Try our new research platform with insights from 80,000+ expert users

NetWitness NDR vs Tines comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 9, 2024
 

Categories and Ranking

NetWitness NDR
Ranking in Threat Intelligence Platforms
24th
Ranking in Endpoint Detection and Response (EDR)
50th
Ranking in Security Orchestration Automation and Response (SOAR)
22nd
Average Rating
8.0
Number of Reviews
15
Ranking in other categories
Endpoint Protection Platform (EPP) (53rd), Network Detection and Response (NDR) (15th), Extended Detection and Response (XDR) (28th)
Tines
Ranking in Threat Intelligence Platforms
20th
Ranking in Endpoint Detection and Response (EDR)
42nd
Ranking in Security Orchestration Automation and Response (SOAR)
14th
Average Rating
9.0
Number of Reviews
3
Ranking in other categories
Vulnerability Management (33rd)
 

Mindshare comparison

As of September 2024, in the Threat Intelligence Platforms category, the mindshare of NetWitness NDR is 0.5%, up from 0.5% compared to the previous year. The mindshare of Tines is 0.2%, up from 0.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Threat Intelligence Platforms
 

Featured Reviews

SupravatMaji - PeerSpot reviewer
Jun 23, 2022
Beneficial single unified dashboard, good native application integration, and high availability
The most valuable feature of RSA NetWitness Network is the single unified dashboard from which you can manage all the different products of RSA. Additionally, the integration with native applications is good RSA NetWitness Network could improve on integration with non-native application…
Del Tice - PeerSpot reviewer
Aug 21, 2024
Automate daily tasks, phishing emails, ticket creation and IOC investigations
Support is pretty top-notch. If they identify an issue, they notify their customers. For instance, they monitor the tenants, and if a problem occurs, they send an email to inform you. They provide a lot of their support through Slack channels. Each customer has a dedicated channel where you can post questions or mention issues you’re facing. You’ll usually receive a response quickly. Recently, they’ve integrated AI into this process, so you often get useful suggestions within a minute. If needed, you can also request a human to take a look. Their response time is generally quick, although it might be slower at night since they aren’t available 24/7.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The log correlation is good."
"The interface of this solution is very flexible and easy to use."
"NetWitness Endpoint's most valuable features are its interoperability across many different operating systems and the ease of pivoting from network to endpoint via a single console."
"It helps our security team respond more accurately when there are threats, then we get less false positives or negatives."
"We've contacted technical support several times. They've been very good. They have been able to help us resolve our issues."
"The most valuable feature is the way it captures the traffic, and it contains every detail of the communication."
"It is stable. We have been using it for some time, without any issues."
"It is very easy to use, and its usability is great. The use cases are also very easy. The visualizations of the use cases are magnificent. You cannot find this in any other solution. From my point of view, it is great."
"The tool was vendor-neutral."
"One of the most valuable features is that it’s a low-code solution."
"The best thing is that it's no code, so it doesn't require coding knowledge."
 

Cons

"The solution is modular, for example you can buy the RSA ePack, which you buy as a module is not part of the conduit solution. They could include it and have it as an all-in-one solution."
"NetWitness Endpoint's blocking feature does not work properly - if there's a malicious process, it's not possible to kill it via a custom rule unless and until it's flagged as malicious."
"The threat intelligence could improve in RSA NetWitness Endpoint."
"Threat detection could be better."
"When analyzing something, you have to click several times. It requires a lot of effort to find something."
"The contamination feature could be improved."
"We would like to see the hunting and investigation features of this solution improved, in order to provide better visibility of issues."
"This solution needs an upgrade in reporting. I have heard from RSA that they are working on this, but as of yet it is not available."
"They started implementing some AI, and their AI is isolated."
"Maybe Tines can add more features and demonstrations, like videos on how to use the features within the tool."
"Tines was a little bit more expensive than Torq."
 

Pricing and Cost Advice

"It is an expensive product."
"NetWitness Endpoint is less costly than its competitors, but it offers fewer features."
"The pricing is not very economical. It is a quite costly product for India. One thing is that when you purchase it, you have to purchase a module separately."
"The price of the solution depends on the environment. If the environment is large then it will cost more. However, the larger the environment with more endpoints, you will receive an increased discount. If the environment is very small, then you might think it is expensive. It is always better to buy in bulk to receive a discount. The minimum number of assets is usually 500, with discounts on 1000 and 2000."
"They can easily adjust if you have the requirements which are required. If you have a budget cut or a budget constraint, they can bend."
"We are on a three-year contract to use RSA NetWitness Network."
"It is highly scalable. It can be bought based on your requirements."
"I do not have any opinion on the pricing or licensing of the product."
Information not available
report
Use our free recommendation engine to learn which Threat Intelligence Platforms solutions are best for your needs.
801,634 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
16%
Computer Software Company
14%
Government
9%
Manufacturing Company
7%
Computer Software Company
17%
Financial Services Firm
13%
Government
8%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for NetWitness XDR?
The solution is expensive. I'd rate it at a one or two out of five. They need to adjust it to keep up with the competition. I cannot speak to the exact pricing of the product.
What needs improvement with NetWitness XDR?
I have no real complaints about the solution. Threat detection could be better. They need to enhance their threat intelligence feeds. We would like to have more IOCs or more trade intelligence to n...
What needs improvement with Tines?
Maybe Tines can add more features and demonstrations, like videos on how to use the features within the tool. For example, when you click on a feature, it could show a video link explaining how to ...
What is your primary use case for Tines?
We use it for automations on the enterprise security aspect.
What advice do you have for others considering Tines?
If someone needs tasks performed daily that can be automated between different systems, and if there's a cybersecurity or SOC analyst team, they can also use it by creating various API calls, setti...
 

Comparisons

 

Also Known As

RSA ECAT, NetWitness Network
No data available
 

Learn More

Video not available
 

Overview

 

Sample Customers

ADP, Ameritas, Partners Healthcare
Information Not Available
Find out what your peers are saying about NetWitness NDR vs. Tines and other solutions. Updated: September 2024.
801,634 professionals have used our research since 2012.