--- title: NetWitness Platform Reviews meta\_title: 'NetWitness Platform Reviews 2026: Details, Pricing, & Features | G2' meta\_description: Filter 24 reviews by the users' company size, role or industry to find out how NetWitness Platform works for a business like yours. aggregate\_rating: rating\_value: 3.9 review\_count: 24 scale: '5' date\_modified: '2026-08-07' parent\_category: name: Cloud Security url: https://www.g2.com/categories/cloud-security --- ### NetWitness Platform Pros and Cons: Top 5 Advantages and Disadvantages #### Quick AI Summary Based on G2 Reviews Generated from real user reviews Users value the **centralized management** of NetWitness Platform for its comprehensive threat hunting capabilities across various data sources. [(1 mentions)](https://www.g2.com/products/netwitness-platform/reviews?filters%5Bsentiment_snippet%5D=2466514&qs=pros-and-cons#reviews) Users appreciate the **converged capabilities** of NetWitness Platform, which streamline threat hunting and reduce tool sprawl. [(1 mentions)](https://www.g2.com/products/netwitness-platform/reviews?filters%5Bsentiment_snippet%5D=2466582&qs=pros-and-cons#reviews) Users appreciate the **packet capture and replay capabilities** of NetWitness Platform, essential for thorough forensic investigations. [(1 mentions)](https://www.g2.com/products/netwitness-platform/reviews?filters%5Bsentiment_snippet%5D=2234425&qs=pros-and-cons#reviews) Users appreciate the **ability to capture full network packets** , enhancing their deep forensic investigation capabilities. [(1 mentions)](https://www.g2.com/products/netwitness-platform/reviews?filters%5Bsentiment_snippet%5D=1300374&qs=pros-and-cons#reviews) Users value the **centralized view** offered by the Management Console, enhancing efficiency in threat hunting across diverse environments. [(1 mentions)](https://www.g2.com/products/netwitness-platform/reviews?filters%5Bsentiment_snippet%5D=2466564&qs=pros-and-cons#reviews) Users find the **complex implementation** of NetWitness Platform challenging, needing significant technical expertise for deployment and upgrades. [(2 mentions)](https://www.g2.com/products/netwitness-platform/reviews?filters%5Bsentiment_snippet%5D=2234500&qs=pros-and-cons#reviews) Users find the **initial deployment and upgrades complicated** , often necessitating significant technical expertise and leading to instability. [(2 mentions)](https://www.g2.com/products/netwitness-platform/reviews?filters%5Bsentiment_snippet%5D=2234459&qs=pros-and-cons#reviews) Users find the **initial setup complex** , often needing extensive technical expertise, and face challenges during upgrades. [(2 mentions)](https://www.g2.com/products/netwitness-platform/reviews?filters%5Bsentiment_snippet%5D=2234484&qs=pros-and-cons#reviews) Users find the **deployment difficulties** of NetWitness Platform challenging, needing extensive expertise and facing upgrade instability. [(2 mentions)](https://www.g2.com/products/netwitness-platform/reviews?filters%5Bsentiment_snippet%5D=2234433&qs=pros-and-cons#reviews) Users find the **expertise required** for initial deployment and upgrades complicates their experience with NetWitness Platform. [(2 mentions)](https://www.g2.com/products/netwitness-platform/reviews?filters%5Bsentiment_snippet%5D=2234495&qs=pros-and-cons#reviews) ### 5 Pros or Advantages of NetWitness Platform ##### 1. Centralized Management Users value the **centralized management** of NetWitness Platform for its comprehensive threat hunting capabilities across various data sources. [ See 1 mentions ](https://www.g2.com/products/netwitness-platform/reviews?filters%5Bsentiment_snippet%5D=2466514&qs=pros-and-cons#reviews) See Related User Reviews ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") C Verified User Enterprise (\> 1000 emp.) 5.0/5 "All-in-One Security Console for Centralized Threat Hunting" What do you like about NetWitness Platform? It combines NDR, SIEM, UEBA, and SOAR capabilities into a single console. This convergence helps eliminate tool sprawl and provides a centralized view ##### 2. Cybersecurity Users appreciate the **converged capabilities** of NetWitness Platform, which streamline threat hunting and reduce tool sprawl. [ See 1 mentions ](https://www.g2.com/products/netwitness-platform/reviews?filters%5Bsentiment_snippet%5D=2466582&qs=pros-and-cons#reviews) See Related User Reviews ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") C Verified User Enterprise (\> 1000 emp.) 5.0/5 "All-in-One Security Console for Centralized Threat Hunting" What do you like about NetWitness Platform? It combines NDR, SIEM, UEBA, and SOAR capabilities into a single console. This convergence helps eliminate tool sprawl and provides a centralized view ##### 3. Features Users appreciate the **packet capture and replay capabilities** of NetWitness Platform, essential for thorough forensic investigations. [ See 1 mentions ](https://www.g2.com/products/netwitness-platform/reviews?filters%5Bsentiment_snippet%5D=2234425&qs=pros-and-cons#reviews) See Related User Reviews PY pushpendra Y. Mid-Market (51-1000 emp.) 4.0/5 "A Powerhouse in Endpoint, Network, and SIEM Integration." What do you like about NetWitness Platform? Users love the platform’s ability to capture full network packets and replay sessions, which is invaluable for deep forensic investigation. ##### 4. Investigation Users appreciate the **ability to capture full network packets** , enhancing their deep forensic investigation capabilities. [ See 1 mentions ](https://www.g2.com/products/netwitness-platform/reviews?filters%5Bsentiment_snippet%5D=1300374&qs=pros-and-cons#reviews) See Related User Reviews PY pushpendra Y. Mid-Market (51-1000 emp.) 4.0/5 "A Powerhouse in Endpoint, Network, and SIEM Integration." What do you like about NetWitness Platform? Users love the platform’s ability to capture full network packets and replay sessions, which is invaluable for deep forensic investigation. ##### 5. Management Console Users value the **centralized view** offered by the Management Console, enhancing efficiency in threat hunting across diverse environments. [ See 1 mentions ](https://www.g2.com/products/netwitness-platform/reviews?filters%5Bsentiment_snippet%5D=2466564&qs=pros-and-cons#reviews) See Related User Reviews ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") C Verified User Enterprise (\> 1000 emp.) 5.0/5 "All-in-One Security Console for Centralized Threat Hunting" What do you like about NetWitness Platform? It combines NDR, SIEM, UEBA, and SOAR capabilities into a single console. This convergence helps eliminate tool sprawl and provides a centralized view ### 5 Cons or Disadvantages of NetWitness Platform ##### 1. Complex Implementation Users find the **complex implementation** of NetWitness Platform challenging, needing significant technical expertise for deployment and upgrades. [ See 2 mentions ](https://www.g2.com/products/netwitness-platform/reviews?filters%5Bsentiment_snippet%5D=2234500&qs=pros-and-cons#reviews) See Related User Reviews ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") C Verified User Enterprise (\> 1000 emp.) 5.0/5 "All-in-One Security Console for Centralized Threat Hunting" What do you dislike about NetWitness Platform? Initial deployment is complex, often requiring significant expertise . Upgrades are particularly tricky, with some users reporting instability during PY pushpendra Y. Mid-Market (51-1000 emp.) 4.0/5 "A Powerhouse in Endpoint, Network, and SIEM Integration." What do you dislike about NetWitness Platform? Complex initial setup and deployment, often requiring significant technical expertise. ##### 2. Complexity Users find the **initial deployment and upgrades complicated** , often necessitating significant technical expertise and leading to instability. [ See 2 mentions ](https://www.g2.com/products/netwitness-platform/reviews?filters%5Bsentiment_snippet%5D=2234459&qs=pros-and-cons#reviews) See Related User Reviews ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") C Verified User Enterprise (\> 1000 emp.) 5.0/5 "All-in-One Security Console for Centralized Threat Hunting" What do you dislike about NetWitness Platform? Initial deployment is complex, often requiring significant expertise . Upgrades are particularly tricky, with some users reporting instability during PY pushpendra Y. Mid-Market (51-1000 emp.) 4.0/5 "A Powerhouse in Endpoint, Network, and SIEM Integration." What do you dislike about NetWitness Platform? Complex initial setup and deployment, often requiring significant technical expertise. ##### 3. Complex Setup Users find the **initial setup complex** , often needing extensive technical expertise, and face challenges during upgrades. [ See 2 mentions ](https://www.g2.com/products/netwitness-platform/reviews?filters%5Bsentiment_snippet%5D=2234484&qs=pros-and-cons#reviews) See Related User Reviews ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") C Verified User Enterprise (\> 1000 emp.) 5.0/5 "All-in-One Security Console for Centralized Threat Hunting" What do you dislike about NetWitness Platform? Initial deployment is complex, often requiring significant expertise . Upgrades are particularly tricky, with some users reporting instability during PY pushpendra Y. Mid-Market (51-1000 emp.) 4.0/5 "A Powerhouse in Endpoint, Network, and SIEM Integration." What do you dislike about NetWitness Platform? Complex initial setup and deployment, often requiring significant technical expertise. ##### 4. Deployment Difficulties Users find the **deployment difficulties** of NetWitness Platform challenging, needing extensive expertise and facing upgrade instability. [ See 2 mentions ](https://www.g2.com/products/netwitness-platform/reviews?filters%5Bsentiment_snippet%5D=2234433&qs=pros-and-cons#reviews) See Related User Reviews ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") C Verified User Enterprise (\> 1000 emp.) 5.0/5 "All-in-One Security Console for Centralized Threat Hunting" What do you dislike about NetWitness Platform? Initial deployment is complex, often requiring significant expertise . Upgrades are particularly tricky, with some users reporting instability during PY pushpendra Y. Mid-Market (51-1000 emp.) 4.0/5 "A Powerhouse in Endpoint, Network, and SIEM Integration." What do you dislike about NetWitness Platform? Complex initial setup and deployment, often requiring significant technical expertise. ##### 5. Expertise Required Users find the **expertise required** for initial deployment and upgrades complicates their experience with NetWitness Platform. [ See 2 mentions ](https://www.g2.com/products/netwitness-platform/reviews?filters%5Bsentiment_snippet%5D=2234495&qs=pros-and-cons#reviews) See Related User Reviews ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") C Verified User Enterprise (\> 1000 emp.) 5.0/5 "All-in-One Security Console for Centralized Threat Hunting" What do you dislike about NetWitness Platform? Initial deployment is complex, often requiring significant expertise . Upgrades are particularly tricky, with some users reporting instability during PY pushpendra Y. Mid-Market (51-1000 emp.) 4.0/5 "A Powerhouse in Endpoint, Network, and SIEM Integration." What do you dislike about NetWitness Platform? Complex initial setup and deployment, often requiring significant technical expertise. ## Top-Rated Alternatives [ ![IBM QRadar SIEM](https://images.g2crowd.com/uploads/product/hd_favicon/7d76baae79036d41d25c4a6c46e5af43/ibm-ibm-qradar-siem.svg "IBM QRadar SIEM") IBM QRadar SIEM 4.4/5(338) ](https://www.g2.com/products/ibm-ibm-qradar-siem/reviews) [ ![Microsoft Sentinel](https://images.g2crowd.com/uploads/product/hd_favicon/a8a99a96fda235658139f710592f8a53/microsoft-sentinel.svg "Microsoft Sentinel") Microsoft Sentinel 4.4/5(297) ](https://www.g2.com/products/microsoft-sentinel/reviews) [ ![Splunk Enterprise Security](https://images.g2crowd.com/uploads/product/hd_favicon/b92838221b8df42dd6b5bb09c9f8ff55/splunk-enterprise-security.svg "Splunk Enterprise Security") Splunk Enterprise Security 4.3/5(248) ](https://www.g2.com/products/splunk-enterprise-security/reviews) [ View All Alternatives ](https://www.g2.com/products/netwitness-platform/competitors/alternatives) ![Verified User in Information Services](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Information Services") CI Verified User in Information Services Enterprise (\> 1000 emp.) 2/19/2026 "All-in-One Security Console for Centralized Threat Hunting" 5/5 What do you like best about NetWitness Platform? It combines NDR, SIEM, UEBA, and SOAR capabilities into a single console. This convergence helps eliminate tool sprawl and provides a centralized view for threat hunting across network, endpoint, and cloud data . Review collected by and hosted on G2.com. What do you dislike about NetWitness Platform? Initial deployment is complex, often requiring significant expertise . Upgrades are particularly tricky, with some users reporting instability during version migrations . Review collected by and hosted on G2.com. What problems is NetWitness Platform solving and how is that benefiting you? The problem is that the Security teams often juggle 10-15 different tools (NDR, SIEM, UEBA, etc.), leading to context switching, high costs, and analyst fatigue. The Solution & Benefit that this platform provides is it converges Network Detection, Log Management (SIEM), User Behavior Analytics, and Orchestration into a single platform with a unified interface. Review collected by and hosted on G2.com. Show More Validated ReviewerSource: Organic PY pushpendra Y. Security Analyst Mid-Market (51-1000 emp.) 8/11/2025 "A Powerhouse in Endpoint, Network, and SIEM Integration." 4/5 What do you like best about NetWitness Platform? Users love the platform’s ability to capture full network packets and replay sessions, which is invaluable for deep forensic investigation. Review collected by and hosted on G2.com. What do you dislike about NetWitness Platform? Complex initial setup and deployment, often requiring significant technical expertise. Review collected by and hosted on G2.com. What problems is NetWitness Platform solving and how is that benefiting you? Threats are increasingly complex, evasive, and distributed, traditional log-centric tools often miss subtle indicators. Review collected by and hosted on G2.com. Show More Validated ReviewerSource: Organic Review from User Profile ![Andrew S.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Andrew S.") AS Andrew S. SOC T2 Mid-Market (51-1000 emp.) 11/16/2024 "Threat hunting playform" 5/5 What do you like best about NetWitness Platform? Netwitness siem solution is a great tool for threat hunting Review collected by and hosted on G2.com. What do you dislike about NetWitness Platform? Api integration needs to be enhancement for soc Review collected by and hosted on G2.com. What problems is NetWitness Platform solving and how is that benefiting you? API integration Review collected by and hosted on G2.com. Show More Validated ReviewerSource: Thank You page ![Marcus Joshua S.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Marcus Joshua S.") MS Marcus Joshua S. Network Security Consultant Enterprise (\> 1000 emp.) 10/10/2023 "An Intelligent Platform for Businesses - NetWitness Platform XDR" 4/5 What do you like best about NetWitness Platform? As a user and part of security team in my company, the platform's ease of use and compact interface is a must on our daily monitoring. This alone is vital in part of investigation and response to any incidents that may arise. Based on my colleague, support team is also helpful and there are resources that is available to the community. Overall a great tool to assist on our job. Review collected by and hosted on G2.com. What do you dislike about NetWitness Platform? It will take some time to get into the familiarity of navigating through the platform. This is not for an entry-level position, but learnings this tool will be a solid help in the future. Review collected by and hosted on G2.com. What problems is NetWitness Platform solving and how is that benefiting you? This greatly helps in our day-to-day monitoring and response which improves our overall team performance. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite RR Richardson R. Mid-Market (51-1000 emp.) 11/9/2023 "NetWitness Platform XDR" 4.5/5 What do you like best about NetWitness Platform? Customer Support Number of Features Threat correlation Review collected by and hosted on G2.com. What do you dislike about NetWitness Platform? Integration Challenges and Resource demands Review collected by and hosted on G2.com. What problems is NetWitness Platform solving and how is that benefiting you? Handling multiple environment are able to support multi-tenancy, correlating seemingly unrelated events, providing a more coherent picture of potential security incidents and aiding in the identification of complex attack patterns. Review collected by and hosted on G2.com. Show More Validated ReviewerSource: Organic ![John B.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "John B.") JB John B. Cyber Threat Hunter Mid-Market (51-1000 emp.) 9/23/2023 "Exploring new waters" 5/5 What do you like best about NetWitness Platform? Few weeks ago, I had an opportunity using the platform. And for what I have found out that its not so complicated after all. Review collected by and hosted on G2.com. What do you dislike about NetWitness Platform? DIdnt find any as of this few weeks using it. Review collected by and hosted on G2.com. What problems is NetWitness Platform solving and how is that benefiting you? For some security platforms kinda hard to make a playbook. But on this platform I just could create it very quick and run it right away so easily. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Verified User in Computer & Network Security](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Computer & Network Security") CC Verified User in Computer & Network Security Small-Business (50 or fewer emp.) 10/1/2023 "Netwitness XDR Experience" 3.5/5 What do you like best about NetWitness Platform? It is easy to use and provide better analysis options Review collected by and hosted on G2.com. What do you dislike about NetWitness Platform? Support can be improved on devices integrations and troubleshooting Review collected by and hosted on G2.com. What problems is NetWitness Platform solving and how is that benefiting you? It provides overall security posture view, easy to investigate and provide customize alerts to configure Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Haitham A.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Haitham A.") HA Haitham A. SOC Senior Analyst Mid-Market (51-1000 emp.) 12/28/2021 "RSA NetWitness and SOC" 4/5 What do you like best about NetWitness Platform? 1- The visibility RSA NetWitness packet (NDR) provides is brilliant. 2- Easy installation and deployment. 3- The scalability of deployment is very good. 4- The combination of NDR, EDR and Logs in the same interface. 5- Effective technical support. Review collected by and hosted on G2.com. What do you dislike about NetWitness Platform? 1- Documentation that is poor. 2- Integration with log sources is limited in comparison with other brands. 3- Building use cases is not easy, and poor built-in use cases. 4- Weak parsing of logs. 5- The user interface is not friendly enough. 6- Respond module requires significant enhancement. Review collected by and hosted on G2.com. What problems is NetWitness Platform solving and how is that benefiting you? 1- Databases stability. 2- Meeting client expectations. 3- Solving contract conflicts. 4- Maintaining the NetWitness service availability. 5- Engaging RSA NetWtiness management to solve complex problems and disputes. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite NG Neelesh G. C Enterprise (\> 1000 emp.) 6/16/2021 "RSA Netwitness Logs & Networks" 4.5/5 What do you like best about NetWitness Platform? The response speed at GUI for Security Analysis and threat hunting purpose is the best part. Even to fetch the old data for any of the audit purposes it takes just seconds. Review collected by and hosted on G2.com. What do you dislike about NetWitness Platform? I don't like the Hybrid component i.e Hybrid log decoder (Decoder+ Concentrator) as if in case we face problem in any of the component we have to face trouble with other as well. Better to prefer all the standalone component in RSA Netwitness. Review collected by and hosted on G2.com. Recommendations to others considering NetWitness Platform: It's a one of the good SIEM technology in the market one can opt for Review collected by and hosted on G2.com. What problems is NetWitness Platform solving and how is that benefiting you? All the technical issues whether it is related to storage, licences, upgrade or any other troubleshooting part I am working upon. The benefits of even getting a issue is that you will get to learn things from that as the RSA support is quite good. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: G2 invite ![Verified User in Banking](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Banking") IB Verified User in Banking Enterprise (\> 1000 emp.) 10/27/2021 "RSA Netwitness Review" 4/5 What do you like best about NetWitness Platform? The investigation tab is helping me a lot during my investigation as it shows all the available meta keys in the logs, which makes it easier to notice suspicious artifacts. Review collected by and hosted on G2.com. What do you dislike about NetWitness Platform? RSA Net witness needs enhancing in showing the details of the entire packet, for example (headers and body) Review collected by and hosted on G2.com. What problems is NetWitness Platform solving and how is that benefiting you? The investigation tab is helping me a lot during my investigation as it shows all the available meta keys in the logs, which makes it easier to notice suspicious artifacts. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: G2 invite ##### Categories on G2 [Extended Detection and Response (XDR) Platforms](https://www.g2.com/categories/extended-detection-and-response-xdr-platforms)[Security Information and Event Management (SIEM)](https://www.g2.com/categories/security-information-and-event-management-siem)[Security Orchestration, Automation, and Response (SOAR)](https://www.g2.com/categories/security-orchestration-automation-and-response-soar) [Extended Detection and Response (XDR) Platforms](https://www.g2.com/categories/extended-detection-and-response-xdr-platforms)[Security Information and Event Management (SIEM)](https://www.g2.com/categories/security-information-and-event-management-siem)[Security Orchestration, Automation, and Response (SOAR)](https://www.g2.com/categories/security-orchestration-automation-and-response-soar)[User and Entity Behavior Analytics (UEBA)](https://www.g2.com/categories/user-and-entity-behavior-analytics-ueba)[Network Detection and Response (NDR)](https://www.g2.com/categories/network-detection-and-response-ndr) [Show MoreShow Less](javascript:void(0);) ##### Explore More [Which financial data APIs platforms avoid unexpected deprecations or data format changes that break existing integrations?](https://www.g2.com/discussions/which-financial-data-apis-platforms-avoid-unexpected-deprecations-or-data-format-changes-that-break-existing-integrations)[Which wide column database company is known for the best support and SLAs?](https://www.g2.com/discussions/which-wide-column-database-company-is-known-for-the-best-support-and-slas)[Which FSM platforms work well for teams that deal with complex multi-step jobs but do not have dedicated IT staff on hand?](https://www.g2.com/discussions/which-fsm-platforms-work-well-for-teams-that-deal-with-complex-multi-step-jobs-but-do-not-have-dedicated-it-staff-on-hand) [What automation orchestration benefits do IT resilience platforms deliver for system reliability and disaster recovery planning?](https://www.g2.com/discussions/what-automation-orchestration-benefits-do-it-resilience-platforms-deliver-for-system-reliability-and-disaster-recovery-planning)[Recommendations for the best accounting service provider](https://www.g2.com/discussions/what-are-the-best-accounting-service-providers)[Pros and Cons Details](https://www.g2.com/products/netwitness-platform/reviews?qs=pros-and-cons) [Show MoreShow Less](javascript:void(0);)