# NetWitness Platform vs Palo Alto Networks Cortex XSOAR Comparison

| | NetWitness Platform | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Star Rating** | 3.9 out of 5 | 4.6 out of 5 | 
| **Total Reviews** | 24 | 28 | 
| **Largest Market Segment** | Enterprise (52.2% of reviews) | Enterprise (50.0% of reviews) | 
| **Entry Level Price** | No pricing available | No pricing available | 

---
## Top Pros & Cons

### NetWitness Platform

Pros:
- Centralized Management (1 reviews)
- Cybersecurity (1 reviews)

Cons:
- Complex Implementation (2 reviews)
- Complexity (2 reviews)

### Palo Alto Networks Cortex XSOAR

Pros:
- Incident Management (3 reviews)
- User Interface (2 reviews)

Cons:
- Learning Curve (2 reviews)
- Limited Customization (1 reviews)

---
## Ratings Comparison
| Rating | NetWitness Platform | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
  | **Meets Requirements** | 7.8 (17 reviews) | 8.9 (20 reviews) | 
  | **Ease of Use** | 7.7 (18 reviews) | 8.7 (22 reviews) | 
  | **Ease of Setup** | 7.5 (14 reviews) | 8.9 (19 reviews) | 
  | **Ease of Admin** | 7.4 (12 reviews) | 8.9 (16 reviews) | 
  | **Quality of Support** | 7.6 (15 reviews) | 8.5 (20 reviews) | 
  | **Has the product been a good partner in doing business?** | 8.5 (11 reviews) | 8.9 (17 reviews) | 
  | **Product Direction (% positive)** | 7.1 (16 reviews) | 8.9 (21 reviews) | 

---
## Pricing

### NetWitness Platform

#### Entry-Level Pricing

No pricing available

#### Free Trial

No information available

### Palo Alto Networks Cortex XSOAR

#### Entry-Level Pricing

No pricing available

#### Free Trial

No information available

---
## Features Comparison By Category

### Network Security

| Product | Score | Reviews |
|---|---|---|
| **NetWitness Platform** | N/A | N/A |
| **Palo Alto Networks Cortex XSOAR** | N/A | N/A |

#### Additional Functionality

| Feature | NetWitness Platform | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Penetration Testing** | Not enough data | Not enough data | 
| **Alerts/Notifications** | Not enough data | Not enough data | 
| **Audit Trail** | Not enough data | Not enough data | 
| **Anti Virus** | Not enough data | Not enough data | 
| **Vulnerability Scanning** | Not enough data | Not enough data | 
| **Remote Monitoring & Management** | Not enough data | Not enough data | 
| **VPN** | Not enough data | Not enough data | 
| **Behavior Analytics** | Not enough data | Not enough data | 
| **Reporting/Analytics** | Not enough data | Not enough data | 
| **Real-Time Notifications** | Not enough data | Not enough data | 
| **Access Controls/Permissions** | Not enough data | Not enough data | 
| **SSL Security** | Not enough data | Not enough data | 
| **Patch Management** | Not enough data | Not enough data | 
| **Event Logs** | Not enough data | Not enough data | 
| **Anomaly/Malware Detection** | Not enough data | Not enough data | 
| **DNS Leak Protection** | Not enough data | Not enough data | 
| **Third-Party Integrations** | Not enough data | Not enough data | 
| **Server Monitoring** | Not enough data | Not enough data | 
| **Real-Time Monitoring** | Not enough data | Not enough data | 
| **Compliance Management** | Not enough data | Not enough data | 
| **Network Provisioning** | Not enough data | Not enough data | 
| **API** | Not enough data | Not enough data | 
| **Email Alerts** | Not enough data | Not enough data | 
| **Security Auditing** | Not enough data | Not enough data | 
| **Intrusion Detection System** | Not enough data | Not enough data | 
| **Data Visualization** | Not enough data | Not enough data | 
| **Two-Factor Authentication** | Not enough data | Not enough data | 
| **Generative AI** | Not enough data | Not enough data | 
| **Firewalls** | Not enough data | Not enough data | 
| **AI Copilot** | Not enough data | Not enough data | 
| **Anti Spam** | Not enough data | Not enough data | 
| **Threat Response** | Not enough data | Not enough data | 
| **Activity Monitoring** | Not enough data | Not enough data | 
| **Risk Alerts** | Not enough data | Not enough data | 
| **Data Loss Prevention** | Not enough data | Not enough data | 
| **Single Sign On** | Not enough data | Not enough data | 
| **Intrusion Prevention System** | Not enough data | Not enough data | 
| **Secure Login** | Not enough data | Not enough data | 
| **Policy Management** | Not enough data | Not enough data | 
| **Activity Dashboard** | Not enough data | Not enough data | 

### Network Detection and Response (NDR)

| Product | Score | Reviews |
|---|---|---|
| **NetWitness Platform** | N/A | N/A |
| **Palo Alto Networks Cortex XSOAR** | N/A | N/A |

#### Analysis

| Feature | NetWitness Platform | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Incident Reporting** | Not enough data | Not enough data | 
| **Network Visibility** | Not enough data | Not enough data | 
| **Metadata Enrichment** | Not enough data | Not enough data | 
| **Metadata Management** | Not enough data | Not enough data | 

#### Response

| Feature | NetWitness Platform | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Incident Alerts** | Not enough data | Not enough data | 
| **Response Orchestration** | Not enough data | Not enough data | 
| **Response Automation** | Not enough data | Not enough data | 

#### Detection

| Feature | NetWitness Platform | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Multi-Network Monitoring** | Not enough data | Not enough data | 
| **Asset Discovery** | Not enough data | Not enough data | 
| **Anomaly Detection** | Not enough data | Not enough data | 

#### Services - Network Detection and Response (NDR)

| Feature | NetWitness Platform | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Managed Services** | Not enough data | Not enough data | 

### Extended Detection and Response (XDR) Platforms

| Product | Score | Reviews |
|---|---|---|
| **NetWitness Platform** | N/A | N/A |
| **Palo Alto Networks Cortex XSOAR** | N/A | N/A |

#### Detection & Response

| Feature | NetWitness Platform | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Response Automation** | Not enough data | Not enough data | 
| **Threat Hunting** | Not enough data | Not enough data | 
| **Rule-Based Detection** | Not enough data | Not enough data | 
| **Real-Time Detection** | Not enough data | Not enough data | 
| **Threat Response** | Not enough data | Not enough data | 

#### Management

| Feature | NetWitness Platform | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Extensibility** | Not enough data | Not enough data | 
| **Workflow Automation** | Not enough data | Not enough data | 
| **Unified Visibility** | Not enough data | Not enough data | 
| **API** | Not enough data | Not enough data | 

#### Analytics

| Feature | NetWitness Platform | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Threat Intelligence** | Not enough data | Not enough data | 
| **Artificial Intelligence & Machine Learning** | Not enough data | Not enough data | 
| **Data Collection** | Not enough data | Not enough data | 

#### Agentic AI - Extended Detection and Response (XDR) Platforms

| Feature | NetWitness Platform | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Autonomous Task Execution** | Not enough data | Not enough data | 
| **Proactive Assistance** | Not enough data | Not enough data | 
| **Decision Making** | Not enough data | Not enough data | 

#### Services - Extended Detection and Response (XDR)

| Feature | NetWitness Platform | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Managed Services** | Not enough data | Not enough data | 

#### Additional Functionality

| Feature | NetWitness Platform | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Mobile Access** | Not enough data | Not enough data | 
| **IT Asset Management** | Not enough data | Not enough data | 
| **Reporting/Analytics** | Not enough data | Not enough data | 
| **Data Import/Export** | Not enough data | Not enough data | 
| **Encryption** | Not enough data | Not enough data | 
| **Remediation Management** | Not enough data | Not enough data | 
| **Root Cause Analysis** | Not enough data | Not enough data | 
| **Customization** | Not enough data | Not enough data | 
| **Workflow Management** | Not enough data | Not enough data | 
| **Incident Management** | Not enough data | Not enough data | 
| **User Management** | Not enough data | Not enough data | 
| **Behavioral Analytics** | Not enough data | Not enough data | 
| **Ransomware Protection** | Not enough data | Not enough data | 
| **Activity Dashboard** | Not enough data | Not enough data | 
| **AI Copilot** | Not enough data | Not enough data | 
| **Data Security** | Not enough data | Not enough data | 
| **Authentication** | Not enough data | Not enough data | 
| **Firewalls** | Not enough data | Not enough data | 
| **Collaboration Tools** | Not enough data | Not enough data | 
| **Endpoint Protection** | Not enough data | Not enough data | 
| **Cloud Application Security** | Not enough data | Not enough data | 
| **Third-Party Integrations** | Not enough data | Not enough data | 
| **Access Controls/Permissions** | Not enough data | Not enough data | 
| **Alerts/Notifications** | Not enough data | Not enough data | 
| **Data Analysis Tools** | Not enough data | Not enough data | 
| **Risk Management** | Not enough data | Not enough data | 
| **Generative AI** | Not enough data | Not enough data | 
| **Network Scanning** | Not enough data | Not enough data | 
| **Vulnerability Management** | Not enough data | Not enough data | 
| **Search/Filter** | Not enough data | Not enough data | 

### User and Entity Behavior Analytics (UEBA)

| Product | Score | Reviews |
|---|---|---|
| **NetWitness Platform** | 8.8/10 | 8 |
| **Palo Alto Networks Cortex XSOAR** | N/A | N/A |

#### Agentic AI - User and Entity Behavior Analytics (UEBA)

| Feature | NetWitness Platform | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Autonomous Task Execution** | Not enough data | Not enough data | 
| **Multi-step Planning** | Not enough data | Not enough data | 
| **Proactive Assistance** | Not enough data | Not enough data | 
| **Decision Making** | Not enough data | Not enough data | 

#### Analysis

| Feature | NetWitness Platform | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Continuous Analysis** | 8.6 (6 reviews) | Not enough data | 
| **Behavioral Analysis** | 8.6 (7 reviews) | Not enough data | 
| **Data Context** | 8.1 (7 reviews) | Not enough data | 
| **Activity Logging** | 9.3 (7 reviews) | Not enough data | 

#### Detection

| Feature | NetWitness Platform | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Anomaly Detection** | 9.2 (6 reviews) | Not enough data | 
| **Incident Alerts** | 8.6 (6 reviews) | Not enough data | 
| **Activity Monitoring** | 8.9 (6 reviews) | Not enough data | 

### Threat Intelligence

| Product | Score | Reviews |
|---|---|---|
| **NetWitness Platform** | N/A | N/A |
| **Palo Alto Networks Cortex XSOAR** | N/A | N/A |

#### Orchestration

| Feature | NetWitness Platform | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Asset Management** | Not enough data | Not enough data | 
| **Security Workflow Automation** | Not enough data | Not enough data | 
| **Deployment** | Not enough data | Not enough data | 
| **Sandboxing** | Not enough data | Not enough data | 
| **Remediation Management** | Not enough data | Not enough data | 

#### Information

| Feature | NetWitness Platform | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Proactive Alerts** | Not enough data | Not enough data | 
| **Malware Detection** | Not enough data | Not enough data | 
| **Intelligence Reports** | Not enough data | Not enough data | 
| **Threat Intelligence** | Not enough data | Not enough data | 
| **Real-time Alerts** | Not enough data | Not enough data | 

#### Personalization

| Feature | NetWitness Platform | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Endpoint Intelligence** | Not enough data | Not enough data | 
| **Security Validation** | Not enough data | Not enough data | 
| **Dynamic/Code Analysis** | Not enough data | Not enough data | 
| **Event Analysis** | Not enough data | Not enough data | 
| **Web-Application Security** | Not enough data | Not enough data | 
| **Application Security** | Not enough data | Not enough data | 

#### Generative AI

| Feature | NetWitness Platform | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **AI Text Summarization** | Not enough data | Not enough data | 
| **Generate Attack Scenarios** | Not enough data | Not enough data | 
| **Generate Threat Detection Rules** | Not enough data | Not enough data | 
| **Generate Threat Summaries** | Not enough data | Not enough data | 
| **Generative AI** | Not enough data | Not enough data | 

#### Agentic AI - Threat Intelligence

| Feature | NetWitness Platform | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Autonomous Task Execution** | Not enough data | Not enough data | 
| **Multi-step Planning** | Not enough data | Not enough data | 
| **Proactive Assistance** | Not enough data | Not enough data | 
| **Decision Making** | Not enough data | Not enough data | 

#### Additional Functionality

| Feature | NetWitness Platform | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Real-Time Reporting** | Not enough data | Not enough data | 
| **Real-Time Analytics** | Not enough data | Not enough data | 
| **Network Monitoring** | Not enough data | Not enough data | 
| **API** | Not enough data | Not enough data | 
| **Reporting/Analytics** | Not enough data | Not enough data | 
| **Alerts/Notifications** | Not enough data | Not enough data | 
| **Behavior Analytics** | Not enough data | Not enough data | 
| **AI Copilot** | Not enough data | Not enough data | 
| **Activity Dashboard** | Not enough data | Not enough data | 
| **Profiling** | Not enough data | Not enough data | 
| **Cloud Backup** | Not enough data | Not enough data | 
| **Data Visualization** | Not enough data | Not enough data | 
| **Activity Monitoring** | Not enough data | Not enough data | 
| **Network Scanning** | Not enough data | Not enough data | 
| **Event Logs** | Not enough data | Not enough data | 
| **Monitoring** | Not enough data | Not enough data | 
| **Server Monitoring** | Not enough data | Not enough data | 
| **Vulnerability Scanning** | Not enough data | Not enough data | 
| **Incident Reporting** | Not enough data | Not enough data | 
| **Activity Tracking** | Not enough data | Not enough data | 
| **Reporting & Statistics** | Not enough data | Not enough data | 
| **Network Provisioning** | Not enough data | Not enough data | 
| **Prioritization** | Not enough data | Not enough data | 
| **Threat Response** | Not enough data | Not enough data | 
| **Real-Time Data** | Not enough data | Not enough data | 
| **IT Reporting** | Not enough data | Not enough data | 

### Cloud Security

| Product | Score | Reviews |
|---|---|---|
| **NetWitness Platform** | N/A | N/A |
| **Palo Alto Networks Cortex XSOAR** | N/A | N/A |

#### Cloud Visibility

| Feature | NetWitness Platform | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Data Discovery** | Not enough data | Not enough data | 
| **Cloud Registry** | Not enough data | Not enough data | 
| **Cloud Gap Analytics** | Not enough data | Not enough data | 

#### Security

| Feature | NetWitness Platform | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Data Security** | Not enough data | Not enough data | 
| **Data loss Prevention** | Not enough data | Not enough data | 
| **Security Auditing** | Not enough data | Not enough data | 
| **Real-Time Data** | Not enough data | Not enough data | 
| **Cloud Application Security** | Not enough data | Not enough data | 
| **SSL Security** | Not enough data | Not enough data | 

#### Identity

| Feature | NetWitness Platform | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **SSO** | Not enough data | Not enough data | 
| **Governance** | Not enough data | Not enough data | 
| **User Analytics** | Not enough data | Not enough data | 
| **Real-Time Analytics** | Not enough data | Not enough data | 
| **Visual Analytics** | Not enough data | Not enough data | 
| **Reporting/Analytics** | Not enough data | Not enough data | 

#### Additional Functionality

| Feature | NetWitness Platform | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Alerts/Notifications** | Not enough data | Not enough data | 
| **AI Copilot** | Not enough data | Not enough data | 
| **Access Controls/Permissions** | Not enough data | Not enough data | 
| **Endpoint Management** | Not enough data | Not enough data | 
| **Intrusion Detection System** | Not enough data | Not enough data | 
| **Compliance Management** | Not enough data | Not enough data | 
| **HIPAA Compliant** | Not enough data | Not enough data | 
| **Search/Filter** | Not enough data | Not enough data | 
| **API** | Not enough data | Not enough data | 
| **Two-Factor Authentication** | Not enough data | Not enough data | 
| **Data Visualization** | Not enough data | Not enough data | 
| **Risk Assessment** | Not enough data | Not enough data | 
| **Real-Time Monitoring** | Not enough data | Not enough data | 
| **Event Logs** | Not enough data | Not enough data | 
| **Activity Dashboard** | Not enough data | Not enough data | 
| **Audit Management** | Not enough data | Not enough data | 
| **Cloud Security Policy Management** | Not enough data | Not enough data | 
| **Vulnerability Protection** | Not enough data | Not enough data | 
| **Anti Virus** | Not enough data | Not enough data | 
| **Incident Management** | Not enough data | Not enough data | 
| **Threat Intelligence** | Not enough data | Not enough data | 
| **Real-Time Reporting** | Not enough data | Not enough data | 
| **Reporting & Statistics** | Not enough data | Not enough data | 
| **User Management** | Not enough data | Not enough data | 
| **Encryption** | Not enough data | Not enough data | 
| **Vulnerability Scanning** | Not enough data | Not enough data | 
| **Generative AI** | Not enough data | Not enough data | 
| **Status Tracking** | Not enough data | Not enough data | 
| **Third-Party Integrations** | Not enough data | Not enough data | 
| **Real-Time Notifications** | Not enough data | Not enough data | 
| **Patch Management** | Not enough data | Not enough data | 
| **Monitoring** | Not enough data | Not enough data | 
| **Cloud Encryption** | Not enough data | Not enough data | 

### Security Information and Event Management (SIEM)

| Product | Score | Reviews |
|---|---|---|
| **NetWitness Platform** | 7.9/10 | 14 |
| **Palo Alto Networks Cortex XSOAR** | N/A | N/A |

#### Network Management

| Feature | NetWitness Platform | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Activity Monitoring** | 8.3 (14 reviews) | Not enough data | 
| **Asset Management** | 7.8 (13 reviews) | Not enough data | 
| **Log Management** | 8.6 (13 reviews) | Not enough data | 
| **Network Monitoring** | Not enough data | Not enough data | 
| **Server Monitoring** | Not enough data | Not enough data | 
| **File Integrity Monitoring** | Not enough data | Not enough data | 
| **Real-Time Monitoring** | Not enough data | Not enough data | 
| **User Management** | Not enough data | Not enough data | 
| **Endpoint Management** | Not enough data | Not enough data | 
| **Compliance Management** | Not enough data | Not enough data | 
| **Incident Management** | Not enough data | Not enough data | 
| **Vulnerability Management** | Not enough data | Not enough data | 
| **Policy Management** | Not enough data | Not enough data | 

#### Incident Management

| Feature | NetWitness Platform | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Event Management** | 7.6 (14 reviews) | Not enough data | 
| **Automated Response** | 7.5 (12 reviews) | Not enough data | 
| **Incident Reporting** | 7.6 (14 reviews) | Not enough data | 
| **Real-Time Reporting** | Not enough data | Not enough data | 

#### Security Intelligence

| Feature | NetWitness Platform | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Threat Intelligence** | 7.9 (13 reviews) | Not enough data | 
| **Vulnerability Assessment** | 7.6 (11 reviews) | Not enough data | 
| **Advanced Analytics** | 8.1 (13 reviews) | Not enough data | 
| **Data Examination** | 8.3 (11 reviews) | Not enough data | 
| **Real-Time Data** | Not enough data | Not enough data | 

#### Agentic AI - Security Information and Event Management (SIEM)

| Feature | NetWitness Platform | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Autonomous Task Execution** | Not enough data | Not enough data | 
| **Multi-step Planning** | Not enough data | Not enough data | 
| **Proactive Assistance** | Not enough data | Not enough data | 
| **Decision Making** | Not enough data | Not enough data | 

#### Additional Functionality

| Feature | NetWitness Platform | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Real-Time Notifications** | Not enough data | Not enough data | 
| **Audit Trail** | Not enough data | Not enough data | 
| **Application Security** | Not enough data | Not enough data | 
| **Risk Analysis** | Not enough data | Not enough data | 
| **AI Copilot** | Not enough data | Not enough data | 
| **Data Import/Export** | Not enough data | Not enough data | 
| **Alerts/Notifications** | Not enough data | Not enough data | 
| **Prioritization** | Not enough data | Not enough data | 
| **Security Auditing** | Not enough data | Not enough data | 
| **Search/Filter** | Not enough data | Not enough data | 
| **Compliance Tracking** | Not enough data | Not enough data | 
| **Generative AI** | Not enough data | Not enough data | 
| **API** | Not enough data | Not enough data | 
| **Third-Party Integrations** | Not enough data | Not enough data | 
| **Activity Dashboard** | Not enough data | Not enough data | 
| **Data Visualization** | Not enough data | Not enough data | 

### Security Orchestration, Automation, and Response (SOAR)

| Product | Score | Reviews |
|---|---|---|
| **NetWitness Platform** | N/A | N/A |
| **Palo Alto Networks Cortex XSOAR** | 8.8/10 | 13 |

#### Automation

| Feature | NetWitness Platform | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Workflow Mapping** | Not enough data | 8.3 (12 reviews) | 
| **Workflow Automation** | Not enough data | 8.9 (12 reviews) | 
| **Automated Remediation** | Not enough data | 9.0 (13 reviews) | 
| **Log Monitoring** | Not enough data | 8.1 (13 reviews) | 

#### Orchestration

| Feature | NetWitness Platform | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Security Orchestration** | Not enough data | 9.4 (13 reviews) | 
| **Data Collection** | Not enough data | 8.7 (13 reviews) | 
| **Threat Intelligence** | Not enough data | 8.6 (13 reviews) | 
| **Data Visualization** | Not enough data | 9.0 (13 reviews) | 

#### Response

| Feature | NetWitness Platform | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Alerting** | Not enough data | 9.2 (13 reviews) | 
| **Performance Baselin** | Not enough data | 9.2 (13 reviews) | 
| **High Availability/Disaster Recovery** | Not enough data | 8.6 (13 reviews) | 

#### Additional Functionality

| Feature | NetWitness Platform | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Generative AI** | Not enough data | Not enough data | 
| **Collaboration Tools** | Not enough data | Not enough data | 
| **Incident Management** | Not enough data | Not enough data | 
| **AI Copilot** | Not enough data | Not enough data | 
| **Reporting/Analytics** | Not enough data | Not enough data | 
| **Threat Response** | Not enough data | Not enough data | 
| **Key Performance Indicators** | Not enough data | Not enough data | 
| **Risk Alerts** | Not enough data | Not enough data | 
| **Performance Metrics** | Not enough data | Not enough data | 
| **Third-Party Integrations** | Not enough data | Not enough data | 

---
## Categories
**Shared Categories (1):** [Security Orchestration, Automation, and Response (SOAR) Software](https://www.g2.com/categories/security-orchestration-automation-and-response-soar)

**Unique to NetWitness Platform (4):** [Extended Detection and Response (XDR) Platforms](https://www.g2.com/categories/extended-detection-and-response-xdr-platforms), [Network Detection and Response (NDR) Software](https://www.g2.com/categories/network-detection-and-response-ndr), [User and Entity Behavior Analytics (UEBA) Software](https://www.g2.com/categories/user-and-entity-behavior-analytics-ueba), [Security Information and Event Management (SIEM) Software](https://www.g2.com/categories/security-information-and-event-management-siem)

**Unique to Palo Alto Networks Cortex XSOAR (1):** [Threat Intelligence Software](https://www.g2.com/categories/threat-intelligence)


---
## Reviewer Demographics

### By Company Size

| Segment | NetWitness Platform | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Small-Business** | 13.0% | 17.9% | 
| **Mid-Market** | 34.8% | 32.1% | 
| **Enterprise** | 52.2% | 50.0% | 

### By Industry

#### NetWitness Platform

- **Banking:** 17.4%
- **Information Technology and Services:** 13.0%
- **Computer & Network Security:** 13.0%
- **Telecommunications:** 8.7%
- **Consulting:** 4.3%
- **Utilities:** 4.3%
- **Oil & Energy:** 4.3%
- **Management Consulting:** 4.3%
- **Investment Banking:** 4.3%
- **Information Services:** 4.3%
- **Other:** 21.7%

#### Palo Alto Networks Cortex XSOAR

- **Computer & Network Security:** 39.3%
- **Manufacturing:** 7.1%
- **Information Technology and Services:** 7.1%
- **Events Services:** 7.1%
- **Consulting:** 3.6%
- **Retail:** 3.6%
- **Medical Devices:** 3.6%
- **Logistics and Supply Chain:** 3.6%
- **Insurance:** 3.6%
- **Hospital & Health Care:** 3.6%
- **Other:** 17.9%

---
## Alternatives

### Alternatives to NetWitness Platform

- [IBM QRadar SIEM](https://www.g2.com/products/ibm-ibm-qradar-siem/reviews) — 4.4/5 stars (338 reviews)
- [Microsoft Sentinel](https://www.g2.com/products/microsoft-sentinel/reviews) — 4.4/5 stars (296 reviews)
- [Splunk Enterprise Security](https://www.g2.com/products/splunk-enterprise-security/reviews) — 4.3/5 stars (247 reviews)
- [Sumo Logic](https://www.g2.com/products/sumo-logic/reviews) — 4.3/5 stars (404 reviews)
- [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) — 4.6/5 stars (438 reviews)
- [Datadog](https://www.g2.com/products/datadog/reviews) — 4.4/5 stars (726 reviews)
- [Splunk Enterprise](https://www.g2.com/products/splunk-enterprise/reviews) — 4.3/5 stars (434 reviews)
- [Sophos Endpoint](https://www.g2.com/products/sophos-endpoint/reviews) — 4.7/5 stars (837 reviews)
- [Wiz](https://www.g2.com/products/wiz-wiz/reviews) — 4.7/5 stars (840 reviews)
- [ESET PROTECT](https://www.g2.com/products/eset-protect/reviews) — 4.6/5 stars (1003 reviews)

### Alternatives to Palo Alto Networks Cortex XSOAR

- [Microsoft Sentinel](https://www.g2.com/products/microsoft-sentinel/reviews) — 4.4/5 stars (296 reviews)
- [Tines](https://www.g2.com/products/tines/reviews) — 4.7/5 stars (404 reviews)
- [Splunk SOAR (Security Orchestration, Automation and Response)](https://www.g2.com/products/splunk-soar-security-orchestration-automation-and-response/reviews) — 4.4/5 stars (41 reviews)
- [Google Security Operations](https://www.g2.com/products/google-security-operations/reviews) — 4.4/5 stars (79 reviews)
- [n8n](https://www.g2.com/products/n8n/reviews) — 4.7/5 stars (297 reviews)
- [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) — 4.6/5 stars (438 reviews)
- [Sumo Logic](https://www.g2.com/products/sumo-logic/reviews) — 4.3/5 stars (404 reviews)
- [KnowBe4 PhishER/PhishER Plus](https://www.g2.com/products/knowbe4-phisher-phisher-plus/reviews) — 4.5/5 stars (571 reviews)
- [Cloudflare Application Security and Performance](https://www.g2.com/products/cloudflare-application-security-and-performance/reviews) — 4.5/5 stars (678 reviews)
- [Torq AI SOC Platform](https://www.g2.com/products/torq-ai-soc-platform/reviews) — 4.8/5 stars (150 reviews)

---
## Top Discussions

### NetWitness Platform

- Title: [Any feasible or easy way to create a customize log parser for not well known devices?](https://www.g2.com/discussions/any-feasible-or-easy-way-to-create-a-customize-log-parser-for-not-well-known-devices) — 2 comments, 1 upvote
  > **Top comment:** "The results of your query can be custom-formatted in text based output!"
- Title: [What is NetWitness used for?](https://www.g2.com/discussions/what-is-netwitness-used-for) — 1 comment
  > **Top comment:** "Logs collection, network traffic capture, endpoint and analytics."

### Palo Alto Networks Cortex XSOAR

No discussions available for this product.

---
**Source:** [G2.com](https://www.g2.com) | [Comparison Page](https://www.g2.com/compare/netwitness-platform-vs-palo-alto-networks-cortex-xsoar)