Side by side
Microsoft Defender for Business vs NetWitness Platform
Both stand on user and entity behavior analytics software. Which one you can start free with, which one lets you read the code, and what each costs once you pay.
Free trial AndroidAPIiPhone+2
Visit Microsoft Defender for Business 
Paid APILinuxMac+3
NetWitness combines network, endpoint, log, and response functions for complex organizational environments. Prospective buyers should request pricing and assess the platform against their deployment and operational needs.
Visit NetWitness PlatformThe facts
| Microsoft Defender for Business | NetWitness Platform | |
|---|---|---|
| Free plan | A free trial | Not published |
| Open source | Not published | No |
| Runs on | Android, API, iPhone, Mac, Windows | API, Linux, Mac, Self-hosted, Web, Windows |
| Lowest paid plan | See the plans | Free or on request |
| Plans published | 3 | 1 |
| Maker | Microsoft Defender for Business | Not published |
| Website | microsoft.com | netwitness.com |
| On user and entity behavior analytics software | #2 of 21 | #10 of 21 |
Microsoft Defender for Business: what it does well
NetWitness Platform: what it does well
- Modules include NDR, EDR, SIEM, SOAR, and UEBA.
- SIEM ingests logs from over 350 sources.
- SIEM includes templates for four named compliance areas.
- SIEM deployment includes on-premises, virtual, and cloud options.
- Real-time alerting is listed.
What to know first
- Pricing is available on request.
- The stated target is large, complex enterprise environments.
- The listed platforms are Linux, self-hosted, and web.
Alternatives to Microsoft Defender for Business Alternatives to NetWitness Platform The whole list