Try our new research platform with insights from 80,000+ expert users

Flowmon vs Trend Vision One comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Nov 6, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Flowmon
Ranking in Network Detection and Response (NDR)
16th
Average Rating
8.6
Reviews Sentiment
7.5
Number of Reviews
4
Ranking in other categories
Network Monitoring Software (41st)
Trend Vision One
Ranking in Network Detection and Response (NDR)
3rd
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
70
Ranking in other categories
Endpoint Detection and Response (EDR) (4th), Extended Detection and Response (XDR) (5th), Attack Surface Management (ASM) (2nd), AI-Powered Cybersecurity Platforms (3rd)
 

Mindshare comparison

As of May 2025, in the Network Detection and Response (NDR) category, the mindshare of Flowmon is 1.8%, up from 1.4% compared to the previous year. The mindshare of Trend Vision One is 1.6%, up from 1.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Network Detection and Response (NDR)
 

Featured Reviews

Pifu Lin - PeerSpot reviewer
Quick identification of network issues enhances performance monitoring
We will try to Proof of Concept (POC) to a client in Taiwan. We just use the features for the Network Performance Monitor (NPM) Flowmon is more easy to understand and helps find network issues more quickly. We need this solution to monitor the network performance. We started using it three…
DavidBowman - PeerSpot reviewer
It improves the detection speed, but it could be more customizable
They need to stop changing Vision One once a week. They're in a hurry to change things so badly and so fast that I can't find where stuff is half the time, which is a challenge sometimes. I've given one piece of feedback to their product guys. One thing that they're trying to make is a SIEM. It's a product where you input all the logs from your tools, and it creates additional insights into how things look. They've been kind of playing the "me too" game on that, even though that's not what I bought the product for. They have a new gateway where I can take my firewall of email logs and send it over there. In theory, it's supposed to do a more comprehensive evaluation of all my stuff to improve that risk index score. I'm not impressed with it, and I've told them as much. I feel if you're good at something, you should keep working on that and not try to be all the things to all the people. I bought a different email solution even though it would have been 10 times easier to just stay with their email solution because they aren't great at it. They are great at other things, but they're playing the "me too" game with some of their products. Their competitors do this, so they should be doing this, too. They need to pick a product and keep being good at that. If they're going to roll new things out, they should do it but do it right. They have a button to isolate an endpoint because it looks bad, but it doesn't usually work. I've had no chance to argue with the product guys to show them examples of how their button doesn't work. You think it does, but it doesn't work in a real environment. That can be a challenge sometimes. I can see in the data showing what is a false positive. But it doesn't save me time helping them figure out how to fix the problem in their engine. It can help me identify it as a false positive, but it doesn't apply that consistently. It will ignore the false positive for that device, but if they start detecting a false positive on Apple devices, I have eight thousand Apple devices and get 8,000 alerts. I can tell that specific false positive, but it doesn't learn from that particularly well. We use the executive dashboards, but I don't find them particularly useful. One is the ability to customize. That has gotten a little better, and it'll be better in the future. Most of what they have on there are data points that are generic and not particularly actionable. That's why it's called an executive dashboard. Executives want to see if we are secure, but it's hard for me to find out why our attack surface risk went down by x percentage. I don't know. It says that on the dashboard, but it doesn't give me specific details about why. I find it confuses my executives, and it's not useful for me because it doesn't give me things to work on. It will give me generic things on the executive dashboard like you have a thousand accounts with an old password. Those are big generic things, but I also can't tell it that our password policy is different from what your automatic detection model means, and I don't have a problem with that, so quit lowering my risk score. The risk score is useless. In theory, it's based on the random intelligence they're getting from their various customers. I'm in K-12 education, so they have a decent amount of K-12 customers, but it's a subset, and the baseline of what's common in K-12 education is not the same. There's not enough data to make that particularly clean or useful. Vision One is not custom, and that's part of my beef. That index score is based on whatever random report they're looking at from their data sources at any given moment in time. It's nice, but I'd rather have one that's based on your particular circumstances. Instead, it's saying that the number one attack threat surface for school districts is email phishing. It's too generic.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The artificial intelligence and automatic detection system in Flowmon Solution are perfect for every, type of customer, such as government and commerce."
"The solution is stable."
"It is an open platform, so in terms of integration, we are quite happy. We can integrate it with other SNMP solutions. We can also integrate it with security solutions, such as a SIEM solution."
"Flowmon is more easy to understand and helps find network issues more quickly."
"Flowmon is more easy to understand and helps find network issues more quickly."
"The best part is the XDR threat investigation, which includes different modules like Observer Attack Techniques, Workbench, and Detection Model Manager."
"It is so helpful to have something that pulls all the data into one visual representation of the events."
"The solution is very easy to use."
"Scaling is not a problem at all."
"The user interface is very good."
"The most significant recent change has been the addition of the new AI companion."
"The most valuable feature is the network protection shield on every server, which isolates attacks and prevents our clients from being affected."
"Trend Vision One provides centralized visibility and management across protection layers, which is crucial for compliance."
 

Cons

"I do not know the detailed pricing."
"The licensing price could be better."
"If there was better visualization in Flowmon Solution it would be good."
"It would be helpful to have more details about the monitoring of the infrastructure. It should have support for SNMP. This is something that is currently not there in the product."
"The zero trust is a bit complicated compared to other parts of the solution."
"The support should be improved."
"Expanding compatibility to include currently unsupported security tools, such as firewalls, would be beneficial."
"There should be a bit more dynamism when it comes to their playbooks in terms of the action triggers. That is the only thing that I would want to see a bit more."
"The product needs to have a lot more maturity, and they need to improve the overall technical support framework for getting the value out of XDR."
"They need to stop changing Vision One once a week. They're in a hurry to change things so badly and so fast that I can't find where stuff is half the time, which is a challenge sometimes."
"Improving the user interface would be helpful—it can be confusing, especially if you do not use it daily."
"It would be ideal if they could improve the control of connectivity between sensors."
 

Pricing and Cost Advice

"The price of the solution could be better."
"The licensing fee accrues only once, but that of support is annual."
"It works with a permanent license, and then you can pay for the support. For the gold support, you need to pay yearly."
"The pricing for Trend Vision One is reasonable."
"It is very good. The flexibility to temporarily exceed license limits when setting up new devices is helpful, as it allows us to ensure security before purchasing additional licenses."
"Trend Vision One is cost-effective because it offers detailed reporting and environment control features."
"Trend Micro XDR is expensive but we got a good deal from Trend Micro."
"The cost is considered fairly priced."
"Trend Micro XDR is expensive, and you have to pay for it yearly."
"Trend Micro's licensing is outsourced to third-party vendors, resulting in price variations depending on the vendor."
"Trend Micro XDR is expensive."
report
Use our free recommendation engine to learn which Network Detection and Response (NDR) solutions are best for your needs.
850,028 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
17%
Financial Services Firm
10%
Manufacturing Company
10%
Legal Firm
5%
Educational Organization
20%
Computer Software Company
19%
Financial Services Firm
6%
Healthcare Company
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Flowmon Anomaly Detection System?
I don't understand the price. I am in deployment, so I do not know the detailed pricing.
What is your primary use case for Flowmon Anomaly Detection System?
We will try to Proof of Concept (POC) to a client in Taiwan. We just use the features for the Network Performance Monitor (NPM).
What do you like most about Trend Micro XDR?
I appreciate the value of real-time activity monitoring.
What needs improvement with Trend Micro XDR?
In future releases of Trend Vision One, I would like to see improvements regarding role-based access control, as it is important to ensure that when granting admin access to a person, their visibil...
 

Also Known As

Flowmon Anomaly Detection System
Trend Micro XDR, Trend Micro XDR for Users, Trend Vision One - XDR for Networks
 

Interactive Demo

Demo not available
 

Overview

 

Sample Customers

SEGA
Panasonic North America, Decathlon, Fischer Homes, Banijay Benelux, Unigel, DHR Health,
Find out what your peers are saying about Flowmon vs. Trend Vision One and other solutions. Updated: April 2025.
850,028 professionals have used our research since 2012.