NetWitness
NetWitness provides cybersecurity platforms for threat detection, investigation and response across IT and OT environments.
- Based in
- Riverside, United States
- Founded
- 1997
- Ownership
- Private
- Certifications
- ISO 9001, ISO/IEC 27001, SOC 2 Type 1
About NetWitness
NetWitness sells a unified threat detection and response platform to large enterprises and government agencies. Its customers include over 500 enterprise and government organisations, with a focus on regulated industries and complex IT and OT environments. The company provides modules for network, endpoint, log, and operational technology security. The platform collects data from logs, packets, endpoints, NetFlow, and IoT devices into a single view. It uses machine learning and behavioural analytics to detect known and unknown threats, then offers workflows for investigation and automated response. NetWitness also provides incident response, professional, and educational services to support implementation and skills development.
Products
- NetWitness NDRNetwork threat detection software that uses full packet capture, metadata, and NetFlow to find threats across on-premises, cloud, and virtual networks.
- NetWitness SIEMSecurity information and event management solution that provides visibility into log data for threat detection and compliance.
- NetWitness OT SecurityOperational technology security that gives visibility across industrial networks with automated asset discovery and IT-OT integration.
- NetWitness EDREndpoint detection and response that monitors activity on all endpoints to detect new and non-malware attacks and reduce incident response scope.
- NetWitness SOARSecurity orchestration, automation, and response solution that automates incident management and documentation for security operations centres.
- NetWitness UEBAA SaaS offering that applies behaviour analytics and machine learning to data captured by NetWitness to detect unknown threats.
Ownership and deals
- PartnerOne acquired NetWitnessReport on PartnerOne buying NetWitness (opens in a new tab)
Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Amounts are in US dollars.