints, you will receive an increased discount. If the environment is very small, then you might think it is expensive. It is always better to buy in bulk to receive a discount. The minimum number of assets is usually 500, with discounts on 1000 and 2000."
"It is an expensive product."
"The cost depends on the number of endpoints that you want to monitor, but it is not expensive."
"I do not have any opinion on the pricing or licensing of the product."
More NetWitness NDR pricing and cost advice
Information not available
report
See which vendors are best for you
Use our free recommendation engine to learn which Threat Intelligence Platforms solutions are best for your needs.
See recommendations
865,384 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
13%
Computer Software Company
12%
Manufacturing Company
10%
Government
7%
Recreational Facilities/Services Company
47%
Financial Services Firm
16%
Real Estate/Law Firm
7%
Performing Arts
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

Ask a question
Earn 20 points
What is your experience regarding pricing and costs for ThreatBook?
My experience with pricing, setup cost, and licensing is that it is cost-effective and the price is reasonable, with very good overall value and quality.
See all answers
What needs improvement with ThreatBook?
I hope that ThreatBook can integrate a feature where if I detect any internal compromised hosts, I can block or isolate those compromised hosts within my internal network; that would be good. I wou...
See all answers
What is your primary use case for ThreatBook?
We use ThreatBook to have overview visibility of all our assets including if there are any compromised hosts or if there are any incoming attacks from external threats. When we first deployed Threa...
See all answers
 

Comparisons

Darktrace vs NetWitness NDR Logo
Darktrace vs NetWitness NDR
Compared 13% of the time
Fidelis Elevate vs NetWitness NDR Logo
Fidelis Elevate vs NetWitness NDR
Compared 9% of the time
Vectra AI vs NetWitness NDR Logo
Vectra AI vs NetWitness NDR
Compared 7% of the time
Cortex XDR by Palo Alto Networks vs NetWitness NDR Logo
Cortex XDR by Palo Alto Networks vs NetWitness NDR
Compared 7% of the time
ExtraHop Reveal(x) vs NetWitness NDR Logo
ExtraHop Reveal(x) vs NetWitness NDR
Compared 7% of the time
More NetWitness NDR Competitors
No data available
 

Product Reports

Buyer's Guide
NetWitness NDR
August 2025
NetWitness NDR reportDownload NetWitness NDR product report
Buyer's Guide
ThreatBook Threat Intelligence Platform (TIP)
July 2025
ThreatBook Threat Intelligence Platform (TIP) reportDownload ThreatBook Threat Intelligence Platform (TIP) product report
 

Also Known As

RSA ECAT, NetWitness Network
No data available
 

Overview

Using a centralized combination of network and endpoint analysis, behavioral analysis, data science techniques and threat intelligence, NetWitness NDR helps analysts detect and resolve known and unknown attacks while automating and orchestrating the incident response lifecycle. With these capabilities on one platform, security teams can collapse disparate tools and data into a powerful, blazingly fast user interface.

NetWitness

ThreatBook Threat Intelligence Platform (TIP) serves as a sophisticated cybersecurity tool that empowers users with real-time threat analysis, helping organizations anticipate and mitigate cybersecurity risks efficiently.

This platform offers comprehensive threat intelligence capabilities designed to support cybersecurity teams in quickly identifying threats and automating responses. TIP aggregates vast threat data, providing enhanced visibility into potential attacks. Its integration capabilities allow seamless connections with existing security infrastructures, improving overall defensive measures and enhancing incident response strategies.

What are the most valuable features?
  • Real-Time Threat Detection: Provides continuous monitoring and instant alerts to help identify potential threats.
  • Automated Response: Streamlines incident management with predefined automated actions based on threat intelligence.
  • Comprehensive Data Integration: Seamlessly merges with existing systems to enhance the organization’s protective measures.
  • Global Threat Intelligence: Offers extensive datasets from diverse sources to broaden the threat landscape understanding.
What benefits and ROI should users seek?
  • Enhanced Security Posture: Users achieve improved threat prevention and response capabilities.
  • Increased Efficiency: Automating tasks reduces the burden on cybersecurity teams.
  • Cost Savings: Integrating TIP can lead to reduced financial risks from cyber incidents.
  • Scalability: Adapts to growing security needs, enabling operations without compromise.

In industries like finance and healthcare, ThreatBook TIP supports tailored implementations, addressing sector-specific threats through targeted intelligence feeds. Its adaptable architecture ensures that users can customize the platform to meet industry-specific challenges effectively, resulting in improved risk management and strategic threat handling.

ThreatBook
 

Sample Customers

ADP, Ameritas, Partners Healthcare
Information Not Available
Buyer's Guide
NetWitness NDR vs. ThreatBook Threat Intelligence Platform (TIP)
July 2025
Free Report: NetWitness NDR vs. ThreatBook Threat Intelligence Platform (TIP)
Find out what your peers are saying about NetWitness NDR vs. ThreatBook Threat Intelligence Platform (TIP) and other solutions. Updated: July 2025.
DOWNLOAD NOW
865,384 professionals have used our research since 2012.
See our NetWitness NDR vs. ThreatBook Threat Intelligence Platform (TIP) report.
See our list of best Threat Intelligence Platforms vendors.

We monitor all Threat Intelligence Platforms reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.