--- title: Netwrix Threat Manager Reviews meta\_title: 'Netwrix Threat Manager Reviews 2026: Details, Pricing, & Features | G2' meta\_description: Filter reviews by the users' company size, role or industry to find out how Netwrix Threat Manager works for a business like yours. aggregate\_rating: rating\_value: 4.4 review\_count: 4 scale: '5' date\_modified: '2026-08-05' parent\_category: name: User Threat Prevention url: https://www.g2.com/categories/user-threat-prevention --- # Netwrix Threat Manager Reviews & Product Details Claimed ###### Profile Status This profile is currently managed by Netwrix Threat Manager but has limited features. Are you part of the Netwrix Threat Manager team? [Upgrade your plan](https://sell.g2.com) to enhance your branding and engage with visitors to your profile! Netwrix Threat Manager detects and responds in real time to advanced cyberattacks, adding a layer of security around identities (AD and Entra ID) and sensitive data. It uses unsupervised machine learning to evaluate, correlate, and baseline user and entity behaviour, cutting through noise to surface meaningful alerts rather than excessive, undifferentiated warnings. The product ships with preconfigured threat models covering DCSync, Golden Ticket, Kerberoasing ransomware, abnormal behaviour and more. Response Playbooks automate multi-stage response actions across connected tools, and SIEM integration extends existing security workflows. Netwrix Threat Manager helps security teams move faster from detection to resolution: user behavior profiles make it easy to spot deviations from normal activity. When something looks off, built-in investigations stitch related events into a single timeline, giving teams a clear, savable report instead of a pile of disconnected logs. And because Netwrix Threat Manager plugs directly into ServiceNow, Slack, Microsoft Teams, and SIEM platforms teams can contain threats and keep incident response in the tools they already work in every day. * * * Seller [Netwrix](https://www.g2.com/sellers/netwrix) Discussions [Netwrix Threat Manager Community](https://www.g2.com/products/netwrix-threat-manager/discuss) Languages Supported English Show More ## Top-Rated Alternatives [ ![CrowdStrike Falcon Endpoint Protection Platform](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "CrowdStrike Falcon Endpoint Protection Platform") CrowdStrike Falcon Endpoint Protection Platform 4.6/5(441) ](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) [ ![Okta](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Okta") Okta 4.5/5(1,366) ](https://www.g2.com/products/okta/reviews) [ ![KnowBe4 PhishER/PhishER Plus](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "KnowBe4 PhishER/PhishER Plus") KnowBe4 PhishER/PhishER Plus 4.5/5(572) ](https://www.g2.com/products/knowbe4-phisher-phisher-plus/reviews) [ View All Alternatives ](https://www.g2.com/products/netwrix-threat-manager/competitors/alternatives) MD Matt D. Systems Administrator Small-Business (50 or fewer emp.) 1/24/2019 "StealthDefend is like boarder security - keeps harmful stuff out" 4/5 What do you like best about Netwrix Threat Manager? This program is really ingenious, it is constantly analysing and checking current patterns to ensure that no malicious occurrences are occurring. If it detects something is not right it has several ways to alert you. It is always looking at trends from now and right back to when it was installed. You also have the benefit of running different set of tasks i,e disable the account, shutdown a server, run custom scripts, etc. This program helps us keep one step ahead of the bad guys and keep our data safe and sound. Review collected by and hosted on G2.com. What do you dislike about Netwrix Threat Manager? There is no automatic update function, instead you have to go to their website and keep checking for new improvements or bug fixes. Review collected by and hosted on G2.com. Recommendations to others considering Netwrix Threat Manager: If your looking for a product that protects against next generation threats this product should be high on your list to consider. This does an amazing job of detecting patterns and analyzing potential threats, before you even know what is going on - it has already highlighted what is going on where and when. This product also is not as pricey as some of the other products on the market, which is great because this gives you the protection you need with out the huge cost. Review collected by and hosted on G2.com. What problems is Netwrix Threat Manager solving and how is that benefiting you? Protecting against cryptolocker type of malware and keeping our data safe. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: G2 invite on behalf of seller ![Verified User in Environmental Services](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Environmental Services") AE Verified User in Environmental Services Mid-Market (51-1000 emp.) 1/29/2019 "Powerful insights into data and systems." 4/5 What do you like best about Netwrix Threat Manager? The reports are easily consumable, and actionable. The alerts allow for prompt response and resolution of issues. The pre-configured reports and alerts cover some of the most critical cases. The report and dashboard interfaces provide a quick and easy way to review the status of the environment. Review collected by and hosted on G2.com. What do you dislike about Netwrix Threat Manager? The system is quite complex and requires significant understanding to utilize fully. The menus are a bit hard to navigate, and the overall feel of the system is not intuitive. The setup process has had a few roadbumps as well due to recent releases having some incompatibilities with our environment. Review collected by and hosted on G2.com. Recommendations to others considering Netwrix Threat Manager: This is an incredibly powerful tool. It's worth the effort to configure and implement as it provides nearly immeasurable time savings once running. It also provides more insight into company and user behaviors than just about any other tools. Review collected by and hosted on G2.com. What problems is Netwrix Threat Manager solving and how is that benefiting you? StealthDEFEND is moving us towards compliance with security requirements without increasing our staffing needs. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: G2 invite on behalf of seller ![Verified User in Electrical/Electronic Manufacturing](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Electrical/Electronic Manufacturing") UE Verified User in Electrical/Electronic Manufacturing Mid-Market (51-1000 emp.) 1/24/2019 "Insights I didn't even know I needed" 5/5 What do you like best about Netwrix Threat Manager? I love the alerts for abnormal behavior. We've been able to find some process that were causing small issues here and there but were unable to track down in the past. Review collected by and hosted on G2.com. What do you dislike about Netwrix Threat Manager? The software does so much that configuration can be daunting Review collected by and hosted on G2.com. Recommendations to others considering Netwrix Threat Manager: It is a very complex piece of software but support is amazing and the payoff is well worth it. Review collected by and hosted on G2.com. What problems is Netwrix Threat Manager solving and how is that benefiting you? Insight in to what is changing and how often things are changing. We've had trouble in the past with files moving without anyone knowing who did it. Now we can see that very quickly Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite on behalf of seller ![Verified User in Government Administration](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Government Administration") EG Verified User in Government Administration Enterprise (\> 1000 emp.) 1/31/2019 "Implementing and happy so far" 4.5/5 What do you like best about Netwrix Threat Manager? I like the deep functionality and configurability of the product. Review collected by and hosted on G2.com. What do you dislike about Netwrix Threat Manager? UI is a little busy and intuitive compared to competitor. Review collected by and hosted on G2.com. What problems is Netwrix Threat Manager solving and how is that benefiting you? We are assuring compliance with audits and improving our security posture. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite on behalf of seller ### There are not enough reviews of Netwrix Threat Manager for G2 to provide buying insight. Below are some alternatives with more reviews: [ 1 ![CrowdStrike Falcon Endpoint Protection Platform Logo](https://images.g2crowd.com/uploads/product/image/thumb_square/thumb_square_56db399f44b6fabb7c667f09bc770579/crowdstrike-falcon-endpoint-protection-platform.png "CrowdStrike Falcon Endpoint Protection Platform Logo") CrowdStrike Falcon Endpoint Protection Platform 4.6 (441) CrowdStrike Falcon endpoint protection unifies the technologies required to successfully stop breaches: next-generation antivirus, endpoint detection and response, IT hygiene, 24/7 threat hunting and threat intelligence. They combine to provide continuous breach prevention in a single agent. ](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews "CrowdStrike Falcon Endpoint Protection Platform")[ 2 ![Okta Logo](https://images.g2crowd.com/uploads/product/hd_favicon/fc3b8f792177eb1565971fd0bb450896/okta.svg "Okta Logo") Okta 4.5 (1,366) Okta is The World’s Identity Company™. As the leading independent Identity partner, we free everyone to safely use any technology — anywhere, on any device or app. The most trusted brands trust Okta to enable secure access, authentication, and automation. With flexibility and neutrality at the core of our Okta Workforce Identity and Customer Identity Clouds, business leaders and developers can focus on innovation and accelerate digital transformation, thanks to customizable solutions and more than 7,000 pre-built integrations. We’re building a world where Identity belongs to you. Learn more at okta.com. ](https://www.g2.com/products/okta/reviews "Okta")[ 3 ![KnowBe4 PhishER/PhishER Plus Logo](https://images.g2crowd.com/uploads/product/hd_favicon/ca583a13a4f1ea7f707ab2216bbf7b23/knowbe4-phisher-phisher-plus.svg "KnowBe4 PhishER/PhishER Plus Logo") KnowBe4 PhishER/PhishER Plus 4.5 (572) KnowBe4 PhishER is the key ingredient of an essential security workstream. It's your lightweight Security Orchestration, Automation and Response (SOAR) platform to orchestrate your threat response and manage the high volume of potentially malicious email messages reported by your users. And, with automatic prioritization of emails, PhishER helps your InfoSec and Security Operations team cut through the inbox noise and respond to the most dangerous threats more quickly. ](https://www.g2.com/products/knowbe4-phisher-phisher-plus/reviews "KnowBe4 PhishER/PhishER Plus")[ 4 ![Tines Logo](https://images.g2crowd.com/uploads/product/hd_favicon/b06976e0682a1b57bcbcb2d2bb139018/tines.svg "Tines Logo") Tines 4.7 (406) Tines is an intelligent workflow platform that powers the world’s most important workflows. IT and security teams of all sizes, from Fortune 50 to startups, trust Tines for everything from phishing response, vulnerability and patch management, software lifecycle management, employee lifecycle management, and everything in between. Leaders across a wide array of industries –including Canva, Databricks, Elastic, Kayak, Intercom, and McKesson– use Tines AI-powered workflows to operate more effectively, mitigate risk, reduce tech debt, and do the work that matters most. Our workflow platform gives teams of any skillset (the most technical to your least technical) the tools to orchestrate, automate, and integrate your people, processes, and technology. ](https://www.g2.com/products/tines/reviews "Tines")[ 5 ![Sumo Logic Logo](https://images.g2crowd.com/uploads/product/hd_favicon/1550622115/sumo-logic.svg "Sumo Logic Logo") Sumo Logic 4.3 (404) Sumo Logic enables enterprises to build analytical power that transforms daily operations into intelligent business decisions ](https://www.g2.com/products/sumo-logic/reviews "Sumo Logic")[ 6 ![ActivTrak Logo](https://images.g2crowd.com/uploads/product/hd_favicon/eb815266e7fb05c41ced98af3cc94c74/activtrak.svg "ActivTrak Logo") ActivTrak 4.3 (340) ActivTrak is a cloud-native workforce intelligence platform that transforms work activity data into actionable insights for employee monitoring, productivity and performance management, and workforce planning capabilities that deliver measurable ROI. Deployment is quick and easy — start collecting data in minutes. ](https://www.g2.com/products/activtrak/reviews "ActivTrak")[ 7 ![IBM QRadar SIEM Logo](https://images.g2crowd.com/uploads/product/hd_favicon/7d76baae79036d41d25c4a6c46e5af43/ibm-ibm-qradar-siem.svg "IBM QRadar SIEM Logo") IBM QRadar SIEM 4.4 (338) IBM QRadar is designed to collect logs, events, network flows and user behavior across your entire enterprise, correlates that against threat intelligence and vulnerability data to detect known threats, and applies advanced analytics to identify anomalies that may signal unknown threats. The solution then uniquely connects the end-to-end chain of activity associated with a single potential incident, and provides prioritized alerts based on severity, helping quickly uncover critical threats while reducing false positives. ](https://www.g2.com/products/ibm-ibm-qradar-siem/reviews "IBM QRadar SIEM")[ 8 ![Microsoft Sentinel Logo](https://images.g2crowd.com/uploads/product/hd_favicon/a8a99a96fda235658139f710592f8a53/microsoft-sentinel.svg "Microsoft Sentinel Logo") Microsoft Sentinel 4.4 (297) Microsoft Azure Sentinel is a cloud-native SIEM that provides intelligent security analytics for your entire enterprise, powered by AI. ](https://www.g2.com/products/microsoft-sentinel/reviews "Microsoft Sentinel")[ 9 ![Cynet Logo](https://images.g2crowd.com/uploads/product/hd_favicon/8658ccf2b7b0b54bf25f5d8c02ac9246/cynet.svg "Cynet Logo") Cynet 4.7 (259) AutoXDR™ converges multiple technologies (EPP, EDR, UBA, Deception, Network Analytics and vulnerability management), with a 24/7 cyber SWAT team, to provide unparalleled visibility and defend all domains of your internal network: endpoints, network, files and users, from all types of attacks. ](https://www.g2.com/products/cynet/reviews "Cynet")[ 10 ![Splunk Enterprise Security Logo](https://images.g2crowd.com/uploads/product/hd_favicon/b92838221b8df42dd6b5bb09c9f8ff55/splunk-enterprise-security.svg "Splunk Enterprise Security Logo") Splunk Enterprise Security 4.3 (248) Splunk Enterprise Security (ES) is a SIEM software that provides insight into machine data generated from security technologies such as network, endpoint, access, malware, vulnerability and identity information to enables security teams to quickly detect and respond to internal and external attacks to simplify threat management while minimizing risk and safeguarding business ](https://www.g2.com/products/splunk-enterprise-security/reviews "Splunk Enterprise Security") [Show More](#) ##### Pricing Pricing details for this product isn’t currently available. Visit the vendor’s website to learn more. [ View More Pricing Information ](https://www.g2.com/products/netwrix-threat-manager/pricing) ##### Categories on G2 [Incident Response](https://www.g2.com/categories/incident-response)[Identity Threat Detection and Response (ITDR)](https://www.g2.com/categories/identity-threat-detection-and-response-itdr)[User and Entity Behavior Analytics (UEBA)](https://www.g2.com/categories/user-and-entity-behavior-analytics-ueba) ##### Explore More [Who offers the best sales software](https://www.g2.com/discussions/who-offers-the-best-sales-software)[Which salary benchmarking software is best for a mid-size SaaS company that wants to make sure it is paying developers fairly relative to its peer group?](https://www.g2.com/discussions/which-salary-benchmarking-software-is-best-for-a-mid-size-saas-company-that-wants-to-make-sure-it-is-paying-developers-fairly-relative-to-its-peer-group)[Which yard management platforms work best for a 3PL provider that manages multiple client yards and needs to give each client visibility into their own trailer inventory without mixing data?](https://www.g2.com/discussions/which-yard-management-platforms-work-best-for-a-3pl-provider-that-manages-multiple-client-yards-and-needs-to-give-each-client-visibility-into-their-own-trailer-inventory-without-mixing-data) [What platform integrates recruiting automation with ATS systems?](https://www.g2.com/discussions/what-platform-integrates-recruiting-automation-with-ats-systems)[What contractor payment tools do account managers and finance teams actually stick with rather than eventually going back to manual bank transfers?](https://www.g2.com/discussions/what-contractor-payment-tools-do-account-managers-and-finance-teams-actually-stick-with-rather-than-eventually-going-back-to-manual-bank-transfers)[Best app for partner relationship management](https://www.g2.com/discussions/best-bot-platform-for-small-business) [Show MoreShow Less](javascript:void(0);)