No more typing reviews! Try our Samantha, our new voice AI agent.

Anomali vs Trend Micro Worry-Free Services Suites [EOL] comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Feb 26, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
112
Ranking in other categories
Endpoint Protection Platform (EPP) (4th), Endpoint Detection and Response (EDR) (6th), Extended Detection and Response (XDR) (4th), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (1st)
Anomali
Average Rating
7.8
Reviews Sentiment
5.7
Number of Reviews
8
Ranking in other categories
Security Information and Event Management (SIEM) (21st), User Entity Behavior Analytics (UEBA) (9th), Advanced Threat Protection (ATP) (17th), Threat Intelligence Platforms (TIP) (4th), Extended Detection and Response (XDR) (14th)
Trend Micro Worry-Free Serv...
Average Rating
8.4
Reviews Sentiment
6.5
Number of Reviews
12
Ranking in other categories
No ranking in other categories
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
reviewer2843913 - PeerSpot reviewer
Lead Cyber Threat Intelligence Incident Response Engineer & Security Engineer at a retailer with 10,001+ employees
Centralized threat intelligence has streamlined dark web monitoring and real‑time IOC detection
The best features Anomali offers are that it acts as an application that pulls data from different solutions. As I mentioned earlier, we utilize Mandiant, Flashpoint, and other CTI solutions. Using Anomali, I push all the results into it, providing a single UI to see what Flashpoint and Google Mandiant are providing rather than jumping into different platforms, which can be time-consuming. Anomali helps us stay on a single platform and provides the required results. The user interface in Anomali is very good. I have worked in Anomali for five years and think they have a great UI for writing queries and finding specific results much more efficiently than in other solutions where you need to scroll down through different widgets. Anomali has a query-based language, similar to SQL, that helps us dig out specific results, whether vulnerability-related or concerning threat actors and TTPs. We can also perform string-based searches. I think it's an awesome feature. Furthermore, regarding integration, Anomali has capabilities to integrate with different downstream applications such as Palo Alto, allowing us to create playbooks to block domains, URLs, or IPs directly within the firewall. Anomali has positively impacted my organization by reducing the time required to find intel specific to our needs. We can create our own queries specific to our organization and pull out results related to any posts within the dark web or any activities from threat actors targeting us. This capability enables us to create saved searches that provide exact results. I estimate that Anomali has saved me about 30% of my time.
Mohammed Zain - PeerSpot reviewer
Sr.Infrastructure & Security Administrator at Bakheet Co. For Machinery
Achieve effective email management while identifying areas for security upgrades
There are a couple of issues we have encountered while using Trend Micro Worry-Free Services Suites for the past four or five years. The first is the Business Email Compromise (BEC) issue. Even though we configured the business email compromise option, we still face this issue sometimes where people are getting emails directly with our email ID. We were not able to get a satisfactory answer from them regarding the BEC issue. The ransomware protection issue for the old servers or outdated servers and recovery of the data needs improvement in Trend Micro Worry-Free Services Suites. The ransomware protection issue for old servers and business email compromise also needs to be upgraded because even though it's configured, we still face this BEC issue. The response time of the support also needs improvement.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Palo Alto is the core of the security infrastructure in the environment."
"The best feature of Cortex XDR by Palo Alto Networks is that it collects logs from different sections such as the endpoint, the network, and the cloud, making it easy to investigate alerts, collect some of the investigation packages related to the infected machines, and provide live response."
"Cortex is the best tool for endpoint detection, and I have used it to verify hashes or domains to identify malicious activity, trigger playbooks that automate and gather endpoint logs, block malicious processes, and update incident tickets, showcasing end-to-end processes with automation in investigation and reducing the analysis workflow."
"The most valuable feature is that you can select remote access of any machine for sandboxing."
"Cortex XDR can integrate the firewalls and determine the tendencies of the attacks. It's a new generation antivirus, with protection endpoints and detection response. It is very easy to use and everybody can operate the solution."
"I don't have to do much monitoring with it; I don't have to have anybody manually looking at this, it gives us reports, and it lets us know if something needs to be addressed, and we can easily address it."
"Its ability to react to cyber data attacks is awesome."
"The tool is designed to scale for large enterprises and handle large volumes of data."
"The feature I have found most valuable is credential monitoring. This feature is easy and quick."
"I have found Cyber threat intelligence (CTI) very useful and concise. The solution is easy to use."
"Anomali is a very versatile platform, quite effective, and very fast when it comes to downloading and maintaining the information of the indicators of compromise."
"The most valuable aspect of Anomali is the threat modeling capability."
"We now have a very robust collection of threat intelligence based on the capabilities that Anomali provides."
"Anomali positively impacts our organization, notably improving our vulnerability management program under reducing attack surface management."
"Anomali has impacted my organization positively because our SOC team, which is actively monitoring all the tools—either SIM, SOAR, or threat intelligence platform—operates in multiple shifts."
"I have found Cyber threat intelligence (CTI) very useful and concise. The solution is easy to use."
"Trend Micro Worry-Free Services Suites has an inbuilt auto scan facility. It is very good at detection and response, and it includes a web filtering option."
"The most valuable features of Trend Micro Worry-Free Services Suites that I found are the antivirus, anti-spamming, anti-malware services that customers are looking for and using, and they are satisfied with that."
"Trend Micro Worry-Free Services Suites has an inbuilt auto scan facility."
"We can get in-depth details of the emails going in and out, and we can create rules; it's easy to manage and navigate, the main thing is that it's easy to handle."
"The most valuable feature of the solution is the ease of deployment."
"The most important feature is behaviour detection."
"The load balancer feature is excellent."
"The solution's ability to operate without placing a heavy burden on our system resources is particularly commendable."
 

Cons

"Cortex does not offer an on-premises solution. However, some customers would prefer not to be on the cloud. It would be ideal if it could offer something on-prem as well."
"Cortex XDR by Palo Alto Networks is not only pricey; it is extremely expensive."
"There is also no recovery feature; if some endpoint is under attack there must be the possibility of recovering it or restoring it to a normal state."
"They've been having some issues with updating their endpoint agents, and it has been quite frustrating."
"There is a severe gap in functionality between Windows, Linux, and Mac versions."
"The solution lags to the real-time scenarios here and there."
"This is a very costly product."
"The solution eats memory of the computer, unlike anything I've ever seen."
"Less code in integration would be nice when building blocks."
"A lot of tools can give you many features, such as CTI intelligence and a tax service reduction. However, many people are combining different tools together to have more capabilities. It is up to the consumer whether they want to have multiple tools or have one tool that serves the purpose. Anomali Enterprise could improve by combining all the other tools' features into one solution."
"Pricing and licensing are good, but the costs for purchasing threat feeds are somewhat complicated and a bit on the higher side."
"An area for improvement is the intelligence sharing within the Anomali community. The tagging system can be inconsistent, as any company can use any tags for their reporting."
"Support in the past has been top-notch, but recent trends indicate that it has taken a back seat, as we often don't get answers for days."
"My experience with Anomali's customer support has not gone so well for us."
"Anomali Enterprise could improve by combining all the other tools' features into one solution."
"One more improvement I would mention is regarding compromised credential monitoring. Anomali should increase their capability to fetch details from various dark web solutions where threat actors post compromised credentials."
"Trend Micro should improve its Worry-Free Services Suites, particularly the agent for Windows operating systems."
"The solution's documentation is not good, and I'm struggling to change global configurations."
"Network vulnerability scanning could be improved."
"The log management feature needs to be improved, specifically, the ability to send logs from the console via API."
"The licensing aspect seems costly, and the license cost increases yearly, which is a concern for us."
"The pricing of Trend Micro is a little bit higher compared to Sophos."
"The solution’s scalability is limited."
"The EDR part of the product is an area of concern where improvements are required."
 

Pricing and Cost Advice

"It's way too expensive, but security is expensive. You pay for your licensing, and then you pay for someone to monitor the stuff."
"I did PoCs on products called Cylance and CrowdStrike. Although, I consider these products and they were also good, when it come to cost and budgetary factors, Traps has been proven to be better than the other two products. It is quite cost-effective and delivers all the entire solution which we require."
"The pricing is a little high. It is per user per year."
"Cortex XDR by Palo Alto Networks is quite an expensive solution."
"The price of the product is not very economical."
"The cost depends on your chosen license type, like Pro or other licenses."
"I feel it is fairly priced."
"It has a yearly renewal."
"When comparing the price of Anomali Enterprise to other solutions it is in the medium to high range. However, I am satisfied with the price."
"The product is available at a very good price point."
"We pay a yearly licensing fee for the solution, which is too expensive."
"I rate the tool's pricing a five out of ten."
report
Use our free recommendation engine to learn which Extended Detection and Response (XDR) solutions are best for your needs.
896,692 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
12%
Construction Company
11%
Comms Service Provider
9%
Manufacturing Company
8%
Financial Services Firm
14%
Manufacturing Company
7%
Construction Company
6%
Computer Software Company
6%
Computer Software Company
11%
Comms Service Provider
11%
Security Firm
7%
Financial Services Firm
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business47
Midsize Enterprise20
Large Enterprise51
By reviewers
Company SizeCount
Small Business2
Midsize Enterprise1
Large Enterprise10
By reviewers
Company SizeCount
Small Business10
Midsize Enterprise2
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
What needs improvement with Anomali ThreatStream?
An area for improvement is the intelligence sharing within the Anomali community. The tagging system can be inconsist...
What is your primary use case for Anomali ThreatStream?
I use Anomali ( /products/anomali-reviews ) for threat hunting, threat collection, operationalization of intelligence...
What advice do you have for others considering Anomali ThreatStream?
For new users, I recommend taking the training provided by Anomali as it is very well articulated. I advise reading t...
What needs improvement with Trend Micro Worry-Free Sevices Suits?
There are a couple of issues we have encountered while using Trend Micro Worry-Free Services Suites for the past four...
What is your primary use case for Trend Micro Worry-Free Sevices Suits?
I am working with the Trend Micro One solution. I use Trend Micro Worry-Free Services Suites, which includes six comp...
What advice do you have for others considering Trend Micro Worry-Free Sevices Suits?
The tool is effective in terms of email security to stop phishing attacks. It's effective up to 90-95%. I rate Trend ...
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
Match, Lens, ThreatStream, STAXX, Anomali Security Analytics
No data available
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Bank of England, First Energy, UBISOFT, Bank of Hope, Blackhawk Network
Information Not Available
Find out what your peers are saying about CrowdStrike, SentinelOne, TrendAI and others in Extended Detection and Response (XDR). Updated: May 2026.
896,692 professionals have used our research since 2012.