No more typing reviews! Try our Samantha, our new voice AI agent.

Trellix XDR vs TrendAI Vision One – Cloud Security comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Feb 26, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Ranking in Extended Detection and Response (XDR)
6th
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
108
Ranking in other categories
Endpoint Protection Platform (EPP) (5th), Endpoint Detection and Response (EDR) (7th), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (2nd)
Trellix XDR
Ranking in Extended Detection and Response (XDR)
33rd
Average Rating
8.0
Reviews Sentiment
7.7
Number of Reviews
3
Ranking in other categories
No ranking in other categories
TrendAI Vision One – Cloud ...
Ranking in Extended Detection and Response (XDR)
19th
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
23
Ranking in other categories
Vulnerability Management (26th), Container Security (25th), Cloud Workload Protection Platforms (CWPP) (10th), Hybrid Cloud Computing Platforms (9th), Cloud Security Posture Management (CSPM) (18th), Cloud-Native Application Protection Platforms (CNAPP) (14th), Attack Surface Management (ASM) (14th), Cloud Infrastructure Entitlement Management (CIEM) (4th), Cloud Detection and Response (CDR) (5th), AI Security (9th)
 

Mindshare comparison

As of March 2026, in the Extended Detection and Response (XDR) category, the mindshare of Cortex XDR by Palo Alto Networks is 4.9%, down from 5.6% compared to the previous year. The mindshare of Trellix XDR is 0.6%, up from 0.1% compared to the previous year. The mindshare of TrendAI Vision One – Cloud Security is 1.0%, up from 0.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Extended Detection and Response (XDR) Mindshare Distribution
ProductMindshare (%)
Cortex XDR by Palo Alto Networks4.9%
TrendAI Vision One – Cloud Security1.0%
Trellix XDR0.6%
Other93.5%
Extended Detection and Response (XDR)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
PankajKumar24 - PeerSpot reviewer
IT Manager at Gigabit Technologies Pvt Ltd
Centralized security console has unified threat telemetry and automated investigation playbooks
The CPU utilization is very high with Trellix XDR. We are getting multiple types of CPU utilization from the EPP solution, with the EPP agent reaching as high as 80 percent CPU utilization. This creates big challenges for us. The support experience is also concerning. When we require support from Trellix immediately with high priority, we receive multiple emails requesting logs of various types. After that, we have to escalate to Trellix higher management, and then their agent will come in for a remote session to resolve any issues. I would give them eight out of ten points because of the high CPU utilization and the delayed support we experience.
reviewer2793894 - PeerSpot reviewer
Platform Engineer Ii at a outsourcing company with 5,001-10,000 employees
Centralized cloud view has improved threat response and simplified compliance reporting
We are using Trend Vision One - Cloud Security for getting complete visibility of all the assets that exist within our cloud, and it helps us identify any sort of misconfigurations or fine-tuning that can be done to better our compliance. Trend Vision One - Cloud Security helps in onboarding all the cloud solutions or cloud providers that we have within our organization into a single dashboard, thereby providing greater visibility of all the assets. Earlier we used to have multiple dashboards to manage the same solution or capability, but with Trend Micro, we are able to get everything in a single pane of glass, benefiting our operations significantly. We are using the playbooks built into Trend Vision One - Cloud Security, which help us take a lot of response actions and bring automation capabilities into play. Trend Vision One - Cloud Security has positively impacted our organization by providing a single pane of glass visibility across all the cloud solutions that we have and reducing the number of threats we used to see earlier in the cloud. We are seeing that the number of cloud operations required earlier in terms of threat detection and response, and the time taken to detect a particular threat and take a response action, has considerably improved after onboarding Trend Micro.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"If any application performs suspicious activities, such as changing registries or modifying other applications, Cortex XDR detects and blocks the entire application."
"On a scale from one to ten, I would rate Cortex XDR by Palo Alto Networks a nine."
"The stability of the solution is very good. We have about 100 users on it right now, and we use it twice a week."
"We have found in our test Cortex XDR by Palo Alto Networks to be a very good tool."
"The initial setup is pretty easy."
"The user interface of the solution is sophisticated and straightforward."
"The most valuable aspect of Cortex XDR by Palo Alto Networks for me is its integration with AI detection, where we get to know the behavioral detection based on users, traffic patterns, and different services that we consume."
"The scalability of Cortex XDR by Palo Alto Networks is very good."
"The analytics assessment and flexibility of the platform are valuable."
"Trellix XDR is an excellent solution that is continually improving."
"It contributes to our system's robust event detection and analysis, enabling us to respond effectively to incidents."
"Because Trellix gives us multiple types of modules, we are using a single ePO console for multiple solutions including application control, DLP, and XDR."
"Trend Vision One - Cloud Security's most valuable features include its comprehensive dashboard, which provides a clear overview of all services and systems, confirming their installation location and update status."
"The the most valuable feature is the scanning engine. It does not impact server performance. It's very lightweight."
"I use the tool for security solutions. It's a leader in Gartner and Forrester Wave reports. Customers rely on these reports."
"The tech support is excellent. They really know their products. They also know a lot of about the integrations between different solutions."
"The perfect package for all security platforms, providing more than any other endpoint solution."
"Trend Vision One - Cloud Security's best features are security analysis, remote access security, and driver security."
"I really like Trend Vision One - Cloud Security's dashboard."
"The most valuable features are intrusion prevention and anti-malware capabilities."
 

Cons

"The installation should be easier and the Palo Alto pre-sales and sales teams should have more information on the product because they don't know what they are selling."
"Data privacy is a matter of concern. You have to be careful with data privacy, it can be sensitive and Cortex can have most of your access."
"There are some third-party solutions that are difficult to integrate with, which is something that can be improved."
"If he is using a smaller company, he can depend on some other tools because Cortex XDR by Palo Alto Networks is a bit expensive."
"Previously, the endpoint would leave the environment, not being on our VPN, essentially unable to interact with the server to upload files."
"I think sometimes Cortex XDR agent automatically stops event capturing from the device, and then even the dashboard does not get any notifications from the agent."
"Cortex XDR is trickier to configure than other Palo Alto products. This is one area where we are not so satisfied."
"If you compare it to SentinelOne, which has more functionalities and detection capabilities on an open platform, the pricing on SentinelOne is far more reasonable and cheaper than Cortex XDR by Palo Alto Networks."
"The CPU utilization is very high with Trellix XDR; we are getting multiple types of CPU utilization from the EPP solution, with the EPP agent reaching as high as 80 percent CPU utilization, which creates big challenges for us."
"The platform should enhance compatibility with all other SIEM solutions."
"Technical support is crucial, especially when facing critical issues. It's rated six out of ten. Improvements are needed in the support sector, with a focus on providing expert assistance during production periods."
"The EdgeGear solution is an area that requires attention, specifically regarding AI solutions and intelligence features."
"The local agent should be able to show more logs. At present, the logs are only available from the web console and not from the local agent."
"Documentation on cloud architecture and job architecture would be helpful."
"Trend Vision One - Cloud security aims to protect our assets, but the rapid spread of viruses and vulnerabilities through malicious emails remains a significant concern."
"Currently, we must procure and configure the server hardware independently, as we obtain the software separately from Trend Micro."
"The pricing can get high."
"Trend Vision One - Cloud Security seems to have a preference for AWS Cloud over Azure and would be improved by focusing equally on both."
"Securing S3 using Trend Vision One - Cloud Security can cost too much. Trend Vision One - Cloud Security has a tool that requires lots of privileges. From my understanding, it's only for static application testing, so they need to add dynamic application testing, and there should be more collaboration with the application testing tools on the market. We have not used this product, and I don't know if they plan to decommission it or something. They should focus on application security because this tool's unique feature is multi-cloud support. However, they should improve integration with tools for these kinds of use cases, especially application security and dynamic scanning. For example, I would like it to support Dell SecureOps. I'd also like to see some enhancements to API gateway security."
"The firewall configuration should have been automated based on the understanding of the application, utilities, and protocols."
 

Pricing and Cost Advice

"Cortex XDR's pricing is ok."
"The price is on the higher side, but it's okay."
"Compared to CrowdStrike, Cortex XDR is an expensive solution."
"I feel it is fairly priced."
"Cortex XDR by Palo Alto Networks is an expensive solution."
"When we first bought it, it was a bit expensive, but it was worth it. The licensing was straightforward."
"Licensing for Palo Alto Networks Cortex XDR can be costly, especially when it comes to a hundred users. A license is required for each user, and the subscription must be renewed on a yearly basis."
"Its pricing is kind of in line with its competitors and everybody else out there."
Information not available
"I rate the solution's pricing a six out of ten."
"With everything I deal with, Trend Micro Cloud One's pricing is somewhere in the middle."
"The Trend Vision One pricing is reasonable."
"Pricing for Trend Micro Cloud One Container Security in the corporate market is okay."
"It's a slightly expensive product."
"While Trend Vision One - Cloud Security was a cost-effective solution for us in 2021, we've noticed a recent price increase that makes it less affordable."
"One year ago, Trend transitioned to a credit system for licensing, which has confused users."
"The pricing for Cloud One is reasonable because my costs scale up and down based on my infrastructure usage."
report
Use our free recommendation engine to learn which Extended Detection and Response (XDR) solutions are best for your needs.
885,311 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
13%
Manufacturing Company
8%
Computer Software Company
8%
Financial Services Firm
8%
Computer Software Company
20%
Healthcare Company
9%
Government
7%
Comms Service Provider
7%
Computer Software Company
9%
Manufacturing Company
8%
Comms Service Provider
7%
Performing Arts
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business44
Midsize Enterprise20
Large Enterprise47
No data available
By reviewers
Company SizeCount
Small Business12
Midsize Enterprise6
Large Enterprise9
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
What is your experience regarding pricing and costs for Trellix XDR?
Since I'm a technical engineer, I don't deal with pricing or licensing. Our sales team handles those aspects.
What needs improvement with Trellix XDR?
The CPU utilization is very high with Trellix XDR. We are getting multiple types of CPU utilization from the EPP solu...
What is your primary use case for Trellix XDR?
We are selling Trellix XDR products including DLP and EPP solutions. We sell Trellix XDR for endpoint protection. We ...
What do you like most about Trend Micro Cloud One Container Security?
Vision One is versatile and can be integrated with many SIEMs. You're not limited to only one SIEM, such as Microsoft...
What is your experience regarding pricing and costs for Trend Micro Cloud One Container Security?
The pricing for Trend Vision One - Cloud Security is very straightforward; we are using credits for calculating the s...
What needs improvement with Trend Micro Cloud One Container Security?
I would like to see more third-party integrations being added into Trend Vision One - Cloud Security, as it currently...
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
MVision XDR, MVision eXtended Detection and Response
Trend Micro Cloud One , Cloud One Workload Security, Trend Micro Cloud One Container Security, Trend Micro Cloud One Application Security, Cloud One File Storage Security, Cloud One Network Security, Cloud One Conformity
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Information Not Available
Information Not Available
Find out what your peers are saying about Trellix XDR vs. TrendAI Vision One – Cloud Security and other solutions. Updated: February 2026.
885,311 professionals have used our research since 2012.