Microsoft Defender for Cloud Apps vs Trellix Network Detection and Response comparison

Microsoft Defender for Cloud Apps vs. Trellix Network Detection and Response

Download the complete report

Helped 869,566 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

ROI

Sentiment score

7.7

Microsoft Defender for Cloud Apps enhances security, reduces costs by 35-45%, and improves uptime with efficient cloud application management.

Sentiment score

8.5

Trellix Network Detection and Response exceeded expectations by improving threat prevention and detection, boosting productivity and reducing response times.

The biggest return on investment so far has been visibility, knowing what we have in our environment.

reviewer2596311

Cloud and data protection engineer at a university with 10,001+ employees

As a small team, Microsoft Defender for Cloud Apps allowed us to manage systems with just one or two people.

For more quotes and insights, download the Microsoft Defender for Cloud Apps report

Manager, Information Technology Security Compliance at a manufacturing company with 201-500 employees

We have at least saved the costs we had from the Netskope solution this year.

Frank Van Der Spek

Security and Continuity Manager at Rolinco NV

No quotes available

For more quotes and insights, download the Trellix Network Detection and Response report

Customer Service

Sentiment score

7.0

Microsoft Defender for Cloud Apps support is generally good, but users suggest faster responses and improved communication.

Sentiment score

6.8

Trellix's support is praised for responsiveness, but improvements in expertise and incident response promptness are suggested by some.

Their customer service is pretty good, but it's frustrating to go through three or four channels before reaching the right person.

reviewer2596311

Cloud and data protection engineer at a university with 10,001+ employees

The support is excellent, and the speed of response is commendable.

Solutions Architect at a university with 51-200 employees

There were instances where the engineers were knowledgeable and helpful, but at other times it felt like a ping pong game, with unnecessary transfers until the right person was found.

For more quotes and insights, download the Microsoft Defender for Cloud Apps report

Manager, Information Technology Security Compliance at a manufacturing company with 201-500 employees

Technical support needs improvement as sometimes engineers are not available promptly, especially during high-severity incidents.

Abdullah Al Hadi

Information Security Engineer at Nhq Distribution Ltd

For more quotes and insights, download the Trellix Network Detection and Response report

Scalability Issues

Sentiment score

7.6

Microsoft Defender for Cloud Apps offers scalable security, efficiently managing large user bases and app integrations with centralized management.

Sentiment score

7.8

Trellix Network Detection and Response scales effectively in various industries, performing well in large enterprises without latency issues.

For what I know about the log collector and how much data it can take in, it is super scalable and capable of handling high workloads.

reviewer2596311

Cloud and data protection engineer at a university with 10,001+ employees

Microsoft Defender for Cloud Apps is very scalable, provided you have the right subscription.

Solutions Architect at a university with 51-200 employees

In my experience, Microsoft Defender for Cloud Apps is good enough for small to medium businesses.

For more quotes and insights, download the Microsoft Defender for Cloud Apps report

Manager, Information Technology Security Compliance at a manufacturing company with 201-500 employees

No quotes available

For more quotes and insights, download the Trellix Network Detection and Response report

Stability Issues

Sentiment score

8.1

Microsoft Defender for Cloud Apps is praised for high reliability, minimal downtime, consistent performance, and swift issue resolution.

Sentiment score

7.7

Trellix Network Detection and Response is stable and reliable, with consistent performance and high user satisfaction despite occasional minor issues.

I would rate it a ten because I have not experienced any stability issues so far with Defender for Cloud Apps.

reviewer2638737

Head of Security Operations at a computer software company with 51-200 employees

I would assess the stability and reliability of Microsoft Defender for Cloud Apps as stable

Usha Talluri

Network Engineer at Apexon

My impression on the stability and reliability of Microsoft Defender for Cloud Apps is that it is very stable.

Frank Van Der Spek

Security and Continuity Manager at Rolinco NV

For more quotes and insights, download the Microsoft Defender for Cloud Apps report

No quotes available

For more quotes and insights, download the Trellix Network Detection and Response report

Room For Improvement

Microsoft Defender for Cloud Apps could improve integration, pricing, support, reporting, automation, alerts, and overall user experience across multi-cloud environments.

Trellix Network Detection needs improved customization, integration, AI capabilities, support services, and a more user-friendly interface at reduced pricing.

For data loss prevention, it would be useful to be able to drill down into the kind of data being transferred over CloudApp.

reviewer2638737

Head of Security Operations at a computer software company with 51-200 employees

Defender typically connects to Entra ID, but we have local users on the cloud for database access, SSH, or RDS, and there is nothing produced by Defender regarding those local IAM users.

Usha Talluri

Network Engineer at Apexon

A significant improvement I would like to see is the integration into a single pane of glass.

For more quotes and insights, download the Microsoft Defender for Cloud Apps report

Manager, Information Technology Security Compliance at a manufacturing company with 201-500 employees

There should be improvements in AI intelligence, faster decision-making, and a more responsive technical support team.

Abdullah Al Hadi

Information Security Engineer at Nhq Distribution Ltd

For more quotes and insights, download the Trellix Network Detection and Response report

Setup Cost

Microsoft Defender for Cloud Apps is cost-effective within Microsoft 365 bundles, especially for large organizations with discounts available.

Trellix Network Detection is costly but effective, with yearly licensing, discounts, and competitive pricing against some competitors like Palo Alto.

The pricing for Microsoft Defender for Cloud Apps is acceptable.

Solutions Architect at a university with 51-200 employees

My organization is currently revisiting pricing, but previously, the cost was a bit expensive, yet comparable to other solutions with similar functionalities and features.

For more quotes and insights, download the Microsoft Defender for Cloud Apps report

Manager, Information Technology Security Compliance at a manufacturing company with 201-500 employees

It's not the cheapest, but also not the most expensive, placing it in the mid-level range.

Faran Hasan

IT Architect at a logistics company with 10,001+ employees

No quotes available

For more quotes and insights, download the Trellix Network Detection and Response report

Valuable Features

Microsoft Defender for Cloud Apps offers integration, threat detection, and management, enhancing security with comprehensive visibility and proactive assessment.

Trellix excels in threat protection with AI-driven analysis, automation, and enhanced visibility, benefiting security operations and incident management.

The ability to sanction unsanctioned apps using Secure Score benchmarking, included in Cloud, is also beneficial.

reviewer2638737

Head of Security Operations at a computer software company with 51-200 employees

Microsoft Defender for Cloud Apps is very comprehensive, providing a complete 360-degree view of applications within an organization.

Solutions Architect at a university with 51-200 employees

The most valuable features of Microsoft Defender for Cloud Apps include live, up-to-date information, which provided real-time alerts.

For more quotes and insights, download the Microsoft Defender for Cloud Apps report

Manager, Information Technology Security Compliance at a manufacturing company with 201-500 employees

Trellix NDR provides an essential defense by automatically responding to network incidents that firewalls may not catch.

Abdullah Al Hadi

Information Security Engineer at Nhq Distribution Ltd

For more quotes and insights, download the Trellix Network Detection and Response report

Categories and Ranking

Microsoft Defender for Clou...

Ranking in Advanced Threat Protection (ATP)

14th

Average Rating

8.4

Reviews Sentiment

7.3

Number of Reviews

Ranking in other categories

Cloud Access Security Brokers (CASB) (4th), Microsoft Security Suite (12th)

Trellix Network Detection a...

Ranking in Advanced Threat Protection (ATP)

13th

Average Rating

8.4

Reviews Sentiment

7.3

Number of Reviews

Ranking in other categories

Network Detection and Response (NDR) (10th)

Mindshare comparison

As of October 2025, in the Advanced Threat Protection (ATP) category, the mindshare of Microsoft Defender for Cloud Apps is 1.8%, up from 1.4% compared to the previous year. The mindshare of Trellix Network Detection and Response is 5.2%, up from 4.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Advanced Threat Protection (ATP) Market Share Distribution
Product	Market Share (%)
Trellix Network Detection and Response	5.2%
Microsoft Defender for Cloud Apps	1.8%
Other	93.0%

Advanced Threat Protection (ATP)

Featured Reviews

Abdulrahman Muhammadi

information Security and IT Manager at Discover Dollar Technologies Pvt Ltd.

Integration with existing cloud workflows has simplified compliance and threat detection

Licensing cost is a significant concern. With Defender Plan 1, Microsoft Defender for Cloud Apps comes with a pay-per-use model. Each feature has its own pricing when activated on VMs. For example, the vulnerability assessment has separate pricing, the base model including encryptions has separate pricing, and the compliance features have separate pricing. This applies to each VM and Azure resource individually. It is not straightforward where you can take one license and apply it to everything. Each feature has its own pricing model which can be tedious, as the costs keep accumulating. The only lacking feature currently is XDR (extended detection and response). Apart from that, I have only positive experiences with the whole Microsoft suite, except for the pricing structure.

Read full review

BiswabhanuPanda

Senior technical consultant at Hitachi Systems Micro Clinic

Offers in-depth investigation capabilities, integrates well and smoothly transitioned from a lower-capacity appliance to a higher one

The in-depth investigation capabilities are a major advantage. When the system flags something as malicious, it provides a packet capture of that activity within the environment. That helps my team quickly identify additional context that most other tools wouldn't offer – like source IP or base64 encoded data. We can also see DNS requests and other details that aren't readily available in solutions like Check Point or others that we've tried. The detection itself is solid, and their sandboxing is powerful. There's a learning curve – you need a strong grasp of OS-level changes, process forking, registry changes, and the potential impact of those. But with that knowledge, the level of information Trellix provides is far greater than what we've seen elsewhere. The real-time response capability of Trellix has been quite effective, although it's not very fast. The key is this solution's concept of 'preference zero.' They don't immediately act on a zero-day. For example, the solution has seen a piece of malware for the first time. It'll let it in, then do sandboxing. Maybe after four or five minutes, it identifies that specific file's DNX Secure Store as malicious. At that point, they update the static analysis engine, and it gets detected if anything else tries to download the same file. There is that initial 'preference zero' concept, like with Panda. You may not hold traffic in the network. That's standard in the industry; we don't do much about it. To address that, we also have endpoint solutions. We use SentinelOne in our environment, which helps us identify threats like Western Bureaus and others.

Read full review

See which vendors are best for you

Use our free recommendation engine to learn which Advanced Threat Protection (ATP) solutions are best for your needs.

See recommendations

869,566 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

12%

Financial Services Firm

10%

Manufacturing Company

Government

Financial Services Firm

12%

Comms Service Provider

12%

Manufacturing Company

11%

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	13
Midsize Enterprise	10
Large Enterprise	18

By reviewers
Company Size	Count
Small Business	19
Midsize Enterprise	8
Large Enterprise	19

Questions from the Community

Which is the better security solution - Cisco Umbrella or Microsoft Cloud App Security?

Cisco Umbrella is an integral component of the Cisco SASE architecture. It integrates security in a single, cloud-native solution, unifying multiple features like DNS-layer security, threat intelli...

What do you like most about Microsoft Cloud App Security?

It does a great job of monitoring and maintaining a security baseline. For us, that is a key element. The notifications are pretty good.

What is your experience regarding pricing and costs for Microsoft Cloud App Security?

At the time of implementation, when the size of our organization was small, it was a more affordable product. Since all our productivity applications were on O365, Microsoft Defender for Cloud Apps...

What do you like most about FireEye Network Security?

We wanted to cross-reference that activity with the network traffic just to be sure there was no lateral movement. With Trellix, we easily confirmed that there was no lateral network involvement an...

What is your experience regarding pricing and costs for FireEye Network Security?

While I do not handle pricing directly, it is known that there is a variety of customers with different licensing needs, which depends on the organization's size and policy.

What needs improvement with FireEye Network Security?

The Trellix solution could be improved by enhancing the Central Management Console for faster visibility, which would help in network detection response. Networking often involves complexity that c...

Zscaler Internet Access vs Microsoft Defender for Cloud Apps

Comparisons

Compared 18% of the time

Cisco Umbrella vs Microsoft Defender for Cloud Apps

Compared 16% of the time

Netskope vs Microsoft Defender for Cloud Apps

Compared 12% of the time

Prisma Access by Palo Alto Networks vs Microsoft Defender for Cloud Apps

Compared 6% of the time

Skyhigh Security vs Microsoft Defender for Cloud Apps

Compared 5% of the time

More Microsoft Defender for Cloud Apps Competitors

Palo Alto Networks WildFire vs Trellix Network Detection and Response

Compared 13% of the time

Fortinet FortiSandbox vs Trellix Network Detection and Response

Compared 10% of the time

Trend Micro Deep Discovery vs Trellix Network Detection and Response

Compared 8% of the time

Darktrace vs Trellix Network Detection and Response

Compared 6% of the time

Zabbix vs Trellix Network Detection and Response

Compared 6% of the time

More Trellix Network Detection and Response Competitors

Product Reports

Microsoft Defender for Cloud Apps

Download Microsoft Defender for Cloud Apps product report

Microsoft Defender for Cloud Apps report

Trellix Network Detection and Response

Download Trellix Network Detection and Response product report

Trellix Network Detection and Response report

Also Known As

MS Cloud App Security, Microsoft Cloud App Security

FireEye Network Security, FireEye

Overview

Microsoft Defender for Cloud Apps is a comprehensive security solution that provides protection for cloud-based applications and services. It offers real-time threat detection and response, as well as advanced analytics and reporting capabilities. With Defender for Cloud Apps, organizations can ensure the security of their cloud environments and safeguard against cyber threats. Whether you're running SaaS applications, IaaS workloads, or PaaS services, Microsoft Defender for Cloud Apps can help you secure your cloud environment and protect your business from cyber threats.

Microsoft Defender for Cloud Apps Benefits:

Provides comprehensive security for cloud applications
Integrates with other Microsoft security tools
Easy to use and deploy
Provides real-time threat detection and response
Strong protection against phishing attacks and other common threats
Highly customizable to meet specific needs of different organizations

Microsoft Defender for Cloud Apps Use Cases:

Governance, authentication, security, and compliance.
Detects shadow IT and anomalous user behavior
Controls access to applications
Provides auditing and filtering setups
Used for end-user compute devices, file monitoring, user investigation, and activity
Used for data governance, threat detection, and getting visibility over cloud applications
Used to identify information about applications beyond organizational boundaries
Prevent exfiltration and data filtration of corporate data
Used to deal with spam emails and detect shadow IT

Reviews from Real Users

Ram-Krish, Cloud Security & Governance at a financial services firm, says that Microsoft Defender for Cloud Apps "Integrates well and helps us in protecting sensitive information, but takes time to scan and apply the policies and cannot detect everything we need".

PeerSpot user, Senior Cloud & Security Consultant at a tech services, writes that Microsoft Defender for Cloud Apps "Great for monitoring user activity and protecting data while integrating well with other applications".

Simon Burgess,Infrastructure Engineer at SBITSC, states that Microsoft Defender for Cloud Apps is "A fluid, intelligent product for great visibility, centralized management, and increased uptime".

Microsoft

Detect the undetectable and stop evasive attacks. Trellix Network Detection and Response (NDR) helps your team focus on real attacks, contain intrusions with speed and intelligence, and eliminate your cybersecurity weak points.

Trellix

Sample Customers

Customers for Microsoft Defender for Cloud Apps include Accenture, St. Luke’s University Health Network, Ansell, and Nakilat.

FFRDC, Finansbank, Japan Advanced Institute of Science and Technology, Investis, Kelsey-Seybold Clinic, Bank of Thailand, City of Miramar, Citizens National Bank, D-Wave Systems

Microsoft Defender for Cloud Apps vs. Trellix Network Detection and Response