Try our new research platform with insights from 80,000+ expert users

Microsoft Defender Threat Intelligence [EOL] vs Trellix Network Detection and Response comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 16, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
8.2
Microsoft Defender Threat Intelligence enhances security, saves on budgets, and improves detection, offering significant ROI and value.
Sentiment score
7.6
Trellix enhances security and productivity, offering nearly 200% ROI, faster threat detection, and broad client satisfaction.
 

Customer Service

Sentiment score
7.5
Microsoft Defender support is rated very good, with knowledgeable level two assistance, competent partners, and a helpful community platform.
Sentiment score
7.2
Trellix Network Detection and Response offers reliable 24/7 support, though some users desire quicker response times during incidents.
Level two support is knowledgeable and knows how the product works, which is very good.
Cloud Solution architect at a tech services company with 51-200 employees
I would give Microsoft an eight for their technical support.
Mobility & IT Project Manager at Voicevine Pty Ltd
Technical support needs improvement as sometimes engineers are not available promptly, especially during high-severity incidents.
Information Security Engineer at Nhq Distribution Ltd
The customer support for Trellix Network Detection and Response is great.
Agente De Servicios Técnicos at a computer software company with 11-50 employees
 

Scalability Issues

Sentiment score
7.4
Microsoft Defender Threat Intelligence is highly scalable, adaptable for businesses of all sizes, and supports thousands of endpoints efficiently.
Sentiment score
7.9
Trellix Network Detection and Response offers reliable cloud scalability, supporting diverse industries with high satisfaction despite varied admin support.
If there were some customizations available, I would rate its scalability as nine out of ten.
Cloud Solution architect at a tech services company with 51-200 employees
 

Stability Issues

Sentiment score
8.0
Microsoft Defender Threat Intelligence is seen as stable and secure, with high reliability and effective phishing prevention despite occasional outages.
Sentiment score
7.8
Trellix Network Detection and Response is reliable, with minor issues in performance requiring maintenance and expertise for optimal use.
It provides a high level of security and avoids phishing and scam emails.
Cloud Solution architect at a tech services company with 51-200 employees
 

Room For Improvement

Microsoft Defender needs price adjustments, improved integration, better accuracy, enhanced AI, and smoother user experience for evolving cybersecurity.
Trellix Network Detection and Response needs improved customization, integration, reporting, threat intelligence, AI, support, and dashboard visibility.
Providing code customization would help keep pace with new vulnerabilities and threats.
Cloud Solution architect at a tech services company with 51-200 employees
If Microsoft could direct critical messages regarding updates or vulnerabilities affecting users' environments, it would help users understand the importance of security updates.
Mobility & IT Project Manager at Voicevine Pty Ltd
From the telemetry data standpoint, I would prefer Defender data to be more open in future updates.
Consultant at Dell Technologies
There should be improvements in AI intelligence, faster decision-making, and a more responsive technical support team.
Information Security Engineer at Nhq Distribution Ltd
I would like to see in Trellix Network Detection and Response more explanation about some details of the threat.
Agente De Servicios Técnicos at a computer software company with 11-50 employees
 

Setup Cost

Microsoft Defender Threat Intelligence is cost-effective in bundles, but SMEs face challenges with standalone pricing and evolving licensing.
Trellix Network Detection and Response is perceived as costly, but valued for effective threat detection and competitive pricing.
 

Valuable Features

Microsoft Defender Threat Intelligence excels in integration, threat detection, user interface, data retention, real-time protection, and analytics.
Trellix excels in zero-day threat detection, automatic responses, and enhancing security infrastructure with user-friendly dashboards and sandboxing.
If it wasn't for that real-time threat detection on the vulnerability, I think we would not have survived the attack.
Mobility & IT Project Manager at Voicevine Pty Ltd
Our threat detection is enhanced due to the AI agents in Microsoft Defender Threat Intelligence, which helps in detecting automatically.
Consultant at Dell Technologies
One of the best features is that it provides a certain level of customization, allowing us to set our spam confidence levels.
Cloud Solution architect at a tech services company with 51-200 employees
Trellix NDR provides an essential defense by automatically responding to network incidents that firewalls may not catch.
Information Security Engineer at Nhq Distribution Ltd
What makes Trellix Network Detection and Response stand out for me compared to other tools is the way you can detect threats. It is very easy and comfortable to use, and the detection shows clearly on the screen, which is very easy to understand.
Agente De Servicios Técnicos at a computer software company with 11-50 employees
 

Categories and Ranking

Microsoft Defender Threat I...
Average Rating
8.4
Reviews Sentiment
7.3
Number of Reviews
32
Ranking in other categories
No ranking in other categories
Trellix Network Detection a...
Average Rating
8.4
Reviews Sentiment
7.3
Number of Reviews
40
Ranking in other categories
Advanced Threat Protection (ATP) (13th), Network Detection and Response (NDR) (9th)
 

Featured Reviews

Charles Mokoena - PeerSpot reviewer
Mobility & IT Project Manager at Voicevine Pty Ltd
Has strengthened our ability to detect threats in real time and improved internal security decision-making
The features that I find most valuable in Microsoft Defender Threat Intelligence include the Sentinel part of it. There are several features we've looked at, including Sentinel as well as extended Defender, which is XDR. I've used those two, and that's what I've found quite useful for us, especially in the hardening and analysis part of the whole threat analysis. We use the real-time threat detection features in Microsoft Defender Threat Intelligence. If it wasn't for that real-time threat detection on the vulnerability, I think we would not have survived the attack. The integration capabilities of Microsoft Defender Threat Intelligence with other Microsoft security tools have benefited our organization's threat management process by initially being quite a challenge, especially coming from other security tools such as Fortinet and Check Point. However, once you've gotten used to it, it's quite easy and user-friendly. The dashboard, especially the threat analysis dashboard, is quite detailed in terms of providing a view of which areas in our environment need attention, making it quite useful.
Jose Vargas - PeerSpot reviewer
Agente De Servicios Técnicos at a computer software company with 11-50 employees
Has improved threat detection workflows and supports seamless customer monitoring
The best features Trellix Network Detection and Response offers include very good threat detection, and I believe that it is one of the best XDR tools. For example, ePO and XDR components are very comfortable and similar to many other tools for this type of monitoring, and I have received very good feedback for this tool. What makes Trellix Network Detection and Response stand out for me compared to other tools is the way you can detect threats. It is very easy and comfortable to use, and the detection shows clearly on the screen, which is very easy to understand. Regarding the features, I think that the integration with other platforms is very comfortable with the customer because we can integrate it with any switch or firewall, and it is comfortable to add this tool. Trellix Network Detection and Response has positively impacted my organization as I have improved my knowledge about detection and response. I have already used some other tools such as CrowdStrike and Umbrella, but Trellix is one of the best that I have tested. I believe that for my organization, Trellix has helped a lot with detection and supported our customers effectively. Trellix Network Detection and Response is a great tool that integrates with a lot of security tools such as Palo Alto, which is a good firewall. If you have these types of tools, your organization would benefit greatly.
report
Use our free recommendation engine to learn which Advanced Threat Protection (ATP) solutions are best for your needs.
884,076 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
16%
Computer Software Company
10%
Manufacturing Company
9%
Educational Organization
8%
Comms Service Provider
15%
Manufacturing Company
11%
Financial Services Firm
10%
Government
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business17
Midsize Enterprise2
Large Enterprise15
By reviewers
Company SizeCount
Small Business20
Midsize Enterprise8
Large Enterprise19
 

Questions from the Community

What do you like most about Microsoft Defender Threat Intelligence?
It just runs in the background. I don't have to worry about, making sure it's Intelligence. So, you know, this kind of makes it very easy, have to worry about installing. It is easy to use.
What needs improvement with Microsoft Defender Threat Intelligence?
From the telemetry data standpoint, I would prefer Defender data to be more open in future updates.
What is your primary use case for Microsoft Defender Threat Intelligence?
We have tried Microsoft Defender Threat Intelligence. I have expertise with Microsoft Defender products. I am not familiar with Microsoft Defender for IoT because we did not use that in our environ...
What do you like most about FireEye Network Security?
We wanted to cross-reference that activity with the network traffic just to be sure there was no lateral movement. With Trellix, we easily confirmed that there was no lateral network involvement an...
What is your experience regarding pricing and costs for FireEye Network Security?
My experience with pricing, setup cost, and licensing for Trellix Network Detection and Response is very great.
What needs improvement with FireEye Network Security?
I would like to see in Trellix Network Detection and Response more explanation about some details of the threat, and I wish it had more actions that you can take to contain the host or move it some...
 

Also Known As

No data available
FireEye Network Security, FireEye
 

Overview

 

Sample Customers

Information Not Available
FFRDC, Finansbank, Japan Advanced Institute of Science and Technology, Investis, Kelsey-Seybold Clinic, Bank of Thailand, City of Miramar, Citizens National Bank, D-Wave Systems
Find out what your peers are saying about Palo Alto Networks, Microsoft, Proofpoint and others in Advanced Threat Protection (ATP). Updated: February 2026.
884,076 professionals have used our research since 2012.