Microsoft Defender for Cloud Apps vs Trellix Advanced Threat Defense comparison

Microsoft Defender for Cloud Apps vs. Trellix Advanced Threat Defense

Download the complete report

Helped 915,341 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Microsoft Defender for Clou...

Ranking in Advanced Threat Protection (ATP)

15th

Average Rating

8.4

Reviews Sentiment

7.1

Number of Reviews

Ranking in other categories

Cloud Access Security Brokers (CASB) (4th), Microsoft Security Suite (8th)

Trellix Advanced Threat Def...

Ranking in Advanced Threat Protection (ATP)

22nd

Average Rating

7.8

Reviews Sentiment

5.6

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of October 2026, in the Advanced Threat Protection (ATP) category, the mindshare of Microsoft Defender for Cloud Apps is 2.2%, up from 1.4% compared to the previous year. The mindshare of Trellix Advanced Threat Defense is 2.1%, up from 1.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Advanced Threat Protection (ATP) Mindshare Distribution
Product	Mindshare (%)
Microsoft Defender for Cloud Apps	2.2%
Trellix Advanced Threat Defense	2.1%
Other	95.7%

Advanced Threat Protection (ATP)

Featured Reviews

reviewer2777910

Partner & Chief Executive Officer at a consultancy with 51-200 employees

Enforces dynamic policies and blocks risky behaviors to safeguard sensitive data

The fidelity of the signal in Microsoft Defender for Cloud Apps has been a challenge in some areas. There have been instances where the alerts generated have been false positives. A lot of work has to go into scoping and tuning the policies so that actual value can be achieved, especially when not doing outright blocks. When monitoring is the approach, it can be overwhelming for security teams to review all of the alerts and determine which ones require action. When a legitimate alert is found that requires action, the tools are available to take that direction, but it can take considerable time to determine if an alert is real or not, and that represents a problem. There is uncertainty about how well Microsoft is keeping up with the changing landscape of threats, as new artificial intelligence services and software as a service applications appear every day.

Read full review

Philippe Panardie

RSSI at SDIS49

Ensuring long-term reliability while seeking internal email management enhancements

Prisma is a commercial name of the firewall now, but we don't work with the cloud product. Only our company is using it and we do not recommend it to customers. For us, it's transparent because it's a cloud product, so we don't really know the version as it's always updated. We have not had any problem, but it's difficult to report on what's going on because some days they can wash out perhaps 100 mails, and then it's difficult to say how many attacks you have reached. The right email has been washed out and then nobody has complained. We do not use the Threat Visualization feature; as we are in MX, the mail is washed out before it is in the mail inbox of the user, thus avoiding any problem requiring a reservation. In fact, there is no integration with existing security frameworks. The only problem we can have is that as we have no API interface, there is no inspection of internal mail. I rate Trellix Advanced Threat Defense a nine out of ten.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The raw logs that come directly from Microsoft Defender for Cloud Apps contain all the data I need, and the ability to track activities happening on cloud applications and the alerts provided is an interesting aspect."

"I like the alert policies because they are quite robust. It has some built-in templates that we can easily pick up. One of them is the alert for mass downloads, when a particular user is running a massive download on your SharePoint site."

"It is very easy to use, which is what we look for in these types of solutions."

"Microsoft Cloud App Security brings them together onto the same platform from a security standpoint, and the application can run seamlessly across different clouds, which helps."

"From what I've seen, it's a good product."

"We have seen a 35% to 45% cost reduction with this solution."

"The discovery function and the discovery catalog are really valuable, and the ability to sanction unsanctioned apps using Secure Score benchmarking, included in Cloud, enhances the organization by helping to manage and control cloud app usage effectively."

"If your business requirements are relatively simple, it can get the job done."

More Microsoft Defender for Cloud Apps pros

"Provides good exfiltration, and is an all-in-one product."

"It was easy to set up initially."

"It is very scalable."

"This solution is very easy to use and requires little to no training."

"The most valuable features are the administration console and its detection and response module."

"I recommend this solution because of its ease of use."

"The fact that in 10 years, we have had no problem is the most valuable feature for us; it's really a washing machine, but the only problem we face is that it's difficult to report on this product."

"The product is expensive, but it is better than the rest of them in the industry."

More Trellix Advanced Threat Defense pros

Cons

"Microsoft Defender for Cloud Apps’s technical support services needs improvement."

"I believe it's only set to be integrated with Microsoft Defender for identity and identity protection. I would like to see it available for use with something like Office 365 Defender. I don't think it's integrated with that yet."

"They need to improve the attack surface reduction (ASR) rules. In the latest version, you can implement ASR rules, which are quite useful, but you have to enable those because if they're not enabled, they flag false positives. In the Defender portal, it logs a block for WMI processes and PowerShell. Apparently, it's because ASR rules are not configured. So, you generally have to enable them to exclude, for example, WMI queries or PowerShell because they have a habit of blocking your security scanners. It's a bit weird that they have to be enabled to be configured, and it's not the other way around."

"Improved communication and follow-up would be helpful. Sometimes, we don’t hear back after creating a ticket for a day or two."

"There have been instances where the alerts generated have been false positives."

"The insights could be improved, especially in reporting. While it is possible for me to see the usage from different cloud apps, determining if critical data has been uploaded or if it is just normal transport data is difficult."

"It takes some time to scan and apply the policies when there is some sensitive information. After it applies the policies, it works, but there is a delay. This is something for which we are working with Microsoft."

"There are some features, such as user navigation content filtering, that are disabled by default, and it probably makes sense to enable them by default."

More Microsoft Defender for Cloud Apps cons

"There could be a tool that automatically updates all-new Microsoft IPs, which are available for free to connect to the client."

"The support on their side is not readily available. It takes a while."

"The only problem we can have is that as we have no API interface, there is no inspection of internal mail."

"We'd like them to be better at dealing with script threats."

"It was not complex, but there are things to look out for, because it's an intense product. It scans intensely and there are major obstacles to overcome if it scans while users are using a network, then it is not a good thing."

"This solution needs to be made "cloud ready"."

"Make the ATD appliance a part of the whole product offering and take the whole thing onto the cloud."

"Some of our customers have mentioned the lack of a tool that would allow for remote capabilities without being attached to the internet."

More Trellix Advanced Threat Defense cons

Pricing and Cost Advice

"The pricing is fair."

"The pricing is a little bit high but right now, we are okay with it because of the compatibility with Office 365, Teams, and Azure AD."

"This product is not expensive."

"The pricing is in the middle. It isn't too cheap or expensive compared to other antivirus or security products. It is priced according to industry standards."

"The price could be better and should be reconsidered."

"Where we are right now, this is an acceptable pricing. I would like to see more transparency given to the end user. The end user given to us is via the cloud service provider. There are different programs and license models. Some include this, and some include that. It is all over the place. There can be a little more consistency or simplification in the pricing so that your parts list is not ten pages long, and you are not trying to determine, "If I have an E3, does this cover that?", or "Do I need to pay separately for the license?" Simplification would probably be better."

"We utilize the Microsoft E5 licensing, which encompasses the entire Microsoft suite; however, it is costly."

"It has pretty good pricing."

More Microsoft Defender for Cloud Apps pricing and cost advice

"The product is expensive, but it is better than the rest of them in the industry."

"Our licensing fees for this solution are approximately one million dollars per year."

See which vendors are best for you

Use our free recommendation engine to learn which Advanced Threat Protection (ATP) solutions are best for your needs.

See recommendations

915,341 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

13%

Manufacturing Company

Computer Software Company

Comms Service Provider

Construction Company

15%

Outsourcing Company

15%

Comms Service Provider

11%

Financial Services Firm

11%

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	15
Midsize Enterprise	13
Large Enterprise	19

By reviewers
Company Size	Count
Small Business	3
Midsize Enterprise	4
Large Enterprise	5

Questions from the Community

Which is the better security solution - Cisco Umbrella or Microsoft Cloud App Security?

Cisco Umbrella is an integral component of the Cisco SASE architecture. It integrates security in a single, cloud-native solution, unifying multiple features like DNS-layer security, threat intelli...

What is your experience regarding pricing and costs for Microsoft Cloud App Security?

At the time of implementation, when the size of our organization was small, it was a more affordable product. Since all our productivity applications were on O365, Microsoft Defender for Cloud Apps...

What needs improvement with Microsoft Cloud App Security?

What needs improvement with McAfee Advanced Threat Defense?

I would like to see an API interface for internal email and control of outgoing email to make it closer to 10. It's necessary; today we have an MX interface, and it would be interesting to have an ...

What is your primary use case for McAfee Advanced Threat Defense?

We are working with Palo Alto products, specifically firewalls. We are only using Palo Alto Firewalls and not Cortex. With FireEye and Trellix, we only work with ETP now because the NDR function wh...

What advice do you have for others considering McAfee Advanced Threat Defense?

Netskope vs Microsoft Defender for Cloud Apps

Comparisons

Compared 8% of the time

Skyhigh Security vs Microsoft Defender for Cloud Apps

Compared 6% of the time

Cisco Umbrella vs Microsoft Defender for Cloud Apps

Compared 6% of the time

Zscaler Internet Access vs Microsoft Defender for Cloud Apps

Compared 6% of the time

Prisma Access by Palo Alto Networks vs Microsoft Defender for Cloud Apps

Compared 5% of the time

More Microsoft Defender for Cloud Apps Competitors

NetWitness Platform vs Trellix Advanced Threat Defense

Compared 16% of the time

Microsoft Defender for Office 365 vs Trellix Advanced Threat Defense

Compared 9% of the time

Fortinet FortiSandbox vs Trellix Advanced Threat Defense

Compared 8% of the time

Digital Guardian vs Trellix Advanced Threat Defense

Compared 7% of the time

Check Point Infinity vs Trellix Advanced Threat Defense

Compared 6% of the time

More Trellix Advanced Threat Defense Competitors

Product Reports

Microsoft Defender for Cloud Apps

Download Microsoft Defender for Cloud Apps product report

Microsoft Defender for Cloud Apps report

Trellix Advanced Threat Defense

Download Trellix Advanced Threat Defense product report

Also Known As

MS Cloud App Security, Microsoft Cloud App Security

McAfee Advanced Threat Defense

Overview

Microsoft Defender for Cloud Apps is a robust tool for shadow IT detection, cloud integration, and threat detection, enhancing security management with capabilities in auditing and data protection.

Microsoft Defender for Cloud Apps strengthens cloud security by providing comprehensive insights into user activities, seamlessly integrating with Microsoft security products and platforms like SharePoint, Teams, and OneDrive. Its investigative capabilities enhance threat detection, while real-time alerts and policy applications improve security posture. Organizations benefit from its monitoring, auditing, and privileged identity management features that contribute to enhanced security management and data protection.

What are the key features of Microsoft Defender for Cloud Apps?

Shadow IT Discovery: Identifies and manages unsanctioned applications across cloud environments.
Cloud Integration: Seamlessly connects with Microsoft security products and platforms.
Threat Detection: Offers powerful tools for identifying and mitigating threats in real-time.
Policy Application: Facilitates enforcement of policies across SharePoint, Teams, and OneDrive.
User Activity Visibility: Provides detailed insights into user behavior and actions.

What benefits and ROI should organizations consider?

Enhanced Security Posture: Increases the effectiveness of overall security management.
Real-Time Alerts: Offers immediate notifications to improve response times to threats.
Compliance Support: Aids in maintaining compliance through integrated monitoring and governance.
Data Protection: Protects sensitive corporate data through detailed auditing and monitoring.
Integration with Azure: Enhances threat detection through cohesive integration with Azure services.

Microsoft Defender for Cloud Apps implementation varies across industries, crucial for sectors needing stringent data protection and compliance, like finance and healthcare. Firms use it to monitor user activity, enforce data loss prevention policies, and ensure security across multi-cloud environments while integrating with Azure services for comprehensive threat management. These implementations are particularly beneficial in improving compliance efforts and protecting sensitive data.

Microsoft

Trellix Advanced Threat Defense offers efficient threat detection and automatic threat remediation, featuring seamless management and integration with operating systems and extensions.

Providing robust malware defense, Trellix Advanced Threat Defense is easy to set up and use. Its components work collaboratively, with standout features like behavioral analysis, retro-inspection, and ePolicy Orchestration. Despite its strengths, users suggest improvements in Active Directory integration, cloud readiness, artificial intelligence, and faster sandboxing. The API interface and scalability need enhancement, while better compatibility with platforms like Cisco could elevate its function. Effective for server and endpoint security, it effectively blocks threats like WannaCry and disperses attack data through the DXL client quickly.

What are the notable features of Trellix Advanced Threat Defense?

Management and Automatic Threat Remediation: Facilitates seamless management and handling of threats.
Effective Threat Detection and Response: Delivers efficient and reliable threat detection capabilities.
Behavioral Analysis and Retro-Inspection: Offers advanced analysis for comprehensive threat identification.
ePolicy Orchestration: Streamlines processes for enhanced threat management.
Scalability and Price: Provides a stable and scalable solution at a competitive price point.

What key benefits can be identified from reviews?

Ease of Use and Setup: Known for its straightforward implementation and user-friendly interface.
Integration Capabilities: Works well with different operating systems and technologies like Palo Alto firewalls.
Threat Protection Efficiency: Proven effectiveness in stopping threats such as WannaCry.
Rapid Attack Information Dissemination: Utilizes the DXL client for quick data sharing.

Trellix Advanced Threat Defense is widely used across numerous industries for server and desktop protection, ensuring endpoint security and halting attacks without failure. Its integration with diverse technologies enhances protection in varied environments, making it a valuable tool in enterprise security management.

Trellix

Sample Customers

Customers for Microsoft Defender for Cloud Apps include Accenture, St. Luke’s University Health Network, Ansell, and Nakilat.

The Radicati Group, Florida International University, MGM Resorts International, County Durham andDarlington NHS Foundation Trust

Microsoft Defender for Cloud Apps vs. Trellix Advanced Threat Defense