No more typing reviews! Try our Samantha, our new voice AI agent.

ReliaQuest GreyMatter vs TrendAI Vision One comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Feb 2, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Ranking in Extended Detection and Response (XDR)
4th
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
114
Ranking in other categories
Endpoint Protection Platform (EPP) (4th), Endpoint Detection and Response (EDR) (6th), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (1st)
ReliaQuest GreyMatter
Ranking in Extended Detection and Response (XDR)
25th
Average Rating
9.6
Reviews Sentiment
8.1
Number of Reviews
2
Ranking in other categories
Digital Risk Protection (11th), Managed Detection and Response (MDR) (17th)
TrendAI Vision One
Ranking in Extended Detection and Response (XDR)
3rd
Average Rating
8.6
Reviews Sentiment
7.0
Number of Reviews
112
Ranking in other categories
Endpoint Detection and Response (EDR) (4th), Network Detection and Response (NDR) (2nd), Attack Surface Management (ASM) (1st), AI-Powered Cybersecurity Platforms (4th), AI Security (1st)
 

Mindshare comparison

As of July 2026, in the Extended Detection and Response (XDR) category, the mindshare of Cortex XDR by Palo Alto Networks is 4.6%, down from 5.1% compared to the previous year. The mindshare of ReliaQuest GreyMatter is 0.9%, up from 0.5% compared to the previous year. The mindshare of TrendAI Vision One is 3.7%, up from 3.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Extended Detection and Response (XDR) Mindshare Distribution
ProductMindshare (%)
TrendAI Vision One3.7%
Cortex XDR by Palo Alto Networks4.6%
ReliaQuest GreyMatter0.9%
Other90.8%
Extended Detection and Response (XDR)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
Zaid bin junaid  - PeerSpot reviewer
Product Manager at Flash
Improved threat detection has reduced incidents and has automated investigations with AI
There are multiple features of ReliaQuest GreyMatter which I love personally. The agentic AI, which helps in autonomous investigation and containment, is multiplying the speed of the task to be done. Features such as managed service integration and MDR with human expertise when needed are some major features which I love about ReliaQuest GreyMatter.
SemihDalkıran - PeerSpot reviewer
Cyber Security Senior Technical Consultant at a consultancy with 11-50 employees
Built faster threat response and improved visibility with real-time monitoring and flexible deployment
TrendAI Vision One allows us to monitor attacks in real time, which is a significant benefit. We can quickly see where the attack is coming from. TrendAI Vision One enables us to use different products with a flexible license. For example, if a customer is using endpoint security and wants to switch to another solution, they can instantly use a different Trend Micro product, such as email. TrendAI Vision One has helped to reduce the time to detect and respond to different threats, as it can respond to attacks very quickly. With playbook templates, in cases of recurring attacks, responses can be made quickly using predefined playbooks. TrendAI Vision One has helped to reduce noise from false positives. There have been false positives before, but it was due to the customer not telling us which app they were using. Best practice configurations must be applied properly to avoid such issues. TrendAI Vision One helps customers consolidate the use of security vendors and reduce silos by offering one platform for all product management.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The product is mostly automated, and we do not have to make decisions, because all the decisions are made by the product itself and we are not required to create any custom policies since the policies that are created are well defined in the product itself."
"My advice for others looking into using Cortex is that it is very easy to use and very useful for the customer environment, whether it's a public or private one."
"I generally believe that Cortex XDR by Palo Alto Networks is probably the best in the market right now."
"Cortex XDR alerts us on the dashboard when there's a threat, which allows us to restrict that user and helps secure our infrastructure."
"Monitoring is most valuable."
"We use Cortex XDR by Palo Alto Networks for its ability to detect based on behavior rather than simple virus scan to prevent malicious activities."
"Cortex is a very good total solution on the endpoints."
"Traps pays for itself within the first 16 months of a three-year subscription."
"ReliaQuest GreyMatter has helped us to reduce security incidents by 89%, which is a significant amount of incidents we have seen."
"ReliaQuest GreyMatter saves around 60% of time or resources."
"Trend Vision One provides centralized visibility and management across protection layers, which is crucial for compliance."
"I like XDR's workbench feature and observed attack technique. It generates an alert once certain conditions are met. For example, let's say there's a threat called malicious.exe being deployed on your system. It will generate an alert with information like the file path, location, hash, etc. You also see a relational matrix showing how that file was executed and which processes were installed."
"We are very impressed with the single pane of glass visibility that Trend Micro XDR provides."
"Its detection rate is valuable. It is really an easy product to install and manage. It is quite effective at what it does, and if needed, it can also be co-managed, which means 24 hours and seven days a week monitoring through a SOC."
"The scalability is very good, and once again, being based on the cloud makes it very scalable."
"Trend Vision One has reduced the time we spend detecting and responding to threats; I'd say we're 80% faster than before."
"Overall, I rate Trend Vision One a ten out of ten as I am extremely happy with Trend Micro's capabilities and their platform's strength."
"TrendAI Vision One provides comprehensive insight into user behavior, dark web login monitoring, and open vulnerabilities, allowing us to see everything from a single platform, which simplifies security operations and reduces complexity."
 

Cons

"Cortex does not offer an on-premises solution. However, some customers would prefer not to be on the cloud. It would be ideal if it could offer something on-prem as well."
"As an improvement, I would like to see enhanced connection speeds."
"They've been having some issues with updating their endpoint agents, and it has been quite frustrating."
"Cortex XDR by Palo Alto Networks can improve mobile integration to allow access to the console."
"In reporting they should have a customizable dashboard due to the fact that C-level people don't like reporting to the IT department. They prefer to have a real-time dashboard. That kind of dashboard needs to have various customizations."
"Dashboards do not allow everyone to see what's happening."
"Cortex XDR by Palo Alto Networks could improve by adding a sandbox feature to better compete with their competitors which have it."
"Fine-tuning the detection policy requires experience because the policy is very complex in Cortex XDR by Palo Alto Networks, and we get high false positive alerts."
"Areas that have room for improvement include user interface and integration."
"They are planning on adding the Security Playbooks as a complete feature. In the preview mode, it is available; however, it is not released."
"It is a bit slow to implement kernel support on the Linux side. When doing patching and upgrades on our Linux servers, we often find that the Trend agent doesn't support the kernel version."
"When investigating alerts, users often have to navigate through multiple windows and tabs to gather all relevant information."
"The SOAR features (Security Playbooks) are quite limited."
"The scalability of TrendAI Vision One would be around a six; it is appropriate for smaller companies, but for bigger ones such as Nike, I would say it would not fit as well."
"Alert noise and false positives are areas that should be improved. The initial deployment generates too many alerts, so we need better AI filtering and more accurate prioritization."
"Email security sometimes may lead to some true positive attachments."
"The experience of first using Trend Vision One is really difficult due to the steep learning curve."
 

Pricing and Cost Advice

"If one wishes to work with another team or large number of users at a future point, he must purchase a license for them."
"The return on investment is from the user side because we have seen the performance of it increase the delivery time of the product if we are using too many web-based and on-premise applications. In indirect ways, we saw the return of investment in terms of performance and user satisfaction increase."
"Compared to CrowdStrike, Cortex XDR is an expensive solution."
"I did PoCs on products called Cylance and CrowdStrike. Although, I consider these products and they were also good, when it come to cost and budgetary factors, Traps has been proven to be better than the other two products. It is quite cost-effective and delivers all the entire solution which we require."
"The price of the product is not very economical."
"The cost of Cortex XDR by Palo Alto Networks is $55 to $90 USD per endpoint per month."
"This is an expensive solution."
"It is present, but when compared to other competitive products, I would say it is not less expensive; however, when all of the other added values are considered, the price is reasonable."
Information not available
"Trend Vision One offers a competitive price-to-value ratio."
"They've introduced a credit system, where we purchase credits and then allocate them to the specific services we need active."
"Vision One's pricing is extremely competitive. They're probably the lowest-cost provider that has this feature set."
"The pricing for Trend Vision One is reasonable."
"Trend Micro XDR has a good price, and on a scale of one to five, I would rate it a four out of five in terms of price."
"It would be nice if it was a little bit cheaper, but I think it has a fair price. It is comparable to others in the market."
"Competitors offer comparable solutions at slightly lower prices, so Vision One has room to reduce its pricing by 15 percent, given that Trend Vision One charges approximately $10 per endpoint."
"We have an annual subscription and I believe there is no option for monthly billing at the moment."
report
Use our free recommendation engine to learn which Extended Detection and Response (XDR) solutions are best for your needs.
902,988 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
12%
Financial Services Firm
11%
Manufacturing Company
10%
Comms Service Provider
9%
Financial Services Firm
11%
Manufacturing Company
9%
Construction Company
7%
Retailer
7%
Manufacturing Company
11%
Financial Services Firm
9%
Comms Service Provider
9%
Computer Software Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise21
Large Enterprise53
No data available
By reviewers
Company SizeCount
Small Business59
Midsize Enterprise15
Large Enterprise45
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
What needs improvement with ReliaQuest GreyMatter?
Areas that have room for improvement include user interface and integration.
What is your primary use case for ReliaQuest GreyMatter?
I use ReliaQuest GreyMatter for detection and response, XDR, and SIEM. The best features I like about GreyMatter the ...
What is your experience regarding pricing and costs for Trend Micro XDR?
I do not have clear information about the pricing aspect, including setup cost and licensing details. Cost and licens...
What needs improvement with Trend Micro XDR?
I don't see any straightforward issues with TrendAI Vision One at this time. Troubleshooting the disconnectivity of t...
What advice do you have for others considering Trend Micro XDR?
TrendAI Vision One is a cloud native solution. It doesn't have any on-premises deployment. It is only hosted on AWS e...
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
No data available
Trend Vision One, Trend Micro XDR, Trend Micro XDR for Users, Trend Vision One - XDR for Networks, Trend Micro Vision One
 

Interactive Demo

Demo not available
Demo not available
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Information Not Available
Panasonic North America, Decathlon, Fischer Homes, Banijay Benelux, Unigel, DHR Health,
Find out what your peers are saying about ReliaQuest GreyMatter vs. TrendAI Vision One and other solutions. Updated: June 2026.
902,988 professionals have used our research since 2012.