NetWitness Platform vs Netwrix Auditor comparison

NetWitness and Netwrix are both solutions in the Security Information and Event Management (SIEM) category. NetWitness is ranked #22 with an average rating of 7.6, while Netwrix is ranked #33 with an average rating of 9.0. NetWitness holds a 0.6% mindshare in SIEM, compared to Netwrix’s 0.3% mindshare. Additionally, 75% of NetWitness users are willing to recommend the solution, compared to 100% of Netwrix users who would recommend it.

NetWitness Platform

Read 37 NetWitness Platform reviews

1,134 Views
721 Comparison Views

75% willing to recommend

Netwrix Auditor

Read 7 Netwrix Auditor reviews

244 Views
148 Comparison Views

100% willing to recommend

NetWitness Platform

Netwrix Auditor

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 18, 2024

NetWitness Platform and Netwrix Auditor are two robust security solutions each catering to specific needs. NetWitness Platform has the upper hand with advanced threat detection and security analytics, while Netwrix Auditor is preferred for its user-friendly reporting and compliance capabilities.

Features: NetWitness Platform offers real-time network monitoring, advanced threat detection, and comprehensive response capabilities. Netwrix Auditor provides detecting changes across IT environments, robust auditing features, and maintaining compliance effectively.

Room for Improvement: NetWitness Platform needs better integration with third-party tools, a simplified configuration process, and enhancements in user interface. Netwrix Auditor requires more real-time alerts, improved data capture for certain environments, and better scalability options.

Ease of Deployment and Customer Service: NetWitness Platform's deployment is complex and requires significant expertise, but its support team is responsive and helpful. Netwrix Auditor offers simpler deployment with comprehensive guides and tutorials, and customer service is commended for quick issue resolutions.

Pricing and ROI: NetWitness Platform has higher setup costs justified by advanced capabilities, providing significant ROI in security operations. Netwrix Auditor is cost-effective, especially for mid-sized organizations focused on compliance, with excellent value for its price and quick ROI through efficient auditing and compliance management.

To learn more, read our detailed NetWitness Platform vs. Netwrix Auditor Report (Updated: April 2025).

Buyer's Guide

NetWitness Platform vs. Netwrix Auditor

April 2025

Download the complete report

Helped 850,028 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

NetWitness Platform

Ranking in Security Information and Event Management (SIEM)

22nd

Average Rating

7.4

Reviews Sentiment

7.4

Number of Reviews

Ranking in other categories

Log Management (22nd)

Netwrix Auditor

Ranking in Security Information and Event Management (SIEM)

33rd

Average Rating

9.2

Reviews Sentiment

7.7

Number of Reviews

Ranking in other categories

GRC (10th), Identity and Access Management as a Service (IDaaS) (IAMaaS) (18th), Active Directory Management (3rd)

Mindshare comparison

As of May 2025, in the Security Information and Event Management (SIEM) category, the mindshare of NetWitness Platform is 0.6%, down from 0.8% compared to the previous year. The mindshare of Netwrix Auditor is 0.3%, up from 0.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Security Information and Event Management (SIEM)

Featured Reviews

MdZaman

IT manager at a agriculture with 10,001+ employees

Really scalable for enterprise customers

The solution should have more integration capabilities with different platforms. The API is nearly open and scalable, so the solution can integrate with many platforms. The solution has more than 200 log sources in the scalability to support, but this is its limit. Installation is pretty easy. However, there are a couple of modules involved, so it is not as easy as it could be. We are talking about a distributed module, not a single-module type. This is what makes things a bit complex, instead of easier. I rate it as a seven out of ten on its installation and configuration capabilities.

Read full review

Mohamed Tantawy

IT Technical Support Deputy General Manager at a financial services firm with 10,001+ employees

Can track every admin action in large environments and includes AI modules to detect and prevent unauthorized changes

The initial setup of Netwrix Auditor was straightforward. Some functions require agents while others are agentless, simplifying implementation. It consumed minimal server and client resources, and the wizard-based console made it simple to deploy with the help of architectural teams. All required ports were in place, and they covered all critical services and databases effectively. I would rate the easiness of the initial setup as a nine out of ten. The deployment of Netwrix Auditor took around three weeks, mainly due to the preparation of the environment and servers. The deployment process involved actions such as preparing virtual servers and building databases. Once deployed, it took only about a week to complete. Third-party consultants assisted us with deployment. Only one or two engineers were needed for deployment and maintenance, which could be handled remotely with minimal complexity.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The most valuable feature of RSA NetWitness Logs and Packets are the alerts and correlations tools."

"Their technical support responds quickly and are knowledgable."

"NetWitness Platform offers flexibility for deployment and robust integration capabilities."

"Possibility to investigate incidents based on logs and raw packets, such as extracting files sent over the network"

"The most valuable features are the threat prediction and network forensics."

"NetWitness Platform is valuable for creating rules that the solution must detect."

"The most valuable features are its ingestion of logs and raising of alerts based on those logs."

"The software is scalable to whatever is required, and you can also put a lot of resources in the cloud."

More NetWitness Platform pros

"Netwrix provides features that no other solution on the market does."

"I am impressed with the tool's reporting feature and notifications."

"The most valuable features of Netwrix Auditor are its affordability compared to similar products and its comprehensive monitoring of admin activities."

"It maintains audit logs for the duration of time that you wish, as long as you have the storage capacity to do so."

"I have found user behavior analysis and the ability to run risk assessments important features. Additionally, the interface and online documentation are very good."

"The most valuable feature is the real-time monitoring."

"What I find the most valuable about Netwrix Auditor is the way it shows risk. The reports are very clear."

Cons

"I believe that integrating the solution with other products such as Oracle would be beneficial."

"The initial setup is very complex and should be simplified."

"I'd like to see improvement in its ease of use. It's basically unusable. It's overly complex."

"Log aggregation is an issue with this solution because there are a huge number of alerts in a single instance."

"The system architecture is complex and sometimes it’s hard to troubleshoot potential problems."

"The threat detection capability and centralizing and upgrading capability need to be improved. The threat alert capability needs to be improved as well because there is some lag time at present. They need to work on their database search too."

"The solution should have more integration capabilities with different platforms."

"We have encountered issues with unresolved crashes."

More NetWitness Platform cons

"The Linux compatibility of this solution could be improved."

"There is room for improvement with the introduction of AI functionality."

"When there are issues I would like remediation to be in one place."

"An improvement would be if there was an another way to manage the logs besides email because it's not so practical."

"There is room for improvements when it comes to the licensing."

"The solution lacks self-service on password reset. It also needs to improve its scalability."

"If you buy direct, there is a minimum of 150 licenses that must be procured. The price point and barrier of entry is a little bit higher than it would be if you purchased the solution from an authorized reseller partner, rather than buying it and managing yourself."

"I expect usability features to become more refined over time. I'm interested to see how it evolves and continues to improve."

Pricing and Cost Advice

"It is cheap."

"Many clients are not able to purchase the packet capability because there is a huge amount of data, and the cost depends on the number of EPS (Events per second), as well as the number of gigabytes of data per day."

"The NetWitness Platform may be affordable only for enterprise-level customers, as it may not be within the budget of small and medium-sized businesses."

"There is a licensing fee and the customer can choose whether he wishes this to be subscription-based or perpetual."

"Our license is for one year."

"In comparison to other SIEM solutions such as Splunk, NetWitness is less costly."

"It’s cheaper to run virtual machines in a VMware environment."

"We are on an annual license for the use of the solution."

More NetWitness Platform pricing and cost advice

"The tool's price is fair."

"This solution is reasonably priced. I would rate it a nine out of ten."

"There is a license for this solution and we are on an annual license. The price is reasonable."

See which vendors are best for you

Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.

See recommendations

850,028 professionals have used our research since 2012.

Comparison Review

Vinod Shankar

Manager, Enterprise Risk Consulting at Deloitte & Touche

Feb 26, 2015

HP ArcSight vs. IBM QRadar vs. McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm

We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…

Read full review

Top Industries

By visitors reading reviews

Computer Software Company

19%

Financial Services Firm

18%

Government

Insurance Company

Financial Services Firm

14%

Manufacturing Company

10%

Computer Software Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about NetWitness Platform?

The product's initial setup phase was not at all difficult.

See all answers

What is your experience regarding pricing and costs for NetWitness Platform?

The pricing is comparable to others, and I consider the cost to be intermediate. Specific cost details are unknown to me.

See all answers

What needs improvement with NetWitness Platform?

There is currently no need for improvement in the SIEM ( /categories/security-information-and-event-management-siem ), though there could be potential enhancements by integrating with AI.

See all answers

What do you like most about Netwrix Auditor?

The most valuable features of Netwrix Auditor are its affordability compared to similar products and its comprehensive monitoring of admin activities.

See all answers

What is your experience regarding pricing and costs for Netwrix Auditor?

The pricing of Netwrix Auditor varies based on the number of users and devices in our environment, but it is generally very cost-effective compared to other solutions. We don't pay for licenses sep...

See all answers

What needs improvement with Netwrix Auditor?

The solution currently meets my needs, but there is room for improvement with the introduction of AI functionality as suggested by the vendor. Additionally, expanding capabilities like database act...

See all answers

Comparisons

Splunk Enterprise Security vs NetWitness Platform

Compared 28% of the time

IBM Security QRadar vs NetWitness Platform

Compared 18% of the time

Elastic Security vs NetWitness Platform

Compared 14% of the time

Trellix Network Detection and Response vs NetWitness Platform

Compared 11% of the time

RSA enVision vs NetWitness Platform

Compared 10% of the time

More NetWitness Platform Competitors

Quest Change Auditor for Active Directory vs Netwrix Auditor

Compared 20% of the time

ManageEngine ADAudit Plus vs Netwrix Auditor

Compared 13% of the time

SolarWinds Access Rights Manager vs Netwrix Auditor

Compared 13% of the time

Lepide vs Netwrix Auditor

Compared 12% of the time

Tenable Identity Exposure vs Netwrix Auditor

Compared 8% of the time

More Netwrix Auditor Competitors

Product Reports

Buyer's Guide

NetWitness Platform

April 2025

Download NetWitness Platform product report

Buyer's Guide

Netwrix Auditor

April 2025

Download Netwrix Auditor product report

Also Known As

RSA Security Analytics

No data available

Overview

NetWitness Platform is an evolved SIEM and threat detection and response solution that functions as a single, unified platform for ALL your security data. It features an advanced analyst workbench for triaging alerts and incidents, and it orchestrates security operations programs end to end. In short: NetWitness Platform is all you need to run an intelligent SOC.

NetWitness

Netwrix Auditor is a security-focused solution that monitors IT environments by tracking changes, ensuring compliance, and enhancing visibility into user activities. It offers detailed auditing, real-time alerts, and robust reporting tools. Its intuitive interface and comprehensive features boost efficiency, productivity, and organizational growth.

Netwrix

Sample Customers

Los Angeles World Airports, Reply

AT&T, SanDisk, Siemens, Verizon, Electrolux, Allianz, Societe Generale

Buyer's Guide

NetWitness Platform vs. Netwrix Auditor

April 2025

Free Report: NetWitness Platform vs. Netwrix Auditor

Find out what your peers are saying about NetWitness Platform vs. Netwrix Auditor and other solutions. Updated: April 2025.

DOWNLOAD NOW

850,028 professionals have used our research since 2012.

See our NetWitness Platform vs. Netwrix Auditor report.

See our list of best Security Information and Event Management (SIEM) vendors.

We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.