Try our new research platform with insights from 80,000+ expert users

LogRhythm NDR [EOL] vs Trend Micro Deep Discovery comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 26, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

LogRhythm NDR [EOL]
Average Rating
8.0
Reviews Sentiment
7.0
Number of Reviews
3
Ranking in other categories
No ranking in other categories
Trend Micro Deep Discovery
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
28
Ranking in other categories
Intrusion Detection and Prevention Software (IDPS) (6th), Advanced Threat Protection (ATP) (17th), Network Detection and Response (NDR) (6th)
 

Featured Reviews

AshishDubey - PeerSpot reviewer
Product manager at Tata Communications Ltd
A scalable and stable tool that offers users a great GUI
Though I have not extensively worked on LogRhythm NDR, I know the need for a compute side since, in the past, we had required the compute side to deploy the solution in one of our company's client's infrastructure. The product's setup phase was easy and not complicated. The deployment process of LogRhythm NDR can vary between three and four weeks, depending on the skill set of the people involved in the deployment process. For deployment of the product, you have to purchase the license from LogRhythm, and you have to ensure that the compute side is ready for LogRhythm. After you deploy NDR and sensors in the premises of our company's customer on the SPAN and TAP port, and once the logs go through throughput, you can see the logs coming to LogRhythm NDR's console.
reviewer2266119 - PeerSpot reviewer
Senior IT Security Engineer at a financial services firm with 5,001-10,000 employees
Has improved email security through advanced filtration and timely threat detection
I work with Trend Micro Apex One. I have used the Deep Discovery's Sandbox analysis feature, and we utilize another appliance known as Deep Discovery Analyzer, abbreviated as DDA. This tool makes analysis for URLs and attachments contained in inbound emails, so whenever we receive an email with a URL or attachment, it will be analyzed by Trend Micro Deep Discovery Analyzer. In evaluating Deep Discovery's real-time visibility on network traffic, it is important to note that we applied our Deep Discovery Analyzer for Trend Micro to conduct sandboxing specifically for email channels only, and we do not utilize it for network channels. For network channel sandboxing, we use a solution called FortiAnalyzer, which belongs to another team called network security. I assess Deep Discovery's effectiveness in identifying sophisticated attack patterns by looking at how it handles high traffic loads, and how effectively it can use its instances and images to analyze numerous URLs and attachments simultaneously. Additionally, I evaluate its ability to maintain round-robin or load balancing across different analyses without leaving samples queued for analysis. The performance is critical when the product updates for signatures are up-to-date, as this aids in the detection and classification of URLs and attachments without delay in the analysis process. On a scale of one to ten, I rate Trend Micro Deep Discovery a nine.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It is a stable solution...It is a scalable solution."
"It's an excellent security tool with a user-friendly interface that's easy for anyone to use."
"The solution doesn't require the creation of rules or use cases from scratch, which assists our delivery team in installation and deployment. Its dashboard is user-friendly."
"Trend Micro Deep Discovery Email Inspector includes its ability to perform mail detection and mail filtration against various email attacks such as phishing and spam, serving as an email gateway for both inbound and outbound traffic."
"The product's initial setup phase was not difficult."
"The HTML file sandboxing is very good."
"The product is very easy to install."
"Trend Micro Deep Discovery is a very specific product for threat intelligence with smart protection."
"The most valuable feature is that the user can customize images of virtual machines in the sandbox functionality. The other vendors only use images that were created by the vendor but not the customer, end-user or partner. This helps to detect advanced threats and attacks."
"Deep Discovery is scalable and compatible with other products. It's crucial to have that compatibility because it's an integral part of our security solution. It integrates smoothly. The interface is user-friendly, so administration is simple."
"The platform provides all essential features for discovery and administration."
 

Cons

"The tool has one limitation compared to its competitors. It does have a mobile app for NDR monitoring. Moreover, there is only operational training and not deployment training."
"There are opportunities for improvement, particularly in upgrading the expertise of local professionals and addressing support issues, which could potentially lead to cost reduction."
"From an improvement perspective, I would like LogRhythm NDR to reduce the compute size. I would also like LogRhythm NDR to improve the pricing model."
"I would like the ability to analyze all files in our internal network, at the same time on different operating systems. Not just three of them, but as many as possible."
"The solution needs improvement in terms of pricing."
"All issues we faced related to false positives regarding many hashes and URLs specifically for mail gateway and sandboxing, which led us to open a threat ticket with Trend Micro support for validation."
"The scalability is sometimes limited."
"The solution needs to be able to integrate better with third-party infrastructure."
"The stability of the solution could be improved. It should be 100% stable, but it's not there right now."
"Trend Micro can improve the pricing in general. There is nothing else they can add or improve in the solution."
"There are certain aspects of flexibility in the policies that should be added to Deep Discovery."
 

Pricing and Cost Advice

"There are certain payments to be made towards the licensing costs attached to the product yearly. The pricing of LogRhythm NDR falls under the mid-range, in my opinion."
"When looking at the market and comparing it with other vendors, the cost seems relatively high."
"The tool costs are two million rupees for 5000 users."
"Overall, Trend Micro Deep Discovery has proven to be a reliable solution that enhances our security posture while minimizing operational disruptions."
"Its price is fine, but Trend Micro can improve the pricing in general. It is a hardware solution. It is based on the number of nodes, and according to the number of nodes, clients decide which box they should acquire. They have to renew their license every year. It is subscription-based."
"The tool’s licensing costs depend on the customers."
"Trend Micro Deep Discovery is quite expensive compared to other endpoint security products."
"Compared to its competitors, Trend Micro Deep Discovery is a little expensive."
"The licensing cost is a bit pricey. We pay a yearly subscription."
"The tool's licensing costs are yearly. There are no additional costs associated with the product."
"The price of the solution is lower compared to the competition."
report
Use our free recommendation engine to learn which Network Detection and Response (NDR) solutions are best for your needs.
881,757 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
No data available
Computer Software Company
11%
Financial Services Firm
8%
Healthcare Company
7%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise6
Large Enterprise9
 

Questions from the Community

What needs improvement with LogRhythm NDR?
The tool has one limitation compared to its competitors. It does have a mobile app for NDR monitoring. Moreover, there is only operational training and not deployment training.
What is your primary use case for LogRhythm NDR?
Our use cases are mostly for mining, telco, finance, and banking industries.
What do you like most about Trend Micro Deep Discovery?
The tool's most valuable feature is its collaboration with other products. Integrating with other security products was simple and easy.
What needs improvement with Trend Micro Deep Discovery?
Server Protect is not commonly used. When considering the Sandbox feature, it only inspects small files, and not all types of files are supported. The solution is very expensive. The solution is no...
 

Also Known As

LogRhythm MistNet
Trend Micro Deep Discovery Inspector, Trend Micro Deep Discovery Analyzer
 

Overview

 

Sample Customers

EMW, Conduent, University of Massachusetts, Deloitte Canada, Central Bank of Barbados, Coalfire
Allied Telesis, Atma Jaya Catholic University of Indonesia, Babou, Blekinge County Council, Delacour, Hiroshima Prefectural Government, Live Nation Entertainment Inc., Mazda Motor Logistics Europe, McGill University Health Centre, Mikuni Corporation, OKWAVE, Sinar Mas Land, SWICA, UTOC Corporation
Find out what your peers are saying about Darktrace, Vectra AI, TrendAI and others in Network Detection and Response (NDR). Updated: January 2026.
881,757 professionals have used our research since 2012.