Try our new research platform with insights from 80,000+ expert users

Trellix Active Response vs Trend Vision One comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jun 15, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
3.8
Trellix Active Response improved threat detection, reduced incident response times, increased efficiency, and enhanced productivity with an intuitive interface.
Sentiment score
6.5
Trend Vision One provides cost savings, improved security, and time efficiency, offering both direct and preventative ROI benefits.
While we haven't yet quantified the financial benefits, we recognize that there has been a return on investment, particularly with operational efficiencies provided by the alerts.
Our company went through a ransomware event, and if Trend Vision One had not stopped it, that could've closed the company's doors.
Trend Vision One has improved our ROI by 30 percent.
Thankfully, we also had cyber security insurance, and the insurance covered the incidents because, through Trend Micro and the implementation of the solution, along with the data it provided, we were able to demonstrate what had happened.
 

Customer Service

Sentiment score
7.8
Trellix Active Response's customer support is generally positive, but availability and contact speed could improve, rated seven out of ten.
Sentiment score
6.8
Trend Vision One support is praised for responsiveness and competence but needs improvement in communication and escalation processes.
I would rate technical support from Trellix Active Response as a seven because sometimes we face difficulties finding engineers quickly, leading to customer frustration.
It's not just about high-level support with the chatbot; rather, when an issue occurs, we have the experts on-site and ready to respond swiftly, which is crucial.
Trend Micro supported us throughout the transition from on-prem servers or other vendors, providing top-notch service at all times.
Support responds quickly, and together we’ve been able to solve all challenges in our day-to-day operations.
 

Scalability Issues

Sentiment score
4.1
Trellix Active Response is scalable, integrates easily, handles large data seamlessly, and maintains performance and security with minimal latency.
Sentiment score
7.9
Trend Vision One offers scalable, cloud-based architecture for seamless integration and expansion, accommodating diverse organizational sizes and needs efficiently.
The scalability of Active Response is satisfactory.
I’d give scalability a 10 because nearly everything is integrated.
Our growth over the past three years has never caused performance or expansion issues.
I don't think I've encountered any issues with scalability; we're growing steadily, and I believe Trend Vision One can keep up with our demand.
 

Stability Issues

Sentiment score
4.6
Trellix Active Response is praised for reliability, efficient data handling, quick threat detection, adaptability, and stability with minimal downtime.
Sentiment score
8.1
Trend Vision One is praised for stability and reliability, with minimal glitches and seamless integration, maintaining effectiveness across environments.
Trend Vision One works exactly as intended and has never hindered our operations, feeling more a collaborator than a roadblock.
The stability is very high.
Stability is critically important for us with Trend Vision One; it is very stable, providing continuous 24/7 support.
 

Room For Improvement

Trellix Active Response needs better resource management, advanced analytics, and improved integrations for efficient monitoring and AI features.
Trend Vision One needs better reporting, integration, user interface, technical support, incident response, AI features, and automation.
We would like Trellix to optimize the technology for these systems similarly to how it is deployed for normal endpoints.
There is room for improvement in the platform area and security area to make the dashboard visibility clearer and easier for customers to monitor malicious activities occurring in their environment.
Trend Vision One does not initially disclose to customers that they need to purchase additional licenses and pay more for integrations.
The deployment can be complex, and we'd like an easier process, especially when integrating with on-prem and cloud environments.
For XDR threat investigation, there is not enough documentation about how to search for different keywords.
 

Setup Cost

Trend Vision One offers competitive pricing with flexibility, though larger organizations may face higher costs for comprehensive features.
Based on our evaluations, Trellix Active Response's pricing was the most feasible from a cost perspective.
I find the credit model non-transparent—you can't always tell how many licenses apply to which product.
I have seen others that are double or triple the price.
Customers who cannot afford CrowdStrike's pricing can easily opt for Trend Vision One.
 

Valuable Features

Trellix Active Response enhances analytics, user insights, and incident handling, excelling in detection and response with holistic EDR benefits.
Trend Vision One offers centralized security visibility, efficient threat detection, and integration, enhancing risk management and response times.
They notify us immediately of any vulnerabilities on the endpoints, allowing us to deploy a response quickly.
The most valuable feature of Trellix Active Response is that whenever any incident occurs, it allows us to disconnect from that particular network or area and shut down the system using commands.
The most important features of Vision One include visibility, AI integration, attack pattern analysis, predictive analytics, and centralized visibility and management across protection layers.
The most critical feature of Vision One is that it gives us a single console for threat management.
Its ability to identify unmonitored endpoints and perform log inspection, which establishes operational baselines and detects anomalies, proves invaluable for threat identification.
 

Categories and Ranking

Trellix Active Response
Ranking in Endpoint Detection and Response (EDR)
47th
Average Rating
7.0
Reviews Sentiment
5.1
Number of Reviews
5
Ranking in other categories
No ranking in other categories
Trend Vision One
Ranking in Endpoint Detection and Response (EDR)
4th
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
81
Ranking in other categories
Network Detection and Response (NDR) (3rd), Extended Detection and Response (XDR) (4th), Attack Surface Management (ASM) (2nd), AI-Powered Cybersecurity Platforms (3rd)
 

Mindshare comparison

As of October 2025, in the Endpoint Detection and Response (EDR) category, the mindshare of Trellix Active Response is 0.3%, up from 0.2% compared to the previous year. The mindshare of Trend Vision One is 2.5%, down from 2.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Detection and Response (EDR) Market Share Distribution
ProductMarket Share (%)
Trend Vision One2.5%
Trellix Active Response0.3%
Other97.2%
Endpoint Detection and Response (EDR)
 

Featured Reviews

Abdullah Al Hadi - PeerSpot reviewer
Offers comprehensive incident visualization and quick response capabilities but requires clearer dashboard interface
I am an Information Security Engineer at NHQ Distribution Limited and a partner of Trellix. I work with different products in Trellix, including Trellix EDR, SDR, and MDR. Trellix Active Response is the EDR solution from Trellix that has moved from an on-premise solution to a cloud solution. The Trellix MDR solution is helpful for SOC analysis and is integrated with Trellix EDR and SDR capabilities, providing full visibility of threat detection and hunting and detection response correlating with other solutions like endpoint security and encryption. On a scale of one to ten, I rate Trellix Active Response an eight.
Dennis Niedling - PeerSpot reviewer
The CREM feature is an absolutely essential feature that helps us meet security requirements
Since we started using Trend Vision One, we've been able to enhance our security posture significantly. Trend Vision One has improved significantly over time in providing centralized visibility and control. It started as a set of individual products, but now it feels like one integrated solution. This reduces the need for interfaces or multiple analysis tools. That's why we pursued the one-platform strategy. Trend Vision One has definitely helped consolidate our use of security vendors. We previously used standalone products for endpoint and email protection that weren't integrated. Now, we get the benefits of an integrated solution. I'd estimate we're 50–70% better in security now than we were two years ago. The Cyber Risk Exposure Management (CREM)feature is absolutely essential. Even though we're not critical infrastructure, the NIS2 directive gives us security guidelines. CREM helps us meet these requirements. It is very important to our organization that Trend Vision One integrates AI into the platform. Pattern recognition in forensic data is no longer manageable by humans due to the volume of events. Machine learning is essential to process these and filter what needs human attention. Trend Vision One has improved our organization significantly. Security tasks used to be manual. Now, technology prevents issues or supports staff in detecting them. This shift from manual to technical solutions greatly increased our security. Trend Vision One has reduced the time we spend detecting and responding to threats. I'd say we're 80% faster than before. The platform gives us consolidated data upfront, so we don't have to search for event clues manually. Trend Vision One has helped reduce false alarms. I'd estimate a 50–60% time saving. We have more alerts now than years ago, but also better systems to handle them, making the whole process more efficient. Trend Vision One has helped reduce our cyber risk overall. We now know where gaps are before they become problems, whereas in the past we had to guess. That's a massive improvement. When it comes to operations, the CREM solution helps us identify vulnerabilities in systems. If we patch them, they disappear from the reports—this gives us actionable insights, which is incredibly helpful. It took about half a year to realize the benefits of Trend Vision One after implementation.
report
Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.
869,566 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
No data available
Computer Software Company
22%
Comms Service Provider
7%
Manufacturing Company
7%
Healthcare Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business39
Midsize Enterprise11
Large Enterprise34
 

Questions from the Community

What is your experience regarding pricing and costs for McAfee Active Response?
Based on our evaluations, Trellix Active Response's pricing was the most feasible from a cost perspective. I rate the pricing between a six and an eight. It is justified.
What needs improvement with McAfee Active Response?
For Trellix Active Response, there is room for improvement in the platform area and security area to make the dashboard visibility clearer and easier for customers to monitor malicious activities o...
What is your primary use case for McAfee Active Response?
The typical use case for Trellix Active Response is to provide quick incident response, as the product collects and correlates logs with the ePO dashboard, allowing customers to get visibility of t...
What do you like most about Trend Micro XDR?
I appreciate the value of real-time activity monitoring.
What is your experience regarding pricing and costs for Trend Micro XDR?
I know the pricing for Trend Vision One. It's been a while, but it doesn't seem bad. They made some changes to their pricing in the past. It used to be a per-server node pricing structure, but now ...
What needs improvement with Trend Micro XDR?
It is a bit slow to implement kernel support on the Linux side. When doing patching and upgrades on our Linux servers, we often find that the Trend agent doesn't support the kernel version. It's us...
 

Also Known As

McAfee Active Response
Trend Micro XDR, Trend Micro XDR for Users, Trend Vision One - XDR for Networks
 

Interactive Demo

Demo not available
 

Overview

 

Sample Customers

Liquor Control Board of Ontario
Panasonic North America, Decathlon, Fischer Homes, Banijay Benelux, Unigel, DHR Health,
Find out what your peers are saying about Trellix Active Response vs. Trend Vision One and other solutions. Updated: September 2025.
869,566 professionals have used our research since 2012.