Try our new research platform with insights from 80,000+ expert users

CrowdStrike Falcon vs Trend Micro ScanMail comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
105
Ranking in other categories
Endpoint Protection Platform (EPP) (5th), Endpoint Detection and Response (EDR) (8th), Extended Detection and Response (XDR) (7th), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (2nd)
CrowdStrike Falcon
Average Rating
8.6
Reviews Sentiment
7.3
Number of Reviews
137
Ranking in other categories
Security Information and Event Management (SIEM) (6th), Endpoint Protection Platform (EPP) (1st), Threat Intelligence Platforms (TIP) (1st), Endpoint Detection and Response (EDR) (1st), Extended Detection and Response (XDR) (1st), Attack Surface Management (ASM) (1st), Identity Threat Detection and Response (ITDR) (1st), AI-Powered Cybersecurity Platforms (1st)
Trend Micro ScanMail
Average Rating
7.4
Reviews Sentiment
6.6
Number of Reviews
8
Ranking in other categories
Anti-Malware Tools (19th)
 

Mindshare comparison

Extended Detection and Response (XDR) Market Share Distribution
ProductMarket Share (%)
CrowdStrike Falcon10.1%
Wazuh7.2%
SentinelOne Singularity Complete5.8%
Other76.9%
Extended Detection and Response (XDR)
Anti-Malware Tools Market Share Distribution
ProductMarket Share (%)
Trend Micro ScanMail0.7%
Microsoft Defender for Endpoint8.1%
F-Secure Total3.9%
Other87.3%
Anti-Malware Tools
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
Waleed Omar - PeerSpot reviewer
Information Security Specialist at Arab Open University
Provides effective real-time threat detection with potential for cost optimization
Some features such as device control, firewall management, and file analysis are standalone products that we need to purchase separately. If these features came out of the box within the product, it would be much more beneficial for us. Other providers such as SentinelOne include these features in their base product. We attended a CrowdStrike Falcon event where they discussed some shallow AI features, but we cannot see these in our panel yet. We work with different solutions such as Darktrace and SocRadar, where AI features are automatically displayed in our dashboards after release. However, for CrowdStrike Falcon, we cannot see these features.
Jaffar Ali - PeerSpot reviewer
Director Technical Services at TechnoBIZ
Ensures continuous protection with real-time scanning of emails and mailboxes
ScanMail needs improvement in its reporting, as it is currently weak in some areas. Additionally, the response time of their technical support is slow and needs enhancement. Overall, Trend Micro's technical support has deteriorated, and pricing is another area that requires attention. The list pricing is high, and we lose deals against competitors because of this. Trend Micro should consider reducing their prices, especially for large customers.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The information the dashboard provides is very clear."
"One thing that I like about Cortex XDR by Palo Alto Networks, it is detecting all the suspicious or malicious binaries, and it has integration with Palo Alto Firewall."
"The normal protection was really effective, and we detected situations that if we didn't have Cortex XDR by Palo Alto Networks, it's highly likely that we would have been affected, but it protected the infrastructure."
"Cortex Xnor's playbooks predefine the workflow of the automation, such as response processes, alert triggering, and enriching the context, collecting relevant indicators such as hashes, IP addresses, or domains efficiently and can detect and block malicious attacks with firewalls."
"It'll not slow down your system when compared to others."
"Traps is quite a stable product. Once it was properly deployed and configured, you have nothing to be worried about."
"The behavior-based detection feature is valuable."
"I like the centralized console and the predictive analysis it does of malware. It is very stable and also scalable."
"The most beneficial part is the active response capability of the product."
"The best benefit of CrowdStrike Falcon is 99% MITRE coverage."
"There are two things which customers really like about CrowdStrike. If they buy managed services from CrowdStrike, it offers them detection of security issues in one minute. If you buy their professional services, they offer insurance where you can claim up to $5 million if there's a breach. This is a huge upsell for customers."
"The DLP is the most valuable feature of CrowdStrike Falcon."
"Probably the most valuable thing to me is the real-time response piece. The fact that I can connect to an endpoint as long as it is on the Internet, no matter where it is globally. I can remove files from the endpoint, drop files on the endpoint, stop processes, reboot it, run custom scripts, and deploy software. Pretty much no other tool can do all that."
"CrowdStrike Falcon is a very light solution. It does not use too much processor or RAM."
"It seems to do a pretty good job of protecting the host. It offers good insights that it gives you when it has a detection. It's pretty incredible."
"The anomaly detection is the most valuable feature."
"Its integration with mail platforms is valuable."
"The pricing of Trend Micro ScanMail is average, which is fine."
"It does the job. Even when our clients have a very high rate of emails per second, there has been no problem."
"What I like the most about Trend Micro ScanMail is its easiness."
"I find Trend Micro ScanMail to be a stable solution, and I would rate its stability as nine out of ten."
"The most effective feature of ScanMail is its real-time antivirus behaviors, particularly when it scans URLs."
"The analysis part is good."
"I like that Trend Micro ScanMail is very effective and quite strong."
 

Cons

"Cortex XDR should have a lightweight agent, and the agent size should not be heavy."
"In terms of areas of improvement, we have not completed our review of the product. We're also looking at other products. So, it's a little bit hard to tell what could be different because we have not completed the review of this product, but based on our experience so far, its implementation is quite complex."
"Currently, we are monitoring all USB drives and ports but we would like to improve our device control capabilities."
"Cortex XDR by Palo Alto Networks can improve mobile integration to allow access to the console."
"I recommend adding a data loss prevention (DLP) solution to Cortex XDR by Palo Alto Networks. The inclusion of this feature would allow the application of DLP policies alongside antivirus policies via a single agent and console, making it more competitive as other OEMs often offer DLP solutions as part of their antivirus products."
"Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth."
"It tends to do 99.9% of things. The only thing I'd like is single sign-on authentication into their cloud platform so that my users can be properly authenticated against it."
"I think sometimes Cortex XDR agent automatically stops event capturing from the device, and then even the dashboard does not get any notifications from the agent."
"CrowdStrike Falcon could be enhanced by extending its security capabilities to include NDR and XDR."
"We have had to open a case with the technical support to get some issues and bugs resolved."
"Threat prevention should be their first priority, and false positive reductions are needed."
"I would like them to improve the correlation of data in the search algorithms. When we run an investigation, malware, phishing, etc., I want to look at multiple endpoints at once to correlate that data to see the likenesses, e.g., how are they not alike or what systems and processes are running across those systems? I don't want to have to run the same search in their Spotlight module five, 10, 15, or 100 times to get 100 different results, copy that data out, and then correlate it on my own. In a very simple way, I want to be able to load up a comma-delimited list giving me the spotlight data on these X amount of hosts, letting me search for it quickly. We have had to go back to CrowdStrike, and say, "Our search are taking far too long for even one host." They did bump up the cores and that did improve performance, but it is still kind of slow to get that Spotlight data. That is probably our biggest pain point. I think that needs some help. I understand this kind of information access is probably not the easiest thing to do. It is probably a big ask depending on how their back-end is setup."
"They don't really have anything when it comes to scanning attachments."
"The dashboard does not have the facility to export the reports in a PDF format, which I can quickly share with internal stakeholders."
"They should provide us with good visibility for everything."
"We'd like to see more integration capabilities."
"Its user interface is pretty old-fashioned, and sometimes, it's hard to find the features that you are looking for. The user interface definitely needs some improvement."
"I believe there is room for improvement in better signatures, better reporting features, and more insight into the spam emails database."
"ScanMail was one of the best solutions a few years ago, but it is no longer the best solution because of its old-fashioned management console. Customers associate it with something that is old because there is no change in the management console. It has old icons, and it is not fresh enough. It is also not easy to use or play with. The report engine is also old-fashioned. Customers want something easier, quicker, and cleaner."
"ScanMail needs improvement in its reporting, as it is currently weak in some areas."
"Even Trend Micro ScanMail support staff are not familiar with this product."
"The sandboxing part can be improved."
"The price could be better. I think it's pretty good compared to other solutions as far as the features are concerned. It basically covers most of the stuff which we require for email security. But it would be better if they made it a little cheaper and more cost-effective. That would make it easier for us to sell it."
"The weaknesses of Trend Micro ScanMail are that it doesn't fully protect ad-based web access and lacks proper security for Outlook, iOS, and web browser access."
 

Pricing and Cost Advice

"The price of the solution could be reduced. I have customers that have voiced that the solution is good for the value but if I want to sell more of the solution the price reduction would help."
"The pricing is a little high. It is per user per year."
"The solution is expensive. It's pricing is on a yearly-basis."
"It is "expensive" and flexible."
"The cost depends on your chosen license type, like Pro or other licenses."
"When we first bought it, it was a bit expensive, but it was worth it. The licensing was straightforward."
"It has a yearly renewal."
"Very costly product."
"It is expensive compared to SentinelOne, but as the market leader, it is worth it."
"The other administrator and I can log in to check the exact details of what happened, what was running, and what caused the detection. We know exactly what was happening on the end users PC and we can tell if it's something that we actually need or something that's malicious."
"It has an annual license, and it is not that expensive."
"The pricing is definitely high but you get what you pay for, and it's not so high that it prices itself out of the market."
"The price of CrowdStrike Falcon could be better. It is very expensive, we pay approximately $900 per month for the licenses. There are not any additional fees."
"We are on an annual subscription for the solution. There are not any additional costs."
"It is an expensive product, but I think it is well worth the investment."
"The pricing will depend upon your volume of usage."
"It is an expensive solution. I rate the pricing a seven out of ten."
"Its price is okay. It is not too high."
"It's a yearly subscription, but the price could be better."
report
Use our free recommendation engine to learn which Extended Detection and Response (XDR) solutions are best for your needs.
882,637 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
10%
Financial Services Firm
10%
Manufacturing Company
8%
Comms Service Provider
6%
Computer Software Company
11%
Financial Services Firm
10%
Manufacturing Company
9%
Government
6%
Financial Services Firm
12%
Manufacturing Company
9%
Government
8%
Comms Service Provider
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business42
Midsize Enterprise21
Large Enterprise47
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise34
Large Enterprise62
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise2
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
How does Crowdstrike Falcon compare with Darktrace?
Both of these products perform similarly and have many outstanding attributes. CrowdStrike Falcon offers an amazing u...
How does Microsoft Defender for Endpoint compare with Crowdstrike Falcon?
The CrowdStrike solution delivers a lot of information about incidents. It has a very light sensor that will never pu...
Is Crowdstrike Falcon better than Trend Micro Deep Security?
I like that Crowdstrike allows me to easily correlate data between my firewalls. What’s most useful for my needs is t...
What is your experience regarding pricing and costs for Trend Micro ScanMail?
The pricing of Trend Micro ScanMail is average, which is fine. Pricing doesn't have anything to do with this; their p...
What needs improvement with Trend Micro ScanMail?
The major limitation of this product is that their documentation is very poor; their documentation is extremely poor....
What advice do you have for others considering Trend Micro ScanMail?
I work as a security consultant in Bangladesh Election Commission, a government organization. I have limited experien...
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
CrowdStrike Falcon XDR, CrowdStrike Falcon Threat Intelligence, CrowdStrike Identity Protection, CrowdStrike Falcon Surface, CrowdStrike Falcon Platform
ScanMail
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Information Not Available
L&T Chiyoda, Assaf Harofeh Medical Center, Atlanta Gastroenterology Associates, Atma Jaya Catholic University of Indonesia, Bishop Luffa School, Brooks Rehabilitation, CHR de la Citadelle, CHRU de Nancy
Find out what your peers are saying about CrowdStrike Falcon vs. Trend Micro ScanMail and other solutions. Updated: January 2023.
882,637 professionals have used our research since 2012.