No more typing reviews! Try our Samantha, our new voice AI agent.

TrendAI Vision One – Network Security vs Wazuh comparison

Why PeerSpot?
Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Feb 26, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Ranking in Extended Detection and Response (XDR)
3rd
Average Rating
8.6
Reviews Sentiment
6.7
Number of Reviews
120
Ranking in other categories
Endpoint Protection Platform (EPP) (4th), Endpoint Detection and Response (EDR) (5th), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (1st)
TrendAI Vision One – Networ...
Ranking in Extended Detection and Response (XDR)
31st
Average Rating
9.0
Reviews Sentiment
5.7
Number of Reviews
1
Ranking in other categories
No ranking in other categories
Wazuh
Ranking in Extended Detection and Response (XDR)
4th
Average Rating
7.4
Reviews Sentiment
5.9
Number of Reviews
51
Ranking in other categories
Log Management (2nd), Security Information and Event Management (SIEM) (4th)
 

Mindshare comparison

As of October 2026, in the Extended Detection and Response (XDR) category, the mindshare of Cortex XDR by Palo Alto Networks is 4.8%, down from 6.0% compared to the previous year. The mindshare of TrendAI Vision One – Network Security is 0.8%, up from 0.2% compared to the previous year. The mindshare of Wazuh is 5.3%, down from 11.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Extended Detection and Response (XDR) Mindshare Distribution
ProductMindshare (%)
Cortex XDR by Palo Alto Networks4.8%
Wazuh5.3%
TrendAI Vision One – Network Security0.8%
Other89.1%
Extended Detection and Response (XDR)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
reviewer2793894 - PeerSpot reviewer
Platform Engineer Ii at a outsourcing company with 5,001-10,000 employees
Network visibility has improved and detects zero-day threats and lateral movement swiftly
Trend Vision One - Network Security can be improved by integrating with the native firewall and bringing in that telemetry feed.I would like to see more telemetry coming in from the risk-based factor so that there should be risk-based tagging across all assets within the organization, specifically focusing on threats related to lateral movement and ransomware. This risk-based scoring is required.
Sudarson Prabhu - PeerSpot reviewer
Security Consultant at Payatu
File integrity monitoring has strengthened our data protection and supports compliance needs
I expected one thing from the dashboard in Wazuh. In ManageEngine, when you use ManageEngine, you can assign a unique ID to all employees. Then with the unique ID, if you search any unique ID in the dashboard itself, you can get the unique ID everywhere, including where the laptop has been logged in, when the logout happened, and what actions have been done for that unique ID. I expected the same in Wazuh, but whenever we want to check any monitoring activities for a specific person, we need to search for the endpoint and then get the endpoint details from our Active Directory or wherever we have the endpoint name stored in our resources, and then search for the endpoint to see the history for that specific endpoint only. This made a simple thing a bit complex. If we had a correlation of logs where I could just search one unique ID and then the unique ID pulls every system in a time-wise manner, that would be a great improvement I would suggest.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The product's initial setup phase is very easy."
"The product is mostly automated, and we do not have to make decisions, because all the decisions are made by the product itself and we are not required to create any custom policies since the policies that are created are well defined in the product itself."
"I don't have to do much monitoring with it; I don't have to have anybody manually looking at this, it gives us reports, and it lets us know if something needs to be addressed, and we can easily address it."
"The anti-exploit is impenetrable."
"The most valuable aspect of Cortex XDR by Palo Alto Networks for me is its integration with AI detection, where we get to know the behavioral detection based on users, traffic patterns, and different services that we consume."
"The behavior-based detection feature is valuable."
"The live terminal is probably the best thing ever. It gives you the access to get straight onto any machine."
"Cortex XDR alerts us on the dashboard when there's a threat, which allows us to restrict that user and helps secure our infrastructure."
"Trend Vision One - Network Security has positively impacted my organization as our network operations team has found it very useful for monitoring all threats coming in via the network layer and taking swift actions compared to earlier."
"Wazuh automatically scans the host for CIS benchmarks for the latest updates and vulnerabilities and gives a host score. It provides a percentage of perceived risk due to of non patches or any missing patches on that work."
"Stability-wise, Wazuh seems to have fixed all the past issues, and the latest version is possibly the most stable."
"The configuration assessment and Pile integrity monitoring features are decent."
"Some of the strengths of Wazuh that stand out for us include its scalability when deployed on Azure, its open-source nature, which allows for customization based on our needs, and its compatibility with various security solutions like threat intelligence platforms."
"It's very easy to integrate Wazuh with other environments, cloud applications, and on-prem applications. So, the advantage is that it's easy to implement and integrate with other solutions."
"Wazuh is a powerful tool, and you can do lots of things with it."
"The product is easy to customize."
"The solution is easy to maintain."
 

Cons

"I have run into some detection issues with Cortex XDR. It needs to be better at detection of internal attacks."
"Technology evolves every day, so it would be nice if it gets more secure. It can also have more integration with other platforms."
"Being able to filter the events to see those that are related to the actual alert would save time spent by the engineer."
"If he is using a smaller company, he can depend on some other tools because Cortex XDR by Palo Alto Networks is a bit expensive."
"Enhancing UI simplicity and playbook flexibility are areas that could benefit from more low-code automation options for smoother integrations."
"This is a very costly product."
"It is not easy to sell Cortex XDR, not because it isn't a good tool. Its marketing needs to be improved."
"Cortex XDR is trickier to configure than other Palo Alto products. This is one area where we are not so satisfied."
"Trend Vision One - Network Security can be improved by integrating with the native firewall and bringing in that telemetry feed."
"Adding the flexibility to integrate various plug-ins or modules into its core system would enhance functionality."
"Wazuh needs more security and features, particularly visualization features and a health monitor."
"They could include flexibility and customization capabilities by modifying for customers based on partner agreements."
"A lack of certain features creates limitations."
"Wazuh is missing many things that a typical SIEM should have."
"It would be better if they had a vulnerability assessment plug-in like the one AlienVault has. In the next release, I would like to have an app with an alerting mechanism."
"The tool does not provide CTI to monitor darknet."
"Wazuh has a drawback with regard to Unix systems. The solution does not allow us to do real-time monitoring for Unix systems. If usage increases, it would be a heavy fall on the other SIEM solutions or event monitoring solutions."
 

Pricing and Cost Advice

"It's about $55 per license on a yearly basis."
"I don't recall what the cost was, but it wasn't really that expensive."
"It has a higher cost than other solutions, like CrowdStrike or Microsoft’s EDR tools, but it reduces the cost of our operations because it’s a new generation antivirus tool."
"I did PoCs on products called Cylance and CrowdStrike. Although, I consider these products and they were also good, when it come to cost and budgetary factors, Traps has been proven to be better than the other two products. It is quite cost-effective and delivers all the entire solution which we require."
"The pricing is okay, although direct support can be expensive."
"I don't like that they have different types of licenses."
"The price is on the higher side, but it's okay."
"Its pricing is kind of in line with its competitors and everybody else out there."
Information not available
"The product price is neither too high nor too low."
"Wazuh is open-source, therefore it is free. You can purchase support for $1,000 a year."
"It is a free-of-cost solution."
"Wazuh has a community edition, and I was using that. It's free and open source."
"Wazuh is a good tool, but the open-source version has scalability limitations."
"The current pricing is open source."
"Wazuh is open-source, so I think it's an option for a small organization that cannot go for enterprise-grade solutions like Splunk."
"Wazuh is a cheaply priced product."
report
Use our free recommendation engine to learn which Extended Detection and Response (XDR) solutions are best for your needs.
917,743 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
13%
Outsourcing Company
12%
Construction Company
10%
Manufacturing Company
10%
No data available
Comms Service Provider
13%
University
9%
Computer Software Company
8%
Manufacturing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business48
Midsize Enterprise21
Large Enterprise56
No data available
By reviewers
Company SizeCount
Small Business27
Midsize Enterprise15
Large Enterprise9
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
What is your experience regarding pricing and costs for Trend Vision One - Network Security?
My experience with pricing, setup cost, and licensing was straightforward and seamless.
What needs improvement with Trend Vision One - Network Security?
Trend Vision One - Network Security can be improved by integrating with the native firewall and bringing in that tele...
What is your primary use case for Trend Vision One - Network Security?
My main use case for Trend Vision One - Network Security is to protect from zero-day threats, specifically by detecti...
What do you like most about Wazuh?
Wazuh is its flexibility and open-source nature, which allows us to tailor threat detection and response across diver...
What needs improvement with Wazuh?
I expected one thing from the dashboard in Wazuh. In ManageEngine, when you use ManageEngine, you can assign a unique...
What is your primary use case for Wazuh?
Our organization is focusing on the integrity part for implementing Wazuh. We were checking solutions for File Integr...
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
Trend Cloud One Network Security
Wazuh All-In-One Deployment
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Information Not Available
Information Not Available
Find out what your peers are saying about SentinelOne, TrendAI, Palo Alto Networks and others in Extended Detection and Response (XDR). Updated: September 2026.
917,743 professionals have used our research since 2012.