NetWitness Platform vs Securonix Unified Defense SIEM
NetWitness Platform
netwitness.com
Securonix Unified Defense SIEM
securonix.comSide by side
| Figure | NetWitness Platform | Securonix Unified Defense SIEM |
|---|---|---|
| Price from | — | — |
| Free plan | — | — |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | — |
| macOS | Yes | — |
| Linux | Yes | — |
| API | Yes | Yes |
| Self-hosted | Yes | — |
| Plans published | 1 | 1 |
| Spec score · SIEM Software | 8.0 (#11) | 6.8 (#21) |
| Founded | LinkedIn lists NetWitness as founded in 1997. | A Securonix-hosted analyst report states that the company was founded in 2008. |
| Headquarters | LinkedIn lists Boston, Massachusetts as headquarters. | Securonix says it is headquartered in Addison, Texas. |
| Integrations | The product advertises plug-and-play connections with SIEM, NDR, SOAR, cloud and endpoint platforms plus third-party security tools. | Securonix describes an open architecture with more than 750 integrations across cloud, endpoint, identity, SaaS, and other data sources. |
| Purpose | NetWitness is a threat detection, investigation, and response platform for complex IT and OT environments. | Unified Defense SIEM combines SIEM, UEBA, SOAR, threat intelligence, and autonomous detection in one cloud-native platform. |
| Security controls | The Trust Center lists audit logging, database-encryption configuration, penetration-test reports, backups, encryption at rest and encryption in transit. | Securonix's data processing agreement lists ISO 27001, SOC 2 Type II with HITRUST, and PCI AOC audits or certifications, and describes AES-256-or-better encryption at rest and TLS 1.2-or-better in transit. |
Plans
Securonix Unified Defense SIEM
- Unified Defense SIEMPriced on request
In their own words
NetWitness Platform
NetWitness Platform is a threat detection, investigation, and response platform for complex IT and OT environments. Its modules include network detection and response, endpoint detection and response, SIEM, SOAR, and UEBA, with additional OT security coverage described. NDR uses full packet capture and metadata analysis to monitor infrastructure and reconstruct sessions. Machine learning and behavioral analytics are described for identifying known and unknown threats and anomalous behavior, with real-time alerting. SIEM ingests logs from over 350 sources, including AWS, Azure, Office 365, and Salesforce, through Syslog, ODBC, SFTP, FTPS, and SNMP. It provides reporting templates and use cases for SOX, PCI, HIPAA, and NERC. SIEM can run on-premises, virtually, or in the cloud, including AWS and Azure. The EDR agent is described for hundreds to 100,000 endpoints with near-zero end-user impact. NetWitness is paid, supports Linux, self-hosted, and web deployments, and lists pricing on request.
Securonix Unified Defense SIEM
Securonix Unified Defense SIEM has no write-up on Specifiction yet; its figures are above.