| NetWitness | |
| Type: | Private |
| Predecessor: | ManTech International, then Dell Technologies[1] [2] |
| Fate: | Acquired by Symphony Technology Group[3] |
| Area Served: | Worldwide |
| Industry: | Threat detection |
| Foundation: | 1997 |
| Location City: | Bedford, Massachusetts |
| Location Country: | United States |
NetWitness is a network security company that provides real-time network forensics automated threat detection, response, and analysis solutions. The company is based in Bedford, Massachusetts. In 2011, NetWitness was acquired by EMC Corporation and in 2020 was acquired by Symphony Technology Group as a stand-alone business unit, part of RSA Security.[4]
In the mid-1990s the NetWitness technology was established by CTX Corporation, a Washington D.C. based system integrator. The technology, initially chartered as a US Government research project, was created to help analysts better understand large volumes of captured network data for various types of investigations. CTX Corporation was subsequently acquired by ManTech International Corporation (NASDAQ:) in December 2002.[5] At Mantech, the technology was further developed to aid Federal Law Enforcement in criminal investigations and support professional service engagements for the Federal Government and commercial organizations.
In November 2006, NetWitness Corporation was spun out of Mantech, by Nick Lantuh, who was brought in to run the NetWitness Product Group and execute the spin-out. As an independent company, NetWitness focused on bringing its network analysis technology to the worldwide market.[6] Since the spin-out, NetWitness focused on products to support deep, real-time network situational awareness and agile network response.
In February 2010, NetWitness announced the discovery of a major ZeuS botnet infestation impacting roughly 2,400 companies across the globe. The company dubbed this botnet the “Kneber ZeuS botnet” after the criminal gang was involved. This news went viral as it shed light on the continued vulnerabilities of the world's corporate Information Security practices and provided a deep dive understanding of the inner-workings of a botnet.[7] [8] [9] [10]
NetWitness Visualize, announced in July 2010, provided a new way to visualize network traffic.[11]
In August 2010, NetWitness was named the 21st fastest growing private company in the United States in the annual Inc 500 report. With 7,745.8 percent three-year growth, the company was also ranked as the fastest growing privately held enterprise security product company and the fastest growing company in the Washington, D.C. area.[12]
On April 1, 2011, NetWitness was acquired by EMC Corporation for an undisclosed amount. Former NetWitness products were integrated into EMC's security division, RSA Security.[13]
NetWitness’ CEO, Amit Yoran, was formerly Director of the Department of Homeland Security’s National Cyber Security division.