Write a review temporarily disabled. Our system flagged this request as potentially automated and has disabled form submission for security reasons. If you believe this is a mistake, please contact us. We’ll be happy to help resolve the issue.

NetWitness

NetWitness Platform

Composite Score

7.4 /10

CX Score

7.8 /10

36 Reviews Write a Review

What is NetWitness Platform?

NetWitness Network Threat Detection software delivers this with full-packet capture, metadata and netflow—on premises, in the cloud and across virtual infrastructures. Detect and monitor emerging, targeted and unknown threats as they traverse the network.

Company Details

Need Assistance?

We're here to help you with understanding our reports and the data inside to help you make decisions.

Get Assistance

Awards & Recognition

NetWitness Platform won the following awards in the Security Information and Event Management category

Filter By

Product Impact

Latest Award, 2026

0 Top Rated Capabilities

1 Top Rated Features

2025

Product Impact

2025

0 Top Rated Capabilities

1 Top Rated Features

2022

NetWitness Platform Ratings

Real user data aggregated to summarize the product performance and customer experience.
Download the entire Product Scorecard to access more information on NetWitness Platform.

Product scores listed below represent current data. This may be different from data contained in reports and awards, which express data as of their publication date.

79 Likeliness to Recommend

86 Plan to Renew

5
Since last award

73 Satisfaction of Cost Relative to Value

5
Since last award

{y}

{name}

Emotional Footprint Overview

Product scores listed below represent current data. This may be different from data contained in reports and awards, which express data as of their publication date.

+86 Net Emotional Footprint

The emotional sentiment held by end users of the software based on their experience with the vendor. Responses are captured on an eight-point scale.

How much do users love NetWitness Platform?

0% Negative

10% Neutral

90% Positive

Pros

Performance Enhancing
Trustworthy
Reliable
Fair

Feature Ratings

Average 74

Built-in SOAR capabilities

Data Enrichment

Analytics and Reporting

Log Collection

Data Security and Retention

Security Threat Visibility

Incident Management and Remediation

Threat Intelligence

Correlation

Forensic Analysis Support

Business Intelligence Tools

Vendor Capability Ratings

Average 71

Product Strategy and Rate of Improvement

Business Value Created

Ease of Implementation

Ease of IT Administration

Ease of Data Integration

Quality of Features

Usability and Intuitiveness

Breadth of Features

Vendor Support

Ease of Customization

Availability and Quality of Training

NetWitness Platform Reviews

KHIM L.

Role: Information Technology
Industry: Engineering
Involvement: Business Leader or Manager

Validated Review

Verified Reviewer

Submitted Nov 2024

Easy to use, but a bit pricey

Likeliness to Recommend

8 /10

What differentiates NetWitness Platform from other similar products?

RSA NetWitness Platform differentiates itself with its advanced network traffic analysis combined with endpoint visibility and packet-level inspection, offering a comprehensive approach to threat detection.

What is your favorite aspect of this product?

My favorite aspect of RSA NetWitness Platform is its comprehensive visibility across both network traffic and endpoints, combined with deep packet inspection.

What do you dislike most about this product?

What I dislike most about RSA NetWitness Platform is its complexity and steep learning curve.

What recommendations would you give to someone considering this product?

Be prepared for a steep learning curve and invest in training for your team. Ensure the platform can scale to handle your network traffic and data volume efficiently.

Pros

Helps Innovate
Performance Enhancing
Efficient Service
Effective Service

Sumit K.

Role: Information Technology
Industry: Healthcare
Involvement: IT Development, Integration, and Administration

Validated Review

Verified Reviewer

Submitted Mar 2025

I think tool fairly stable but can be improved

Likeliness to Recommend

7 /10

What differentiates NetWitness Platform from other similar products?

It was a stable tool for the client i used it, As the company was big hence the data rate was high.

What is your favorite aspect of this product?

It was able to handle huge data

What do you dislike most about this product?

service breakdowns

What recommendations would you give to someone considering this product?

I think tool is not so bad, If they improved some more features then it's great, for small infrastructure yes you can use it. But comparing to other SIEM in the market it lacks features.

Pros

Trustworthy
Client Friendly Policies
Altruistic
Acts with Integrity

Carlos F.

Role: Information Technology
Industry: Government
Involvement: IT Leader or Manager

Validated Review

Verified Reviewer

Submitted Mar 2025

Good product but difficult to use and quite expens

Likeliness to Recommend

7 /10

What differentiates NetWitness Platform from other similar products?

It is a widely used product, but it is difficult to configure. We had a lot of difficulty creating event correlation. This meant that we did not renew the contract.

What is your favorite aspect of this product?

Reports so many usally

What do you dislike most about this product?

Correlation of events was very complicated

What recommendations would you give to someone considering this product?

I believe there are more current products with better utilities on the market.

Pros

Enables Productivity
Unique Features
Caring
Respectful

Cons

Inhibits Innovation
Slower Product Innovation
Vendor's Interest First

NetWitness Platform

What is NetWitness Platform?

Company Details

Need Assistance?

Awards & Recognition

NetWitness Platform Ratings

79 Likeliness to Recommend

86 Plan to Renew

5 Since last award

73 Satisfaction of Cost Relative to Value

5 Since last award

Emotional Footprint Overview

+86 Net Emotional Footprint

How much do users love NetWitness Platform?

Pros

Feature Ratings Average rating of all product features, some of which may not be shown below

Built-in SOAR capabilities Optional integrated SOAR module for response workflows.

Data Enrichment Includes the enhancement of the value of internally held data by appending related attributes from external sources.

Analytics and Reporting Includes historical & real-time dashboard visualizations, detailed & summary reporting and easy data extraction for data analysis.

Log Collection Collection from firewall and network logs, IDS logs, Windows server logs, web server logs, and various syslog sources.

Data Security and Retention Access controls to system data, protection of SIEM data, system access monitoring, external storage integration, and efficient data compression.

Security Threat Visibility Integration with security technologies for monitoring, incident analysis, and data enrichment to enable tracking and analysis of related events.

Incident Management and Remediation Detection and incident management with preset and customizable remediation capabilities, integration into workflow systems, and optional automatic remediation.

Threat Intelligence Security threat intelligence feed integration with ability to update multiple uses and control updating behaviors.

Correlation Analyze real-time telemetry and detect attacks and other activities of interest

Forensic Analysis Support Query capabilities with pre-built and custom drill down, pivot, and parsing; includes export functions and event session reconstruction.

Business Intelligence Tools Includes planning and optimization, centralized console, insight into usage, resource utilization and activities, and BI security.

Vendor Capability Ratings Average rating of all vendor capabilities, some of which may not be shown below

Product Strategy and Rate of Improvement Vendors who don't stay on top of emerging needs and trends won't enable you to meet your business goals. Use this data to separate innovators from imposters.

Business Value Created Software needs to create value for employees, customers, partners, and, ultimately, shareholders. This data expresses user satisfaction - or lack thereof - with the product's business value.

Ease of Implementation Successfully implementing new software is necessary to realize its full value and promote end user adoption. This data indicates whether or not the product is easy to implement.

Ease of IT Administration This data indicates whether IT personnel will be able to resolve issues and perform configurations efficiently and effectively.

Ease of Data Integration Use this data to determine whether the product will cause headaches or make data integration easy.

Quality of Features Feature quality is just as important as quantity. Use this data to determine if this product will do what you're purchasing it to do, easily, intuitively, reliably, and effectively.

Usability and Intuitiveness End user learning curves cost the organization money. Pay attention to your end users' technical ability to determine how important UX is in your purchase.

Breadth of Features Users prefer feature rich software that enables them to perform diverse series of tasks. This data expresses user satisfaction with the product's breadth of features.

Vendor Support The importance of vendor support will vary for each organization depending on internal capabilities, but there will always be issues that only the vendor can resolve.

Ease of Customization Don't get bogged down in a difficult customization; use this data to make sure you can easily achieve the functionality you need for your particular situation.

Availability and Quality of Training Effective and readily available training enables users to get the most out of the software you've chosen. Use this section to make sure your vendor's training programs and materials measure up.

NetWitness Platform Reviews

KHIM L.

Easy to use, but a bit pricey

Likeliness to Recommend

Pros

Sumit K.

I think tool fairly stable but can be improved

Likeliness to Recommend

Pros

Carlos F.

Good product but difficult to use and quite expens

Likeliness to Recommend

Pros

Cons

Most Popular NetWitness Platform Comparisons

Trellix Enterprise Security Manager

Splunk Enterprise Security

IBM Security QRadar SIEM

Microsoft Sentinel SIEM

Fortinet FortiSIEM

SolarWinds Security Event Manager

5
Since last award

5
Since last award

Feature Ratings

Built-in SOAR capabilities

Data Enrichment

Analytics and Reporting

Log Collection

Data Security and Retention

Security Threat Visibility

Incident Management and Remediation

Threat Intelligence

Correlation

Forensic Analysis Support

Business Intelligence Tools

Vendor Capability Ratings

Product Strategy and Rate of Improvement

Business Value Created

Ease of Implementation

Ease of IT Administration

Ease of Data Integration

Quality of Features

Usability and Intuitiveness

Breadth of Features

Vendor Support

Ease of Customization

Availability and Quality of Training