Try our new research platform with insights from 80,000+ expert users

Lumu vs Trellix Network Detection and Response comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Nov 6, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Lumu
Ranking in Network Detection and Response (NDR)
6th
Average Rating
9.2
Reviews Sentiment
7.5
Number of Reviews
9
Ranking in other categories
Intrusion Detection and Prevention Software (IDPS) (10th), Extended Detection and Response (XDR) (16th)
Trellix Network Detection a...
Ranking in Network Detection and Response (NDR)
9th
Average Rating
8.4
Reviews Sentiment
7.3
Number of Reviews
40
Ranking in other categories
Advanced Threat Protection (ATP) (13th)
 

Mindshare comparison

As of March 2026, in the Network Detection and Response (NDR) category, the mindshare of Lumu is 3.1%, down from 3.5% compared to the previous year. The mindshare of Trellix Network Detection and Response is 2.7%, up from 2.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Network Detection and Response (NDR) Mindshare Distribution
ProductMindshare (%)
Lumu3.1%
Trellix Network Detection and Response2.7%
Other94.2%
Network Detection and Response (NDR)
 

Featured Reviews

JJ
Director, Information Technology at a educational organization with 201-500 employees
Constant monitoring and analysis boosts network security
There is always room for improvement. I am not giving it a perfect score because I am sure there is something that could be enhanced.Having some sort of certification or training, along with more periodic webinars might be helpful. Having a larger support network would be beneficial. Nobody I know has heard of Lumu, so they are in the same space as Darktrace or CrowdStrike, but people give blank stares. As the community grows for Lumu then that will improve, but that is not really a criticism of Lumu, they simply have not been around that long.
Jose Vargas - PeerSpot reviewer
Agente De Servicios Técnicos at a computer software company with 11-50 employees
Has improved threat detection workflows and supports seamless customer monitoring
The best features Trellix Network Detection and Response offers include very good threat detection, and I believe that it is one of the best XDR tools. For example, ePO and XDR components are very comfortable and similar to many other tools for this type of monitoring, and I have received very good feedback for this tool. What makes Trellix Network Detection and Response stand out for me compared to other tools is the way you can detect threats. It is very easy and comfortable to use, and the detection shows clearly on the screen, which is very easy to understand. Regarding the features, I think that the integration with other platforms is very comfortable with the customer because we can integrate it with any switch or firewall, and it is comfortable to add this tool. Trellix Network Detection and Response has positively impacted my organization as I have improved my knowledge about detection and response. I have already used some other tools such as CrowdStrike and Umbrella, but Trellix is one of the best that I have tested. I believe that for my organization, Trellix has helped a lot with detection and supported our customers effectively. Trellix Network Detection and Response is a great tool that integrates with a lot of security tools such as Palo Alto, which is a good firewall. If you have these types of tools, your organization would benefit greatly.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I like Lumu's simple user interface. When we deployed it, we got full access, allowing us to identify IP addresses on the network and connect machine names to users. It helped us identify and block threats via the firewall. I also appreciate the chat support and ticket closure process. We're currently reviewing network detection solutions, and my recommendations include Lumu, Sentinel, and a few others. Regarding functionality and user-friendliness, I would recommend Lumu over the others."
"The automated response to incidents works effectively out of the box, and the number of interfaces and platforms it can work with is impressive."
"The context provided by the tool is very complete, it includes the miter matrix, playbooks, links, hashes, and much more."
"Lumu has impacted my organization positively by providing continuous visibility into network compromise, allowing us to detect threats that were previously unnoticed, significantly reducing our mean time to detect and improving our ability to quickly validate and respond to incidents."
"The tool's support team helps partners resolve any problems with the product."
"Most of it is automated, so I do not have to watch it to get alerts."
"It's been helpful for overall extended network visibility."
"Lumu protects against threats immediately and handles them in time."
"Both for our clients and for ourselves, ROI was almost 200% more than we expected."
"Because of what the FireEye product does, it has significantly decreased our meantime in being able to identify and detect malicious threats."
"It is stable and quite protective. It has a lot of features to scan a lot of malicious things and vulnerabilities."
"Very functional and good for detecting malicious traffic."
"The solution can scale."
"Trellix NDR provides an essential defense by automatically responding to network incidents that firewalls may not catch."
"The feature that I find most valuable is the MIR (Mandiant Incident Response) for checks on our inbound security."
"It allows us to be more hands off in checking on emails and networking traffic, as we can set up a bunch of different alerts and have it alert us, giving us a better view of our network and our email environment."
 

Cons

"Lumu's ability to discover threats is an area of concern where improvements are needed."
"It would be good if we could access the physical logs."
"Having a larger support network would be beneficial. Nobody I know has heard of Lumu, so they are in the same space as Darktrace or CrowdStrike, but people give blank stares."
"The free version is minimal compared to the full version."
"Nothing so far needs to be improved."
"I am happy with the current features. However, one important one is to improve the reports."
"Lumu is solid for compromise detection, but there are a few areas where it could be improved, including deeper integration with SIEM and XDR, asset context enrichment, custom detection tuning, automated response capabilities, and reporting customization."
"The integration with different vendors and endpoints could be improved."
"Management of the appliance could be greatly improved."
"Cybersecurity posture has room for improvement."
"A lot of false positives."
"It would be a good idea if we could get an option to block based upon the content of an email, or the content of a file attachment."
"Stability issues manifested in terms of throughput maximization."
"Technical packaging could be improved."
"Cluster option is not available in NX, and for false positives we need some customization configuration available, such as a whitelist."
"Certain features in Trellix Network Detection and Response, such as using AL-type commands, may initially pose a challenge for those unfamiliar with such commands. However, once users become accustomed to the system, it becomes easier to use."
 

Pricing and Cost Advice

"It is the cheapest solution we found."
"Compared to Lumu, other solutions are more expensive. SentinelOne was a bit cheaper, and another provider's price structure is unclear, but Lumu fit our budget nicely. SentinelOne's cost depends on the number of devices, and it might be similar to Lumu's, depending on deployment."
"The tool is available at a good price. The tool offers a good and competitive price for customers."
"The pricing is fair, a little expensive, but fair. We've evaluated other products, and they're similarly priced."
"The tool is a bit pricey."
"When I compare this solution to its competitors in the market, I find that it is a little expensive."
"It's an expensive solution."
"We're partners with Cisco so we get a reasonable price. It's cheaper than Palo Alto in terms of licensing."
"When you purchase FireEye Network Security NX, will need to purchase a megabit per second package. You must know your needs from day one."
"There are some additional services that I understand the vendor provides, but our approach was to package all of the features that we were looking to use into the product."
"Its price is a bit high. A small customer cannot buy it. Its licensing is on a yearly basis."
report
Use our free recommendation engine to learn which Network Detection and Response (NDR) solutions are best for your needs.
884,933 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
10%
Insurance Company
9%
Comms Service Provider
8%
Government
7%
Comms Service Provider
14%
Manufacturing Company
11%
Financial Services Firm
11%
Government
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise1
Large Enterprise4
By reviewers
Company SizeCount
Small Business20
Midsize Enterprise8
Large Enterprise19
 

Questions from the Community

What do you like most about Lumu?
Lumu protects against threats immediately and handles them in time.
What needs improvement with Lumu?
There is always room for improvement. I am not giving it a perfect score because I am sure there is something that could be enhanced.Having some sort of certification or training, along with more p...
What is your primary use case for Lumu?
We use it as our managed SOC instead of contracting with an MSP. It coordinates endpoint and gives us a single pane of glass for our security events.It fulfills the role of a SIEM, serving as our d...
What do you like most about FireEye Network Security?
We wanted to cross-reference that activity with the network traffic just to be sure there was no lateral movement. With Trellix, we easily confirmed that there was no lateral network involvement an...
What is your experience regarding pricing and costs for FireEye Network Security?
My experience with pricing, setup cost, and licensing for Trellix Network Detection and Response is very great.
What needs improvement with FireEye Network Security?
I would like to see in Trellix Network Detection and Response more explanation about some details of the threat, and I wish it had more actions that you can take to contain the host or move it some...
 

Also Known As

No data available
FireEye Network Security, FireEye
 

Overview

 

Sample Customers

Information Not Available
FFRDC, Finansbank, Japan Advanced Institute of Science and Technology, Investis, Kelsey-Seybold Clinic, Bank of Thailand, City of Miramar, Citizens National Bank, D-Wave Systems
Find out what your peers are saying about Lumu vs. Trellix Network Detection and Response and other solutions. Updated: March 2026.
884,933 professionals have used our research since 2012.