Try our new research platform with insights from 80,000+ expert users

LogRhythm UEBA [EOL] vs Trend Vision One comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 26, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

LogRhythm UEBA [EOL]
Average Rating
7.2
Reviews Sentiment
6.5
Number of Reviews
12
Ranking in other categories
No ranking in other categories
Trend Vision One
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
96
Ranking in other categories
Endpoint Detection and Response (EDR) (4th), Network Detection and Response (NDR) (3rd), Extended Detection and Response (XDR) (2nd), Attack Surface Management (ASM) (3rd), AI-Powered Cybersecurity Platforms (3rd), AI Security (2nd)
 

Featured Reviews

HS
Senior Cyber Cons at MDS
Improves threat investigation speed and reduces cyber risks but requires a more comprehensive use case library
In general, if something needs to be improved in the algorithm, it would be the dashboards. The dashboards with solutions such as Splunk are very neat and clean. I would also like to improve the use cases LogRhythm has. It does not have a very large use case library, so the content engineer needs to develop use cases rapidly alongside emerging threats.
SemihDalkıran - PeerSpot reviewer
Cyber Security Senior Technical Consultant at a consultancy with 11-50 employees
Built faster threat response and improved visibility with real-time monitoring and flexible deployment
Trend Vision One allows us to monitor attacks in real time, which is a significant benefit. We can quickly see where the attack is coming from. Trend Vision One enables us to use different products with a flexible license. For example, if a customer is using endpoint security and wants to switch to another solution, they can instantly use a different Trend Micro product, such as email. Trend Vision One has helped to reduce the time to detect and respond to different threats, as it can respond to attacks very quickly. With playbook templates, in cases of recurring attacks, responses can be made quickly using predefined playbooks. Trend Vision One has helped to reduce noise from false positives. There have been false positives before, but it was due to the customer not telling us which app they were using. Best practice configurations must be applied properly to avoid such issues. Trend Vision One helps customers consolidate the use of security vendors and reduce silos by offering one platform for all product management.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Good capability pinpointing specific cyber incidents."
"What I like most about LogRhythm UEBA is that it allows you to identify and analyze end-user behaviors and suspicious activities within the systems."
"I can investigate attacks more quickly using machine learning tools."
"It has a lot of features. It has file integration monitoring."
"LogRhythm UEBA’s best feature is the dashboard. It provides several graphs, charts, and event logs."
"It is easy to monitor users and that is how the solution is adding value to our firm."
"LogRhythm UEBA [EOL] has positively impacted our organization by improving our ability to detect insider threats and compromised accounts earlier, resulting in better security visibility, reduced false positives, and faster investigations and response times, which helped the team operate more effectively with greater confidence."
"The tool's most valuable feature is server threat hunting."
"For scalability, I would give a rating of ten out of ten."
"They were one of the companies, early on, that spent a lot of time integrating their toolsets, and I was really impressed with that... the endpoint management system could reach out to the Deep Discovery system on the network and pick up something that it perceived as a suspicious object."
"Trend Micro XDR is stable, scalable, and reasonably priced."
"Its threat intelligence sources enable it to automatically block domains known for command-and-control callbacks, effectively preventing attacks from those sources."
"The proactive approach is the best feature."
"XDR provided a much more deep view into what is actually happening."
"We haven't had any issues with configurations or customizations."
"Trend Vision One solves these problems by providing greater detection capabilities and automated response across all of these layers."
 

Cons

"It should have better mitigation with other solutions and be tightly integrated with other solutions. It has to be improved."
"LogRhythm UEBA [EOL] could be improved with more flexible tuning options and clearer model transparency to better understand why certain behaviors are flagged; enhanced integrations with additional data sources and more intuitive dashboards would also help improve usability and investigation efficiency."
"It would be helpful if there were more guidance provided for integrating with unsupported devices."
"The UI could be improved a little bit."
"The product should improve its dashboards. Splunk has neat dashboards. Additionally, we would like to enhance the use cases provided by LogRhythm as its use case library is not as extensive as other tools. Its machine-learning capabilities need to improve when compared to other solutions. It lacks risk quantification in a single, transparent view for individuals such as CSOs."
"The on-premises LogRhythm is not very scalable. When considering packets per second or the MPS needed for additional logs such as web application logs, scalability is usually found in cloud products."
"In general, if something needs to be improved in the algorithm, it would be the dashboards."
"The search feature needs to be improved."
"The support has been delayed at times."
"We are just having a problem with Trend right now. We have had short problems twice before—in the sense that when Trend does an upgrade on the platform, or anything else, there are disruptions afterwards."
"Expanding compatibility to include currently unsupported security tools, such as firewalls, would be beneficial."
"The zero trust is a bit complicated compared to other parts of the solution."
"The information captured by Trend Vision One needs to be more detailed."
"In comparison to Trellix, one disadvantage of Trend Micro is the DLP feature. Trend Micro has a light DLP, while Trellix offers a perfect DLP."
"Improving the user interface would be helpful—it can be confusing, especially if you do not use it daily."
"Having more variables within the playbook would be useful. It would allow us to have more refined playbooks for the business. It would allow us to take stronger action through a playbook. It will give us confidence to target a particular area of business where our risk tolerance might be higher or lower. We would like to have more granular playbooks."
 

Pricing and Cost Advice

"It is quite a budget-friendly product."
"LogRhythm UEBA's pricing is affordable for small and medium businesses."
"The pricing is nice when compared to other products in the industry."
"Licensing is on a yearly basis. It's not expensive compared to its competitors."
"I rate the product's pricing a three out of ten. However, the cloud version is expensive. You need to hire professional services for deployment and migrations, which can be expensive."
"As LogRhythm UEBA is pretty expensive, I'd give its pricing a seven out of ten."
"Its price is very decent. It suits our requirements."
"Competitors offer comparable solutions at slightly lower prices, so Vision One has room to reduce its pricing by 15 percent, given that Trend Vision One charges approximately $10 per endpoint."
"I feel that Vision One is a bit expensive. As for the pricing or licensing, I would rate it a seven out of ten."
"Trend Micro XDR is expensive, and you have to pay for it yearly."
"It would be nice if it was a little bit cheaper, but I think it has a fair price. It is comparable to others in the market."
"While the pricing and licensing for Trend Vision One are generally acceptable, the need to purchase additional features separately adds complexity."
"The solution is fairly priced."
"Trend Micro solutions are very expensive compared to other solutions. Even though everything is in one console, each feature requires a separate license."
report
Use our free recommendation engine to learn which Extended Detection and Response (XDR) solutions are best for your needs.
880,901 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
12%
Retailer
10%
Financial Services Firm
10%
Manufacturing Company
7%
Computer Software Company
11%
Manufacturing Company
10%
Comms Service Provider
9%
Financial Services Firm
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise4
Large Enterprise4
By reviewers
Company SizeCount
Small Business50
Midsize Enterprise12
Large Enterprise39
 

Questions from the Community

What do you like most about LogRhythm UserXDR?
The solution is useful for privilege accounts and super admin accounts. It is beneficial from a security perspective. The tool uses machine learning rather than threshold-based alerts. For instance...
What is your experience regarding pricing and costs for LogRhythm UserXDR?
I rate the product's pricing a three out of ten. However, the cloud version is expensive. You need to hire professional services for deployment and migrations, which can be expensive.
What needs improvement with LogRhythm UserXDR?
In general, if something needs to be improved in the algorithm, it would be the dashboards. The dashboards with solutions such as Splunk are very neat and clean. I would also like to improve the us...
What do you like most about Trend Micro XDR?
I appreciate the value of real-time activity monitoring.
What is your experience regarding pricing and costs for Trend Micro XDR?
Trend Vision One is not so expensive; it is very moderate.
What needs improvement with Trend Micro XDR?
Trend Vision One could bring in more data loss prevention capabilities specifically on the endpoints, as the current offering lacks some important capabilities.They could also bring in data loss pr...
 

Also Known As

LogRhythm UserXDR, LogRhythm Enterprise UEBA
Trend Micro XDR, Trend Micro XDR for Users, Trend Vision One - XDR for Networks
 

Interactive Demo

Demo not available
 

Overview

 

Sample Customers

Information Not Available
Panasonic North America, Decathlon, Fischer Homes, Banijay Benelux, Unigel, DHR Health,
Find out what your peers are saying about CrowdStrike, Trend Micro, SentinelOne and others in Extended Detection and Response (XDR). Updated: January 2026.
880,901 professionals have used our research since 2012.