Try our new research platform with insights from 80,000+ expert users

Microsoft Defender for Business vs NetWitness NDR comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Apr 6, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
8.2
Microsoft Defender for Business boosts ROI with increased productivity, cost savings, improved security, and enhanced business opportunities.
Sentiment score
8.0
Implementing NetWitness NDR enhances security, improves network visibility, reduces costs, and boosts efficiency and productivity for businesses.
Using Microsoft Defender for Business results in cost reductions as it consolidates various features under one product, saving around 20% to 30% of the budget.
It is pretty good because it offers various features such as Exchange, OfficeSuite, OneDrive, and SharePoint.
The value I see in Microsoft Defender for Business is in its ability to track and respond to application usage and security threats through its CASB and automation features, which are cost-beneficial.
 

Customer Service

Sentiment score
5.4
Microsoft Defender for Business offers prompt support but lacks efficiency, with slower resolutions and mixed user satisfaction ratings.
Sentiment score
7.3
NetWitness NDR's customer service is generally efficient and highly regarded, though some users report occasional slow response times.
It is rated ten out of ten for its quality and assistance.
The onboarding support is exceptional, ensuring seamless integration and implementation.
Faster support is needed for endpoint security solutions.
 

Scalability Issues

Sentiment score
8.1
Microsoft Defender for Business is praised for scalability, with high ratings, despite configuration challenges across sectors like IT and government.
Sentiment score
7.0
NetWitness NDR is scalable for large enterprises, though some users report issues with scalability and agent migration.
The cloud-based nature of the solution ensures high scalability.
The scalability of Microsoft Defender for Business is rated as ten, indicating it is very scalable.
In terms of scalability, I find Microsoft Defender for Business to be good and reliable.
 

Stability Issues

Sentiment score
7.8
Microsoft Defender for Business is stable and reliable, with minimal downtime and occasional bugs, maintaining user satisfaction.
Sentiment score
7.7
NetWitness NDR is generally reliable, providing real-time data and stability, though minor technical issues are occasionally reported.
No customer complaints about its functionality or reliability.
Although it generally works, there are occasional issues and errors that sometimes require a complete system format to rectify.
Threat detection capabilities could be improved.
 

Room For Improvement

Microsoft Defender for Business needs enhancements in reporting, integration, support efficiency, and pricing, with user-friendliness and communication issues.
NetWitness NDR requires improvements in UI, scalability, detectability, integration, session times, pricing, training, and features, making it complex and slow.
Microsoft should provide batch management solutions with the application, integrating pass management with roles.
Features related to Advanced Persistent Threat detection vectors and cyber kill chain integrations are not available out-of-the-box.
There can be improvements in the user interface to make it more intuitive.
 

Setup Cost

Microsoft Defender for Business offers cost-effective pricing within Office 365 Premium, valued for features and nonprofit discounts, despite some competitors.
Single-year pricing remains good.
The pricing is quite affordable at the enterprise level with no extra expenses noted.
The package with Business Premium is good for what you get for the price.
 

Valuable Features

Microsoft Defender for Business provides scalable, cost-effective security with AI-powered threat detection, easy integration, and user-friendly features.
NetWitness NDR offers high detection rates, real-time malware response, third-party integration, and a user-friendly, interoperable interface with advanced analytics.
The threat detection capabilities are robust, with a dedicated research team and a continuously updated threat feed.
Its vulnerability management is regarded as one of the best in the industry.
The most effective features of Microsoft Defender for Business include its threat detection and response capabilities in managing vulnerabilities and ransomware attacks.
 

Categories and Ranking

Microsoft Defender for Busi...
Ranking in Endpoint Protection Platform (EPP)
25th
Average Rating
7.8
Reviews Sentiment
7.1
Number of Reviews
17
Ranking in other categories
Microsoft Security Suite (15th)
NetWitness NDR
Ranking in Endpoint Protection Platform (EPP)
59th
Average Rating
8.0
Reviews Sentiment
6.9
Number of Reviews
15
Ranking in other categories
Threat Intelligence Platforms (35th), Endpoint Detection and Response (EDR) (63rd), Security Orchestration Automation and Response (SOAR) (24th), Network Detection and Response (NDR) (20th), Extended Detection and Response (XDR) (36th)
 

Mindshare comparison

As of April 2025, in the Endpoint Protection Platform (EPP) category, the mindshare of Microsoft Defender for Business is 1.9%, up from 1.2% compared to the previous year. The mindshare of NetWitness NDR is 0.3%, up from 0.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Protection Platform (EPP)
 

Featured Reviews

Syed Abid  - PeerSpot reviewer
Advanced threat protection secures diverse workloads with cost-effective deployment
If I need logs and don't have local storage bundled with Defender, I need to add workspace and log analytics, which is costly for storing logs of 2 GB, 5 GB, 10 GB. A default storage of 5 GB for logs should be included with Defender. There are limitations in whitelisting folders and files, and the whitelisting feature for Defender threat protection was deprecated. A straightforward feature for this should be added.
SupravatMaji - PeerSpot reviewer
Beneficial single unified dashboard, good native application integration, and high availability
My advice to those wanting to implement RSA NetWitness Network is they have to first do a little due diligence, such as the exact requirement based on their needs. That will give them a direction for their investment because otherwise, the bill of material or bill of quantity (BOQ) may be higher side. It is important to do good due intelligence on the environment, see the exact requirement, and then go ahead with the solution. The solution is perfectly stable. I rate RSA NetWitness Network a nine out of ten.
report
Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.
847,862 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
18%
Comms Service Provider
7%
Retailer
7%
Government
6%
Computer Software Company
17%
Financial Services Firm
16%
Government
9%
Manufacturing Company
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Microsoft Defender for Business?
A few things are valuable. One is the alerting we see when any kind of intrusion is happening, any kind of malware is being deployed across the endpoints, or any kind of suspicious activity is goin...
What is your experience regarding pricing and costs for Microsoft Defender for Business?
Microsoft Defender for Business offers the best pricing option in the market and is very cost-effective.
What needs improvement with Microsoft Defender for Business?
The areas where Microsoft Defender for Business could improve include the support, installation process, and wiki. I should be able to find solutions to issues quickly without having to delve too d...
Ask a question
Earn 20 points
 

Also Known As

No data available
RSA ECAT, NetWitness Network
 

Overview

 

Sample Customers

Information Not Available
ADP, Ameritas, Partners Healthcare
Find out what your peers are saying about Microsoft Defender for Business vs. NetWitness NDR and other solutions. Updated: April 2025.
847,862 professionals have used our research since 2012.