AWS GuardDuty vs Trellix Cloud Workload Security comparison

AWS GuardDuty vs. Trellix Cloud Workload Security

Download the complete report

Helped 892,383 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

SentinelOne Singularity Clo...

Mindshare comparison

As of April 2026, in the Cloud Workload Protection Platforms (CWPP) category, the mindshare of SentinelOne Singularity Cloud Security is 4.9%, up from 2.6% compared to the previous year. The mindshare of AWS GuardDuty is 12.5%, up from 12.2% compared to the previous year. The mindshare of Trellix Cloud Workload Security is 0.6%, up from 0.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Cloud Workload Protection Platforms (CWPP) Mindshare Distribution
Product	Mindshare (%)
AWS GuardDuty	12.5%
SentinelOne Singularity Cloud Security	4.9%
Trellix Cloud Workload Security	0.6%
Other	82.0%

Cloud Workload Protection Platforms (CWPP)

Featured Reviews

Sreeraj Mohandas

Security Engineer at HashXpert

Consolidated cloud security has reduced manual work and has automated vulnerability remediation

I elaborate on my rating of SentinelOne support by mentioning that there was some time where the troubleshooting took a longer time. In fact, there were many meetings going on. The availability of the document on the internet is on a lesser side because as an engineer, I would want to know about the troubleshooting aspects of this particular tool. When I am facing a customer, I do not prefer to bring the vendor to every call and try to resolve it, as it takes months and months. It would be better to have a training session with the engineer on site to explain and train properly. This is not the case with SentinelOne, so this is the only thing I have a complaint about. I do not have any other room for improvement to suggest within SentinelOne itself. However, I would really want the AI assistant for the threat hunting part to be more accessible. They have it, but they are making it licensed, so it is a bit on the higher end.

Read full review

ShantanuKhare

Senior IT Auditor at Ernst & Young

Has provided automated threat detection and daily malicious activity insights while supporting seamless orchestration with existing dashboards

I would assess the integration of AWS GuardDuty with Threat Intelligence as majorly positive; no threat intelligence is 100% accurate, and there are a few false positives, but as a security engineer, this must be accepted, and overall, the response and service is good for us. We do not directly use AWS GuardDuty dashboard by itself, as we have our own integrated security dashboard; AWS GuardDuty gives the feed to that dashboard, and it's giving us a satisfactory view of how the security landscape looks. We use metrics such as zero-day threats, any malicious traffic, and any traffic which originates from OFAC countries to measure its effectiveness, as we are majorly into a financial institution, as any traffic that is from a malicious IP or a rogue device. I don't see any significant negative points regarding AWS GuardDuty; it's a good product to have if you're a cloud consumer. I rate AWS GuardDuty nine out of ten overall.

Read full review

Madan Mohan

Director Operations at SOFTPRO PLUS

Easy policy designing and highly scalable solution

The customers really want protection against unauthorized applications running on their servers. They should avoid installing any unknown source and use Trellix Cloud Workload Security for the best solution in workload security. It includes DNS with ransomware protection. With this, they can have complete protection for their servers. Additionally, any solution working with the database should implement change control. So, if any changes are made on the database side, they should be resolved and verified to ensure they are not made by any unknown source. This is the best solution we suggest to customers who want granular control to protect their servers. It's easy to deploy with a single agent. Overall, I would rate the solution a nine out of ten because policy designing is very easy too. And the manageability is very easy. You can easily manage it through EPO and deploy policies within five to ten minutes. No issues with that.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"We mostly use alerts. That has been pretty good. If we use the alert system from Amazon, it is much costlier to us, so we use SentinelOne Singularity Cloud Security."

"SentinelOne Singularity Cloud Security stands out for its user-friendly interface and intuitive software, making it easy to navigate and use."

"The offensive security feature is valuable because it publicly detects the offensive and vulnerable things present in our domain or applications. It checks any applications with public access. Some of the applications give public access to certain files or are present over a particular domain. It detects and lets us know with evidence. That is quite good. It is protecting our infrastructure quite well."

"I would rate SentinelOne Singularity Cloud Security a nine out of ten."

"Support has been very helpful and provides regular feedback and help whenever needed. They've been very useful."

"Cloud Native Security is a tool that has good monitoring features."

"The key strength of Singularity Cloud Security lies in its ability to pinpoint vulnerabilities in our cloud accounts and identify suspicious activity that warrants further investigation."

"The compliance monitoring feature of SentinelOne Singularity Cloud Security gives us a report with a compliance score to ensure we meet certain regulatory standards."

More SentinelOne Singularity Cloud Security pros

"What we found most valuable in Amazon GuardDuty is its threat detection feature, especially because we were monitoring a huge number of AWS accounts, so we needed a solution that would monitor for any kind of malicious activity."

"We use the tool for threat detection. AWS includes AI features as well. AWS GuardDuty gives us reports."

"GuardDuty is really scalable, which is helping us to upscale our environment to the cloud, and I really appreciate the scalability measures that Amazon is providing to all its customers."

"Deployment is great, and we didn't face any big challenges."

"GuardDuty's comprehensive threat detection does not only monitor data - it also detects a wide range of security threats."

"The product has automated protection powered by AI/ML, which is now far more powerful than before. It uses AI/ML in its detection algorithm, providing fast and quick results."

"GuardDuty is extensive in terms of configuration and security compliance."

"We generally use AWS GuardDuty for detection of zero-day vulnerabilities and automatic threat responses; it serves as a SOAR, an orchestrated and automated response solution for us in the AWS platform."

More AWS GuardDuty pros

"The most valuable feature is the application control."

"All these things are beautifully done by McAfee Cloud Workload Security."

"The discovery feature is the most valuable. After you integrate your cloud environment, maybe an Azure or AWS, or a private environment hosted on VMware, it automatically starts discovering the number of servers that are running on that cloud and the number of services that you have done. It is a beautiful feature because, from a security standpoint, it is difficult to identify which VM is compliant or not when you keep on provisioning a number of VMs in the cloud. It also checks for compliance. It checks whether a system is compliant and whether antivirus is installed on a VM. If an antivirus is installed, it checks whether the antivirus is updated to the latest signature package or not. All these things are beautifully done by McAfee Cloud Workload Security. For communicating with the McAfee server, you need to install an agent on the VM. McAfee Cloud Workload Security gives you a direct opportunity to install an agent on a Windows machine. If you have a Windows cloud, you can directly push that agent onto the VM through your McAfee portal. It provides you a single dashboard view of all servers present in the cloud. It shows the servers on which the antivirus is already installed as well as the servers for which the antivirus installation is still pending. This dashboard view is a much-needed thing. It also has a centralized management, which makes it easy to use."

Cons

"SentinelOne Singularity Cloud Security filtering has some areas that cause problems, and to achieve single sign-on functionality, a break-glass feature, which is currently unavailable, is necessary."

"The area of improvement is the cost, which is high compared to other traditional endpoint protections."

"While SentinelOne Singularity Cloud Security offers real-time response, there is room for improvement in alert accuracy."

"The Infrastructure as Code service available in SentinelOne Singularity Cloud Security and the services available in AWS cloud security can be merged so that we can get the security data directly from AWS cloud in SentinelOne Singularity Cloud Security. This way, all the data related to security will be in one single place. Currently, we have to check a couple of things on SentinelOne Singularity Cloud Security, and we have to validate that same data on the AWS Cloud to be sure. If they can collaborate like that, it will be great."

"One potential drawback is the cost of SentinelOne Singularity Cloud Security, which may be prohibitive for smaller businesses or startups, particularly those in regions with lower average incomes, such as India."

"The SentinelOne customer support needs improvement, as they are sometimes late in responding, which is critical in a production issue."

"We are experiencing problems with Cloud Native Security reporting."

"The documentation could be better."

More SentinelOne Singularity Cloud Security cons

"Some of the pain points in Amazon GuardDuty was the cost. When compared to some of the other services, depending on how many we had to monitor, if we had a huge range of accounts, as our accounts increased, we had a cost factor that came into play. Sometimes there were issues, for example, with findings that came up, we wanted to add notes and there were issues back then where notes couldn't be entered properly. If we wanted to leave a note such as "Okay, we have assessed this and this is how we feel", or "This is a false positive", Amazon GuardDuty wasn't allowing us to do that. Even with the suppression of certain findings, there was some issue that we had faced at one time. Those were some of the pain points of the solution."

"GuardDuty is limited to AWS environments."

"It would be great if the solution had some automation capabilities."

"The solution has to be integrated with new services that AWS adds like QuickSight, Managed Airflow, AppFlow and MWAA."

"Improvement-wise, Amazon GuardDuty should have an overall dashboard analytics function so we could see what's in the current environment, and then in addition to that, provide best practices and recommendations, particularly to provide some type of observability, and then figure out the login side of it, based on our current environment, in terms of what we're not monitoring and what we should monitor. The solution should also give us a sample code configuration to implement that added feature or feature request. What I'd like to see in the next release of Amazon GuardDuty are more security analytics, reporting, and monitoring. They should provide recommendations and additional options that answer questions such as "Hey, what can we see in our environment?", "What should we implement within the environment?", What's recommended?" We know that cost will always be associated with that, but Amazon GuardDuty should show us the increased costs or decreased costs if we implement it or don't implement it, and that would be a good feature request, particularly with all products within AWS, just for cloud products in general because there are times features are implemented, but once they're deployed, they don't tell you about costs that would be generated along with those features. After features are deployed, there should a summary of the costs that would be generated, and projected based on current usage, so they would give us the option to figure out how long we're going to use those features and the option to keep those on or turn those off. If more services were like that, a lot more people would use those on the cloud."

"I work in a bank, and it would be good if AWS GuardDuty could be integrated with other monitoring and detection tools we use."

"We currently find Lacework to be much better at detecting vulnerabilities than AWS GuardDuty. The engines of AWS GuardDuty have to be improved."

"I think that some detections in container environments such as container runtime, and on services such as AWS container service, Fargate service or EKS service could be improved."

More AWS GuardDuty cons

"Its vulnerability assessment is not the best. We cannot identify the vulnerabilities that are related to the operating system by using McAfee Cloud Workload Security. I wish McAfee would add a vulnerability assessment tool that will not only identify the vulnerability but will also be able to generate a report so that the required patching can be done for the servers. Currently, McAfee Cloud Workload Security only integrates with AWS and Azure. If it can also integrate with GCP, Alibaba, and other cloud services available in the market, it would be good because not all people are using Azure and AWS."

"There is room for improvement in the pricing model."

"Its vulnerability assessment is not the best. We cannot identify the vulnerabilities that are related to the operating system by using McAfee Cloud Workload Security."

Pricing and Cost Advice

"PingSafe is fairly priced."

"SentinelOne Singularity Cloud Security is on the costlier side."

"For pricing, it currently seems to be in line with market rates."

"PingSafe's pricing is good because it provides us with a solution."

"I am not involved in the pricing, but it is cost-effective."

"The pricing for PingSafe in India was more reasonable than other competitors."

"I would rate the cost a seven out of ten with ten being the most costly."

"PingSafe falls within the typical price range for cloud security platforms."

More SentinelOne Singularity Cloud Security pricing and cost advice

"We use a pay-as-you-use license, which is competitively priced in the market."

"It can get very expensive. If you turn on every feature, it can turn into hundreds of thousands of dollars."

"Pricing is determined by the number of events sent."

"The price of the solution is exactly right."

"The tool has no subscription charges."

"In terms of the costs associated with Amazon GuardDuty, it was $1 per GB from what I recall. Pricing was based on per gigabyte. For example, for the first five hundred gigabytes per month, it'll be $1 per GB, so it'll be $500. If your usage was greater, there's another bracket, for example, the next two thousand GB, then there's an add-on cost of 50 cents per GB. That's how Amazon GuardDuty pricing slowly goes up. I can't remember if there was any kind of additional cost apart from standard licensing for the solution. Nothing else that at least comes to mind. What the service was charging was worth it. That was one good thing when using Amazon GuardDuty because my company could be in a certain tier for a certain period. My company wasn't under a licensing model where it could overestimate its usage and under-utilize its usage and pay much more. This was what made the pricing model for Amazon GuardDuty better."

"I don't have all the details in terms of licensing for Amazon GuardDuty, but my organization does have a license set up for it."

"The pricing model is pay as you go and is based on the number of events per month."

More AWS GuardDuty pricing and cost advice

"It is not an expensive product. I am in the Indian market, and it is one of the most reliable and cost-effective solutions."

See which vendors are best for you

Use our free recommendation engine to learn which Cloud Workload Protection Platforms (CWPP) solutions are best for your needs.

See recommendations

892,383 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

14%

Computer Software Company

11%

Manufacturing Company

Government

Financial Services Firm

14%

Computer Software Company

10%

Manufacturing Company

Government

Comms Service Provider

17%

Government

13%

Construction Company

10%

Financial Services Firm

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	52
Midsize Enterprise	22
Large Enterprise	58

By reviewers
Company Size	Count
Small Business	8
Midsize Enterprise	3
Large Enterprise	15

No data available

Questions from the Community

What do you like most about PingSafe?

The dashboard gives me an overview of all the things happening in the product, making it one of the tool's best featu...

What is your experience regarding pricing and costs for PingSafe?

Regarding the pricing for SentinelOne Singularity Cloud Security, I do not think it is something I can compare.

What needs improvement with PingSafe?

I do not see room for improvement in SentinelOne Singularity Cloud Security. In the future, I would like to see the i...

What is your experience regarding pricing and costs for Amazon GuardDuty?

AWS GuardDuty is an expensive feature, and while you can't expect the price to be low, it can be lower because it's p...

What needs improvement with Amazon GuardDuty?

AWS GuardDuty is a good product; it's doing its job right now, and I don't see any additional improvements needed. Co...

What is your primary use case for Amazon GuardDuty?

We generally use AWS GuardDuty for detection of zero-day vulnerabilities and automatic threat responses; it serves as...

Wiz vs SentinelOne Singularity Cloud Security

Ask a question

Earn 20 points

Comparisons

Compared 8% of the time

Prisma Cloud by Palo Alto Networks vs SentinelOne Singularity Cloud Security

Compared 7% of the time

Microsoft Defender for Cloud vs SentinelOne Singularity Cloud Security

Compared 6% of the time

CrowdStrike Falcon Cloud Security vs SentinelOne Singularity Cloud Security

Compared 5% of the time

FortiCNAPP vs SentinelOne Singularity Cloud Security

Compared 4% of the time

More SentinelOne Singularity Cloud Security Competitors

Microsoft Defender for Cloud vs AWS GuardDuty

Compared 67% of the time

CrowdStrike Falcon Cloud Security vs AWS GuardDuty

Compared 5% of the time

Prisma Cloud by Palo Alto Networks vs AWS GuardDuty

Compared 4% of the time

Wiz vs AWS GuardDuty

Compared 4% of the time

TrendAI Vision One – Cloud Security vs AWS GuardDuty

Compared 3% of the time

More AWS GuardDuty Competitors

TrendAI Vision One – Cloud Security vs Trellix Cloud Workload Security

Compared 30% of the time

Microsoft Defender for Cloud vs Trellix Cloud Workload Security

Compared 25% of the time

FortiCNAPP vs Trellix Cloud Workload Security

Compared 13% of the time

Check Point CloudGuard CNAPP vs Trellix Cloud Workload Security

Compared 9% of the time

Aqua Cloud Security Platform vs Trellix Cloud Workload Security

Compared 9% of the time

More Trellix Cloud Workload Security Competitors

Product Reports

SentinelOne Singularity Cloud Security

Download SentinelOne Singularity Cloud Security product report

SentinelOne Singularity Cloud Security report

AWS GuardDuty

Download AWS GuardDuty product report

Cloud Workload Protection Platforms (CWPP)

March 2026

Download Trellix Cloud Workload Security product report

Also Known As

PingSafe

No data available

McAfee Cloud Workload Security

Overview

SentinelOne Singularity Cloud Security offers a streamlined approach to cloud security with intuitive operation and strong integration capabilities for heightened threat detection and remediation efficiency.

Singularity Cloud Security stands out for its real-time detection and response, effectively minimizing detection and remediation timelines. Its automated remediation integrates smoothly with third-party tools enhancing operational efficiency. The comprehensive console ensures visibility and support for forensic investigations. Seamless platform integration and robust support for innovation are notable advantages. Areas for development include improved search functionality, affordability, better firewall capabilities for remote users, stable agents, comprehensive reporting, and efficient third-party integrations. Clarity in the interface, responsive support, and real-time alerting need enhancement, with a call for more automation and customization. Better scalability and cost-effective integration without compromising capabilities are desired.

What are SentinelOne Singularity Cloud Security's standout features?

Ease of Use: Intuitive operation simplifies navigation across platforms.
Real-Time Detection: Quick identification and response to threats.
Automated Remediation: Streamlines recovery processes with integration capabilities.
Forensic Visibility: Aids in thorough threat analysis and prevention strategies.
Comprehensive Console: Offers full visibility and historical data tracking.
Platform Integration: Supports seamless operation across cloud and hybrid environments.

What benefits should users expect from SentinelOne Singularity Cloud Security?

Enhanced Efficiency: Automation and third-party integration improve threat response.
Improved Detection: Reduces mean time to detect and respond to threats.
Operational Support: Comprehensive visibility and forensic tools aid operational decisions.
Cost Efficiency: Affordable integration with scaling capabilities without high overhead.

SentinelOne Singularity Cloud Security is deployed in industries needing robust cloud security posture management, endpoint protection, and threat hunting. Utilized frequently across AWS and Azure, it assists in monitoring, threat detection, and maintaining compliance in diverse environments while providing real-time alerts and recommendations for proactive threat management.

SentinelOne

AWS GuardDuty is a security service providing threat detection and continuous monitoring, integrating seamlessly with AWS services and third-party tools. Enhanced by machine learning, it offers comprehensive protection against unauthorized access and malicious activity within AWS environments.

GuardDuty offers behavior analysis and automated responses, utilizing multiple data sources like CloudTrail and VPC Flow Logs for thorough threat analysis. Its scalability and cost-effectiveness simplify the process of identifying suspicious activities, thereby protecting AWS environments from security threats. While users appreciate these features, there's room for improvement in expanded integrations, a more intuitive dashboard, and detailed threat intelligence. Key capabilities include facilitating compliance and enhancing cloud security by monitoring accounts, services, and detecting unusual patterns in real-time.

What are the key features of AWS GuardDuty?

Threat Detection: Identifies potential threats using behavior analysis and anomaly detection.
Continuous Monitoring: Provides round-the-clock surveillance of AWS environments.
Integration: Connects with AWS services and third-party tools for extended functionality.
Automated Responses: Facilitates immediate action against detected threats.

What benefits and ROI should users expect from AWS GuardDuty reviews?

Cost-Effectiveness: Offers scalable solutions without significant overhead costs.
Ease of Use: Simplifies threat detection and monitoring processes.
Scalability: Adapts to growing security needs efficiently.
Comprehensive Security: Protects AWS environments from unauthorized access and malicious activities.

Industries utilize AWS GuardDuty for robust security management, detecting threats and analyzing potential risks within AWS environments. This is crucial for sectors needing strict compliance and security, such as finance and healthcare, enabling these sectors to respond effectively to security events and maintain integrity.

Amazon Web Services (AWS)

Trellix Cloud Workload Security offers an advanced scalable and adaptable platform designed to secure cloud environments. It addresses cybersecurity challenges while providing seamless integration and robust protection for cloud-based applications and infrastructure.

Designed for organizations requiring efficient cloud security, Trellix Cloud Workload Security integrates advanced threat detection and protection mechanisms to ensure continuous monitoring and instant threat responses. It leverages cutting-edge technology to safeguard data integrity and maintain operational efficiency, offering a seamless experience that aligns with contemporary cloud security requirements.

What are the key features?

Continuous Threat Monitoring: Delivers real-time alerts and enhances threat detection capabilities.
Scalable Architecture: Easily adapts to changes, meeting diverse business demands.
Compliance Assurance: Aligns with industry standards to mitigate compliance risks.
Seamless Integration: Smoothly aligns with cloud services to enhance security measures.

What benefits and ROI should users consider?

Enhanced Security: Ensures peace of mind with comprehensive threat protection.
Operational Efficiency: Optimizes resources, reducing overhead costs.
Improved Compliance: Reduces the risk of regulatory penalties.
Scalability: Allows businesses to grow securely without compromising performance.

In industries like financial services and healthcare, Trellix Cloud Workload Security is implemented to protect sensitive data and manage compliance requirements effectively. Its flexible architecture and robust security features allow it to adapt to these industries' demanding environments, offering reliable protection and integration while supporting specific industry regulations.

Trellix

Sample Customers

Information Not Available

autodesk, mapbox, fico, webroot

Information Not Available

AWS GuardDuty vs. Trellix Cloud Workload Security