No more typing reviews! Try our Samantha, our new voice AI agent.

Sangfor Endpoint Secure vs TrendAI Vision One comparison

Why PeerSpot?
Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Feb 2, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Ranking in Endpoint Detection and Response (EDR)
5th
Average Rating
8.6
Reviews Sentiment
6.7
Number of Reviews
122
Ranking in other categories
Endpoint Protection Platform (EPP) (4th), Extended Detection and Response (XDR) (3rd), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (1st)
Sangfor Endpoint Secure
Ranking in Endpoint Detection and Response (EDR)
54th
Average Rating
8.2
Reviews Sentiment
7.4
Number of Reviews
11
Ranking in other categories
No ranking in other categories
TrendAI Vision One
Ranking in Endpoint Detection and Response (EDR)
4th
Average Rating
8.6
Reviews Sentiment
6.9
Number of Reviews
133
Ranking in other categories
Network Detection and Response (NDR) (2nd), Extended Detection and Response (XDR) (2nd), Attack Surface Management (ASM) (2nd), AI-Powered Cybersecurity Platforms (2nd), AI Security (2nd)
 

Mindshare comparison

As of November 2026, in the Endpoint Detection and Response (EDR) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.8%, down from 3.8% compared to the previous year. The mindshare of Sangfor Endpoint Secure is 0.9%, up from 0.7% compared to the previous year. The mindshare of TrendAI Vision One is 2.7%, up from 2.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Detection and Response (EDR) Mindshare Distribution
ProductMindshare (%)
TrendAI Vision One2.7%
Cortex XDR by Palo Alto Networks3.8%
Sangfor Endpoint Secure0.9%
Other92.6%
Endpoint Detection and Response (EDR)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
HD
Cloud Engineer at REDtone Digital Services
Robust security with features like antivirus protection and centralized management, but it may have limitations in supporting migrations from public clouds
While it excels in migrating VMs from on-premises and local infrastructure, it does not provide support for public cloud migrations. Attempting to migrate from public clouds like AWS encountered challenges, and Sangfor's support team clarified that they don't offer assistance for migrations from public cloud environments. It would be much more convenient if the migration tool could be installed directly on the customer's VMs, enabling a smoother migration process to the new infrastructure, with potential restrictions addressed accordingly.
SemihDalkıran - PeerSpot reviewer
Cyber Security Senior Technical Consultant at a consultancy with 11-50 employees
Built faster threat response and improved visibility with real-time monitoring and flexible deployment
TrendAI Vision One allows us to monitor attacks in real time, which is a significant benefit. We can quickly see where the attack is coming from. TrendAI Vision One enables us to use different products with a flexible license. For example, if a customer is using endpoint security and wants to switch to another solution, they can instantly use a different Trend Micro product, such as email. TrendAI Vision One has helped to reduce the time to detect and respond to different threats, as it can respond to attacks very quickly. With playbook templates, in cases of recurring attacks, responses can be made quickly using predefined playbooks. TrendAI Vision One has helped to reduce noise from false positives. There have been false positives before, but it was due to the customer not telling us which app they were using. Best practice configurations must be applied properly to avoid such issues. TrendAI Vision One helps customers consolidate the use of security vendors and reduce silos by offering one platform for all product management.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"If the user leaves our premises or network, Palo Alto Traps will still be on that endpoint and will still apply our policies."
"It blocks malicious files, prevents attacks, and doesn't require many updates because it is a very light application."
"The ability to kind of stitch everything together and see the actual complete picture is very useful. I guess you'd call it a playbook. Some people call it the forensics analysis of what was happening on particular endpoints when they detected some malicious behavior, and what transpired before that to cause that. It is also very user friendly. The way they have done everything and integrated all the solutions that they've purchased over the years to make it a very seamless, effective product is very good. One thing about Palo Alto is that they take the products or services that they purchase and make them seamless for the end user as compared to some companies that purchase other companies and then just kind of have their products off to the side or keep different interfaces. Palo Alto doesn't do that."
"Threat identification and detection are the most valuable features of this solution."
"The integrations are out-of-the-box, as are the playbooks."
"The information the dashboard provides is very clear."
"Overall, it's a great platform; it integrates very well with other solutions from Palo Alto and also with our vendors, the ease of use is excellent, I love the root cause analysis from Cortex, which is amazing, and in a few clicks you can have the full root cause."
"They have a new GUI which is just fantastic."
"I like the tool's honeypot feature. Some features include having a honeypot to detect attacks in a certain area. Additionally, there is RDP protection, which means that when we remote into our server or any endpoint, we must enter a password as a second layer of security. It can also integrate with next-generation firewalls."
"The user-friendliness of Sangfor Endpoint Secure is particularly impressive. Even with basic technical knowledge, users can easily navigate the system, make changes, and implement updates."
"The tool's AI feature is helpful in endpoint security."
"The product's initial setup phase was straightforward."
"The most valuable feature I have found in the system is its comprehensive end-to-end protection."
"What stands out to me is the dual-end user interface they provide."
"The real-time monitoring feature of Sangfor Endpoint Secure is truly real-time, with no delay compared to other solutions."
"Sangfor Endpoint Secure has some good policy certificates."
"Its threat intelligence sources enable it to automatically block domains known for command-and-control callbacks, effectively preventing attacks from those sources."
"This full security posture positions us well for our future security roadmap."
"I like XDR's workbench feature and observed attack technique. It generates an alert once certain conditions are met. For example, let's say there's a threat called malicious.exe being deployed on your system. It will generate an alert with information like the file path, location, hash, etc. You also see a relational matrix showing how that file was executed and which processes were installed."
"TrendAI Vision One is the best for AI-driven security, which is a very good point of the TrendAI Vision One console."
"It helps us with investigations."
"Compared to my previous experience where I worked on some other EDR tools, TrendAI Vision One has many interesting features."
"TrendAI Vision One has helped us reduce the time to detect and respond to threats, as with the correlation of events across various security layers, I benefit from a complete view of incidents from a single platform without the need to jump around."
"The ease of configuration, customization, and organization are what I appreciate the most about TrendAI Vision One."
 

Cons

"The solution eats memory of the computer, unlike anything I've ever seen."
"This is a very costly product."
"Fine-tuning the detection policy requires experience because the policy is very complex in Cortex XDR by Palo Alto Networks, and we get high false positive alerts."
"The solution should add unwanted malicious hash values to a block list so that whenever the action is triggered, it will automatically prevent the malicious content."
"Basically, they don't provide customer support tools just to investigate the logs."
"Dashboards do not allow everyone to see what's happening."
"There's an overall lack of features."
"There are some default policies which sometimes affect our applications and cause them to run around. In the hotel industry, we use a different type of data versus Oracle and SQL. By default, there are some policies which stop us from running properly. Because of this, the support level is also not that strong. We have to wait to get a results."
"It is complicated to establish a tunnel due to technical issues in the VPN system."
"Currently, the tool lacks reporting functionalities."
"I believe Sangfor Endpoint Secure could improve in terms of its user interface and management capabilities."
"Sometimes, the VPN is not secure and doesn't work properly in Sangfor Endpoint Secure."
"There are a few areas for improvement. We have encountered licensing issues on occasion, and sometimes updates don't apply properly."
"When an issue occurs, the response time for first-level support and the time taken for meetings could be improved."
"The interface has too many buttons, making it cluttered."
"It would be much more convenient if the migration tool could be installed directly on the customer's VMs, enabling a smoother migration process to the new infrastructure, with potential restrictions addressed accordingly."
"In Trend Vision One, there is always room for improvement. The console is well done, but there might be a bit of improvement needed with the app's capabilities."
"The information captured by Trend Vision One needs to be more detailed."
"The only drawback is the usual subscription model - unfortunately, prices tend to move upward."
"TrendAI Vision One can improve in control responsiveness, particularly in navigating through heavy analytics interfaces like workbench, where execution graphs can experience noticeable latency."
"The support should be improved."
"The reports lack detail and customization options, particularly for XDR, which hinders our ability to provide tailored reports to clients."
"One area I would like to see improved is the overall user experience and customization options, usually for dashboards and reporting and integrations."
"Trend Vision One has some usability issues."
 

Pricing and Cost Advice

"The price of the solution is high for the license and in general."
"I don't like that they have different types of licenses."
"I don't recall what the cost was, but it wasn't really that expensive."
"We didn't have to pay any additional fee for the cloud instance. It just came with the renewal, which was nice."
"This is an expensive solution."
"Cortex XDR’s pricing is very reasonable."
"The pricing is a little bit on the expensive side."
"If one wishes to work with another team or large number of users at a future point, he must purchase a license for them."
"We were using Hyper-V. So, we switched to Sangfor because of the pricing."
"Its "pay as you grow" model offers cost-effectiveness compared to major cloud providers."
"Sangfor Endpoint Secure is not a cheap solution."
"Sangfor Endpoint Secure's pricing is cheap. I rate it seven out of ten."
"The solution is cheap. It is cheaper than other products by 15-20 percent."
"The product is expensive compared to other vendors."
"Price-wise, Sangfor Endpoint Secure can be considered a competitively priced product in the market as it offers quite low prices compared to other solutions."
"Trend Vision One is an expensive product."
"It is definitely not cheap. I do believe you get what you pay for to some degree. It is cost-effective."
"We have an annual subscription and I believe there is no option for monthly billing at the moment."
"Its price is very decent. It suits our requirements."
"Trend Vision One is cost-effective because it offers detailed reporting and environment control features."
"Competitors offer comparable solutions at slightly lower prices, so Vision One has room to reduce its pricing by 15 percent, given that Trend Vision One charges approximately $10 per endpoint."
"It's relatively well-priced."
"The pricing for Trend Vision One is reasonable."
report
Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.
920,929 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
14%
Outsourcing Company
12%
Construction Company
10%
Manufacturing Company
10%
Financial Services Firm
15%
Comms Service Provider
14%
Media Company
7%
Outsourcing Company
7%
Manufacturing Company
11%
Outsourcing Company
10%
Comms Service Provider
10%
Financial Services Firm
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business50
Midsize Enterprise21
Large Enterprise57
By reviewers
Company SizeCount
Small Business5
Midsize Enterprise3
Large Enterprise3
By reviewers
Company SizeCount
Small Business75
Midsize Enterprise23
Large Enterprise52
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
Ask a question
Earn 20 points
What is your experience regarding pricing and costs for Trend Micro XDR?
I find the pricing very reasonable because our clients purchase credits that last for two years, allowing them to use...
What needs improvement with Trend Micro XDR?
TrendAI Vision One can improve, especially when I send a support ticket, as sometimes the support response is not sat...
What advice do you have for others considering Trend Micro XDR?
TrendAI Vision One is deployed in our organization as a hybrid model since it is a Software as a Service (SaaS) servi...
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
No data available
Trend Vision One, Trend Micro XDR, Trend Micro XDR for Users, Trend Vision One - XDR for Networks, Trend Micro Vision One
 

Interactive Demo

Demo not available
Demo not available
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Information Not Available
Panasonic North America, Decathlon, Fischer Homes, Banijay Benelux, Unigel, DHR Health,
Find out what your peers are saying about Sangfor Endpoint Secure vs. TrendAI Vision One and other solutions. Updated: September 2026.
920,929 professionals have used our research since 2012.