Try our new research platform with insights from 80,000+ expert users

Darktrace vs Trend Vision One comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Mar 9, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.0
Darktrace enhances security with threat detection and vulnerability exposure, providing financial benefits despite deployment challenges.
Sentiment score
7.1
Organizations achieve cost savings and efficiency with Trend Vision One, enhancing security and reducing labor costs and risks.
Other NDR solutions provide virtual appliances that can be deployed on virtualization servers to get up and running quickly.
Using this solution provides financial benefits by securing from server attacks, which offers indirect savings.
Trend Vision One has improved our ROI by 30 percent.
Thankfully, we also had cyber security insurance, and the insurance covered the incidents because, through Trend Micro and the implementation of the solution, along with the data it provided, we were able to demonstrate what had happened.
The email filtering system paid for itself within a year.
 

Customer Service

Sentiment score
7.6
Darktrace customer service is responsive and helpful, praised for efficient issue resolutions and proactive engagement with users.
Sentiment score
7.0
Trend Vision One's support is generally responsive and knowledgeable, though some users report delays and insufficient communication in complex cases.
The technical support from Darktrace is of high quality.
Darktrace provides excellent technical support with a monthly meeting to review platform incidents, ensuring the system functions as expected.
The challenge lies in waiting for a response after logging a ticket.
It's not just about high-level support with the chatbot; rather, when an issue occurs, we have the experts on-site and ready to respond swiftly, which is crucial.
Trend Micro supported us throughout the transition from on-prem servers or other vendors, providing top-notch service at all times.
The engineers are not readily available.
 

Scalability Issues

Sentiment score
7.6
Darktrace is praised for its scalability, seamless expansion, robust architecture, and capacity to manage increasing demands effectively.
Sentiment score
8.0
Trend Vision One is praised for its scalability, flexibility, and support for rapid growth across global deployments.
Darktrace has high scalability, and I would rate it a nine out of ten.
Since it's cloud-based, it expands easily.
There is still a gap in terms of storage, and we are trying to figure out how to increase that capacity for regulated environments, which require data retention for 5 to 6 years.
I’d give scalability a 10 because nearly everything is integrated.
Our growth over the past three years has never caused performance or expansion issues.
I don't think I've encountered any issues with scalability; we're growing steadily, and I believe Trend Vision One can keep up with our demand.
 

Stability Issues

Sentiment score
8.5
Darktrace is praised for its reliability and stability, offering seamless performance and quick resolutions to occasional issues.
Sentiment score
8.3
Trend Vision One is praised for its stability, reliability, and seamless integration with minimal bugs or downtime issues.
The stability of Darktrace is excellent, rated ten out of ten.
The appliance itself has never let me down.
For stability, I would rate Darktrace an eight out of ten.
Trend Vision One works exactly as intended and has never hindered our operations, feeling more a collaborator than a roadblock.
The stability is very high.
Stability is critically important for us with Trend Vision One; it is very stable, providing continuous 24/7 support.
 

Room For Improvement

Users seek better SIEM integration, improved automation, user-friendly interfaces, and enhanced protection with more intuitive reports and dashboards.
Trend Vision One struggles with integration, usability, support, and false positives, requiring enhancements to address evolving security needs.
There is no dedicated salesperson in Egypt, and having one would help to improve focus on this market.
They say they can integrate with most firewalls, but when we did an integration with Meraki MX firewalls, that integration didn't work and still doesn't work to this day.
We need Darktrace on each branch to get the data out, and I suggest having some kind of a centralized product that gets data from multiple sources to aggregate and provide the data.
The deployment can be complex, and we'd like an easier process, especially when integrating with on-prem and cloud environments.
For XDR threat investigation, there is not enough documentation about how to search for different keywords.
There is increasingly a blending of the traditional OT world, which requires a specific focus, as OT devices often don't use standard Ethernet protocols and similar technologies.
 

Setup Cost

Darktrace offers flexible payment options but is costly, especially for small businesses, justified by its advanced features.
Trend Vision One offers flexible pricing, generally viewed favorably, though perceptions vary between large and smaller organizations.
The product is considered expensive compared to others.
The pricing is costly in USD, and they charge based on device counts.
The licensing cost is approximately eight dollars a year.
I find the credit model non-transparent—you can't always tell how many licenses apply to which product.
Trend Vision One offers a competitive price-to-value ratio.
Trend Vision One is an expensive product.
 

Valuable Features

Darktrace provides AI-driven security with fast responses, real-time monitoring, and autonomous threat management, minimizing false positives efficiently.
Trend Vision One provides comprehensive security with excellent detection, easy management, and robust integration for end-to-end threat visibility.
It is capable of responding to lateral movement and ransomware deployment within environments where there is data exfiltration.
I do not need to manually process incidents as Darktrace provides an incident summary, potential detection paths, and other details, all exportable with just a click.
If I am in a data center where I don't have layer two, it becomes an issue because the autonomous response is reliant on sending spoofed TCP resets to my core switch to block traffic, which is a major issue.
The most important features of Vision One include visibility, AI integration, attack pattern analysis, predictive analytics, and centralized visibility and management across protection layers.
The most critical feature of Vision One is that it gives us a single console for threat management.
Its ability to identify unmonitored endpoints and perform log inspection, which establishes operational baselines and detects anomalies, proves invaluable for threat identification.
 

Categories and Ranking

Darktrace
Ranking in Network Detection and Response (NDR)
1st
Ranking in Extended Detection and Response (XDR)
6th
Ranking in Attack Surface Management (ASM)
4th
Ranking in AI-Powered Cybersecurity Platforms
2nd
Average Rating
8.2
Reviews Sentiment
7.2
Number of Reviews
82
Ranking in other categories
Email Security (10th), Intrusion Detection and Prevention Software (IDPS) (1st), Network Traffic Analysis (NTA) (1st), AI-Powered Chatbots (3rd), Cloud Security Posture Management (CSPM) (15th), Cloud-Native Application Protection Platforms (CNAPP) (11th)
Trend Vision One
Ranking in Network Detection and Response (NDR)
3rd
Ranking in Extended Detection and Response (XDR)
4th
Ranking in Attack Surface Management (ASM)
2nd
Ranking in AI-Powered Cybersecurity Platforms
3rd
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
73
Ranking in other categories
Endpoint Detection and Response (EDR) (4th)
 

Mindshare comparison

As of June 2025, in the Network Detection and Response (NDR) category, the mindshare of Darktrace is 24.1%, down from 25.9% compared to the previous year. The mindshare of Trend Vision One is 1.6%, up from 1.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Network Detection and Response (NDR)
 

Featured Reviews

Malebo Lethoba Group - PeerSpot reviewer
Have found the AI analyst and detection functions highly valuable for network operations while managing complexity in initial setup
The functions I find most valuable in Darktrace ( /products/darktrace-reviews ) are the AI analyst as well as the detection.The autonomous response capabilities of Darktrace are not crucial for me because it doesn't work in a network where there are no core switches. In a modern network, the autonomous response doesn't work, especially when sitting in a shared data center.If I'm running a traditional network where I am not in a shared data center with a layer two dedicated for my resources, then it can work for me. However, if I am in a data center where I don't have layer two, it becomes an issue because the autonomous response is reliant on sending spoofed TCP resets to my core switch to block traffic, which is a major issue.
Dennis Niedling - PeerSpot reviewer
The CREM feature is an absolutely essential feature that helps us meet security requirements
Since we started using Trend Vision One, we've been able to enhance our security posture significantly. Trend Vision One has improved significantly over time in providing centralized visibility and control. It started as a set of individual products, but now it feels like one integrated solution. This reduces the need for interfaces or multiple analysis tools. That's why we pursued the one-platform strategy. Trend Vision One has definitely helped consolidate our use of security vendors. We previously used standalone products for endpoint and email protection that weren't integrated. Now, we get the benefits of an integrated solution. I'd estimate we're 50–70% better in security now than we were two years ago. The Cyber Risk Exposure Management (CREM)feature is absolutely essential. Even though we're not critical infrastructure, the NIS2 directive gives us security guidelines. CREM helps us meet these requirements. It is very important to our organization that Trend Vision One integrates AI into the platform. Pattern recognition in forensic data is no longer manageable by humans due to the volume of events. Machine learning is essential to process these and filter what needs human attention. Trend Vision One has improved our organization significantly. Security tasks used to be manual. Now, technology prevents issues or supports staff in detecting them. This shift from manual to technical solutions greatly increased our security. Trend Vision One has reduced the time we spend detecting and responding to threats. I'd say we're 80% faster than before. The platform gives us consolidated data upfront, so we don't have to search for event clues manually. Trend Vision One has helped reduce false alarms. I'd estimate a 50–60% time saving. We have more alerts now than years ago, but also better systems to handle them, making the whole process more efficient. Trend Vision One has helped reduce our cyber risk overall. We now know where gaps are before they become problems, whereas in the past we had to guess. That's a massive improvement. When it comes to operations, the CREM solution helps us identify vulnerabilities in systems. If we patch them, they disappear from the reports—this gives us actionable insights, which is incredibly helpful. It took about half a year to realize the benefits of Trend Vision One after implementation.
report
Use our free recommendation engine to learn which Network Detection and Response (NDR) solutions are best for your needs.
855,347 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
14%
Manufacturing Company
8%
Financial Services Firm
8%
Government
7%
Computer Software Company
21%
Educational Organization
13%
Manufacturing Company
6%
Financial Services Firm
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

How does Crowdstrike Falcon compare with Darktrace?
Both of these products perform similarly and have many outstanding attributes. CrowdStrike Falcon offers an amazing user interface that makes setup easy and seamless. CrowdStrike Falcon offers a cl...
Which is better - SentinelOne or Darktrace?
Which solution is better depends on which is more suitable specifically for your company. Darktrace, for example, is meant for smaller to medium-sized businesses. It is also a good option for organ...
What do you like most about Darktrace?
A very useful feature in Darktrace for real-time threat analysis is the packet inspection that analyzes the packet traffic in real time.
What do you like most about Trend Micro XDR?
I appreciate the value of real-time activity monitoring.
What is your experience regarding pricing and costs for Trend Micro XDR?
The pricing and licensing model for Trend Vision One is fair overall, especially with the good discounts we got. Currently, no extra costs—though we pay a monthly fee that gets converted into credi...
What needs improvement with Trend Micro XDR?
The features of Trend Vision One are fine—it's the integration that needs work. Especially at the endpoint level, we still feel like we're using an older product that just got plugged into Trend Vi...
 

Also Known As

No data available
Trend Micro XDR, Trend Micro XDR for Users, Trend Vision One - XDR for Networks
 

Interactive Demo

Demo not available
 

Overview

 

Sample Customers

Irwin Mitchell, Open Energi, Wellcome Trust, FirstGroup plc, Virgin Trains, Drax, QUI! Group, DNK, CreaCard, Macrosynergy, Sisley, William Hill plc, Toyota Canada, Royal British Legion, Vitol, Allianz, KKR, AIRBUS, dpd, Billabong, Mclaren Group.
Panasonic North America, Decathlon, Fischer Homes, Banijay Benelux, Unigel, DHR Health,
Find out what your peers are saying about Darktrace vs. Trend Vision One and other solutions. Updated: May 2025.
855,347 professionals have used our research since 2012.