--- title: NetWitness Platform Reviews meta_title: 'NetWitness Platform Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 24 reviews by the users' company size, role or industry to find out how NetWitness Platform works for a business like yours. aggregate_rating: rating_value: 3.9 review_count: 24 scale: '5' date_modified: '2026-06-24' parent_category: name: Cloud Security url: https://www.g2.com/categories/cloud-security --- # NetWitness Platform Reviews **Vendor:** NetWitness **Category:** [Extended Detection and Response (XDR) Platforms](https://www.g2.com/categories/extended-detection-and-response-xdr-platforms) **Average Rating:** 3.9/5.0 **Total Reviews:** 24 ## About NetWitness Platform NetWitness is a comprehensive threat detection, investigation and response platform that combines visibility, analytics, insight, and automation into a single solution. It collects and analyzes data across all capture points (logs, packets, netflow, endpoint and IoT) and computing platforms (physical, virtual and cloud), enriching data with threat intelligence and business context. ## NetWitness Platform Pros & Cons **What users like:** - Users value the **centralized management** of NetWitness Platform, streamlining threat hunting across diverse data sources. (1 reviews) - Users value the **centralized view** for threat hunting provided by the NetWitness Platform's integrated capabilities. (1 reviews) - Users appreciate the **packet capture and session replay capabilities** of the NetWitness Platform for thorough forensic analysis. (1 reviews) - Users appreciate the **ability to capture full network packets** , finding it invaluable for thorough forensic investigations. (1 reviews) - Users value the **centralized view for threat hunting** provided by the Management Console in the NetWitness Platform. (1 reviews) - Users appreciate the **ability to capture full network packets** for thorough forensic investigations with NetWitness Platform. (1 reviews) - Users value the **integrated threat detection** capabilities of NetWitness Platform, enhancing their threat hunting efficiency across all data sources. (1 reviews) - Visibility (1 reviews) **What users dislike:** - Users find the **complex implementation** of NetWitness Platform challenging, requiring extensive expertise and causing upgrade instability. (2 reviews) - Users find the **complexity of initial setup and deployment** daunting, often needing extensive technical expertise. (2 reviews) - Users find the **complex setup** of NetWitness Platform challenging, often needing extensive technical expertise for deployment and upgrades. (2 reviews) - Users face **deployment difficulties** , citing complex initial setups and challenges during upgrades that require advanced technical skills. (2 reviews) - Users find the **expertise required** for initial deployment and upgrades complicates the overall experience with NetWitness Platform. (2 reviews) - Users find the **difficult setup** of the NetWitness Platform requires extensive technical knowledge, complicating deployment. (1 reviews) - Frequent Updates (1 reviews) - Users feel that the **API integration needs enhancement** for improved SOC functionality and efficiency. (1 reviews) - Software Malfunction (1 reviews) - Training Required (1 reviews) ## NetWitness Platform Reviews ### 1. All-in-One Security Console for Centralized Threat Hunting **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Information Services | Enterprise (> 1000 emp.) **Reviewed Date:** February 19, 2026 **What do you like best about NetWitness Platform?** It combines NDR, SIEM, UEBA, and SOAR capabilities into a single console. This convergence helps eliminate tool sprawl and provides a centralized view for threat hunting across network, endpoint, and cloud data . **What do you dislike about NetWitness Platform?** Initial deployment is complex, often requiring significant expertise . Upgrades are particularly tricky, with some users reporting instability during version migrations . **What problems is NetWitness Platform solving and how is that benefiting you?** The problem is that the Security teams often juggle 10-15 different tools (NDR, SIEM, UEBA, etc.), leading to context switching, high costs, and analyst fatigue. The Solution & Benefit that this platform provides is it converges Network Detection, Log Management (SIEM), User Behavior Analytics, and Orchestration into a single platform with a unified interface. ### 2. A Powerhouse in Endpoint, Network, and SIEM Integration. **Rating:** 4.0/5.0 stars **Reviewed by:** pushpendra Y. | Security Analyst, Mid-Market (51-1000 emp.) **Reviewed Date:** August 11, 2025 **What do you like best about NetWitness Platform?** Users love the platform’s ability to capture full network packets and replay sessions, which is invaluable for deep forensic investigation. **What do you dislike about NetWitness Platform?** Complex initial setup and deployment, often requiring significant technical expertise. **What problems is NetWitness Platform solving and how is that benefiting you?** Threats are increasingly complex, evasive, and distributed, traditional log-centric tools often miss subtle indicators. ### 3. Threat hunting playform **Rating:** 5.0/5.0 stars **Reviewed by:** Andrew S. | SOC T2, Mid-Market (51-1000 emp.) **Reviewed Date:** November 16, 2024 **What do you like best about NetWitness Platform?** Netwitness siem solution is a great tool for threat hunting **What do you dislike about NetWitness Platform?** Api integration needs to be enhancement for soc **What problems is NetWitness Platform solving and how is that benefiting you?** API integration ### 4. An Intelligent Platform for Businesses - NetWitness Platform XDR **Rating:** 4.0/5.0 stars **Reviewed by:** Marcus Joshua S. | Network Security Consultant, Enterprise (> 1000 emp.) **Reviewed Date:** October 10, 2023 **What do you like best about NetWitness Platform?** As a user and part of security team in my company, the platform's ease of use and compact interface is a must on our daily monitoring. This alone is vital in part of investigation and response to any incidents that may arise. Based on my colleague, support team is also helpful and there are resources that is available to the community. Overall a great tool to assist on our job. **What do you dislike about NetWitness Platform?** It will take some time to get into the familiarity of navigating through the platform. This is not for an entry-level position, but learnings this tool will be a solid help in the future. **What problems is NetWitness Platform solving and how is that benefiting you?** This greatly helps in our day-to-day monitoring and response which improves our overall team performance. ### 5. NetWitness Platform XDR **Rating:** 4.5/5.0 stars **Reviewed by:** Richardson R. | Mid-Market (51-1000 emp.) **Reviewed Date:** November 09, 2023 **What do you like best about NetWitness Platform?** Customer Support Number of Features Threat correlation **What do you dislike about NetWitness Platform?** Integration Challenges and Resource demands **What problems is NetWitness Platform solving and how is that benefiting you?** Handling multiple environment are able to support multi-tenancy, correlating seemingly unrelated events, providing a more coherent picture of potential security incidents and aiding in the identification of complex attack patterns. ### 6. Exploring new waters **Rating:** 5.0/5.0 stars **Reviewed by:** John B. | Cyber Threat Hunter, Mid-Market (51-1000 emp.) **Reviewed Date:** September 23, 2023 **What do you like best about NetWitness Platform?** Few weeks ago, I had an opportunity using the platform. And for what I have found out that its not so complicated after all. **What do you dislike about NetWitness Platform?** DIdnt find any as of this few weeks using it. **What problems is NetWitness Platform solving and how is that benefiting you?** For some security platforms kinda hard to make a playbook. But on this platform I just could create it very quick and run it right away so easily. ### 7. Netwitness XDR Experience **Rating:** 3.5/5.0 stars **Reviewed by:** Verified User in Computer & Network Security | Small-Business (50 or fewer emp.) **Reviewed Date:** October 01, 2023 **What do you like best about NetWitness Platform?** It is easy to use and provide better analysis options **What do you dislike about NetWitness Platform?** Support can be improved on devices integrations and troubleshooting **What problems is NetWitness Platform solving and how is that benefiting you?** It provides overall security posture view, easy to investigate and provide customize alerts to configure ### 8. RSA NetWitness and SOC **Rating:** 4.0/5.0 stars **Reviewed by:** Haitham A. | SOC Senior Analyst, Mid-Market (51-1000 emp.) **Reviewed Date:** December 28, 2021 **What do you like best about NetWitness Platform?** 1- The visibility RSA NetWitness packet (NDR) provides is brilliant. 2- Easy installation and deployment. 3- The scalability of deployment is very good. 4- The combination of NDR, EDR and Logs in the same interface. 5- Effective technical support. **What do you dislike about NetWitness Platform?** 1- Documentation that is poor. 2- Integration with log sources is limited in comparison with other brands. 3- Building use cases is not easy, and poor built-in use cases. 4- Weak parsing of logs. 5- The user interface is not friendly enough. 6- Respond module requires significant enhancement. **What problems is NetWitness Platform solving and how is that benefiting you?** 1- Databases stability. 2- Meeting client expectations. 3- Solving contract conflicts. 4- Maintaining the NetWitness service availability. 5- Engaging RSA NetWtiness management to solve complex problems and disputes. ### 9. RSA Netwitness Logs & Networks **Rating:** 4.5/5.0 stars **Reviewed by:** Neelesh G. | C, Enterprise (> 1000 emp.) **Reviewed Date:** June 16, 2021 **What do you like best about NetWitness Platform?** The response speed at GUI for Security Analysis and threat hunting purpose is the best part. Even to fetch the old data for any of the audit purposes it takes just seconds. **What do you dislike about NetWitness Platform?** I don't like the Hybrid component i.e Hybrid log decoder (Decoder+ Concentrator) as if in case we face problem in any of the component we have to face trouble with other as well. Better to prefer all the standalone component in RSA Netwitness. **Recommendations to others considering NetWitness Platform:** It's a one of the good SIEM technology in the market one can opt for **What problems is NetWitness Platform solving and how is that benefiting you?** All the technical issues whether it is related to storage, licences, upgrade or any other troubleshooting part I am working upon. The benefits of even getting a issue is that you will get to learn things from that as the RSA support is quite good. ### 10. RSA Netwitness Review **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Banking | Enterprise (> 1000 emp.) **Reviewed Date:** October 27, 2021 **What do you like best about NetWitness Platform?** The investigation tab is helping me a lot during my investigation as it shows all the available meta keys in the logs, which makes it easier to notice suspicious artifacts. **What do you dislike about NetWitness Platform?** RSA Net witness needs enhancing in showing the details of the entire packet, for example (headers and body) **What problems is NetWitness Platform solving and how is that benefiting you?** The investigation tab is helping me a lot during my investigation as it shows all the available meta keys in the logs, which makes it easier to notice suspicious artifacts. ### 11. RSA - Walkthrough **Rating:** 2.5/5.0 stars **Reviewed by:** Verified User in Banking | Enterprise (> 1000 emp.) **Reviewed Date:** November 07, 2021 **What do you like best about NetWitness Platform?** Ability to find and decode base65 and hex. Inbound SSL decryption. The ability to run anywhere, physical hardware, cloud etc. SOAR capabilities can be used to scale security operations. **What do you dislike about NetWitness Platform?** No cross platform SOAR compatibility. Difficult to learn and use initially. Setting up the solution is complex for first timers. Integrating newer devices is a tough task. **What problems is NetWitness Platform solving and how is that benefiting you?** Helpful in full PCAP analysis. Threat hunting feeds have quite helped with day to day operations, making the organisation more secure. The level of details is intense, given that solution is implemented correctly ### 12. It's powerfull and complex **Rating:** 4.0/5.0 stars **Reviewed by:** Carlos C. | Especialista en seguridad de la información, Small-Business (50 or fewer emp.) **Reviewed Date:** November 10, 2021 **What do you like best about NetWitness Platform?** alerts are a powerful tool to notify you of an incident **What do you dislike about NetWitness Platform?** set up could be complicated , and support it's nota the best **Recommendations to others considering NetWitness Platform:** Yes , it's a powerfull tool when it's configured correctly **What problems is NetWitness Platform solving and how is that benefiting you?** I use notification about incidents ### 13. Good experience **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Computer & Network Security | Mid-Market (51-1000 emp.) **Reviewed Date:** November 06, 2021 **What do you like best about NetWitness Platform?** Great to get insights about the risk score and alerts and incidents give a broader picture on activity **What do you dislike about NetWitness Platform?** Dashboards could habe been a bit more pleasing to see. Nonetheless this will be achieved in the near future probably **What problems is NetWitness Platform solving and how is that benefiting you?** It's a one stope solution to SIEM , to identify threats and take necessary actions well in time. To protect endpoints from danger ### 14. Best siem out there in market, best in performance best in managing **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Computer Networking | Enterprise (> 1000 emp.) **Reviewed Date:** October 30, 2021 **What do you like best about NetWitness Platform?** The best part the ueba and the latest soar capability which reduces multiple work heads collate under one umbrella. **What do you dislike about NetWitness Platform?** The complexity in the architecture, most of the issues which occur in environment requires lot of investigation to find the RCA. **What problems is NetWitness Platform solving and how is that benefiting you?** The day to day security incidents and event management, combined together with soar capability the response has also become more easy. ### 15. Easy to deploy and manage with good features. **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Banking | Enterprise (> 1000 emp.) **Reviewed Date:** October 29, 2021 **What do you like best about NetWitness Platform?** Availablity of out of the box usecases (Correlation rules, reports and dashboards). Network (packet) capture component and also have inbuilt EDR and UEBA components. Good product documention. New version is good. **What do you dislike about NetWitness Platform?** Application level HA is not there. Support can be improved. Migration from older versions. **What problems is NetWitness Platform solving and how is that benefiting you?** Flexible licensing options. Easy to do custom application/device integration and custom parser development. ### 16. Great for someone with mid level knowledge in networking **Rating:** 3.5/5.0 stars **Reviewed by:** Verified User in Defense & Space | Enterprise (> 1000 emp.) **Reviewed Date:** October 29, 2021 **What do you like best about NetWitness Platform?** The way you can follow packets and the UI **What do you dislike about NetWitness Platform?** A lot of features and it's a bit overwhelming to use **Recommendations to others considering NetWitness Platform:** I think it's a great product. I haven't used it for the past 4 years but when I did I loved it. **What problems is NetWitness Platform solving and how is that benefiting you?** Fast find of suspicious activity ### 17. I am RSA engineer for the L1, responsible for incident handling **Rating:** 2.5/5.0 stars **Reviewed by:** Rohan J. | Cyber Security Analyst, Small-Business (50 or fewer emp.) **Reviewed Date:** September 05, 2021 **What do you like best about NetWitness Platform?** Log collection and event management, Incident investigation **What do you dislike about NetWitness Platform?** GUI console, RSS Hirarchay, log analysis, **What problems is NetWitness Platform solving and how is that benefiting you?** While starting the investigation checking each tab for ex. Respond and investigations is a bit confusing ### 18. I started my experience with version 10.6 and it was good enough **Rating:** 3.5/5.0 stars **Reviewed by:** Verified User in Banking | Enterprise (> 1000 emp.) **Reviewed Date:** October 27, 2021 **What do you like best about NetWitness Platform?** It is easy to use and packets is an added value **What do you dislike about NetWitness Platform?** The complexity of the devices specifically the Hybrid and the ESA appliances **What problems is NetWitness Platform solving and how is that benefiting you?** Easy to get alerts and notifications in case of any attacks ### 19. The better web gateway security management. **Rating:** 5.0/5.0 stars **Reviewed by:** José O. | RPA Analyst, Mid-Market (51-1000 emp.) **Reviewed Date:** November 03, 2020 **What do you like best about NetWitness Platform?** We like this tool at the gateway because it allows us to capture network data and transmit it to security and network staff. With that we have visibility, detection of threats and then mitigate them. I also like the friendly, intuitive interface and easy to administer and configure security rules. **What do you dislike about NetWitness Platform?** We have been using it for a long time and no one has reported any problems with using the RSA NetWitness Network. The tool offers great cost-benefit protection against simple and complex threats. **What problems is NetWitness Platform solving and how is that benefiting you?** The RSA NetWitness Network tool is complete. It deals with the recognition and detection of threats, such as responses to security incidents. In addition, he is able to conduct a forensic investigation and analysis. It is always updated frequently, has great support and quality. ### 20. RSA token **Rating:** 5.0/5.0 stars **Reviewed by:** Mukul S. | Enterprise (> 1000 emp.) **Reviewed Date:** July 23, 2020 **What do you like best about NetWitness Platform?** 1) Easy to use 2) Secure 3) Using RSA you can use your application any where in the word. 4) It has feature to configure at both ANdroid & iOs 5) Good security feature when using specially banking application 6) Access simplifies authentication and credential management, helping to reduce IT support costs. With a conditional-access and risk-based approach, it ensures users are who they say they are and provides the right level of access from any device, across cloud and on-premises applications. 7) Two-Factor Authentication The RSA token is a physical ‘pen’ that generates a random code every 60 seconds. This code is used, along with the RSA PIN number that you choose, in order to gain authentication for access to an account or server. The RSA token offers a two-factor authentication process that consists of: ‘Something you know’ – A four digit, memorised PIN number. ‘Something you have’ – The physical token, which generates a 6 or 8 digit code every 60 seconds. 8) it does greatly enhance login security. It’s useful for anyone who wants to use two-factor authentication. 9) Deliver convenient, secure access to your extended enterprise with RSA SecurID Access, the leading multi-factor authentication and identity assurance solution. Whether you deploy it as a service in the cloud or on premises, RSA SecurID Access protects both SaaS applications and traditional enterprise resources with a full range of authentication methods and dynamic, risk-driven access policies. **What do you dislike about NetWitness Platform?** 1) Stolen Seeds? Every RSA SecurID has a unique 128 bit key hardware coded into it, a 128 bit number is very long number, so it’s very hard to brute-force/guess what it is. This key is often referred to as the seed. RSA keep a copy of the seed unless the customer specifically tells them to remove it, RSA’s storage of SecurID seeds is what is suspected to have been compromised. Each SecurID issued to a customer is associated with a customer based RSA SecurID Server, which stores the seed number. The seed is in essence a private key which must be kept secret, even from the user, and is used to generate the challenge response number on the SecurID token, and is used to match it up on SecurID Server. In simple terms, if an attacker were to know which SecurID token you had, based on the serial number on the back or from the customer site database; and assuming the attacker had the stolen RSA database of serial numbers and seed numbers, the attacker could generate the SecurID number without having possession of SecurID token, which defeats the purpose of two factor authentication. 2) However they are many factors and ‘ifs’ in play, assuming the attacker had the full RSA SecurID database in their possession, to be fully successful the attacker would need to obtain the username, password, remote gateway details and SecurID serial number. Most of this information would need to be collected from the user or from within the customer site. So phishing attacks, social engineering and network attacks are most likely ways to obtain such information, which is why RSA is providing warnings to be on the guard with such attacks. **Recommendations to others considering NetWitness Platform:** Used two factor authentication so good for banking application **What problems is NetWitness Platform solving and how is that benefiting you?** 1) Easy to use 2) Secure 3) Using RSA you can use your application any where in the word. 4) It has feature to configure at both ANdroid & iOs 5) Good security feature when using specially banking application 6) When we forgot the password then need to know the security questions. If we do not know the security questions then there is a long process to reset the PIN. ### 21. RSA NetWitness **Rating:** 3.5/5.0 stars **Reviewed by:** Verified User in Consumer Goods | Enterprise (> 1000 emp.) **Reviewed Date:** September 15, 2020 **What do you like best about NetWitness Platform?** RSA is a superb vendor. They have been engaged with each of subsidiaries from the get-go. **What do you dislike about NetWitness Platform?** The learning curve is steep. The overall solution is a large effort to implement correctly. **Recommendations to others considering NetWitness Platform:** It is a big tool with a steep learning curve. Put in the time and effort to properly leverage it's full potential. **What problems is NetWitness Platform solving and how is that benefiting you?** Needed a flexible SIEM solution required for multiple subsidiaries with very different infrastructures. ### 22. Evolved SIEM **Rating:** 4.5/5.0 stars **Reviewed by:** Karmveer S. | Senior Security Analyst, Mid-Market (51-1000 emp.) **Reviewed Date:** June 24, 2020 **What do you like best about NetWitness Platform?** Overall ecosystem Netwitness create with all solutions which enrich each other and make a not so but perfect solution. **What do you dislike about NetWitness Platform?** Lack of additional apps like Splunk and Qradar **Recommendations to others considering NetWitness Platform:** Go for it if you want a evolved SIEM but make sure you give a look to all netwitness products as it can be useful to have right control at place and make single source of truth. **What problems is NetWitness Platform solving and how is that benefiting you?** Centralised log monitoring and log correlation. ### 23. RSA Review **Rating:** 5.0/5.0 stars **Reviewed by:** Shashi Kanth K. | HR Shared Services Administrator, Enterprise (> 1000 emp.) **Reviewed Date:** June 25, 2020 **What do you like best about NetWitness Platform?** Calculation, Analytics and Cosmetic view of the application **What do you dislike about NetWitness Platform?** Sometimes it would be slow and you need to be patient **Recommendations to others considering NetWitness Platform:** Make sure. Your try this at least once to get best RSA experience **What problems is NetWitness Platform solving and how is that benefiting you?** RSA ### 24. RSA Netwitness SIEM leaves alot to be desired **Rating:** 1.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Enterprise (> 1000 emp.) **Reviewed Date:** March 12, 2020 **What do you like best about NetWitness Platform?** I like the birds eye superficial view of the data because its easy to drill in to. **What do you dislike about NetWitness Platform?** Even though all software has its share of bugs the bugs in this SIEM make it basically unusable since I can get different results than another collegue of mines which makes the data unreliable. **Recommendations to others considering NetWitness Platform:** I would recommend that you go with either Splunk, Securonix or QRader from IBM. These seem to be the top performers in the industry. **What problems is NetWitness Platform solving and how is that benefiting you?** It solves the problem of getting logs from our high value targets to a centralized location for easy consumption and analysis. It also allows us to correlate activity from multiple data sources. ## NetWitness Platform Discussions - [Any feasible or easy way to create a customize log parser for not well known devices?](https://www.g2.com/discussions/any-feasible-or-easy-way-to-create-a-customize-log-parser-for-not-well-known-devices) - 2 comments, 1 upvote - [What is NetWitness used for?](https://www.g2.com/discussions/what-is-netwitness-used-for) - 1 comment - [View NetWitness Platform pricing details and edition comparison](https://www.g2.com/products/netwitness-platform/reviews?section=pricing&secure%5Bexpires_at%5D=2026-06-26+01%3A04%3A52+-0500&secure%5Bsession_id%5D=0659a5b3-507e-4357-9c7b-4b18737f04c5&secure%5Btoken%5D=b7d41e04720dbf183c7132e0354f3d8a2836c5995fcea0ffef1596c5b48310ee&format=llm_user) ## NetWitness Platform Integrations - [Check Point Next Generation Firewalls (NGFWs)](https://www.g2.com/products/check-point-next-generation-firewalls-ngfws/reviews) - [Picus Security](https://www.g2.com/products/picus-security/reviews) ## NetWitness Platform Features **Analysis** - Incident Reporting - Network Visibility - Metadata Enrichment - Metadata Management **Detection & Response** - Response Automation - Threat Hunting - Rule-Based Detection - Real-Time Detection **Agentic AI - User and Entity Behavior Analytics (UEBA)** - Autonomous Task Execution - Multi-step Planning - Proactive Assistance - Decision Making **Cloud Visibility** - Data Discovery - Cloud Registry - Cloud Gap Analytics **Network Management** - Activity Monitoring - Asset Management - Log Management **Analysis** - Continuous Analysis - Behavioral Analysis - Data Context - Activity Logging **Automation** - Workflow Mapping - Workflow Automation - Automated Remediation - Log Monitoring **Response** - Incident Alerts - Response Orchestration - Response Automation **Management** - Extensibility - Workflow Automation - Unified Visibility **Security** - Data Security - Data loss Prevention - Security Auditing **Incident Management** - Event Management - Automated Response - Incident Reporting **Detection** - Anomaly Detection - Incident Alerts - Activity Monitoring **Orchestration** - Security Orchestration - Data Collection - Threat Intelligence - Data Visualization **Detection** - Multi-Network Monitoring - Asset Discovery - Anomaly Detection **Analytics** - Threat Intelligence - Artificial Intelligence & Machine Learning - Data Collection **Identity** - SSO - Governance - User Analytics **Security Intelligence** - Threat Intelligence - Vulnerability Assessment - Advanced Analytics - Data Examination **Response** - Alerting - Performance Baselin - High Availability/Disaster Recovery **Agentic AI - Security Information and Event Management (SIEM)** - Autonomous Task Execution - Multi-step Planning - Proactive Assistance - Decision Making **Agentic AI - Extended Detection and Response (XDR) Platforms** - Autonomous Task Execution - Proactive Assistance - Decision Making **Services - Network Detection and Response (NDR)** - Managed Services **Services - Extended Detection and Response (XDR)** - Managed Services ## Top NetWitness Platform Alternatives - [IBM QRadar SIEM](https://www.g2.com/products/ibm-ibm-qradar-siem/reviews) - 4.4/5.0 (281 reviews) - [Splunk Enterprise Security](https://www.g2.com/products/splunk-enterprise-security/reviews) - 4.3/5.0 (222 reviews) - [Microsoft Sentinel](https://www.g2.com/products/microsoft-sentinel/reviews) - 4.4/5.0 (272 reviews)