No more typing reviews! Try our Samantha, our new voice AI agent.

Microsoft Defender Threat Intelligence [EOL] vs Trellix Advanced Threat Defense comparison

Why PeerSpot?
Microsoft and Trellix are both solutions in the Advanced Threat Protection (ATP) category. Additionally, 93% of Microsoft users are willing to recommend the solution, compared to 76% of Trellix users who would recommend it.
Trellix Advanced Threat Def...
Read 9 Trellix Advanced Threat Defense reviews
  • 2,071 Views
  • 1,740 Comparison Views
76% willing to recommend
 

Comparison Buyer's Guide

Download the report
Executive SummaryUpdated on Oct 16, 2025

Trellix Advanced Threat Defense and Microsoft Defender Threat Intelligence [EOL] compete in the cybersecurity market, focused on detecting and neutralizing advanced threats. Trellix appears to have an edge in pricing and support, offering a favorable cost-benefit ratio, while Microsoft Defender's extensive features make it a compelling choice.

Features: Trellix Advanced Threat Defense features comprehensive threat analysis, rapid incident response, and swift actionable insights. Microsoft Defender Threat Intelligence [EOL] offers extensive data integration, detailed threat intelligence, and a global review of malicious code with remediation.

Room for Improvement: Trellix could enhance integration ease and provide more detailed threat intelligence. Its user interface might benefit from additional refinement. Microsoft Defender Threat Intelligence [EOL] could improve its cost-effectiveness, streamline user experience for non-Microsoft environments, and simplify integration for first-time users.

Ease of Deployment and Customer Service: Microsoft Defender Threat Intelligence [EOL] integrates seamlessly within the Microsoft ecosystem, facilitating smoother deployment. Trellix deployment, while straightforward, may take longer in unique environments. Trellix is known for responsive support, whereas Microsoft provides comprehensive documentation and community resources.

Pricing and ROI: Trellix Advanced Threat Defense offers competitive setup costs, focusing on value-driven investment with high ROI through efficient threat management. Microsoft Defender Threat Intelligence [EOL], despite higher initial costs, justifies the investment with rich features and integration benefits, potentially reducing long-term expenses.

DOWNLOAD THE COMPLETE REPORT
To learn more, read our detailed Advanced Threat Protection (ATP) Report (Updated: October 2026).
Buyer's Guide
Advanced Threat Protection (ATP)
October 2026
Download the complete report
Helped 920,769 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Microsoft Defender Threat I...
Average Rating
8.4
Reviews Sentiment
7.3
Number of Reviews
32
Ranking in other categories
No ranking in other categories
Trellix Advanced Threat Def...
Average Rating
7.8
Reviews Sentiment
5.6
Number of Reviews
9
Ranking in other categories
Advanced Threat Protection (ATP) (21st)
 

Featured Reviews

Charles Mokoena - PeerSpot reviewer
Charles Mokoena
Mobility & IT Project Manager at Voicevine Pty Ltd
Has strengthened our ability to detect threats in real time and improved internal security decision-making
The features that I find most valuable in Microsoft Defender Threat Intelligence include the Sentinel part of it. There are several features we've looked at, including Sentinel as well as extended Defender, which is XDR. I've used those two, and that's what I've found quite useful for us, especially in the hardening and analysis part of the whole threat analysis. We use the real-time threat detection features in Microsoft Defender Threat Intelligence. If it wasn't for that real-time threat detection on the vulnerability, I think we would not have survived the attack. The integration capabilities of Microsoft Defender Threat Intelligence with other Microsoft security tools have benefited our organization's threat management process by initially being quite a challenge, especially coming from other security tools such as Fortinet and Check Point. However, once you've gotten used to it, it's quite easy and user-friendly. The dashboard, especially the threat analysis dashboard, is quite detailed in terms of providing a view of which areas in our environment need attention, making it quite useful.
Read full review
PP
Philippe Panardie
RSSI at SDIS49
Ensuring long-term reliability while seeking internal email management enhancements
Prisma is a commercial name of the firewall now, but we don't work with the cloud product. Only our company is using it and we do not recommend it to customers. For us, it's transparent because it's a cloud product, so we don't really know the version as it's always updated. We have not had any problem, but it's difficult to report on what's going on because some days they can wash out perhaps 100 mails, and then it's difficult to say how many attacks you have reached. The right email has been washed out and then nobody has complained. We do not use the Threat Visualization feature; as we are in MX, the mail is washed out before it is in the mail inbox of the user, thus avoiding any problem requiring a reservation. In fact, there is no integration with existing security frameworks. The only problem we can have is that as we have no API interface, there is no inspection of internal mail. I rate Trellix Advanced Threat Defense a nine out of ten.
Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The global review and remediation of malicious code is probably the most valuable feature."
"Microsoft Defender Threat Intelligence helps to make sure that our systems are intact and not vulnerable."
"One of the best features is that it provides a certain level of customization, allowing us to set our spam confidence levels."
"The product is useful when the end user downloads malware files."
"Offers easy integration with a cloud-based infrastructure"
"The user interface is pretty user-friendly."
"The tool is managed from the cloud, because of which the maintenance is very low."
"The product's initial setup phase was straightforward."
More Microsoft Defender Threat Intelligence [EOL] pros
"It is very scalable."
"I see ROI, as it stops in excess of twenty-five malware events per month, all of which could be critical to the business."
"It was easy to set up initially."
"This solution is very easy to use and requires little to no training."
"I recommend this solution because of its ease of use."
"It is stable and reliable."
"The fact that in 10 years, we have had no problem is the most valuable feature for us; it's really a washing machine, but the only problem we face is that it's difficult to report on this product."
"The product is expensive, but it is better than the rest of them in the industry."
More Trellix Advanced Threat Defense pros
 

Cons

"Non-Microsoft products may not integrate as smoothly."
"The tool's onboarding of users that use on-premise or hybrid environments needs to be improved."
"It would be beneficial to enhance the pricing structure and make it more affordable."
"I would like to see more integration with other solutions. For example, integration well with Microsoft but not with other solutions."
"The price could be improved."
"Microsoft Defender Threat Intelligence is evolving and needs to fix and enhance numerous issues like stability and licensing. The continuous rebranding and licensing changes are confusing."
"One area where Microsoft Defender could be improved is in its support for non-Microsoft products, particularly for systems running Linux or other open-source platforms across ecosystems."
"In my opinion, the main area of improvement for Microsoft Defender Threat Intelligence is related to how information is conveyed."
More Microsoft Defender Threat Intelligence [EOL] cons
"I would like to see future versions of the solution incorporate artificial intelligence technology."
"It was not complex, but there are things to look out for, because it's an intense product. It scans intensely and there are major obstacles to overcome if it scans while users are using a network, then it is not a good thing."
"Some of our customers have mentioned the lack of a tool that would allow for remote capabilities without being attached to the internet."
"There could be a tool that automatically updates all-new Microsoft IPs, which are available for free to connect to the client."
"The initial setup was industry standard complex. It takes awhile and has a lot of planning involved. It could be simplified with product redesign."
"Lacks remote capabilities not dependent on the internet."
"Make the ATD appliance a part of the whole product offering and take the whole thing onto the cloud."
"The support on their side is not readily available. It takes a while."
More Trellix Advanced Threat Defense cons
 

Pricing and Cost Advice

"I use the product's default version, which is a free one and not the licensed version."
"The product has multiple subscription models."
"On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing a six or seven out of ten."
"The tool is expensive as a stand-alone solution. However, it is not cheap when you purchase it as a bundle."
"There is a need to make yearly payments towards the licensing charges attached to the product."
"The product is a part of my Microsoft 365 subscription, so there is no additional cost. It is cost-effective."
"The pricing of the solution is good."
"It is an expensive product."
More Microsoft Defender Threat Intelligence [EOL] pricing and cost advice
"The product is expensive, but it is better than the rest of them in the industry."
"Our licensing fees for this solution are approximately one million dollars per year."
report
See which vendors are best for you
Use our free recommendation engine to learn which Advanced Threat Protection (ATP) solutions are best for your needs.
See recommendations
920,769 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Outsourcing Company
14%
Manufacturing Company
10%
Educational Organization
8%
Construction Company
15%
Outsourcing Company
15%
Financial Services Firm
13%
Manufacturing Company
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business17
Midsize Enterprise2
Large Enterprise15
By reviewers
Company SizeCount
Small Business3
Midsize Enterprise4
Large Enterprise5
 

Questions from the Community

What needs improvement with Microsoft Defender Threat Intelligence?
From the telemetry data standpoint, I would prefer Defender data to be more open in future updates.
See all answers
What is your primary use case for Microsoft Defender Threat Intelligence?
We have tried Microsoft Defender Threat Intelligence. I have expertise with Microsoft Defender products. I am not familiar with Microsoft Defender for IoT because we did not use that in our environ...
See all answers
What advice do you have for others considering Microsoft Defender Threat Intelligence?
I will recommend Microsoft Defender Threat Intelligence because it is a complete automation solution for threat production detection and an end-to-end solution for client security. Unfortunately, s...
See all answers
What needs improvement with McAfee Advanced Threat Defense?
I would like to see an API interface for internal email and control of outgoing email to make it closer to 10. It's necessary; today we have an MX interface, and it would be interesting to have an ...
See all answers
What is your primary use case for McAfee Advanced Threat Defense?
We are working with Palo Alto products, specifically firewalls. We are only using Palo Alto Firewalls and not Cortex. With FireEye and Trellix, we only work with ETP now because the NDR function wh...
See all answers
What advice do you have for others considering McAfee Advanced Threat Defense?
Prisma is a commercial name of the firewall now, but we don't work with the cloud product. Only our company is using it and we do not recommend it to customers. For us, it's transparent because it'...
See all answers
 

Comparisons

CrowdStrike Falcon vs Microsoft Defender Threat Intelligence [EOL] Logo
CrowdStrike Falcon vs Microsoft Defender Threat Intelligence [EOL]
Compared 5% of the time
Palo Alto Networks VM-Series vs Microsoft Defender Threat Intelligence [EOL] Logo
Palo Alto Networks VM-Series vs Microsoft Defender Threat Intelligence [EOL]
Compared 4% of the time
Recorded Future vs Microsoft Defender Threat Intelligence [EOL] Logo
Recorded Future vs Microsoft Defender Threat Intelligence [EOL]
Compared 3% of the time
Microsoft Defender for Endpoint vs Microsoft Defender Threat Intelligence [EOL] Logo
Microsoft Defender for Endpoint vs Microsoft Defender Threat Intelligence [EOL]
Compared 3% of the time
SOCRadar Extended Threat Intelligence vs Microsoft Defender Threat Intelligence [EOL] Logo
SOCRadar Extended Threat Intelligence vs Microsoft Defender Threat Intelligence [EOL]
Compared 3% of the time
More Microsoft Defender Threat Intelligence [EOL] Competitors
NetWitness Platform vs Trellix Advanced Threat Defense Logo
NetWitness Platform vs Trellix Advanced Threat Defense
Compared 18% of the time
Microsoft Defender for Office 365 vs Trellix Advanced Threat Defense Logo
Microsoft Defender for Office 365 vs Trellix Advanced Threat Defense
Compared 8% of the time
Fortinet FortiSandbox vs Trellix Advanced Threat Defense Logo
Fortinet FortiSandbox vs Trellix Advanced Threat Defense
Compared 8% of the time
Digital Guardian vs Trellix Advanced Threat Defense Logo
Digital Guardian vs Trellix Advanced Threat Defense
Compared 6% of the time
Check Point Infinity vs Trellix Advanced Threat Defense Logo
Check Point Infinity vs Trellix Advanced Threat Defense
Compared 6% of the time
More Trellix Advanced Threat Defense Competitors
 

Product Reports

Buyer's Guide
Microsoft Defender Threat Intelligence [EOL]
October 2026
Microsoft Defender Threat Intelligence [EOL] reportDownload Microsoft Defender Threat Intelligence [EOL] product report
Buyer's Guide
Trellix Advanced Threat Defense
October 2026
Trellix Advanced Threat Defense reportDownload Trellix Advanced Threat Defense product report
 

Also Known As

No data available
McAfee Advanced Threat Defense
 

Overview

Microsoft Defender Threat Intelligence [EOL] offers comprehensive security by integrating with Microsoft platforms, retaining data within tenants, and providing real-time threat detection and collaboration. It's designed for both enterprise and SMB environments.

Microsoft Defender Threat Intelligence enhances cybersecurity operations by integrating with Azure Sentinel and Microsoft products like Intune and Azure. Its capabilities in endpoint, email, and cloud security ensure robust protection against a wide range of threats. With global threat data, anti-spam features, and customization options, it addresses threat prevention and vulnerability management. Seamless scaling and proactive incident prevention make it a reliable choice for enterprises looking for collaborative, efficient security management.

What are the key features of Microsoft Defender Threat Intelligence?
  • Integration with Microsoft Products: Enhances usability by working seamlessly with Intune and Azure.
  • Real-time Threat Detection: Quickly identifies and responds to emerging threats.
  • Email and Cloud Security: Protects critical communication channels and cloud environments.
  • Global Threat Data: Offers extensive threat intelligence from various regions.
  • Comprehensive Reporting: Provides detailed insights into security activities and incidents.
  • Automation and Insights: Streamlines threat management with advanced automation capabilities.
What benefits should users look for in reviews?
  • Proactive Incident Prevention: Reduces the risk of breaches by anticipating threats.
  • Seamless Deployment: Ensures efficient integration within existing infrastructure.
  • Customization: Flexible settings to meet specific security requirements.
  • Collaboration Across Regions: Enables coordinated defense strategies globally.
  • Efficient Security Management: Improves operations through automated and integrated systems.

Microsoft Defender Threat Intelligence is crucial for industries that value data retention and comprehensive threat analyses in safeguarding their operations. Financial institutions, healthcare providers, and technology firms implement this solution to secure their environments by updating security protocols and ensuring compliance with various industry standards. The focus on integration and customization helps these organizations adapt to evolving cybersecurity threats effectively.

Microsoft

Trellix Advanced Threat Defense offers efficient threat detection and automatic threat remediation, featuring seamless management and integration with operating systems and extensions.

Providing robust malware defense, Trellix Advanced Threat Defense is easy to set up and use. Its components work collaboratively, with standout features like behavioral analysis, retro-inspection, and ePolicy Orchestration. Despite its strengths, users suggest improvements in Active Directory integration, cloud readiness, artificial intelligence, and faster sandboxing. The API interface and scalability need enhancement, while better compatibility with platforms like Cisco could elevate its function. Effective for server and endpoint security, it effectively blocks threats like WannaCry and disperses attack data through the DXL client quickly.

What are the notable features of Trellix Advanced Threat Defense?
  • Management and Automatic Threat Remediation: Facilitates seamless management and handling of threats.
  • Effective Threat Detection and Response: Delivers efficient and reliable threat detection capabilities.
  • Behavioral Analysis and Retro-Inspection: Offers advanced analysis for comprehensive threat identification.
  • ePolicy Orchestration: Streamlines processes for enhanced threat management.
  • Scalability and Price: Provides a stable and scalable solution at a competitive price point.
What key benefits can be identified from reviews?
  • Ease of Use and Setup: Known for its straightforward implementation and user-friendly interface.
  • Integration Capabilities: Works well with different operating systems and technologies like Palo Alto firewalls.
  • Threat Protection Efficiency: Proven effectiveness in stopping threats such as WannaCry.
  • Rapid Attack Information Dissemination: Utilizes the DXL client for quick data sharing.

Trellix Advanced Threat Defense is widely used across numerous industries for server and desktop protection, ensuring endpoint security and halting attacks without failure. Its integration with diverse technologies enhances protection in varied environments, making it a valuable tool in enterprise security management.

Trellix
 

Sample Customers

Information Not Available
The Radicati Group, Florida International University, MGM Resorts International, County Durham andDarlington NHS Foundation Trust
Buyer's Guide
Advanced Threat Protection (ATP)
October 2026
Download Free Report
Find out what your peers are saying about Palo Alto Networks, Trellix, Microsoft and others in Advanced Threat Protection (ATP). Updated: October 2026.
DOWNLOAD NOW
920,769 professionals have used our research since 2012.
See our list of best Advanced Threat Protection (ATP) vendors.

We monitor all Advanced Threat Protection (ATP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.