--- title: NetWitness Platform Reviews meta\_title: 'NetWitness Platform Reviews 2026: Details, Pricing, & Features | G2' meta\_description: Filter 24 reviews by the users' company size, role or industry to find out how NetWitness Platform works for a business like yours. aggregate\_rating: rating\_value: 3.9 review\_count: 24 scale: '5' date\_modified: '2026-08-07' parent\_category: name: Cloud Security url: https://www.g2.com/categories/cloud-security --- # NetWitness Platform Reviews & Product Details Claimed ###### Profile Status This profile is currently managed by NetWitness Platform but has limited features. Are you part of the NetWitness Platform team? [Upgrade your plan](https://sell.g2.com) to enhance your branding and engage with visitors to your profile! NetWitness is a comprehensive threat detection, investigation and response platform that combines visibility, analytics, insight, and automation into a single solution. It collects and analyzes data across all capture points (logs, packets, netflow, endpoint and IoT) and computing platforms (physical, virtual and cloud), enriching data with threat intelligence and business context. * * * Seller [NetWitness](https://www.g2.com/sellers/netwitness) Discussions [NetWitness Platform Community](https://www.g2.com/products/netwitness-platform/discuss) Overview by Nicole Carrubba Frein Show More ## Value at a Glance Averages based on real user reviews. ### Perceived Cost $$$$$ [ View More Pricing Information ](https://www.g2.com/products/netwitness-platform/pricing) ## Top-Rated Alternatives [ ![IBM QRadar SIEM](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "IBM QRadar SIEM") IBM QRadar SIEM 4.4/5(338) ](https://www.g2.com/products/ibm-ibm-qradar-siem/reviews) [ ![Microsoft Sentinel](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Microsoft Sentinel") Microsoft Sentinel 4.4/5(297) ](https://www.g2.com/products/microsoft-sentinel/reviews) [ ![Splunk Enterprise Security](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Splunk Enterprise Security") Splunk Enterprise Security 4.3/5(248) ](https://www.g2.com/products/splunk-enterprise-security/reviews) [ View All Alternatives ](https://www.g2.com/products/netwitness-platform/competitors/alternatives) ## User Insights Average based on 24 real user reviews. Perceived Cost $$$$$ [Log in to unlock pricing and user insights](/login) ## NetWitness Platform Integrations (2) What do users say about integrations? Integration information sourced from real user reviews. [ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Check Point Next Generation Firewalls (NGFWs) ](https://www.g2.com/products/check-point-next-generation-firewalls-ngfws/reviews)[ ![Product Avatar Image](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Product Avatar Image") Picus Security ](https://www.g2.com/products/picus-security/reviews) Show More ![Verified User in Banking](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Banking") UB Verified User in Banking Enterprise (\> 1000 emp.) 11/7/2021 "RSA - Walkthrough" 2.5/5 What do you like best about NetWitness Platform? Ability to find and decode base65 and hex. Inbound SSL decryption. The ability to run anywhere, physical hardware, cloud etc. SOAR capabilities can be used to scale security operations. Review collected by and hosted on G2.com. What do you dislike about NetWitness Platform? No cross platform SOAR compatibility. Difficult to learn and use initially. Setting up the solution is complex for first timers. Integrating newer devices is a tough task. Review collected by and hosted on G2.com. What problems is NetWitness Platform solving and how is that benefiting you? Helpful in full PCAP analysis. Threat hunting feeds have quite helped with day to day operations, making the organisation more secure. The level of details is intense, given that solution is implemented correctly Review collected by and hosted on G2.com. Show More Validated ReviewerSource: Seller invite ![Carlos C.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Carlos C.") CC Carlos C. Especialista en seguridad de la información Small-Business (50 or fewer emp.) 11/10/2021 "It's powerfull and complex" 4/5 What do you like best about NetWitness Platform? alerts are a powerful tool to notify you of an incident Review collected by and hosted on G2.com. What do you dislike about NetWitness Platform? set up could be complicated , and support it's nota the best Review collected by and hosted on G2.com. Recommendations to others considering NetWitness Platform: Yes , it's a powerfull tool when it's configured correctly Review collected by and hosted on G2.com. What problems is NetWitness Platform solving and how is that benefiting you? I use notification about incidents Review collected by and hosted on G2.com. Show More Validated ReviewerSource: Seller invite ![Verified User in Computer & Network Security](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Computer & Network Security") CC Verified User in Computer & Network Security Mid-Market (51-1000 emp.) 11/6/2021 "Good experience" 4/5 What do you like best about NetWitness Platform? Great to get insights about the risk score and alerts and incidents give a broader picture on activity Review collected by and hosted on G2.com. What do you dislike about NetWitness Platform? Dashboards could habe been a bit more pleasing to see. Nonetheless this will be achieved in the near future probably Review collected by and hosted on G2.com. What problems is NetWitness Platform solving and how is that benefiting you? It's a one stope solution to SIEM , to identify threats and take necessary actions well in time. To protect endpoints from danger Review collected by and hosted on G2.com. Show More Validated ReviewerSource: Seller invite ![Verified User in Computer Networking](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Computer Networking") AC Verified User in Computer Networking Enterprise (\> 1000 emp.) 10/30/2021 "Best siem out there in market, best in performance best in managing" 4/5 What do you like best about NetWitness Platform? The best part the ueba and the latest soar capability which reduces multiple work heads collate under one umbrella. Review collected by and hosted on G2.com. What do you dislike about NetWitness Platform? The complexity in the architecture, most of the issues which occur in environment requires lot of investigation to find the RCA. Review collected by and hosted on G2.com. What problems is NetWitness Platform solving and how is that benefiting you? The day to day security incidents and event management, combined together with soar capability the response has also become more easy. Review collected by and hosted on G2.com. Show More Validated ReviewerSource: Seller invite ![Verified User in Banking](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Banking") CB Verified User in Banking Enterprise (\> 1000 emp.) 10/29/2021 "Easy to deploy and manage with good features." 4/5 What do you like best about NetWitness Platform? Availablity of out of the box usecases (Correlation rules, reports and dashboards). Network (packet) capture component and also have inbuilt EDR and UEBA components. Good product documention. New version is good. Review collected by and hosted on G2.com. What do you dislike about NetWitness Platform? Application level HA is not there. Support can be improved. Migration from older versions. Review collected by and hosted on G2.com. What problems is NetWitness Platform solving and how is that benefiting you? Flexible licensing options. Easy to do custom application/device integration and custom parser development. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Verified User in Defense & Space](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Defense & Space") UD Verified User in Defense & Space Enterprise (\> 1000 emp.) 10/29/2021 "Great for someone with mid level knowledge in networking" 3.5/5 What do you like best about NetWitness Platform? The way you can follow packets and the UI Review collected by and hosted on G2.com. What do you dislike about NetWitness Platform? A lot of features and it's a bit overwhelming to use Review collected by and hosted on G2.com. Recommendations to others considering NetWitness Platform: I think it's a great product. I haven't used it for the past 4 years but when I did I loved it. Review collected by and hosted on G2.com. What problems is NetWitness Platform solving and how is that benefiting you? Fast find of suspicious activity Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Rohan J.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Rohan J.") RJ Rohan J. Cyber Security Analyst Small-Business (50 or fewer emp.) 9/5/2021 "I am RSA engineer for the L1, responsible for incident handling" 2.5/5 What do you like best about NetWitness Platform? Log collection and event management, Incident investigation Review collected by and hosted on G2.com. What do you dislike about NetWitness Platform? GUI console, RSS Hirarchay, log analysis, Review collected by and hosted on G2.com. What problems is NetWitness Platform solving and how is that benefiting you? While starting the investigation checking each tab for ex. Respond and investigations is a bit confusing Review collected by and hosted on G2.com. Show More Validated ReviewerSource: Organic ![Verified User in Banking](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Banking") CB Verified User in Banking Enterprise (\> 1000 emp.) 10/27/2021 "I started my experience with version 10.6 and it was good enough" 3.5/5 What do you like best about NetWitness Platform? It is easy to use and packets is an added value Review collected by and hosted on G2.com. What do you dislike about NetWitness Platform? The complexity of the devices specifically the Hybrid and the ESA appliances Review collected by and hosted on G2.com. What problems is NetWitness Platform solving and how is that benefiting you? Easy to get alerts and notifications in case of any attacks Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![José O.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "José O.") JO José O. RPA Analyst Mid-Market (51-1000 emp.) 11/3/2020 "The better web gateway security management." 5/5 What do you like best about NetWitness Platform? We like this tool at the gateway because it allows us to capture network data and transmit it to security and network staff. With that we have visibility, detection of threats and then mitigate them. I also like the friendly, intuitive interface and easy to administer and configure security rules. Review collected by and hosted on G2.com. What do you dislike about NetWitness Platform? We have been using it for a long time and no one has reported any problems with using the RSA NetWitness Network. The tool offers great cost-benefit protection against simple and complex threats. Review collected by and hosted on G2.com. What problems is NetWitness Platform solving and how is that benefiting you? The RSA NetWitness Network tool is complete. It deals with the recognition and detection of threats, such as responses to security incidents. In addition, he is able to conduct a forensic investigation and analysis. It is always updated frequently, has great support and quality. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite MS Mukul S. Enterprise (\> 1000 emp.) 7/23/2020 "RSA token" 5/5 What do you like best about NetWitness Platform? 1) Easy to use 2) Secure 3) Using RSA you can use your application any where in the word. 4) It has feature to configure at both ANdroid & iOs 5) Good security feature when using specially banking application 6) Access simplifies authentication and credential management, helping to reduce IT support costs. With a conditional-access and risk-based approach, it ensures users are who they say they are and provides the right level of access from any device, across cloud and on-premises applications. 7) Two-Factor Authentication The RSA token is a physical ‘pen’ that generates a random code every 60 seconds. This code is used, along with the RSA PIN number that you choose, in order to gain authentication for access to an account or server. The RSA token offers a two-factor authentication process that consists of: ‘Something you know’ – A four digit, memorised PIN number. ‘Something you have’ – The physical token, which generates a 6 or 8 digit code every 60 seconds. 8) it does greatly enhance login security. It’s useful for anyone who wants to use two-factor authentication. 9) Deliver convenient, secure access to your extended enterprise with RSA SecurID Access, the leading multi-factor authentication and identity assurance solution. Whether you deploy it as a service in the cloud or on premises, RSA SecurID Access protects both SaaS applications and traditional enterprise resources with a full range of authentication methods and dynamic, risk-driven access policies. Review collected by and hosted on G2.com. What do you dislike about NetWitness Platform? 1) Stolen Seeds? Every RSA SecurID has a unique 128 bit key hardware coded into it, a 128 bit number is very long number, so it’s very hard to brute-force/guess what it is. This key is often referred to as the seed. RSA keep a copy of the seed unless the customer specifically tells them to remove it, RSA’s storage of SecurID seeds is what is suspected to have been compromised. Each SecurID issued to a customer is associated with a customer based RSA SecurID Server, which stores the seed number. The seed is in essence a private key which must be kept secret, even from the user, and is used to generate the challenge response number on the SecurID token, and is used to match it up on SecurID Server. In simple terms, if an attacker were to know which SecurID token you had, based on the serial number on the back or from the customer site database; and assuming the attacker had the stolen RSA database of serial numbers and seed numbers, the attacker could generate the SecurID number without having possession of SecurID token, which defeats the purpose of two factor authentication. 2) However they are many factors and ‘ifs’ in play, assuming the attacker had the full RSA SecurID database in their possession, to be fully successful the attacker would need to obtain the username, password, remote gateway details and SecurID serial number. Most of this information would need to be collected from the user or from within the customer site. So phishing attacks, social engineering and network attacks are most likely ways to obtain such information, which is why RSA is providing warnings to be on the guard with such attacks. Review collected by and hosted on G2.com. Recommendations to others considering NetWitness Platform: Used two factor authentication so good for banking application Review collected by and hosted on G2.com. What problems is NetWitness Platform solving and how is that benefiting you? 1) Easy to use 2) Secure 3) Using RSA you can use your application any where in the word. 4) It has feature to configure at both ANdroid & iOs 5) Good security feature when using specially banking application 6) When we forgot the password then need to know the security questions. If we do not know the security questions then there is a long process to reset the PIN. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ## Questions about NetWitness Platform? Ask real users or explore answers from the community Get practical answers, real workflows, and honest pros and cons from the G2 community or share your insights. [ Ask about NetWitness Platform ](https://www.g2.com/products/netwitness-platform/discussions/new) NG Neelesh Gupta • Last activity almost 5 years ago Any feasible or easy way to create a customize log parser for not well known devices? 1 Upvote 2 [ Join the conversation ](https://www.g2.com/discussions/any-feasible-or-easy-way-to-create-a-customize-log-parser-for-not-well-known-devices) GU Guest User • Last activity about 4 years ago What is NetWitness used for? 0 Upvotes 1 [ Join the conversation ](https://www.g2.com/discussions/what-is-netwitness-used-for) [ View all Discussions ](https://www.g2.com/products/netwitness-platform/discuss) ##### Pricing Pricing details for this product isn’t currently available. Visit the vendor’s website to learn more. [ View More Pricing Information ](https://www.g2.com/products/netwitness-platform/pricing) NetWitness Platform Comparisons ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_91bcb2c063fcfb0a82dfedcf1a6463d1/splunk-enterprise-security.jpg "Product Avatar Image") Splunk 4.3/5(248) [ Compare Now ](https://www.g2.com/compare/netwitness-platform-vs-splunk-enterprise-security) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_1616bb8054a8f27102d8ba094c99bab5/ibm-ibm-qradar-siem.png "Product Avatar Image") IBM QRadar SIEM 4.4/5(338) [ Compare Now ](https://www.g2.com/compare/ibm-ibm-qradar-siem-vs-netwitness-platform) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_4e2b08dd17397bdc99a5658447cbc589/microsoft-sentinel.jpg "Product Avatar Image") Microsoft Sentinel 4.4/5(297) [ Compare Now ](https://www.g2.com/compare/microsoft-sentinel-vs-netwitness-platform) ##### ##### NetWitness Platform Features Network Management Activity Monitoring Asset Management Log Management Incident Management Event Management Automated Response Incident Reporting Security Intelligence Threat Intelligence Vulnerability Assessment Behavioral Analytics [ View More Features ](https://www.g2.com/products/netwitness-platform/features) ##### Categories on G2 [Extended Detection and Response (XDR) Platforms](https://www.g2.com/categories/extended-detection-and-response-xdr-platforms)[Security Information and Event Management (SIEM)](https://www.g2.com/categories/security-information-and-event-management-siem)[Security Orchestration, Automation, and Response (SOAR)](https://www.g2.com/categories/security-orchestration-automation-and-response-soar) [Extended Detection and Response (XDR) Platforms](https://www.g2.com/categories/extended-detection-and-response-xdr-platforms)[Security Information and Event Management (SIEM)](https://www.g2.com/categories/security-information-and-event-management-siem)[Security Orchestration, Automation, and Response (SOAR)](https://www.g2.com/categories/security-orchestration-automation-and-response-soar)[User and Entity Behavior Analytics (UEBA)](https://www.g2.com/categories/user-and-entity-behavior-analytics-ueba)[Network Detection and Response (NDR)](https://www.g2.com/categories/network-detection-and-response-ndr) [Show MoreShow Less](javascript:void(0);) ##### Explore More [Which financial data APIs platforms avoid unexpected deprecations or data format changes that break existing integrations?](https://www.g2.com/discussions/which-financial-data-apis-platforms-avoid-unexpected-deprecations-or-data-format-changes-that-break-existing-integrations)[Which wide column database company is known for the best support and SLAs?](https://www.g2.com/discussions/which-wide-column-database-company-is-known-for-the-best-support-and-slas)[Which FSM platforms work well for teams that deal with complex multi-step jobs but do not have dedicated IT staff on hand?](https://www.g2.com/discussions/which-fsm-platforms-work-well-for-teams-that-deal-with-complex-multi-step-jobs-but-do-not-have-dedicated-it-staff-on-hand) [What automation orchestration benefits do IT resilience platforms deliver for system reliability and disaster recovery planning?](https://www.g2.com/discussions/what-automation-orchestration-benefits-do-it-resilience-platforms-deliver-for-system-reliability-and-disaster-recovery-planning)[Recommendations for the best accounting service provider](https://www.g2.com/discussions/what-are-the-best-accounting-service-providers)[Pros and Cons Details](https://www.g2.com/products/netwitness-platform/reviews?qs=pros-and-cons) [Show MoreShow Less](javascript:void(0);)