No more typing reviews! Try our Samantha, our new voice AI agent.

NetWitness Platform vs SentinelOne Singularity AI SIEM comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jun 3, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

NetWitness Platform
Ranking in Security Information and Event Management (SIEM)
34th
Average Rating
7.4
Reviews Sentiment
7.4
Number of Reviews
36
Ranking in other categories
Log Management (36th)
SentinelOne Singularity AI ...
Ranking in Security Information and Event Management (SIEM)
7th
Average Rating
8.6
Reviews Sentiment
6.4
Number of Reviews
18
Ranking in other categories
AI Observability (6th)
 

Mindshare comparison

As of November 2026, in the Security Information and Event Management (SIEM) category, the mindshare of NetWitness Platform is 1.2%, up from 0.7% compared to the previous year. The mindshare of SentinelOne Singularity AI SIEM is 1.2%, up from 1.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Information and Event Management (SIEM) Mindshare Distribution
ProductMindshare (%)
SentinelOne Singularity AI SIEM1.2%
NetWitness Platform1.2%
Other97.6%
Security Information and Event Management (SIEM)
 

Featured Reviews

reviewer1130436 - PeerSpot reviewer
Information Technology Security and Infrastructure Expert at a government with 201-500 employees
Helps to deal with potential attacks and is available at a reasonable price
My company has had many benefits from the use of the product in the last eight years. The tool has streamlined our company's incident response process since it serves as a log repository, which allows us to correlate events and access different technology stacks. In our company, we were able to actually find some potential attacks, so it has been very helpful. The tool's integration capability isn't so great. In my company, we managed to integrate it with our Microsoft Azure Subscription, after which we managed to integrate it with other tools. You will face a lot of difficulties if you want to integrate it with your database monitoring tool, PAM solutions, or IAM products. The product has done well overall for my company's teams to deal with their workflow efficiency. I would not recommend the product to others. I rate the tool a seven out of ten.
reviewer2915043 - PeerSpot reviewer
System Engineer at a consultancy with 11-50 employees
Centralized monitoring has improved threat detection speed and simplified alert investigations
It would be helpful if some alerts had cleaner, clearer explanations right away, such as suggesting next steps inside the alert, and fewer clicks to get from alert to raw event details would make the triage even faster. Integration could be more plug-and-play, and improving built-in guidance for new analysts would help cut the learning curve. Performance-wise, it is adequate for us, but easier bulk searches would make investigations smoother. It would be helpful for each alert to come with clear suggested next steps right inside the alert, so analysts do not have to guess or click around too much. Making integration more plug-and-play would smooth out setup for new data sources.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"This solution has a very good dashboard with a separate tab for incidents and alerts."
"The most valuable features are the threat prediction and network forensics."
"The development of use cases on the SSA console is quite user friendly, which means that the security analyst or the researcher does not have to learn another language."
"Overall, it is easy to implement."
"It's quite economical compared to other solutions in the market."
"Their technical support responds quickly and are knowledgable."
"The most valuable features are the integration and ease of use."
"Since the solution has been under way we have seen a large decrease of threats and proactive reactions to incidents."
"I will strongly recommend this, because after SentinelOne Singularity AI SIEM we have reduced our engineering time to a certain degree as it has helped us to do investigations fast, we get actual alerts that matter and can prioritize them properly, and the monitoring capability is now completely in one single platform so we do not have to go here and there, which has given us good ROI in total."
"SentinelOne Singularity AI SIEM's AI-powered analytics does affect our SOC's ability to reduce false positives; that is one of the biggest advantages because the manpower that I have is limited."
"I have experienced no issues with SentinelOne Singularity AI SIEM; it is the best product I have ever used, very stable, handy, easy to manage, and excellent with its AI-driven capabilities."
"The AI features of SentinelOne Singularity AI SIEM are absolutely perfect."
"AI-powered threat hunting using natural language stands out the most to me because it allows me to investigate security data using plain language questions instead of manually writing complex queries, which reduces the time required for threat hunting and makes investigations more accessible for analysts who are less familiar with query languages."
"When they face attacks such as ransomware and are dissatisfied with their existing solutions, they switch to SentinelOne Singularity AI SIEM, which is quite good in detecting unknown threats, cleaning the system, and handling ransomware."
"With the help of this tool, the response time to sophisticated threats has improved significantly, and it recently cuts the MTTR time using Purple AI by 40%."
"The beauty of the integration is that it integrates very smoothly with third-party tools, so we do not need to think about the parsers, coding, depending on the codes, or the software developers."
 

Cons

"The log system is a bit complex and has room for improvement."
"I am not happy with the RSA support. Sometimes they can be really annoying because it takes so long to get the support that you need."
"Security needs improvement."
"We encountered stability issues in the earlier versions, and much fewer in the newer versions."
"I cannot say that the solution was stable because it tended to crash."
"It is overly complicated. It has taken years to implement and the return on investment just isn't there."
"RSA NetWitness Logs and Packets can improve the threat level aspect, it is lacking compared to other solutions. Whenever any hacking activity or any other threat factor occurred they used to provide the coverages very fast when comparing RSA NetWitness Logs and Packets. I heard the other three solutions, from a discussion with my team members who had experience in other solutions, they used to say that. Whenever any issues happened across the globe RSA NetWitness Logs and Packets are a little bit slow improving those detection mechanisms."
"The threat detection capability and centralizing and upgrading capability need to be improved. The threat alert capability needs to be improved as well because there is some lag time at present. They need to work on their database search too."
"Customer support could be better because it is frequently transferred to various agents."
"The AI-generated investigations can occasionally require manual validation for complex incidents."
"It would be helpful if some alerts had cleaner, clearer explanations right away, such as suggesting next steps inside the alert, and fewer clicks to get from alert to raw event details would make the triage even faster."
"There is room for improvement when it comes to the technical support quality and expertise of SentinelOne. Sometimes, the technical support team does not know how to resolve certain issues and takes time to respond, often requiring follow-up interactions within 24 hours."
"SentinelOne Singularity AI SIEM is a strong platform, but there are a few areas where it could be improved."
"I assess the efficiency of SentinelOne Singularity AI SIEM in improving our responses to sophisticated threats as not having improved a lot because, as I mentioned earlier, there are a few things that need improvement, including the false positive rate."
"Another area for improvement is that the product is somewhat expensive. Pricing could be improved as well."
"It is quite good, but the only downside is that it is costly."
 

Pricing and Cost Advice

"We have a perpetual license, so the total cost of ownership is not very expensive. It's a good investment."
"Our license is for one year."
"The new pricing and licensing mechanisms are fair. I would advise always to get the full solution (i.e., not only Logs)."
"The licenses are good but the cost is very expensive."
"We are on an annual license for the use of the solution."
"Many clients are not able to purchase the packet capability because there is a huge amount of data, and the cost depends on the number of EPS (Events per second), as well as the number of gigabytes of data per day."
"It provides tools to assist in selecting the appropriate license and usage scenarios."
"The product price was reasonable for my region and the market."
Information not available
report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
920,929 professionals have used our research since 2012.
 

Comparison Review

VS
Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
Construction Company
12%
Financial Services Firm
11%
Comms Service Provider
11%
Outsourcing Company
10%
Outsourcing Company
22%
Media Company
9%
Manufacturing Company
7%
Comms Service Provider
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise7
Large Enterprise20
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise6
Large Enterprise4
 

Questions from the Community

What is your experience regarding pricing and costs for NetWitness Platform?
The pricing is comparable to others, and I consider the cost to be intermediate. Specific cost details are unknown to me.
What needs improvement with NetWitness Platform?
There is currently no need for improvement in the SIEM ( /categories/security-information-and-event-management-siem ), though there could be potential enhancements by integrating with AI.
What is your primary use case for NetWitness Platform?
I use NetWitness Platform ( /products/netwitness-platform-reviews ) in the financial industry as a good product with excellent capabilities and integration with various devices.
What needs improvement with SentinelOne Singularity AI SIEM?
My impression of the AI-driven threat detection capabilities is that it helps a little bit, but they need to tune it a bit because we are seeing too many false positives recently. Since we are a pa...
What is your primary use case for SentinelOne Singularity AI SIEM?
SentinelOne Singularity AI SIEM is a tool that we use to support our clients. Our organization is a service-based organization, so we use SIEM to provide services to software-based clients. We are ...
What advice do you have for others considering SentinelOne Singularity AI SIEM?
In my organization, approximately eighty people work with SentinelOne Singularity AI SIEM. Our clients vary in size; we have small businesses, medium enterprises, and large enterprises as well. Sen...
 

Also Known As

RSA Security Analytics
No data available
 

Overview

 

Sample Customers

Los Angeles World Airports, Reply
Information Not Available
Find out what your peers are saying about NetWitness Platform vs. SentinelOne Singularity AI SIEM and other solutions. Updated: September 2026.
920,929 professionals have used our research since 2012.