Try our new research platform with insights from 80,000+ expert users

Trellix XDR vs Wazuh comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Aug 25, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Trellix XDR
Ranking in Extended Detection and Response (XDR)
31st
Average Rating
8.0
Reviews Sentiment
8.0
Number of Reviews
2
Ranking in other categories
No ranking in other categories
Wazuh
Ranking in Extended Detection and Response (XDR)
5th
Average Rating
7.4
Reviews Sentiment
6.3
Number of Reviews
49
Ranking in other categories
Log Management (1st), Security Information and Event Management (SIEM) (2nd)
 

Mindshare comparison

As of October 2025, in the Extended Detection and Response (XDR) category, the mindshare of Trellix XDR is 0.4%, up from 0.1% compared to the previous year. The mindshare of Wazuh is 10.2%, down from 12.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Extended Detection and Response (XDR) Market Share Distribution
ProductMarket Share (%)
Wazuh10.2%
Trellix XDR0.4%
Other89.4%
Extended Detection and Response (XDR)
 

Featured Reviews

Abdullah Al Hadi - PeerSpot reviewer
Enhance cyber threat detection with advanced analytics and machine learning
I am working with EDR and XDR, focusing on migrating on-premises solutions to cloud-based solutions. We are utilizing XDR for cyber threat detection and response The analytics assessment and flexibility of the platform are valuable. Trellix XDR integrates with other systems like SIEM, improving…
Ebenezer Okoh - PeerSpot reviewer
Innovative platform enables proactive threat hunting and endpoint monitoring
I have not seen Wazuh moving in the direction of AI-driven threat detection projects myself, but since the market is moving that way, I wouldn't be surprised if they implemented it soon. My plans to increase the usage of Wazuh or switch to another tool depend on what my boss decides. We don't refer to any community support specifically, as we rely on other platforms such as GitHub or Discord, depending on the application. I recommend that as more companies come on board with Wazuh, it will motivate those who contribute to it, but I am also cautious that as it gains attention, a large company might buy it and change its course of business. Overall, I rate Wazuh a nine out of ten.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Trellix XDR is an excellent solution that is continually improving."
"It contributes to our system's robust event detection and analysis, enabling us to respond effectively to incidents."
"The analytics assessment and flexibility of the platform are valuable."
"The solution is easy to maintain."
"The product is easy to customize."
"Wazuh's logging features integrate seamlessly with AWS cloud-native services. There are also Wazuh agent configurations for different use cases, like vulnerability scanning, host-based intrusion detection, and file integrity monitoring."
"It is a stable solution."
"Wazuh's most beneficial features for our security needs are flexibility, built-in rules, integration capabilities, and documentation."
"The configuration assessment and Pile integrity monitoring features are decent."
"The most valuable feature of Wazuh is its EDR capabilities."
"The product's initial setup phase was easy."
 

Cons

"The EdgeGear solution is an area that requires attention, specifically regarding AI solutions and intelligence features."
"Technical support is crucial, especially when facing critical issues. It's rated six out of ten. Improvements are needed in the support sector, with a focus on providing expert assistance during production periods."
"The platform should enhance compatibility with all other SIEM solutions."
"There could be a hardware monitoring tool for the solution."
"They could include flexibility and customization capabilities by modifying for customers based on partner agreements."
"Wazuh has a drawback with regard to Unix systems. The solution does not allow us to do real-time monitoring for Unix systems. If usage increases, it would be a heavy fall on the other SIEM solutions or event monitoring solutions."
"The deployment is a bit complex."
"There is room for improvement by integrating more AI into Wazuh. It requires constant nurturing, as I have to provide it with code and specific requirements."
"So far, the recent updates have addressed most challenges we previously faced."
"We would like to see more improvements on the cloud."
"Scalability is a constraint in the on-prem version of Wazuh in terms of the volume of logs we can manage."
 

Pricing and Cost Advice

Information not available
"The solution's pricing is very competitive."
"Wazuh is not an expensive solution."
"Wazuh is an open-source tool."
"Wazuh has a community edition, and I was using that. It's free and open source."
"It is an open-source product."
"My client uses the open-source version of Wazuh."
"The current pricing is open source."
"It is a cost-effective solution."
report
Use our free recommendation engine to learn which Extended Detection and Response (XDR) solutions are best for your needs.
869,513 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
24%
Healthcare Company
11%
Media Company
8%
Insurance Company
5%
Computer Software Company
15%
Comms Service Provider
9%
University
8%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business26
Midsize Enterprise15
Large Enterprise8
 

Questions from the Community

What is your experience regarding pricing and costs for Trellix XDR?
Since I'm a technical engineer, I don't deal with pricing or licensing. Our sales team handles those aspects.
What needs improvement with Trellix XDR?
The EdgeGear solution is an area that requires attention, specifically regarding AI solutions and intelligence features. We are still investigating how XDR performs and will identify areas for impr...
What is your primary use case for Trellix XDR?
I am working with EDR and XDR, focusing on migrating on-premises solutions to cloud-based solutions. We are utilizing XDR for cyber threat detection and response.
What do you like most about Wazuh?
Wazuh is its flexibility and open-source nature, which allows us to tailor threat detection and response across diverse client environments. Its integration capabilities with SOAR, cloud platforms,...
What needs improvement with Wazuh?
The lack of AI features is an issue at the moment in the industry. Forti provides user behavior capabilities, which I would want to see in Wazuh. In FortiSIEM, they provide user behavior understand...
What is your primary use case for Wazuh?
At the moment, I'm working in software integration, so we are working with FortiGate. To research and get an idea, I did some investigation into Wazuh. They have already used Fortinet products. The...
 

Comparisons

 

Also Known As

MVision XDR, MVision eXtended Detection and Response
Wazuh All-In-One Deployment
 

Overview

Find out what your peers are saying about Trellix XDR vs. Wazuh and other solutions. Updated: September 2025.
869,513 professionals have used our research since 2012.