Try our new research platform with insights from 80,000+ expert users

Microsoft Defender for Cloud Apps vs Trellix Network Detection and Response comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 1, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.0
Microsoft Defender for Cloud Apps enhances security and efficiency, offering significant ROI with up to 60% savings and streamlined operations.
Sentiment score
7.6
Trellix enhances security and productivity, offering nearly 200% ROI, faster threat detection, and broad client satisfaction.
The biggest return on investment so far has been visibility, knowing what we have in our environment.
Cloud and data protection engineer at a university with 10,001+ employees
As a small team, Microsoft Defender for Cloud Apps allowed us to manage systems with just one or two people.
Manager, Information Technology Security Compliance at a manufacturing company with 201-500 employees
We have at least saved the costs we had from the Netskope solution this year.
Security and Continuity Manager at Rolinco NV
 

Customer Service

Sentiment score
6.4
Microsoft Defender for Cloud Apps support is praised for its responsiveness, though some users experience delays and resource access challenges.
Sentiment score
7.2
Trellix Network Detection and Response offers reliable 24/7 support, though some users desire quicker response times during incidents.
Their customer service is pretty good, but it's frustrating to go through three or four channels before reaching the right person.
Cloud and data protection engineer at a university with 10,001+ employees
The support is excellent, and the speed of response is commendable.
Solutions Architect at a university with 51-200 employees
There were instances where the engineers were knowledgeable and helpful, but at other times it felt like a ping pong game, with unnecessary transfers until the right person was found.
Manager, Information Technology Security Compliance at a manufacturing company with 201-500 employees
Technical support needs improvement as sometimes engineers are not available promptly, especially during high-severity incidents.
Information Security Engineer at Nhq Distribution Ltd
The customer support for Trellix Network Detection and Response is great.
Agente De Servicios Técnicos at a computer software company with 11-50 employees
 

Scalability Issues

Sentiment score
7.4
Microsoft Defender for Cloud Apps offers scalable, seamless integration, and reliable management for organizations of all sizes and environments.
Sentiment score
7.9
Trellix Network Detection and Response offers reliable cloud scalability, supporting diverse industries with high satisfaction despite varied admin support.
For what I know about the log collector and how much data it can take in, it is super scalable and capable of handling high workloads.
Cloud and data protection engineer at a university with 10,001+ employees
Microsoft Defender for Cloud Apps is very scalable, provided you have the right subscription.
Solutions Architect at a university with 51-200 employees
In my experience, Microsoft Defender for Cloud Apps is good enough for small to medium businesses.
Manager, Information Technology Security Compliance at a manufacturing company with 201-500 employees
 

Stability Issues

Sentiment score
8.0
Microsoft Defender for Cloud Apps is highly stable, reliable, and maintains performance with minor, swiftly resolved incidents.
Sentiment score
7.8
Trellix Network Detection and Response is reliable, with minor issues in performance requiring maintenance and expertise for optimal use.
I would rate it a ten because I have not experienced any stability issues so far with Defender for Cloud Apps.
Head of Security Operations at a computer software company with 51-200 employees
I would assess the stability and reliability of Microsoft Defender for Cloud Apps as stable
Network Engineer at Apexon
My impression on the stability and reliability of Microsoft Defender for Cloud Apps is that it is very stable.
Security and Continuity Manager at Rolinco NV
 

Room For Improvement

Microsoft Defender for Cloud Apps seeks enhanced pricing, integration, user interface, automation, and multi-cloud support, while improving insights and management.
Trellix Network Detection and Response needs improved customization, integration, reporting, threat intelligence, AI, support, and dashboard visibility.
For data loss prevention, it would be useful to be able to drill down into the kind of data being transferred over CloudApp.
Head of Security Operations at a computer software company with 51-200 employees
Defender typically connects to Entra ID, but we have local users on the cloud for database access, SSH, or RDS, and there is nothing produced by Defender regarding those local IAM users.
Network Engineer at Apexon
Microsoft Defender for Cloud Apps would benefit if Microsoft allows users to fine-tune false positives, enabling us to dismiss alerts or make adjustments so that such things don't trigger multiple times in the future.
Security delivery analyst at a tech vendor with 10,001+ employees
There should be improvements in AI intelligence, faster decision-making, and a more responsive technical support team.
Information Security Engineer at Nhq Distribution Ltd
I would like to see in Trellix Network Detection and Response more explanation about some details of the threat.
Agente De Servicios Técnicos at a computer software company with 11-50 employees
 

Setup Cost

Microsoft Defender for Cloud Apps is seen as cost-effective for enterprises within Microsoft ecosystems, despite standalone pricing concerns.
Trellix Network Detection and Response is perceived as costly, but valued for effective threat detection and competitive pricing.
The pricing for Microsoft Defender for Cloud Apps is acceptable.
Solutions Architect at a university with 51-200 employees
My organization is currently revisiting pricing, but previously, the cost was a bit expensive, yet comparable to other solutions with similar functionalities and features.
Manager, Information Technology Security Compliance at a manufacturing company with 201-500 employees
It's not the cheapest, but also not the most expensive, placing it in the mid-level range.
IT Architect at a logistics company with 10,001+ employees
 

Valuable Features

Microsoft Defender for Cloud Apps integrates well, offering threat detection, management ease, shadow IT discovery, and robust security enhancements.
Trellix excels in zero-day threat detection, automatic responses, and enhancing security infrastructure with user-friendly dashboards and sandboxing.
It provides excellent suggestions and options for configuration; for example, it can track suspicious files getting uploaded to cloud resources on Azure based on their signatures, generating alerts for those files.
Security delivery analyst at a tech vendor with 10,001+ employees
The product recommends things that need to be blocked and allows for dynamic configuration, which cuts down on potential issues that might arise from going through lists and understanding what needs to be blocked.
Partner & Chief Executive Officer at a consultancy with 51-200 employees
The ability to sanction unsanctioned apps using Secure Score benchmarking, included in Cloud, is also beneficial.
Head of Security Operations at a computer software company with 51-200 employees
Trellix NDR provides an essential defense by automatically responding to network incidents that firewalls may not catch.
Information Security Engineer at Nhq Distribution Ltd
What makes Trellix Network Detection and Response stand out for me compared to other tools is the way you can detect threats. It is very easy and comfortable to use, and the detection shows clearly on the screen, which is very easy to understand.
Agente De Servicios Técnicos at a computer software company with 11-50 employees
 

Categories and Ranking

Microsoft Defender for Clou...
Ranking in Advanced Threat Protection (ATP)
14th
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
42
Ranking in other categories
Cloud Access Security Brokers (CASB) (4th), Microsoft Security Suite (12th)
Trellix Network Detection a...
Ranking in Advanced Threat Protection (ATP)
12th
Average Rating
8.4
Reviews Sentiment
7.3
Number of Reviews
40
Ranking in other categories
Network Detection and Response (NDR) (10th)
 

Mindshare comparison

As of January 2026, in the Advanced Threat Protection (ATP) category, the mindshare of Microsoft Defender for Cloud Apps is 1.8%, up from 1.1% compared to the previous year. The mindshare of Trellix Network Detection and Response is 3.9%, up from 3.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Advanced Threat Protection (ATP) Market Share Distribution
ProductMarket Share (%)
Trellix Network Detection and Response3.9%
Microsoft Defender for Cloud Apps1.8%
Other94.3%
Advanced Threat Protection (ATP)
 

Featured Reviews

FV
Security and Continuity Manager at Rolinco NV
Deployment has been seamless with insightful data categorization and enhanced control
The features of Microsoft Defender for Cloud Apps that I have found most valuable include the overall portal view, with bubble graphs which give us insight into what goes where in the categorization, nowadays with Generative AI but all kinds of categorization, collaboration, etc. That central view of the portal is very useful for us. The impact of Microsoft Defender for Cloud Apps on our organization's ability to assess and manage app related risks has been significant because we have more visibility. Therefore, we can add more control, and we have already done so. This was not possible in the old solution, in the old CASB solution with Netskope. We now can see on the spot, and we do that almost weekly, what the end users are utilizing, which cloud providers or cloud apps they're using. The visibility into OAuth apps provided by Microsoft Defender for Cloud Apps is very good. The visibility into risk and risk management of our organization's Generative AI apps is very nice, as you can choose the category Generative AI and then see exactly what traffic has been going to and from Generative AI in the cloud. This makes us very insightful on what is used within the company. We have some policies on blocking specific Generative AI, and we use within our company one particular AI part, which is CoPilot of Microsoft. In this way, we can see what the end users are using other than CoPilot, and that makes us more in control. The effectiveness of the integration of Microsoft Defender for Cloud Apps with Defender XDR and defending against SaaS attacks is very intuitive. It works immediately if we create a new policy or in Purview or in Microsoft Defender for Cloud Apps, or when we make an app unsanctioned by blocking it, then it is almost immediately, or at least within a couple of hours, effective on all the endpoints where the EDR is running. This gives us much better control over things than before.
Jose Vargas - PeerSpot reviewer
Agente De Servicios Técnicos at a computer software company with 11-50 employees
Has improved threat detection workflows and supports seamless customer monitoring
The best features Trellix Network Detection and Response offers include very good threat detection, and I believe that it is one of the best XDR tools. For example, ePO and XDR components are very comfortable and similar to many other tools for this type of monitoring, and I have received very good feedback for this tool. What makes Trellix Network Detection and Response stand out for me compared to other tools is the way you can detect threats. It is very easy and comfortable to use, and the detection shows clearly on the screen, which is very easy to understand. Regarding the features, I think that the integration with other platforms is very comfortable with the customer because we can integrate it with any switch or firewall, and it is comfortable to add this tool. Trellix Network Detection and Response has positively impacted my organization as I have improved my knowledge about detection and response. I have already used some other tools such as CrowdStrike and Umbrella, but Trellix is one of the best that I have tested. I believe that for my organization, Trellix has helped a lot with detection and supported our customers effectively. Trellix Network Detection and Response is a great tool that integrates with a lot of security tools such as Palo Alto, which is a good firewall. If you have these types of tools, your organization would benefit greatly.
report
Use our free recommendation engine to learn which Advanced Threat Protection (ATP) solutions are best for your needs.
879,422 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
12%
Financial Services Firm
11%
Manufacturing Company
9%
Government
7%
Comms Service Provider
13%
Manufacturing Company
12%
Financial Services Firm
12%
Government
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise10
Large Enterprise19
By reviewers
Company SizeCount
Small Business20
Midsize Enterprise8
Large Enterprise19
 

Questions from the Community

Which is the better security solution - Cisco Umbrella or Microsoft Cloud App Security?
Cisco Umbrella is an integral component of the Cisco SASE architecture. It integrates security in a single, cloud-native solution, unifying multiple features like DNS-layer security, threat intelli...
What do you like most about Microsoft Cloud App Security?
It does a great job of monitoring and maintaining a security baseline. For us, that is a key element. The notifications are pretty good.
What is your experience regarding pricing and costs for Microsoft Cloud App Security?
At the time of implementation, when the size of our organization was small, it was a more affordable product. Since all our productivity applications were on O365, Microsoft Defender for Cloud Apps...
What do you like most about FireEye Network Security?
We wanted to cross-reference that activity with the network traffic just to be sure there was no lateral movement. With Trellix, we easily confirmed that there was no lateral network involvement an...
What is your experience regarding pricing and costs for FireEye Network Security?
My experience with pricing, setup cost, and licensing for Trellix Network Detection and Response is very great.
What needs improvement with FireEye Network Security?
I would like to see in Trellix Network Detection and Response more explanation about some details of the threat, and I wish it had more actions that you can take to contain the host or move it some...
 

Also Known As

MS Cloud App Security, Microsoft Cloud App Security
FireEye Network Security, FireEye
 

Overview

 

Sample Customers

Customers for Microsoft Defender for Cloud Apps include Accenture, St. Luke’s University Health Network, Ansell, and Nakilat.
FFRDC, Finansbank, Japan Advanced Institute of Science and Technology, Investis, Kelsey-Seybold Clinic, Bank of Thailand, City of Miramar, Citizens National Bank, D-Wave Systems
Find out what your peers are saying about Microsoft Defender for Cloud Apps vs. Trellix Network Detection and Response and other solutions. Updated: December 2025.
879,422 professionals have used our research since 2012.