Try our new research platform with insights from 80,000+ expert users

NetWitness NDR vs Tines comparison

NetWitness and Tines are both solutions in the Threat Intelligence Platforms category. NetWitness is ranked #34, while Tines is ranked #19 with an average rating of 9.0. NetWitness holds a 1.2% mindshare in TIPT, compared to Tines’s 0.5% mindshare. Additionally, 87% of NetWitness users are willing to recommend the solution, compared to 100% of Tines users who would recommend it.
NetWitness NDR
Read 15 NetWitness NDR reviews
  • 224 Views
  • 182 Comparison Views
87% willing to recommend
Tines
Read 4 Tines reviews
  • 82 Views
  • 61 Comparison Views
100% willing to recommend
 

Comparison Buyer's Guide

Download the report
Executive SummaryUpdated on Sep 9, 2024

NetWitness NDR and Tines are leading products in network detection and response and automation respectively. Tines is preferred due to higher user satisfaction with its feature adaptability and user-friendly deployment, despite NetWitness NDR's strong threat detection.

Features: NetWitness NDR offers advanced threat detection, detailed analytics, and seamless integration with existing security setups. Tines provides customizable workflows, efficient automation capabilities, and streamlined incident management.

Room for Improvement: NetWitness NDR has a steep learning curve, needs better documentation, and enhanced user support. Tines can improve its integration with certain third-party tools, refine its user interface, and expand its automation templates.

Ease of Deployment and Customer Service: NetWitness NDR's deployment process is complex and often requires extensive support. Tines has an intuitive deployment process with quick setup and responsive customer support.

Pricing and ROI: NetWitness NDR has higher initial setup costs but offers strong ROI through robust security features. Tines has a flexible pricing model, providing value through automation efficiencies and reduced manual effort.

DOWNLOAD THE COMPLETE REPORT
To learn more, read our detailed NetWitness NDR vs. Tines Report (Updated: January 2025).
Buyer's Guide
NetWitness NDR vs. Tines
January 2025
Download the complete report
Helped 838,713 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

NetWitness NDR
Ranking in Threat Intelligence Platforms
34th
Ranking in Endpoint Detection and Response (EDR)
61st
Ranking in Security Orchestration Automation and Response (SOAR)
24th
Average Rating
8.0
Reviews Sentiment
6.9
Number of Reviews
15
Ranking in other categories
Endpoint Protection Platform (EPP) (59th), Network Detection and Response (NDR) (20th), Extended Detection and Response (XDR) (35th)
Tines
Ranking in Threat Intelligence Platforms
19th
Ranking in Endpoint Detection and Response (EDR)
40th
Ranking in Security Orchestration Automation and Response (SOAR)
12th
Average Rating
9.0
Reviews Sentiment
7.6
Number of Reviews
4
Ranking in other categories
Vulnerability Management (32nd)
 

Mindshare comparison

As of February 2025, in the Threat Intelligence Platforms category, the mindshare of NetWitness NDR is 1.2%, up from 0.7% compared to the previous year. The mindshare of Tines is 0.5%, up from 0.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Threat Intelligence Platforms
 

Featured Reviews

SupravatMaji - PeerSpot reviewer
Beneficial single unified dashboard, good native application integration, and high availability
My advice to those wanting to implement RSA NetWitness Network is they have to first do a little due diligence, such as the exact requirement based on their needs. That will give them a direction for their investment because otherwise, the bill of material or bill of quantity (BOQ) may be higher side. It is important to do good due intelligence on the environment, see the exact requirement, and then go ahead with the solution. The solution is perfectly stable. I rate RSA NetWitness Network a nine out of ten.
Read full review
VikramSingh8 - PeerSpot reviewer
Automation simplifies workflows with no code and excellent support
Reporting and dashboards could be more advanced for deeper analysis. Tines has its own dashboard, which displays information like how many stories have been created and how many automations have taken place. However, the reporting and dashboard are not advanced; they are quite basic, with fewer customizable options. The look and feel of the dashboard could be enhanced. Another area for improvement is in terms of documentation, as every tool and company has its own knowledge base.
Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The log correlation is good."
"We've contacted technical support several times. They've been very good. They have been able to help us resolve our issues."
"Ability to isolate the machine when there are malicious files."
"Technical support is knowledgeable."
"It helps our security team respond more accurately when there are threats, then we get less false positives or negatives."
"This solution allows us to locate the malware in real-time."
"The most valuable feature of RSA NetWitness Network is the single unified dashboard from which you can manage all the different products of RSA. Additionally, the integration with native applications is good."
"The most valuable feature is the way it captures the traffic, and it contains every detail of the communication."
More NetWitness NDR pros
"The best advantage is the no-code automation, excellent customer support services, and ease of integration with other tools."
"The best thing is that it's no code, so it doesn't require coding knowledge."
"The tool was vendor-neutral."
"One of the most valuable features is that it’s a low-code solution."
 

Cons

"We would like to see the hunting and investigation features of this solution improved, in order to provide better visibility of issues."
"The solution is modular, for example you can buy the RSA ePack, which you buy as a module is not part of the conduit solution. They could include it and have it as an all-in-one solution."
"The threat intelligence could improve in RSA NetWitness Endpoint."
"RSA NetWitness Network could improve on integration with non-native application integration."
"Threat detection could be better."
"This solution needs an upgrade in reporting. I have heard from RSA that they are working on this, but as of yet it is not available."
"NetWitness Endpoint's blocking feature does not work properly - if there's a malicious process, it's not possible to kill it via a custom rule unless and until it's flagged as malicious."
"The solution lacks a reporting engine."
More NetWitness NDR cons
"Maybe Tines can add more features and demonstrations, like videos on how to use the features within the tool."
"Tines was a little bit more expensive than Torq."
"Reporting and dashboards could be more advanced for deeper analysis."
"They started implementing some AI, and their AI is isolated."
 

Pricing and Cost Advice

"They can easily adjust if you have the requirements which are required. If you have a budget cut or a budget constraint, they can bend."
"It is highly scalable. It can be bought based on your requirements."
"The cost depends on the number of endpoints that you want to monitor, but it is not expensive."
"With RSA, there is flexibility in choosing the service, products, and the range that meets your requirement, as well as they are flexible in terms of pricing."
"The price of the solution depends on the environment. If the environment is large then it will cost more. However, the larger the environment with more endpoints, you will receive an increased discount. If the environment is very small, then you might think it is expensive. It is always better to buy in bulk to receive a discount. The minimum number of assets is usually 500, with discounts on 1000 and 2000."
"I do not have any opinion on the pricing or licensing of the product."
"We are on a three-year contract to use RSA NetWitness Network."
"NetWitness Endpoint is less costly than its competitors, but it offers fewer features."
More NetWitness NDR pricing and cost advice
Information not available
report
See which vendors are best for you
Use our free recommendation engine to learn which Threat Intelligence Platforms solutions are best for your needs.
See recommendations
838,713 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
17%
Computer Software Company
16%
Manufacturing Company
9%
Government
9%
Computer Software Company
15%
Financial Services Firm
12%
Manufacturing Company
7%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

Ask a question
Earn 20 points
What needs improvement with Tines?
Reporting and dashboards could be more advanced for deeper analysis. Tines has its own dashboard, which displays information like how many stories have been created and how many automations have ta...
See all answers
What is your primary use case for Tines?
I am Vikram Singh, I work for top service based multinational brand and I am responsible for delivering Tines services. Essentially, I am working on it, and I am leading one of the source services ...
See all answers
What advice do you have for others considering Tines?
When you start working with Tines, ensure you pursue the Tines certifications. They offer these free certifications when they become your partner. Overall, I would rate Tines a nine out of ten.
See all answers
 

Comparisons

Darktrace vs NetWitness NDR Logo
Darktrace vs NetWitness NDR
Compared 16% of the time
Vectra AI vs NetWitness NDR Logo
Vectra AI vs NetWitness NDR
Compared 13% of the time
Fidelis Elevate vs NetWitness NDR Logo
Fidelis Elevate vs NetWitness NDR
Compared 10% of the time
Cortex XDR by Palo Alto Networks vs NetWitness NDR Logo
Cortex XDR by Palo Alto Networks vs NetWitness NDR
Compared 9% of the time
SentinelOne Singularity Complete vs NetWitness NDR Logo
SentinelOne Singularity Complete vs NetWitness NDR
Compared 5% of the time
More NetWitness NDR Competitors
Torq vs Tines Logo
Torq vs Tines
Compared 56% of the time
Splunk SOAR vs Tines Logo
Splunk SOAR vs Tines
Compared 15% of the time
Palo Alto Networks Cortex XSOAR vs Tines Logo
Palo Alto Networks Cortex XSOAR vs Tines
Compared 8% of the time
Blink Ops vs Tines Logo
Blink Ops vs Tines
Compared 7% of the time
More Tines Competitors
 

Product Reports

Buyer's Guide
NetWitness NDR
February 2025
NetWitness NDR reportDownload NetWitness NDR product report
Buyer's Guide
Vulnerability Management
February 2025
Tines reportDownload Tines product report
 

Also Known As

RSA ECAT, NetWitness Network
No data available
 

Overview

Using a centralized combination of network and endpoint analysis, behavioral analysis, data science techniques and threat intelligence, NetWitness NDR helps analysts detect and resolve known and unknown attacks while automating and orchestrating the incident response lifecycle. With these capabilities on one platform, security teams can collapse disparate tools and data into a powerful, blazingly fast user interface.

NetWitness

Tines automates manual security tasks, incident response workflows, and tool orchestration, enhancing efficiency by reducing repetitive processes and improving response times.

Users leverage Tines to automate complex security and incident response operations, integrating seamlessly with other platforms to streamline tasks. Its no-code automation capabilities and strong security features are particularly valued. While it enhances operational efficiency, users suggest improvements in customer support, documentation, and additional integration capabilities to overcome learning curve challenges. Some mention occasional latency issues and seek more customization, training resources, and clearer pricing structures. Enhanced scalability and detailed error logs are desired for smoother troubleshooting.

What are Tines' most important features?
  • Ease of Use: Intuitive workflows facilitate adoption without requiring coding knowledge.
  • Robust Integration: Supports integration with other platforms, boosting operational efficiency.
  • Security Features: Strong security measures ensure safe automation.
  • Detailed Documentation: Comprehensive guidelines help users adopt and operate effectively.
What benefits and ROI should users look for?
  • Increased Efficiency: Automates repetitive tasks, freeing up time for other activities.
  • Improved Response Times: Speeds up incident response workflows, minimizing downtime.
  • Simplified Operations: Streamlines complex processes without code, reducing operational overhead.
  • Enhanced Security: Maintains robust security while automating workflows.

In specific industries, Tines is implemented to automate security operations in sectors like finance, healthcare, and technology, where rapid incident response and integration with other platforms are crucial. Automating complex workflows without code is particularly beneficial in these fast-paced environments.

Tines
 

Sample Customers

ADP, Ameritas, Partners Healthcare
Information Not Available
Buyer's Guide
NetWitness NDR vs. Tines
January 2025
Free Report: NetWitness NDR vs. Tines
Find out what your peers are saying about NetWitness NDR vs. Tines and other solutions. Updated: January 2025.
DOWNLOAD NOW
838,713 professionals have used our research since 2012.
See our NetWitness NDR vs. Tines report.

We monitor all Threat Intelligence Platforms reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.