Try our new research platform with insights from 80,000+ expert users

NetWitness NDR vs Tines comparison

NetWitness and Tines are both solutions in the Threat Intelligence Platforms category. NetWitness is ranked #33, while Tines is ranked #20 with an average rating of 9.0. NetWitness holds a 1.8% mindshare in TIPT, compared to Tines’s 0.8% mindshare. Additionally, 87% of NetWitness users are willing to recommend the solution, compared to 100% of Tines users who would recommend it.
NetWitness NDR
Read 15 NetWitness NDR reviews
  • 250 Views
  • 188 Comparison Views
87% willing to recommend
Tines
Read 4 Tines reviews
  • 76 Views
  • 63 Comparison Views
100% willing to recommend
 

Comparison Buyer's Guide

Download the report
Executive SummaryUpdated on Sep 9, 2024

NetWitness NDR and Tines are leading products in network detection and response and automation respectively. Tines is preferred due to higher user satisfaction with its feature adaptability and user-friendly deployment, despite NetWitness NDR's strong threat detection.

Features: NetWitness NDR offers advanced threat detection, detailed analytics, and seamless integration with existing security setups. Tines provides customizable workflows, efficient automation capabilities, and streamlined incident management.

Room for Improvement: NetWitness NDR has a steep learning curve, needs better documentation, and enhanced user support. Tines can improve its integration with certain third-party tools, refine its user interface, and expand its automation templates.

Ease of Deployment and Customer Service: NetWitness NDR's deployment process is complex and often requires extensive support. Tines has an intuitive deployment process with quick setup and responsive customer support.

Pricing and ROI: NetWitness NDR has higher initial setup costs but offers strong ROI through robust security features. Tines has a flexible pricing model, providing value through automation efficiencies and reduced manual effort.

DOWNLOAD THE COMPLETE REPORT
To learn more, read our detailed NetWitness NDR vs. Tines Report (Updated: December 2024).
Buyer's Guide
NetWitness NDR vs. Tines
December 2024
Download the complete report
Helped 831,020 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

NetWitness NDR
Ranking in Threat Intelligence Platforms
33rd
Ranking in Endpoint Detection and Response (EDR)
60th
Ranking in Security Orchestration Automation and Response (SOAR)
24th
Average Rating
8.0
Reviews Sentiment
6.9
Number of Reviews
15
Ranking in other categories
Endpoint Protection Platform (EPP) (58th), Network Detection and Response (NDR) (20th), Extended Detection and Response (XDR) (34th)
Tines
Ranking in Threat Intelligence Platforms
20th
Ranking in Endpoint Detection and Response (EDR)
42nd
Ranking in Security Orchestration Automation and Response (SOAR)
12th
Average Rating
9.0
Reviews Sentiment
7.6
Number of Reviews
4
Ranking in other categories
Vulnerability Management (33rd)
 

Mindshare comparison

As of January 2025, in the Threat Intelligence Platforms category, the mindshare of NetWitness NDR is 1.8%, up from 0.5% compared to the previous year. The mindshare of Tines is 0.8%, up from 0.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Threat Intelligence Platforms
 

Featured Reviews

SupravatMaji - PeerSpot reviewer
Beneficial single unified dashboard, good native application integration, and high availability
My advice to those wanting to implement RSA NetWitness Network is they have to first do a little due diligence, such as the exact requirement based on their needs. That will give them a direction for their investment because otherwise, the bill of material or bill of quantity (BOQ) may be higher side. It is important to do good due intelligence on the environment, see the exact requirement, and then go ahead with the solution. The solution is perfectly stable. I rate RSA NetWitness Network a nine out of ten.
Read full review
VikramSingh8 - PeerSpot reviewer
Automation simplifies workflows with no code and excellent support
Reporting and dashboards could be more advanced for deeper analysis. Tines has its own dashboard, which displays information like how many stories have been created and how many automations have taken place. However, the reporting and dashboard are not advanced; they are quite basic, with fewer customizable options. The look and feel of the dashboard could be enhanced. Another area for improvement is in terms of documentation, as every tool and company has its own knowledge base.
Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"They have recently updated the features and the most valuable ones are the instant threat response, ease of use, web interface, integration, and easy access. RSA NetWitness Endpoint is very compatible with other solutions and technologies. However, they do not rely on third-party solutions and have most features built-in."
"The most valuable feature of RSA NetWitness Network is the single unified dashboard from which you can manage all the different products of RSA. Additionally, the integration with native applications is good."
"Ability to isolate the machine when there are malicious files."
"Technical support is knowledgeable."
"This solution allows us to locate the malware in real-time."
"The log correlation is good."
"The most valuable feature is the way it captures the traffic, and it contains every detail of the communication."
"The stability of the RSA NetWitness Endpoint is very good."
More NetWitness NDR pros
"The best advantage is the no-code automation, excellent customer support services, and ease of integration with other tools."
"One of the most valuable features is that it’s a low-code solution."
"The tool was vendor-neutral."
"The best thing is that it's no code, so it doesn't require coding knowledge."
 

Cons

"NetWitness Endpoint's blocking feature does not work properly - if there's a malicious process, it's not possible to kill it via a custom rule unless and until it's flagged as malicious."
"The deployment process is complex. I don't know why, but this solution will suddenly stop working. Logs stop coming. Often, one thing or another stops working. Most of the time, one of my team members is working with troubleshooting and working with technical support. Log passing is also one of the biggest challenge."
"I would like to see Security Orchestration and Response Automation (SOAR) integration."
"This solution needs an upgrade in reporting. I have heard from RSA that they are working on this, but as of yet it is not available."
"The solution lacks a reporting engine."
"RSA NetWitness Network could improve on integration with non-native application integration."
"The threat intelligence could improve in RSA NetWitness Endpoint."
"Its price could be improved. It is an expensive product. Its training is also too expensive. It would be great if they can have a better pricing scheme for the training."
More NetWitness NDR cons
"They started implementing some AI, and their AI is isolated."
"Maybe Tines can add more features and demonstrations, like videos on how to use the features within the tool."
"Tines was a little bit more expensive than Torq."
"Reporting and dashboards could be more advanced for deeper analysis."
 

Pricing and Cost Advice

"NetWitness Endpoint is less costly than its competitors, but it offers fewer features."
"It is highly scalable. It can be bought based on your requirements."
"We are on a three-year contract to use RSA NetWitness Network."
"I do not have any opinion on the pricing or licensing of the product."
"The cost depends on the number of endpoints that you want to monitor, but it is not expensive."
"The price of the solution depends on the environment. If the environment is large then it will cost more. However, the larger the environment with more endpoints, you will receive an increased discount. If the environment is very small, then you might think it is expensive. It is always better to buy in bulk to receive a discount. The minimum number of assets is usually 500, with discounts on 1000 and 2000."
"They can easily adjust if you have the requirements which are required. If you have a budget cut or a budget constraint, they can bend."
"The pricing is not very economical. It is a quite costly product for India. One thing is that when you purchase it, you have to purchase a module separately."
More NetWitness NDR pricing and cost advice
Information not available
report
See which vendors are best for you
Use our free recommendation engine to learn which Threat Intelligence Platforms solutions are best for your needs.
See recommendations
831,020 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
17%
Computer Software Company
15%
Manufacturing Company
9%
Government
9%
Computer Software Company
16%
Financial Services Firm
13%
Government
8%
Manufacturing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

Ask a question
Earn 20 points
What needs improvement with Tines?
Maybe Tines can add more features and demonstrations, like videos on how to use the features within the tool. For example, when you click on a feature, it could show a video link explaining how to ...
See all answers
What is your primary use case for Tines?
We use it for automations on the enterprise security aspect.
See all answers
What advice do you have for others considering Tines?
If someone needs tasks performed daily that can be automated between different systems, and if there's a cybersecurity or SOC analyst team, they can also use it by creating various API calls, setti...
See all answers
 

Comparisons

Darktrace vs NetWitness NDR Logo
Darktrace vs NetWitness NDR
Compared 15% of the time
Vectra AI vs NetWitness NDR Logo
Vectra AI vs NetWitness NDR
Compared 13% of the time
Fidelis Elevate vs NetWitness NDR Logo
Fidelis Elevate vs NetWitness NDR
Compared 11% of the time
Cortex XDR by Palo Alto Networks vs NetWitness NDR Logo
Cortex XDR by Palo Alto Networks vs NetWitness NDR
Compared 9% of the time
ExtraHop Reveal(x) vs NetWitness NDR Logo
ExtraHop Reveal(x) vs NetWitness NDR
Compared 6% of the time
More NetWitness NDR Competitors
Torq vs Tines Logo
Torq vs Tines
Compared 57% of the time
Splunk SOAR vs Tines Logo
Splunk SOAR vs Tines
Compared 14% of the time
Palo Alto Networks Cortex XSOAR vs Tines Logo
Palo Alto Networks Cortex XSOAR vs Tines
Compared 8% of the time
Swimlane vs Tines Logo
Swimlane vs Tines
Compared 6% of the time
More Tines Competitors
 

Product Reports

Buyer's Guide
NetWitness NDR
December 2024
NetWitness NDR reportDownload NetWitness NDR product report
Buyer's Guide
Vulnerability Management
December 2024
Tines reportDownload Tines product report
 

Also Known As

RSA ECAT, NetWitness Network
No data available
 

Learn More

Video not available
NetWitness
Tines
 

Overview

Using a centralized combination of network and endpoint analysis, behavioral analysis, data science techniques and threat intelligence, NetWitness NDR helps analysts detect and resolve known and unknown attacks while automating and orchestrating the incident response lifecycle. With these capabilities on one platform, security teams can collapse disparate tools and data into a powerful, blazingly fast user interface.

Tines automates manual security tasks, incident response workflows, and tool orchestration, enhancing efficiency by reducing repetitive processes and improving response times.

Users leverage Tines to automate complex security and incident response operations, integrating seamlessly with other platforms to streamline tasks. Its no-code automation capabilities and strong security features are particularly valued. While it enhances operational efficiency, users suggest improvements in customer support, documentation, and additional integration capabilities to overcome learning curve challenges. Some mention occasional latency issues and seek more customization, training resources, and clearer pricing structures. Enhanced scalability and detailed error logs are desired for smoother troubleshooting.

What are Tines' most important features?
  • Ease of Use: Intuitive workflows facilitate adoption without requiring coding knowledge.
  • Robust Integration: Supports integration with other platforms, boosting operational efficiency.
  • Security Features: Strong security measures ensure safe automation.
  • Detailed Documentation: Comprehensive guidelines help users adopt and operate effectively.
What benefits and ROI should users look for?
  • Increased Efficiency: Automates repetitive tasks, freeing up time for other activities.
  • Improved Response Times: Speeds up incident response workflows, minimizing downtime.
  • Simplified Operations: Streamlines complex processes without code, reducing operational overhead.
  • Enhanced Security: Maintains robust security while automating workflows.

In specific industries, Tines is implemented to automate security operations in sectors like finance, healthcare, and technology, where rapid incident response and integration with other platforms are crucial. Automating complex workflows without code is particularly beneficial in these fast-paced environments.

 

Sample Customers

ADP, Ameritas, Partners Healthcare
Information Not Available
Buyer's Guide
NetWitness NDR vs. Tines
December 2024
Free Report: NetWitness NDR vs. Tines
Find out what your peers are saying about NetWitness NDR vs. Tines and other solutions. Updated: December 2024.
DOWNLOAD NOW
831,020 professionals have used our research since 2012.
See our NetWitness NDR vs. Tines report.

We monitor all Threat Intelligence Platforms reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.