No more typing reviews! Try our Samantha, our new voice AI agent.

TrendAI Vision One – Network Security vs Wazuh comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Feb 26, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Ranking in Extended Detection and Response (XDR)
4th
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
115
Ranking in other categories
Endpoint Protection Platform (EPP) (4th), Endpoint Detection and Response (EDR) (5th), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (1st)
TrendAI Vision One – Networ...
Ranking in Extended Detection and Response (XDR)
32nd
Average Rating
9.0
Reviews Sentiment
5.7
Number of Reviews
1
Ranking in other categories
No ranking in other categories
Wazuh
Ranking in Extended Detection and Response (XDR)
5th
Average Rating
7.4
Reviews Sentiment
5.9
Number of Reviews
51
Ranking in other categories
Log Management (2nd), Security Information and Event Management (SIEM) (3rd)
 

Mindshare comparison

As of August 2026, in the Extended Detection and Response (XDR) category, the mindshare of Cortex XDR by Palo Alto Networks is 4.5%, down from 5.0% compared to the previous year. The mindshare of TrendAI Vision One – Network Security is 0.7%, up from 0.1% compared to the previous year. The mindshare of Wazuh is 4.9%, down from 9.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Extended Detection and Response (XDR) Mindshare Distribution
ProductMindshare (%)
Cortex XDR by Palo Alto Networks4.5%
Wazuh4.9%
TrendAI Vision One – Network Security0.7%
Other89.9%
Extended Detection and Response (XDR)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
reviewer2793894 - PeerSpot reviewer
Platform Engineer Ii at a outsourcing company with 5,001-10,000 employees
Network visibility has improved and detects zero-day threats and lateral movement swiftly
Trend Vision One - Network Security can be improved by integrating with the native firewall and bringing in that telemetry feed.I would like to see more telemetry coming in from the risk-based factor so that there should be risk-based tagging across all assets within the organization, specifically focusing on threats related to lateral movement and ransomware. This risk-based scoring is required.
RS
Engineer Information Security at N-Able (Pvt) Ltd
Has faced limitations in AI capabilities and pricing flexibility
Pricing-wise, Wazuh stands out, along with deployment flexibility and its documentation which is extremely good in comparison to Forti. The community support is also incredible. They have helped quite a bit because previously, we had a separate tool and management dashboard to do our compliance. With Wazuh, we receive that information without having to do anything extra. We just set up the SIEM and all of that information was automatically populated. The dashboards are very easy to understand and very quick with no lag or delay. I have experienced delays on Forti's dashboards, but not with Wazuh. Wazuh is quite good. In comparison to Forti, they are quite similar. They are very good at detection.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I generally believe that Cortex XDR by Palo Alto Networks is probably the best in the market right now."
"It has pretty much everything we need and works well within the Palo Alto ecosystem."
"Being a cloud solution it is very flexible in serving internal and external connections and a broad range of devices."
"The biggest positive impact I see from Cortex XDR by Palo Alto Networks is a significant reduction in the number of people required to manage it."
"The most valuable features are the fact that it was running in the background and it would intercept any weird stuff, and the fact that it would send things directly to the cloud for sandboxing. It's quite practical."
"From a single pane of glass, you can easily manage all of your endpoints."
"Cortex XDR by Palo Alto Networks's ability to block sophisticated threats in real time is quite good and is on par with SentinelOne's."
"I've found the solution to be highly scalable for enterprises."
"Trend Vision One - Network Security has positively impacted my organization as our network operations team has found it very useful for monitoring all threats coming in via the network layer and taking swift actions compared to earlier."
"The product's initial setup phase was easy."
"I recommend Wazuh to everyone and believe more platforms, not just SIEM and XDR capability platforms, should be open source, allowing people to leverage these tools for the greater good."
"Wazuh offers an enhanced HDR version that outperforms its competitors."
"Wazuh's most beneficial features for our security needs are flexibility, built-in rules, integration capabilities, and documentation."
"I like Wazuh because it is a lot like ELK, which I was already comfortable with, so I didn't have to learn from scratch."
"The log monitoring and analysis tools are great in addition to SIEM file activity monitoring."
"We found the MITRE framework mapping and the agent enrollment service to be the most valuable features of Wazuh."
"Good for monitoring, active response, and for vulnerabilities."
 

Cons

"The dashboard is the area that needs to improve so that we can have the ability to drill down without having to go elsewhere to verify results."
"A potential area of improvement for Cortex XDR by Palo Alto Networks is the cost."
"The downsides of Cortex XDR by Palo Alto Networks are that in many incidents, when I enter the causality chain, there are numerous logs."
"Cortex XDR by Palo Alto Networks could improve its user interface, which is more complicated compared to competitors such as SentinelOne."
"Cortex XDR by Palo Alto Networks can improve mobile integration to allow access to the console."
"The tool needs to be improved in terms of integration and interface."
"It's very time-consuming to log support issues and the people that answer the tickets aren't very knowledgeable."
"The solution needs better reports. I think they should let the customer go in and customize the reports."
"Trend Vision One - Network Security can be improved by integrating with the native firewall and bringing in that telemetry feed."
"The support team could be more responsive and provide quicker replies during our working hours in Indonesia, which would be a significant improvement."
"The product's configuration part and lack of AI capabilities are some of the major concerns associated with Wazuh."
"Integration with Vyara could be better."
"I want more support for regional compliance standards to serve my ANZ region customers better."
"The tool does not provide CTI to monitor darknet."
"Alerts should be specific rather than repeatedly triggered by integrating multiple factors. This issue needs improvement to create a more efficient alert system."
"While it is scalable, it can suffer from reduced latencies."
"An issue I noticed is with tag values in certain rules not functioning properly."
 

Pricing and Cost Advice

"The pricing seems fair, and I do like the licensing model. You use wherever they are, and it is elastic."
"The pricing is a little high. It is per user per year."
"It has reasonable pricing for the use cases it provides to the company."
"The return on investment is from the user side because we have seen the performance of it increase the delivery time of the product if we are using too many web-based and on-premise applications. In indirect ways, we saw the return of investment in terms of performance and user satisfaction increase."
"The pricing is okay, although direct support can be expensive."
"The pricing is a little bit on the expensive side."
"Its pricing is kind of in line with its competitors and everybody else out there."
"When we first bought it, it was a bit expensive, but it was worth it. The licensing was straightforward."
Information not available
"Wazuh is free and open source."
"There is not a license required for Wazuh."
"It is a free-of-cost solution."
"My client uses the open-source version of Wazuh."
"When I contacted customer care, they mentioned bundling options, that I found to be overall affordable."
"Wazuh is open-source, so I think it's an option for a small organization that cannot go for enterprise-grade solutions like Splunk."
"Wazuh is a cheaply priced product."
"Wazuh is not an expensive solution."
report
Use our free recommendation engine to learn which Extended Detection and Response (XDR) solutions are best for your needs.
908,834 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
13%
Financial Services Firm
10%
Comms Service Provider
10%
Manufacturing Company
10%
No data available
Comms Service Provider
12%
Computer Software Company
10%
University
9%
Manufacturing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise21
Large Enterprise54
No data available
By reviewers
Company SizeCount
Small Business27
Midsize Enterprise15
Large Enterprise9
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
What is your experience regarding pricing and costs for Trend Vision One - Network Security?
My experience with pricing, setup cost, and licensing was straightforward and seamless.
What needs improvement with Trend Vision One - Network Security?
Trend Vision One - Network Security can be improved by integrating with the native firewall and bringing in that tele...
What is your primary use case for Trend Vision One - Network Security?
My main use case for Trend Vision One - Network Security is to protect from zero-day threats, specifically by detecti...
What do you like most about Wazuh?
Wazuh is its flexibility and open-source nature, which allows us to tailor threat detection and response across diver...
What needs improvement with Wazuh?
I expected one thing from the dashboard in Wazuh. In ManageEngine, when you use ManageEngine, you can assign a unique...
What is your primary use case for Wazuh?
Our organization is focusing on the integrity part for implementing Wazuh. We were checking solutions for File Integr...
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
Trend Cloud One Network Security
Wazuh All-In-One Deployment
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Information Not Available
Information Not Available
Find out what your peers are saying about SentinelOne, CrowdStrike, TrendAI and others in Extended Detection and Response (XDR). Updated: July 2026.
908,834 professionals have used our research since 2012.