Customer stories NetWitness
Rebuilding analyst visibility around an established security business.
How a structured Analyst Relations programme helped NetWitness reconnect with the analyst community, explain its enterprise security capabilities and return to major research evaluations.
- Company
- Threat detection, investigation and response
- Ambition
- Rebuild analyst understanding and research visibility
- Engagement
- Former customer · May 2023–March 2025
- completed analyst interactions
- 79
- research firms engaged
- 14
- research mentions and inclusions across 5 firms
- 10+
Programme records: 28 June 2023–19 March 2025.
The starting point
A recognised name needed a current story.
NetWitness had a long history in cybersecurity and established relationships with industry analysts. Its technology served organisations with complex security environments, combining network visibility, log analysis, investigation and incident response.
Changes in ownership and organisational structure had disrupted the continuity of Analyst Relations. Following its operational separation from RSA, NetWitness lost access to corporate AR resources and went through a period of limited activity. Familiarity with the name no longer guaranteed an up-to-date understanding of the business.
The task was to explain NetWitness as a business in its own right: its priorities, its product direction and where its capabilities fitted within the markets analysts covered.
The objective
Restore continuity and research visibility.
NetWitness wanted a planned programme that connected its business priorities with the analysts covering its portfolio. That meant rebuilding relationships, extending its reach and giving analysts the evidence needed to assess its capabilities.
The programme covered several related areas, including security information and event management (SIEM), network detection and response (NDR), and incident response. Each required relevant expertise, a clear explanation of the offering and sustained follow-up.
Research participation was an important objective. So was creating a regular exchange in which senior leaders could explain the company’s direction, hear market perspectives and bring specialists into the discussion.
Why Kea
An AR partner that became part of the team.
NetWitness initially engaged Kea to help restart analyst outreach. The relationship developed into an ongoing partnership, providing the preparation, coordination and follow-through needed to sustain the programme.
Kea helped the team develop its analyst story and briefing materials, identify relevant relationships and prepare for research processes. Advice also covered where analyst subscriptions and content could support the company’s priorities.
The work
Senior leadership and specialist expertise.
The engagement began with Tod Ewasko as Chief Product Officer; he later became Chief Strategy Officer. Participation extended across senior leadership, with Arthur Fontaine, Director of Product and Solution Marketing, closely involved in the programme alongside product, technical and customer-facing specialists.
Senior leaders brought the strategic perspective. Colleagues working directly with the technology and customers supplied demonstrations, operational detail and evidence. Kea coordinated these contributions so that analysts could explore both the direction of the business and the substance behind it.
Map the relevant analyst community
Review existing relationships and research coverage, identify gaps and build a programme across major firms and specialist cybersecurity researchers.
Prepare the story and the people
Develop briefing content around the company’s direction, enterprise use cases and product capabilities, bringing the appropriate leaders and specialists into each conversation.
Sustain the exchange
Coordinate introductions, update briefings, demonstrations and follow-up so that product developments and analyst questions were addressed over time.
Support research participation
Organise questionnaires, evidence, demonstrations and factual reviews, helping teams contribute across the areas being evaluated.
What changed
A return to major research evaluations.
NetWitness completed 79 analyst interactions across 14 research firms between June 2023 and March 2025. These included briefings, demonstrations, inquiries and research discussions.
NetWitness returned to Gartner’s 2024 Magic Quadrant for Security Information and Event Management after being absent from the previous edition. Research coverage also included Gartner Hype Cycles, IDC MarketScape assessments for SIEM and NDR, GigaOm Radar reports for SIEM and NDR, KuppingerCole Leadership Compass reports, and Frost & Sullivan’s SIEM research.
These outcomes reflected NetWitness’s technology and the evidence its teams supplied, supported by a more consistent programme of analyst engagement.
NetWitness is a former Kea customer. On 17 March 2025, PartnerOne announced its acquisition of NetWitness from RSA. The ownership change brought the working relationship to an end. This story reflects the work and results achieved during the 2023–2025 programme.
Research mentions and inclusions across five firms
- Gartner
- IDC
- GigaOm
- KuppingerCole
- Frost & Sullivan
The customer’s perspective
A turnaround seen across the team.
The team’s G2 reviews describe the change from different perspectives: Tod Ewasko highlighted the turnaround in analyst engagement, Arthur Fontaine the ongoing partnership, and Ryan McKee the preparation that supported stronger positioning and multiple report placements.
“I appreciate their ability to quickly identify target markets and secure analyst briefs, driving a massive turnaround in just 12 months.”
“They're very skilled and experienced in AR, and act as a true partner in your AR activities.”
“The coaching and preparations the team provided allowed us to better position ourselves and refine our narrative to make a splash with every meeting we attended.”
Your next step
What should the market understand about you?
Talk to Kea about your enterprise ambition and the role Analyst Relations could play.
