2026 Best Software Awards are here!See the list
Compare Microsoft Sentinel and NetWitness Platform 
At a Glance
Market Segments
Enterprise (41.2% of reviews)
Enterprise (52.2% of reviews)
Entry-Level Pricing
Pay As You Go
No pricing available
Microsoft Sentinel
Star Rating
(290)4.4 out of 5
Market Segments
Enterprise (41.2% of reviews)
Pros & Cons
Entry-Level Pricing
Pay As You Go
Browse all 11 pricing plansNetWitness Platform
Star Rating
(24)3.9 out of 5
Market Segments
Enterprise (52.2% of reviews)
Pros & Cons
Entry-Level Pricing
No pricing available
Learn more about NetWitness PlatformMicrosoft Sentinel vs NetWitness Platform
When assessing the two solutions, reviewers found Microsoft Sentinel easier to use, set up, and administer. Reviewers also preferred doing business with Microsoft Sentinel overall.
- Reviewers felt that Microsoft Sentinel meets the needs of their business better than NetWitness Platform.
- When comparing quality of ongoing product support, reviewers felt that Microsoft Sentinel is the preferred option.
- For feature updates and roadmaps, our reviewers preferred the direction of Microsoft Sentinel over NetWitness Platform.
Pricing
Entry-Level Pricing
Microsoft Sentinel
Pay-As-You-Go
Pay As You Go
Effective Per GB Price - $2.46
Savings Over Pay as You Go: N/A
- Pay-As-You-Go
NetWitness Platform
No pricing availableFree Trial
Microsoft Sentinel
Free Trial is available
NetWitness Platform
No trial information availableRatings
Meets Requirements
8.6
224
7.8
17
Ease of Use
8.5
230
7.7
18
Ease of Setup
8.3
130
7.5
14
Ease of Admin
8.3
124
7.4
12
Quality of Support
8.5
219
7.6
15
Has the product been a good partner in doing business?
8.7
119
8.5
11
Product Direction (% positive)
9.5
219
7.1
16
Features by Category
Analysis
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Response
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Detection
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Services - Network Detection and Response (NDR)
Not enough data
Not enough data
Extended Detection and Response (XDR) PlatformsHide 14 FeaturesShow 14 Features
Not enough data
Not enough data
Detection & Response
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Management
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Analytics
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Agentic AI - Extended Detection and Response (XDR) Platforms
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Services - Extended Detection and Response (XDR)
Not enough data
Not enough data
Agentic AI - User and Entity Behavior Analytics (UEBA)
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Analysis
Not enough data
8.6
6
Not enough data
8.6
7
Not enough data
8.1
7
Not enough data
9.3
7
Detection
Not enough data
9.2
6
Not enough data
8.6
6
Not enough data
8.9
6
Cloud Visibility
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Security
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Identity
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Network Management
8.9
170
8.3
14
8.4
161
7.8
13
8.8
166
8.6
13
Incident Management
8.7
169
7.6
14
8.7
165
7.5
12
8.9
165
7.6
14
Security Intelligence
8.7
168
7.9
13
8.3
160
7.6
11
8.5
162
8.1
13
8.5
162
8.3
11
Agentic AI - Security Information and Event Management (SIEM)
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Security Orchestration, Automation, and Response (SOAR)Hide 11 FeaturesShow 11 Features
8.5
111
Not enough data
Automation
8.2
95
Not enough data
8.4
98
Not enough data
8.7
97
Not enough data
8.8
99
Not enough data
Orchestration
8.8
98
Not enough data
8.7
99
Not enough data
8.6
98
Not enough data
8.4
97
Not enough data
Response
8.6
100
Not enough data
8.1
94
Not enough data
8.5
91
Not enough data
Categories
Categories
Shared Categories
Microsoft Sentinel and NetWitness Platform are categorized as Security Orchestration, Automation, and Response (SOAR) and Security Information and Event Management (SIEM)
Unique Categories
Microsoft Sentinel has no unique categories
NetWitness Platform is categorized as Extended Detection and Response (XDR) Platforms, Network Detection and Response (NDR), and User and Entity Behavior Analytics (UEBA)
Reviews
Reviewers' Company Size
Microsoft Sentinel
Small-Business(50 or fewer emp.)
Mid-Market(51-1000 emp.)
Enterprise(> 1000 emp.)
NetWitness Platform
Small-Business(50 or fewer emp.)
Mid-Market(51-1000 emp.)
Enterprise(> 1000 emp.)
Small-Business
(50 or fewer emp.)
Mid-Market
(51-1000 emp.)
Enterprise
(> 1000 emp.)
Reviewers' Industry
Information Technology and Services
26.2%
Computer & Network Security
14.6%
Computer Software
8.2%
Banking
4.1%
Security and Investigations
3.7%
Other
43.1%
Banking
17.4%
Information Technology and Services
13.0%
Computer & Network Security
13.0%
Telecommunications
8.7%
Consulting
4.3%
Other
43.5%
Alternatives
Discussions
What is Microsoft Sentinel used for?
3 Comments
RS
It's for SIEM tool for real time incident responder and threat intelligence .Read more
If I had to have a question, I would ask if there were any plans to add linux support to this program.
2 Comments
DY
need to ask Microsoft, but since dot.net core can be installed in Linux, I believe the agent will work as it uses the .net platform. please experiment Read more
How I able to install /integrated Azure Sentinel agents to collect data on IOT devices/ DLP/ Endpoint devices Computer / Laptops / Printers
1 Comment
DY
So couple of point for IOT devices. You can leverage with IOT Hub in Azure. Most IOT devices uses C as their programming language you will probaly need to...Read more
Any feasible or easy way to create a customize log parser for not well known devices?
2 Comments
PK
The results of your query can be custom-formatted in text based output!Read more
What is NetWitness used for?
1 Comment
HA
Logs collection, network traffic capture, endpoint and analytics.Read more
NetWitness Platform has no more discussions with answers
Hunting for software insights?
With over 3 million reviews, we can provide the specific details that help you make an informed software buying decision for your business. Finding the right product is important, let us help.
