No more typing reviews! Try our Samantha, our new voice AI agent.

Trellix Endpoint Security Platform vs TrendAI Vision One – Network Security comparison

Why PeerSpot?
Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Feb 26, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Ranking in Extended Detection and Response (XDR)
3rd
Average Rating
8.6
Reviews Sentiment
6.7
Number of Reviews
122
Ranking in other categories
Endpoint Protection Platform (EPP) (4th), Endpoint Detection and Response (EDR) (5th), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (1st)
Trellix Endpoint Security P...
Ranking in Extended Detection and Response (XDR)
7th
Average Rating
8.0
Reviews Sentiment
6.7
Number of Reviews
167
Ranking in other categories
Endpoint Protection Platform (EPP) (6th), Endpoint Detection and Response (EDR) (7th)
TrendAI Vision One – Networ...
Ranking in Extended Detection and Response (XDR)
31st
Average Rating
9.0
Reviews Sentiment
6.3
Number of Reviews
2
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of November 2026, in the Extended Detection and Response (XDR) category, the mindshare of Cortex XDR by Palo Alto Networks is 4.7%, down from 5.8% compared to the previous year. The mindshare of Trellix Endpoint Security Platform is 3.6%, down from 4.1% compared to the previous year. The mindshare of TrendAI Vision One – Network Security is 0.8%, up from 0.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Extended Detection and Response (XDR) Mindshare Distribution
ProductMindshare (%)
Cortex XDR by Palo Alto Networks4.7%
Trellix Endpoint Security Platform3.6%
TrendAI Vision One – Network Security0.8%
Other90.9%
Extended Detection and Response (XDR)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
AmitKumar22 - PeerSpot reviewer
Product Manager at Frontier Business systems
Strong endpoint protection has simplified compliance and reduced effort for large user environments
One of the best features of Trellix Endpoint Security Platform is its endpoint security, and I have been using it for the last four and a half to five years, so I can say this is one of the best EDR endpoint security solutions I have ever seen. The features that make Trellix Endpoint Security Platform stand out for me are ease of use and analytics, which I really appreciate the most. Trellix Endpoint Security Platform positively impacts my organization, ensuring we are compliant with SOC 2, HIPAA, and all other compliance requirements, so there are no issues with that.
AbdulAbdul - PeerSpot reviewer
Cyber Security Engineer at a tech consulting company with 11-50 employees
Centralized security management has unified risk visibility and enables faster, AI-driven response
Regarding improvements for TrendAI Vision One – Network Security, I think users can take advantage of customized reports. Additionally, clients sometimes find it difficult to integrate third-party open-source integrations, so this area could be improved. Regarding the needed improvements for TrendAI Vision One – Network Security, the deployment guide and migration guide can be better. If clients are migrating, for example, from on-premises to cloud or from one solution to another, the documentation should be more understandable for non-technical teams, helping them decide where to start. I rate it nine out of 10 due to issues with documentation and support for deployment and migration-related activities. Sometimes I find it difficult for clients to understand the requirements for migration. If the guide or documentation is easier, clients can understand it better and decide where to start. In email security with TrendAI Vision One – Network Security, I found one bug related to inbound emails. If we apply attachment policies, such as requiring analysis for incoming email attachments, the AI sometimes flags email signatures as attachments. This issue can lead to quarantining emails without malicious attachments, which is problematic.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The product has an intuitive dashboard."
"This software helps us understand any issues that may arise when someone is not at work."
"It is an easy-to-use tool."
"The most valuable features are the fact that it was running in the background and it would intercept any weird stuff, and the fact that it would send things directly to the cloud for sandboxing. It's quite practical."
"Traps pays for itself within the first 16 months of a three-year subscription."
"They have a new GUI which is just fantastic."
"The most valuable for us is the correlation feature."
"The most valuable features are incident creation, policy-based protection, IP whitelisting, and device encryption. These are beneficial for endpoint and server security."
"The most valuable feature is the integration between environments."
"There are many other endpoint security solutions that are available today, but McAfee Suite has several distinct advantages when you make a procurement decision."
"The product is easy to use, it's a stable solution with good performance, and the scalability is good."
"The response part of EDR was most valuable. We used that to separate the endpoint from the network. We utilized the solution during the instant response. We were also utilizing advanced malware detection capabilities, but we benefited the most from its help with the response."
"I have not faced any problems with scalability so far, but we are starting an upgrade or overhaul."
"I prefer FireEye to solutions like CrowdStrike, Carbon Black, and Trend Micro which are not as user-friendly."
"We use McAfee MVISION Endpoint to protect our environment."
"The solution is easy to manage, easy to implement, easy to install, and the support is excellent."
"From the single console, clients can see everything, including each log coming from endpoints, networks, emails, and all attack surface configurations, and they can manage everything from a single dashboard."
"Trend Vision One - Network Security has positively impacted my organization as our network operations team has found it very useful for monitoring all threats coming in via the network layer and taking swift actions compared to earlier."
 

Cons

"Enhancing UI simplicity and playbook flexibility are areas that could benefit from more low-code automation options for smoother integrations."
"It's very time-consuming to log support issues and the people that answer the tickets aren't very knowledgeable."
"The downside to the solution is that there are a large number of false positives."
"It takes time to scan the servers and devices."
"Cortex XDR should have a lightweight agent, and the agent size should not be heavy."
"The solution lags to the real-time scenarios here and there."
"Palo Alto Networks Cortex XDR does not detect malicious activity like in other anti-virus solutions like Trend Micro and Windows with Cisco."
"It's more focused on network communication. If a customer wants to increase the level of protection and start working with documents, it's impossible to integrate these features into the system. It's more of a communication-oriented system than a content security-oriented system."
"I've encountered minor challenges related to encryption."
"The endpoint has room for improvement because it's restrictive, it's very sensitive. Sometimes it can delete something that you need and so sometimes you have to disable the antivirus."
"This particular module, when we upgraded to the latest version, took up all the resources on the computer, making it unusable."
"Its price is very high. It is higher than its competitors, and it should be less."
"The performance could be better. I noticed that it slows down a bit."
"We would like to see all the features available on cloud."
"Trellix Endpoint Security Platform needs to sort out their issues with the organization and outreach to clients to improve their platform because they have been lagging behind."
"The agent is very heavy, so we have to ensure that we have a lightweight agent for Windows systems."
"In email security with TrendAI Vision One – Network Security, I found one bug related to inbound emails. If we apply attachment policies, such as requiring analysis for incoming email attachments, the AI sometimes flags email signatures as attachments."
"Trend Vision One - Network Security can be improved by integrating with the native firewall and bringing in that telemetry feed."
 

Pricing and Cost Advice

"The price is on the higher side, but it's okay."
"The cost of Cortex XDR by Palo Alto Networks is $55 to $90 USD per endpoint per month."
"Our license will require renewal in August, after which the maintenance will continue as usual."
"It is cost-effective compared to similar solutions. It fits for the small businesses through to the big businesses."
"It has a higher cost than other solutions, like CrowdStrike or Microsoft’s EDR tools, but it reduces the cost of our operations because it’s a new generation antivirus tool."
"It's the most expensive solution, but features-wise, it's quite strong. It's very good for protection, so the results are very good in the case of protection. I would rate it a two out of ten in terms of pricing."
"We didn't have to pay any additional fee for the cloud instance. It just came with the renewal, which was nice."
"Traps pays for itself within the first 16 months of a three-year subscription. This is attributed to OPEX savings, as security teams spent less time trying to identify and isolate malware for analysis as a result of a reduction in malware incidents, false positives, and breach avoidance."
"I don't think there are any extra expenses besides its licensing costs."
"We pay for the license on an annual basis."
"Trellix Endpoint Security (ENS) is not a cheap solution...I don't think any costs are involved in the maintenance of the solution."
"The price of this product is good."
"We had a discount when purchasing the solution because of the size of our company and we are happy with the price."
"Its price is very high. It is higher than its competitors, and it should be less."
"It is a yearly subscription-based product, which includes the license and hardware. There is also a subscription for technical support up to five years."
"Customers would need to purchase a license. If a customer purchases an MVISION Endpoint license, he may use that license to install ENS. It's a flexible license where you have the option to either use the McAfee security software or the Windows Defender managed by McAfee, which is MVISION Endpoint."
Information not available
report
Use our free recommendation engine to learn which Extended Detection and Response (XDR) solutions are best for your needs.
921,523 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
14%
Outsourcing Company
12%
Construction Company
10%
Manufacturing Company
10%
Outsourcing Company
13%
Manufacturing Company
10%
Financial Services Firm
9%
Construction Company
8%
No data available
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business50
Midsize Enterprise21
Large Enterprise57
By reviewers
Company SizeCount
Small Business68
Midsize Enterprise39
Large Enterprise67
No data available
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
How does McAfee Endpoint Security compare with MVISION?
The flexible manageability of McAfee Endpoint Security is one of our favorite aspects of this solution. You can deplo...
How does Crowdstrike Falcon compare with FireEye Endpoint Security?
The Crowdstrike Falcon program has a simple to use user interface, making it both an easy to use as well as an effec...
What is your experience regarding pricing and costs for McAfee Endpoint Security?
I don't have visibility on pricing because it is negotiated by a different team, as I look after the technical side.
What is your experience regarding pricing and costs for Trend Vision One - Network Security?
My experience with pricing, setup cost, and licensing was straightforward and seamless.
What needs improvement with Trend Vision One - Network Security?
Trend Vision One - Network Security can be improved by integrating with the native firewall and bringing in that tele...
What is your primary use case for Trend Vision One - Network Security?
My main use case for Trend Vision One - Network Security is to protect from zero-day threats, specifically by detecti...
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
McAfee Endpoint Security, McAfee Endpoint Protection, Intel Security Total Protection for Endpoint, McAfee Complete Endpoint Protection, Trellix Endpoint Security (ENS)
Trend Cloud One Network Security
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
inHouseIT, Seagate Technology
Information Not Available
Find out what your peers are saying about SentinelOne, TrendAI, Palo Alto Networks and others in Extended Detection and Response (XDR). Updated: October 2026.
921,523 professionals have used our research since 2012.