Try our new research platform with insights from 80,000+ expert users

Cortex XSIAM vs Trend Vision One comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 2, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
4.6
Cortex XSIAM enhances incident management and provides significant financial returns by automating detection and response, reducing staffing needs.
Sentiment score
6.6
Trend Vision One offers positive ROI by reducing costs, enhancing efficiency, improving security, and increasing operational effectiveness.
Our company went through a ransomware event, and if Trend Vision One had not stopped it, that could've closed the company's doors.
Trend Vision One has improved our ROI by 30 percent.
Thankfully, we also had cyber security insurance, and the insurance covered the incidents because, through Trend Micro and the implementation of the solution, along with the data it provided, we were able to demonstrate what had happened.
 

Customer Service

Sentiment score
5.8
Cortex XSIAM support varies; premium service excels, while non-premium experiences depend on distributor expertise and sometimes face delays.
Sentiment score
6.8
Trend Vision One's customer service is praised for quick responses, technical expertise, personalized assistance, and proactive user feedback integration.
With premium support, core Palo Alto technical experts handle issues directly.
It is ineffective in terms of responding to basic queries and addressing future requirements.
The Palo Alto support team is fully responsive and helpful.
It's not just about high-level support with the chatbot; rather, when an issue occurs, we have the experts on-site and ready to respond swiftly, which is crucial.
Trend Micro supported us throughout the transition from on-prem servers or other vendors, providing top-notch service at all times.
Support responds quickly, and together we’ve been able to solve all challenges in our day-to-day operations.
 

Scalability Issues

Sentiment score
6.5
Cortex XSIAM is scalable for various business sizes with cloud-based integration, but lacks on-premises deployment and mixed reviews.
Sentiment score
7.9
Trend Vision One efficiently scales across user sizes and locations, praised for seamless deployment, integration, and adaptable performance.
Without proper integration, scaling up with more servers is meaningless.
Cortex XSIAM is highly scalable.
I’d give scalability a 10 because nearly everything is integrated.
Our growth over the past three years has never caused performance or expansion issues.
I don't think I've encountered any issues with scalability; we're growing steadily, and I believe Trend Vision One can keep up with our demand.
 

Stability Issues

Sentiment score
7.6
Cortex XSIAM is praised for its stability, rapid issue resolution, and efficient performance despite minor post-update challenges.
Sentiment score
8.1
Trend Vision One is highly stable and reliable, with minimal issues, excellent support, and seamless system integration.
The product was easy to install and set up and worked right.
Overall, Cortex XSIAM is stable.
It works really nice and performs really efficiently after configuration.
Trend Vision One works exactly as intended and has never hindered our operations, feeling more a collaborator than a roadblock.
The stability is very high.
Stability is critically important for us with Trend Vision One; it is very stable, providing continuous 24/7 support.
 

Room For Improvement

Cortex XSIAM needs improved integration, performance, interface, pricing, support, ASM, AI, onboarding, tagging, and identity management enhancements.
Trend Vision One needs better integration, reporting, intuitiveness, compatibility, automation, support, incident detection, AI, documentation, and access processes.
Obtaining validation for integrations from Palo Alto takes around eight months, which is quite long.
Cortex XSIAM needs improvements in terms of data onboarding, parsers, and third-party integration supports.
Cortex XSIAM is on the expensive side and requires substantial improvement in pricing.
Trend Vision One does not initially disclose to customers that they need to purchase additional licenses and pay more for integrations.
Consolidating case details into a single, more intuitive view would streamline investigations and save time.
The deployment can be complex, and we'd like an easier process, especially when integrating with on-prem and cloud environments.
 

Setup Cost

Cortex XSIAM is viewed as competitively priced but complex, aligning with market expectations despite some regional variations.
Trend Vision One offers competitive pricing and flexible subscription options, with licensing complexity due to modular features.
The first impression is that XSIAM would be more expensive than others we tried.
The product is very expensive.
Cortex XSIAM is pretty expensive, and the licensing process is not very comfortable.
I find the credit model non-transparent—you can't always tell how many licenses apply to which product.
I have seen others that are double or triple the price.
Customers who cannot afford CrowdStrike's pricing can easily opt for Trend Vision One.
 

Valuable Features

Cortex XSIAM excels in machine learning threat detection, SOAR features, and advanced automation for efficient security management.
Trend Vision One enhances cybersecurity with advanced detection, centralized management, AI threat intelligence, and swift, user-friendly response solutions.
The advanced visualization capabilities of the product are important for understanding security trends in an organization.
One of the valued aspects of the product is its use of artificial intelligence to detect security vulnerabilities.
The flexibility for creating manual workflows stands out.
The most important features of Vision One include visibility, AI integration, attack pattern analysis, predictive analytics, and centralized visibility and management across protection layers.
The most critical feature of Vision One is that it gives us a single console for threat management.
Its ability to identify unmonitored endpoints and perform log inspection, which establishes operational baselines and detects anomalies, proves invaluable for threat identification.
 

Categories and Ranking

Cortex XSIAM
Ranking in AI-Powered Cybersecurity Platforms
7th
Average Rating
8.6
Reviews Sentiment
6.7
Number of Reviews
15
Ranking in other categories
Security Information and Event Management (SIEM) (13th), Identity Threat Detection and Response (ITDR) (5th)
Trend Vision One
Ranking in AI-Powered Cybersecurity Platforms
3rd
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
82
Ranking in other categories
Endpoint Detection and Response (EDR) (4th), Network Detection and Response (NDR) (3rd), Extended Detection and Response (XDR) (4th), Attack Surface Management (ASM) (2nd)
 

Mindshare comparison

As of October 2025, in the AI-Powered Cybersecurity Platforms category, the mindshare of Cortex XSIAM is 13.0%, up from 6.7% compared to the previous year. The mindshare of Trend Vision One is 4.9%, down from 10.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
AI-Powered Cybersecurity Platforms Market Share Distribution
ProductMarket Share (%)
Trend Vision One4.9%
Cortex XSIAM13.0%
Other82.1%
AI-Powered Cybersecurity Platforms
 

Featured Reviews

AKASH MAJUMDER - PeerSpot reviewer
Incident response times have significantly reduced with efficient device integration and log parsing capabilities
Cortex XSIAM needs improvements in terms of data onboarding, parsers, and third-party integration supports. Additionally, a future update request is to enable tagging of endpoints in groups, similar to a feature available in Cortex XDR. The AI analytics need fine-tuning because some use cases are not working from my side.
Dennis Niedling - PeerSpot reviewer
The CREM feature is an absolutely essential feature that helps us meet security requirements
Since we started using Trend Vision One, we've been able to enhance our security posture significantly. Trend Vision One has improved significantly over time in providing centralized visibility and control. It started as a set of individual products, but now it feels like one integrated solution. This reduces the need for interfaces or multiple analysis tools. That's why we pursued the one-platform strategy. Trend Vision One has definitely helped consolidate our use of security vendors. We previously used standalone products for endpoint and email protection that weren't integrated. Now, we get the benefits of an integrated solution. I'd estimate we're 50–70% better in security now than we were two years ago. The Cyber Risk Exposure Management (CREM)feature is absolutely essential. Even though we're not critical infrastructure, the NIS2 directive gives us security guidelines. CREM helps us meet these requirements. It is very important to our organization that Trend Vision One integrates AI into the platform. Pattern recognition in forensic data is no longer manageable by humans due to the volume of events. Machine learning is essential to process these and filter what needs human attention. Trend Vision One has improved our organization significantly. Security tasks used to be manual. Now, technology prevents issues or supports staff in detecting them. This shift from manual to technical solutions greatly increased our security. Trend Vision One has reduced the time we spend detecting and responding to threats. I'd say we're 80% faster than before. The platform gives us consolidated data upfront, so we don't have to search for event clues manually. Trend Vision One has helped reduce false alarms. I'd estimate a 50–60% time saving. We have more alerts now than years ago, but also better systems to handle them, making the whole process more efficient. Trend Vision One has helped reduce our cyber risk overall. We now know where gaps are before they become problems, whereas in the past we had to guess. That's a massive improvement. When it comes to operations, the CREM solution helps us identify vulnerabilities in systems. If we patch them, they disappear from the reports—this gives us actionable insights, which is incredibly helpful. It took about half a year to realize the benefits of Trend Vision One after implementation.
report
Use our free recommendation engine to learn which AI-Powered Cybersecurity Platforms solutions are best for your needs.
872,706 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
12%
Manufacturing Company
10%
Financial Services Firm
10%
Government
7%
Computer Software Company
22%
Manufacturing Company
8%
Comms Service Provider
7%
Financial Services Firm
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise2
Large Enterprise4
By reviewers
Company SizeCount
Small Business40
Midsize Enterprise11
Large Enterprise34
 

Questions from the Community

What do you like most about Cortex XSIAM?
It is an effective solution in terms of performance and functionalities.
What is your experience regarding pricing and costs for Cortex XSIAM?
I did not participate in pricing discussions for Cortex XSIAM solutions, so I cannot provide a review regarding prices for this solution.
What needs improvement with Cortex XSIAM?
Cortex XSIAM is on the expensive side and requires substantial improvement in pricing. There are other features that could be improved, including integration with vendors such as CyberArk. I would ...
What do you like most about Trend Micro XDR?
I appreciate the value of real-time activity monitoring.
What is your experience regarding pricing and costs for Trend Micro XDR?
Regarding pricing, Trend Vision One offers very competitive rates compared to CrowdStrike and Cylance. Customers who cannot afford CrowdStrike's pricing can easily opt for Trend Vision One.
What needs improvement with Trend Micro XDR?
Areas that need improvement in Trend Vision One include the AI-based mechanism, AI-based detections, and AI-based autonomous detections, which are currently lacking. Additionally, they need to add ...
 

Also Known As

No data available
Trend Micro XDR, Trend Micro XDR for Users, Trend Vision One - XDR for Networks
 

Interactive Demo

Demo not available
 

Overview

 

Sample Customers

Information Not Available
Panasonic North America, Decathlon, Fischer Homes, Banijay Benelux, Unigel, DHR Health,
Find out what your peers are saying about Cortex XSIAM vs. Trend Vision One and other solutions. Updated: September 2025.
872,706 professionals have used our research since 2012.