

Trellix Network Detection and Response and Vectra AI are both strong contenders in network security solutions. Trellix appears to have an upper hand in early threat mitigation with its focused sandboxing capabilities, while Vectra's AI-driven detection offers enhanced insight across the attack lifecycle.
Features: Trellix Network Detection and Response provides robust detection with sandboxing, zero-day threat mitigation, and forensic logging. Vectra AI offers AI-driven detection, alert reduction by alert aggregation, and deep insights into attack behaviors.
Room for Improvement: Trellix can enhance cloud integration and analytics. Vectra AI should focus on reducing false positives and improving security integration. Users note Trellix's cloud limitations and Vectra's complex interface as areas needing optimization.
Ease of Deployment and Customer Service: Trellix offers diverse deployment modes, including on-premises and hybrid cloud, with high-rated customer support. Vectra AI supports flexible deployments, excelling in customer service, though challenges with monitoring features are mentioned.
Pricing and ROI: Trellix is premium-priced, emphasizing superior detection and reduced response times. Vectra AI's competitive pricing is justified by AI benefits and comprehensive visibility, offering a solid ROI by preventing breaches and optimizing security.
Investigations are generally faster because analysts have immediate access to relevant network context instead of manually piecing together information from multiple sources.
The time was reduced because of the automated detections.
If a threat can enter any endpoint that is exposed to the internal network, there is a potential gateway for hackers, leading to a loss of production or significant financial impact to the network.
The payback period is roughly six months.
The support team was responsive and knowledgeable.
Technical support needs improvement as sometimes engineers are not available promptly, especially during high-severity incidents.
They were constantly relaying our message to the engineering team and the engineering team was looping that back to them and then to us.
I would rate their technical support a 10, as we have local support in South Africa and the ability to reach out to the teams quickly and effectively when they are in similar time zones, leading to great support globally.
The support is quite reliable depending on the service engineer assigned.
When I create tickets, the response is fast, and issues are solved promptly.
The scalability of Trellix Network Detection and Response is easy; I just have to add another license in the same cloud, and I can easily increase the number of endpoints.
Trellix Network Detection and Response has handled that growth while continuing to provide consistency, visibility, threat detection, and investigation capabilities.
The connectors were always out of sync and we have had multiple noise floods from these connectors which were not configured well.
Vectra AI is scalable because it can work through different kinds of solutions and is compatible with all kinds of cloud solutions.
In my day-to-day use, it has consistently provided the visibility and detection capabilities we rely on for security monitoring and investigations.
In our experience, it has had a positive impact on our production environment and has proven to be a dependable part of our security operations.
I encounter no issues with health or reliability when the recommended specifications are met.
There should be improvements in AI intelligence, faster decision-making, and a more responsive technical support team.
It would be best if Trellix Network Detection and Response sensors were converted into a next-generation firewall with built-in capabilities for routing, switching, and Layer 7 functionality, as most next-generation firewalls today include these features.
Regarding needed improvements for Trellix Network Detection and Response, there is always room for enhancement in terms of AI capability to include proactive triggers based on historical data, enabling AI to learn patterns and detect threats before they manifest.
ExtraHop's ability to decrypt encrypted data is a feature that Vectra AI lacks.
You need to have a Linux server, and from the Linux server, you must perform AI tasks, and there is a lot to be handled in the back end.
All threats, including hacking attempts, should be comprehensively addressed.
Trellix Network Detection and Response is an enterprise-grade security solution, so it represents a significant investment, but we believe that the value it provides in terms of threat detection, network visibility, and incident response justifies the cost.
The pricing model is not transparent, as they do not provide pricing ranges upfront, complicating the evaluation of costs across regions.
My experience with the pricing, setup cost, and licensing of Trellix Network Detection and Response is that they are very good and affordable for the customer range.
Vectra is cheaper in terms of pricing and features compared to Darktrace.
I find the pricing of Vectra AI to be one of the best we have seen as feedback from customers and partners indicates it is very competitive for an EDR solution.
It is very acceptable when you compare it with Darktrace, for example.
Per day we used to have 70 to 80 alerts and those could be reduced up to 40 to 30 a day. This is almost a 40 to 50% decrease.
Trellix Network Detection and Response has positively impacted my organization by addressing performance issues, specifically by offloading heavy traffic inspection and SSL inspection through sensors due to the limitations of the firewall.
Visibility is very important as it empowers users to understand what is happening; therefore, detection is one of the strongest features of Trellix Network Detection and Response.
Our company used Vectra AI to detect the malicious threats and viruses before they could cause more damage, and we successfully stopped the threats.
Alert noise was dramatically reduced by nearly 80%, allowing SOC analysts to focus more on true threats, which made them more productive and resulted in higher operational efficiency.
There are extensive out-of-box detection capabilities.
| Product | Mindshare (%) |
|---|---|
| Vectra AI | 10.6% |
| Trellix Network Detection and Response | 3.0% |
| Other | 86.4% |

| Company Size | Count |
|---|---|
| Small Business | 35 |
| Midsize Enterprise | 11 |
| Large Enterprise | 23 |
| Company Size | Count |
|---|---|
| Small Business | 10 |
| Midsize Enterprise | 10 |
| Large Enterprise | 29 |
Trellix Network Detection and Response provides robust threat protection with advanced detection of zero-day attacks and APTs. Its user-friendly dashboard and real-time response capabilities enhance security and visibility across networks.
Trellix Network Detection and Response stands out with its MVX engine, leveraging virtual machines for comprehensive behavioral analysis. The solution supports detection of advanced cyber threats through features like sandboxing and application filtering, offering real-time response and packet capture for detailed contextual insights. Companies benefit from seamless integration with other platforms, enhancing usability and overall protection. User-friendly interfaces improve network visibility, while stability and ease of configuration safeguard against both signature-based and signature-less threats.
What key features does Trellix offer?Companies in sectors like finance, healthcare, and enterprise security utilize Trellix Network Detection and Response for tasks such as network intrusion detection, endpoint protection, and securing data transmission paths. It aids in threat investigations, pre-sales demos, and network forensics, reducing risks by protecting against cyber threats like phishing.
Vectra AI offers advanced hybrid network and identity security, detecting threats traditional tools miss. It uses AI to identify lateral attacks and credential misuse, providing a proactive defense for enterprises.
Vectra AI enhances security by using AI-driven detection across network, cloud, and identity layers, surpassing EDR and SIEMs by offering real-time threat detection. It ensures continuous observability and automates SOC workflows to minimize manual efforts, creating an efficient security environment. Its AI-powered approach significantly reduces noise, focusing on true threats, and provides insights into complex threat landscapes, with seamless integration into environments like EDR and Office 365.
What are Vectra AI's key features?Vectra AI is utilized across industries for comprehensive network and anomaly detection. Organizations deploy it for threat hunting and incident response, monitoring both on-premises and cloud activities. By placing sensors across sites, they optimize security practices and streamline their detection processes.
We monitor all Network Detection and Response (NDR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.