Try our new research platform with insights from 80,000+ expert users

NetWitness NDR vs Tines comparison

NetWitness and Tines are both solutions in the Threat Intelligence Platforms category. NetWitness is ranked #33, while Tines is ranked #20 with an average rating of 9.0. NetWitness holds a 1.7% mindshare in TIPT, compared to Tines’s 0.7% mindshare. Additionally, 87% of NetWitness users are willing to recommend the solution, compared to 100% of Tines users who would recommend it.
NetWitness NDR
Read 15 NetWitness NDR reviews
  • 243 Views
  • 190 Comparison Views
87% willing to recommend
Tines
Read 3 Tines reviews
  • 75 Views
  • 59 Comparison Views
100% willing to recommend
 

Comparison Buyer's Guide

Download the report
Executive SummaryUpdated on Sep 9, 2024

NetWitness NDR and Tines are leading products in network detection and response and automation respectively. Tines is preferred due to higher user satisfaction with its feature adaptability and user-friendly deployment, despite NetWitness NDR's strong threat detection.

Features: NetWitness NDR offers advanced threat detection, detailed analytics, and seamless integration with existing security setups. Tines provides customizable workflows, efficient automation capabilities, and streamlined incident management.

Room for Improvement: NetWitness NDR has a steep learning curve, needs better documentation, and enhanced user support. Tines can improve its integration with certain third-party tools, refine its user interface, and expand its automation templates.

Ease of Deployment and Customer Service: NetWitness NDR's deployment process is complex and often requires extensive support. Tines has an intuitive deployment process with quick setup and responsive customer support.

Pricing and ROI: NetWitness NDR has higher initial setup costs but offers strong ROI through robust security features. Tines has a flexible pricing model, providing value through automation efficiencies and reduced manual effort.

DOWNLOAD THE COMPLETE REPORT
To learn more, read our detailed NetWitness NDR vs. Tines Report (Updated: December 2024).
Buyer's Guide
NetWitness NDR vs. Tines
December 2024
Download the complete report
Helped 823,795 peers since 2012
 

Categories and Ranking

NetWitness NDR
Ranking in Threat Intelligence Platforms
33rd
Ranking in Endpoint Detection and Response (EDR)
60th
Ranking in Security Orchestration Automation and Response (SOAR)
25th
Average Rating
8.0
Reviews Sentiment
6.9
Number of Reviews
15
Ranking in other categories
Endpoint Protection Platform (EPP) (58th), Network Detection and Response (NDR) (20th), Extended Detection and Response (XDR) (34th)
Tines
Ranking in Threat Intelligence Platforms
20th
Ranking in Endpoint Detection and Response (EDR)
42nd
Ranking in Security Orchestration Automation and Response (SOAR)
12th
Average Rating
9.0
Reviews Sentiment
7.5
Number of Reviews
3
Ranking in other categories
Vulnerability Management (32nd)
 

Mindshare comparison

As of December 2024, in the Threat Intelligence Platforms category, the mindshare of NetWitness NDR is 1.7%, up from 0.6% compared to the previous year. The mindshare of Tines is 0.7%, up from 0.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Threat Intelligence Platforms
 

Featured Reviews

SupravatMaji - PeerSpot reviewer
Beneficial single unified dashboard, good native application integration, and high availability
My advice to those wanting to implement RSA NetWitness Network is they have to first do a little due diligence, such as the exact requirement based on their needs. That will give them a direction for their investment because otherwise, the bill of material or bill of quantity (BOQ) may be higher side. It is important to do good due intelligence on the environment, see the exact requirement, and then go ahead with the solution. The solution is perfectly stable. I rate RSA NetWitness Network a nine out of ten.
Read full review
Del Tice - PeerSpot reviewer
Automate daily tasks, phishing emails, ticket creation and IOC investigations
Support is pretty top-notch. If they identify an issue, they notify their customers. For instance, they monitor the tenants, and if a problem occurs, they send an email to inform you. They provide a lot of their support through Slack channels. Each customer has a dedicated channel where you can post questions or mention issues you’re facing. You’ll usually receive a response quickly. Recently, they’ve integrated AI into this process, so you often get useful suggestions within a minute. If needed, you can also request a human to take a look. Their response time is generally quick, although it might be slower at night since they aren’t available 24/7.
Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"RSA NetWitness does market analysis in a more granular form. It gives you full visibility."
"We've contacted technical support several times. They've been very good. They have been able to help us resolve our issues."
"The stability of the RSA NetWitness Endpoint is very good."
"Ability to isolate the machine when there are malicious files."
"They have recently updated the features and the most valuable ones are the instant threat response, ease of use, web interface, integration, and easy access. RSA NetWitness Endpoint is very compatible with other solutions and technologies. However, they do not rely on third-party solutions and have most features built-in."
"It is very easy to use, and its usability is great. The use cases are also very easy. The visualizations of the use cases are magnificent. You cannot find this in any other solution. From my point of view, it is great."
"It's a scalable solution. We have around five to eight customers using RSA NetWitness Endpoint, and we hope to increase the number of users."
"The interface of this solution is very flexible and easy to use."
More NetWitness NDR pros
"The tool was vendor-neutral."
"The best thing is that it's no code, so it doesn't require coding knowledge."
"One of the most valuable features is that it’s a low-code solution."
 

Cons

"The initial setup requires a high level of skill."
"NetWitness Endpoint's blocking feature does not work properly - if there's a malicious process, it's not possible to kill it via a custom rule unless and until it's flagged as malicious."
"The integration of the solution needs to be improved. The dashboard needs lots of updates as well. In the next release, we would like to see advanced fraud detection features."
"The deployment process is complex. I don't know why, but this solution will suddenly stop working. Logs stop coming. Often, one thing or another stops working. Most of the time, one of my team members is working with troubleshooting and working with technical support. Log passing is also one of the biggest challenge."
"The contamination feature could be improved."
"The threat intelligence could improve in RSA NetWitness Endpoint."
"When analyzing something, you have to click several times. It requires a lot of effort to find something."
"The solution lacks a reporting engine."
More NetWitness NDR cons
"They started implementing some AI, and their AI is isolated."
"Tines was a little bit more expensive than Torq."
"Maybe Tines can add more features and demonstrations, like videos on how to use the features within the tool."
 

Pricing and Cost Advice

"The price of the solution depends on the environment. If the environment is large then it will cost more. However, the larger the environment with more endpoints, you will receive an increased discount. If the environment is very small, then you might think it is expensive. It is always better to buy in bulk to receive a discount. The minimum number of assets is usually 500, with discounts on 1000 and 2000."
"With RSA, there is flexibility in choosing the service, products, and the range that meets your requirement, as well as they are flexible in terms of pricing."
"They can easily adjust if you have the requirements which are required. If you have a budget cut or a budget constraint, they can bend."
"We are on a three-year contract to use RSA NetWitness Network."
"I do not have any opinion on the pricing or licensing of the product."
"The pricing is not very economical. It is a quite costly product for India. One thing is that when you purchase it, you have to purchase a module separately."
"It is an expensive product."
"NetWitness Endpoint is less costly than its competitors, but it offers fewer features."
More NetWitness NDR pricing and cost advice
Information not available
report
See which vendors are best for you
Use our free recommendation engine to learn which Threat Intelligence Platforms solutions are best for your needs.
See recommendations
823,795 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
17%
Computer Software Company
15%
Manufacturing Company
9%
Government
9%
Computer Software Company
15%
Financial Services Firm
13%
Government
8%
Manufacturing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

Ask a question
Earn 20 points
What needs improvement with Tines?
Maybe Tines can add more features and demonstrations, like videos on how to use the features within the tool. For example, when you click on a feature, it could show a video link explaining how to ...
See all answers
What is your primary use case for Tines?
We use it for automations on the enterprise security aspect.
See all answers
What advice do you have for others considering Tines?
If someone needs tasks performed daily that can be automated between different systems, and if there's a cybersecurity or SOC analyst team, they can also use it by creating various API calls, setti...
See all answers
 

Comparisons

Darktrace vs NetWitness NDR Logo
Darktrace vs NetWitness NDR
Compared 14% of the time
Vectra AI vs NetWitness NDR Logo
Vectra AI vs NetWitness NDR
Compared 12% of the time
Fidelis Elevate vs NetWitness NDR Logo
Fidelis Elevate vs NetWitness NDR
Compared 10% of the time
CrowdStrike Falcon vs NetWitness NDR Logo
CrowdStrike Falcon vs NetWitness NDR
Compared 8% of the time
Trellix Endpoint Security vs NetWitness NDR Logo
Trellix Endpoint Security vs NetWitness NDR
Compared 4% of the time
More NetWitness NDR Competitors
Torq vs Tines Logo
Torq vs Tines
Compared 56% of the time
Splunk SOAR vs Tines Logo
Splunk SOAR vs Tines
Compared 14% of the time
Palo Alto Networks Cortex XSOAR vs Tines Logo
Palo Alto Networks Cortex XSOAR vs Tines
Compared 10% of the time
Swimlane vs Tines Logo
Swimlane vs Tines
Compared 6% of the time
More Tines Competitors
 

Product Reports

Buyer's Guide
NetWitness NDR
November 2024
NetWitness NDR reportDownload NetWitness NDR product report
Buyer's Guide
Vulnerability Management
November 2024
Tines reportDownload Tines product report
 

Also Known As

RSA ECAT, NetWitness Network
No data available
 

Learn More

Video not available
NetWitness
Tines
 

Overview

Using a centralized combination of network and endpoint analysis, behavioral analysis, data science techniques and threat intelligence, NetWitness NDR helps analysts detect and resolve known and unknown attacks while automating and orchestrating the incident response lifecycle. With these capabilities on one platform, security teams can collapse disparate tools and data into a powerful, blazingly fast user interface.

Tines automates manual security tasks, incident response workflows, and tool orchestration, enhancing efficiency by reducing repetitive processes and improving response times.

Users leverage Tines to automate complex security and incident response operations, integrating seamlessly with other platforms to streamline tasks. Its no-code automation capabilities and strong security features are particularly valued. While it enhances operational efficiency, users suggest improvements in customer support, documentation, and additional integration capabilities to overcome learning curve challenges. Some mention occasional latency issues and seek more customization, training resources, and clearer pricing structures. Enhanced scalability and detailed error logs are desired for smoother troubleshooting.

What are Tines' most important features?
  • Ease of Use: Intuitive workflows facilitate adoption without requiring coding knowledge.
  • Robust Integration: Supports integration with other platforms, boosting operational efficiency.
  • Security Features: Strong security measures ensure safe automation.
  • Detailed Documentation: Comprehensive guidelines help users adopt and operate effectively.
What benefits and ROI should users look for?
  • Increased Efficiency: Automates repetitive tasks, freeing up time for other activities.
  • Improved Response Times: Speeds up incident response workflows, minimizing downtime.
  • Simplified Operations: Streamlines complex processes without code, reducing operational overhead.
  • Enhanced Security: Maintains robust security while automating workflows.

In specific industries, Tines is implemented to automate security operations in sectors like finance, healthcare, and technology, where rapid incident response and integration with other platforms are crucial. Automating complex workflows without code is particularly beneficial in these fast-paced environments.

 

Sample Customers

ADP, Ameritas, Partners Healthcare
Information Not Available
Buyer's Guide
NetWitness NDR vs. Tines
December 2024
Free Report: NetWitness NDR vs. Tines
Find out what your peers are saying about NetWitness NDR vs. Tines and other solutions. Updated: December 2024.
DOWNLOAD NOW
823,795 professionals have used our research since 2012.
See our NetWitness NDR vs. Tines report.

We monitor all Threat Intelligence Platforms reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.