Skip to content

Customer stories NetWitness

Rebuilding analyst visibility around an established security business.

How a structured Analyst Relations programme helped NetWitness reconnect with the analyst community, explain its enterprise security capabilities and return to major research evaluations.

Company
Threat detection, investigation and response
Ambition
Rebuild analyst understanding and research visibility
Engagement
Former customer · May 2023–March 2025
completed analyst interactions
79
research firms engaged
14
research mentions and inclusions across 5 firms
10+

Programme records: 28 June 2023–19 March 2025.

A recognised name needed a current story.

NetWitness had a long history in cybersecurity and established relationships with industry analysts. Its technology served organisations with complex security environments, combining network visibility, log analysis, investigation and incident response.

Changes in ownership and organisational structure had disrupted the continuity of Analyst Relations. Following its operational separation from RSA, NetWitness lost access to corporate AR resources and went through a period of limited activity. Familiarity with the name no longer guaranteed an up-to-date understanding of the business.

The task was to explain NetWitness as a business in its own right: its priorities, its product direction and where its capabilities fitted within the markets analysts covered.

Restore continuity and research visibility.

NetWitness wanted a planned programme that connected its business priorities with the analysts covering its portfolio. That meant rebuilding relationships, extending its reach and giving analysts the evidence needed to assess its capabilities.

The programme covered several related areas, including security information and event management (SIEM), network detection and response (NDR), and incident response. Each required relevant expertise, a clear explanation of the offering and sustained follow-up.

Research participation was an important objective. So was creating a regular exchange in which senior leaders could explain the company’s direction, hear market perspectives and bring specialists into the discussion.

An AR partner that became part of the team.

NetWitness initially engaged Kea to help restart analyst outreach. The relationship developed into an ongoing partnership, providing the preparation, coordination and follow-through needed to sustain the programme.

Kea helped the team develop its analyst story and briefing materials, identify relevant relationships and prepare for research processes. Advice also covered where analyst subscriptions and content could support the company’s priorities.

Senior leadership and specialist expertise.

The engagement began with Tod Ewasko as Chief Product Officer; he later became Chief Strategy Officer. Participation extended across senior leadership, with Arthur Fontaine, Director of Product and Solution Marketing, closely involved in the programme alongside product, technical and customer-facing specialists.

Senior leaders brought the strategic perspective. Colleagues working directly with the technology and customers supplied demonstrations, operational detail and evidence. Kea coordinated these contributions so that analysts could explore both the direction of the business and the substance behind it.

  1. Map the relevant analyst community

    Review existing relationships and research coverage, identify gaps and build a programme across major firms and specialist cybersecurity researchers.

  2. Prepare the story and the people

    Develop briefing content around the company’s direction, enterprise use cases and product capabilities, bringing the appropriate leaders and specialists into each conversation.

  3. Sustain the exchange

    Coordinate introductions, update briefings, demonstrations and follow-up so that product developments and analyst questions were addressed over time.

  4. Support research participation

    Organise questionnaires, evidence, demonstrations and factual reviews, helping teams contribute across the areas being evaluated.

A return to major research evaluations.

NetWitness completed 79 analyst interactions across 14 research firms between June 2023 and March 2025. These included briefings, demonstrations, inquiries and research discussions.

NetWitness returned to Gartner’s 2024 Magic Quadrant for Security Information and Event Management after being absent from the previous edition. Research coverage also included Gartner Hype Cycles, IDC MarketScape assessments for SIEM and NDR, GigaOm Radar reports for SIEM and NDR, KuppingerCole Leadership Compass reports, and Frost & Sullivan’s SIEM research.

These outcomes reflected NetWitness’s technology and the evidence its teams supplied, supported by a more consistent programme of analyst engagement.

NetWitness is a former Kea customer. On 17 March 2025, PartnerOne announced its acquisition of NetWitness from RSA. The ownership change brought the working relationship to an end. This story reflects the work and results achieved during the 2023–2025 programme.

Research mentions and inclusions across five firms

  • Gartner
  • IDC
  • GigaOm
  • KuppingerCole
  • Frost & Sullivan

A turnaround seen across the team.

The team’s G2 reviews describe the change from different perspectives: Tod Ewasko highlighted the turnaround in analyst engagement, Arthur Fontaine the ongoing partnership, and Ryan McKee the preparation that supported stronger positioning and multiple report placements.

“I appreciate their ability to quickly identify target markets and secure analyst briefs, driving a massive turnaround in just 12 months.”

Tod EwaskoChief Product Officer, later Chief Strategy Officer, during the programme · G2 review, 16 April 2025

“They're very skilled and experienced in AR, and act as a true partner in your AR activities.”

Arthur FontaineDirector, Product and Solution Marketing, NetWitness · G2 review, September 2024

“The coaching and preparations the team provided allowed us to better position ourselves and refine our narrative to make a splash with every meeting we attended.”

Ryan McKeeNetWitness programme participant · G2 review, 9 May 2025

Your next step

What should the market understand about you?

Talk to Kea about your enterprise ambition and the role Analyst Relations could play.

Talk to Kea