Try our new research platform with insights from 80,000+ expert users

Cortex XDR by Palo Alto Networks vs NetWitness NDR comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 9, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.6
Cortex XDR by Palo Alto Networks offers ROI with fewer breaches, reduced incidents, enhanced security, and compliance benefits within 16 months.
Sentiment score
8.0
Implementing NetWitness NDR enhances security, improves network visibility, reduces costs, and boosts efficiency and productivity for businesses.
They appreciate the rich telemetry data from the solution, as it provides in-depth threat identification.
 

Customer Service

Sentiment score
6.5
Cortex XDR customer service receives mixed reviews, citing regional differences in responsiveness, communication, and expertise quality.
Sentiment score
7.3
NetWitness NDR's customer service is generally efficient and highly regarded, though some users report occasional slow response times.
Every vendor has similar support; it depends on how the case is handled and raised.
 

Scalability Issues

Sentiment score
7.6
Cortex XDR by Palo Alto Networks efficiently scales for medium to large businesses, supporting numerous users and endpoints seamlessly.
Sentiment score
7.0
NetWitness NDR is scalable for large enterprises, though some users report issues with scalability and agent migration.
 

Stability Issues

Sentiment score
8.1
Cortex XDR is highly stable and reliable, with user satisfaction scores between eight and ten out of ten.
Sentiment score
7.7
NetWitness NDR is generally reliable, providing real-time data and stability, though minor technical issues are occasionally reported.
Cortex XDR is stable, offering high quality and reliable performance.
 

Room For Improvement

Cortex XDR requires improved functionality, user interface, integration, and pricing, while addressing performance, false positives, and compatibility issues.
NetWitness NDR requires improvements in UI, scalability, detectability, integration, session times, pricing, training, and features, making it complex and slow.
Cortex XDR could improve its sales support team, including better commission structures and referral programs.
 

Setup Cost

Cortex XDR offers flexible but costly licensing, accommodating varying business sizes with yearly or monthly payment options.
Cortex XDR is perceived as expensive by some customers, yet offers dynamic pricing.
 

Valuable Features

Cortex XDR provides advanced threat detection, integration, and ease of use, excelling in real-time prevention and incident investigation.
NetWitness NDR offers high detection rates, real-time malware response, third-party integration, and a user-friendly, interoperable interface with advanced analytics.
It incorporates AI for normal behavior detection, distinguishing unusual operations.
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Ranking in Endpoint Protection Platform (EPP)
4th
Ranking in Extended Detection and Response (XDR)
7th
Average Rating
8.4
Reviews Sentiment
7.4
Number of Reviews
91
Ranking in other categories
Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (4th)
NetWitness NDR
Ranking in Endpoint Protection Platform (EPP)
58th
Ranking in Extended Detection and Response (XDR)
34th
Average Rating
8.0
Reviews Sentiment
6.9
Number of Reviews
15
Ranking in other categories
Threat Intelligence Platforms (33rd), Endpoint Detection and Response (EDR) (60th), Security Orchestration Automation and Response (SOAR) (24th), Network Detection and Response (NDR) (20th)
 

Mindshare comparison

As of January 2025, in the Endpoint Protection Platform (EPP) category, the mindshare of Cortex XDR by Palo Alto Networks is 4.2%, down from 5.4% compared to the previous year. The mindshare of NetWitness NDR is 0.2%, up from 0.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Protection Platform (EPP)
 

Featured Reviews

Mohammad Qaw - PeerSpot reviewer
Perfect correlation and XDR capabilities for network traffic plus endpoint security
The solution should force customers to integrate with network traffic to see the full benefits of XDR. If you are not integrating it or feeding in your network traffic, then you are just buying a normal antivirus which doesn't make any sense. You are paying double the price to use the antivirus feature or to say you have XDR, but in reality you are not using it. The solution should include an on-premises option because some customers want only on-premises. It would be hard, but good to do if possible. Open XDR would be beneficial in the future. Right now, the solution is Closed XDR so cannot communicate with the few new vendors in the Open XDR market.
SupravatMaji - PeerSpot reviewer
Beneficial single unified dashboard, good native application integration, and high availability
My advice to those wanting to implement RSA NetWitness Network is they have to first do a little due diligence, such as the exact requirement based on their needs. That will give them a direction for their investment because otherwise, the bill of material or bill of quantity (BOQ) may be higher side. It is important to do good due intelligence on the environment, see the exact requirement, and then go ahead with the solution. The solution is perfectly stable. I rate RSA NetWitness Network a nine out of ten.
report
Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.
830,596 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Financial Services Firm
9%
Government
8%
Manufacturing Company
7%
Financial Services Firm
18%
Computer Software Company
15%
Manufacturing Company
9%
Government
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. The ability to reverse damage caused by ransomware with minimal interruptions to...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions that are very scalable, secure, and user-friendly. Cortex XDR by Palo Alto offers ...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface, applies behavioral-based endpoint protection and response, and includes risk-ba...
Ask a question
Earn 20 points
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
RSA ECAT, NetWitness Network
 

Learn More

Video not available
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
ADP, Ameritas, Partners Healthcare
Find out what your peers are saying about Cortex XDR by Palo Alto Networks vs. NetWitness NDR and other solutions. Updated: January 2025.
830,596 professionals have used our research since 2012.