Try our new research platform with insights from 80,000+ expert users

CrowdStrike Falcon vs Trend Vision One Endpoint Security comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Mar 9, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.5
CrowdStrike Falcon improves ROI by cutting costs and increasing productivity through efficient threat management and strong security measures.
Sentiment score
7.4
Organizations achieve varied ROI with Trend Vision One, noting cost savings, enhanced security, and efficiency improvements up to 30%.
 

Customer Service

Sentiment score
7.1
Customers generally praise CrowdStrike Falcon's responsive, knowledgeable support, despite occasional slow responses and limited expertise concerns.
Sentiment score
6.7
Trend Vision One Endpoint Security's support is praised for problem-solving but criticized for slow and non-localized service in some areas.
The CrowdStrike team is very efficient; I would rate them ten out of ten.
I have not needed much technical support except during the uninstallation issues, which took some time to resolve.
 

Scalability Issues

Sentiment score
7.9
CrowdStrike Falcon excels in scalable, seamless deployment across various organizations, with flexible licensing and minimal disruption during expansion.
Sentiment score
7.9
Trend Vision One Endpoint Security excels in scalability and adaptability, supporting small to large organizations with effortless expansion capabilities.
It has adequate coverage and is easy to deploy.
When it comes to scalability, it is entirely based on premium models according to demand.
 

Stability Issues

Sentiment score
8.2
CrowdStrike Falcon offers stable, reliable performance with minor update issues and high user satisfaction ratings for protection.
Sentiment score
8.1
Trend Vision One Endpoint Security is stable and reliable, with minor resource concerns and high user satisfaction ratings.
We are following N-1 versions across our environment, which is stable.
I have never seen instability in the CrowdStrike tool.
 

Room For Improvement

Users desire improved dashboard functionality, integration, machine learning, and interface enhancements with cost-effective options for better threat management.
Trend Vision One Endpoint Security needs improvements in functionality, compatibility, performance, support, analytics, and user experience for better protection.
Threat prevention should be their first priority.
Another concern is CrowdStrike's GUI. It changes annually, making it hard to work and find options.
Simplifying the querying process, such as using double quote queries or directly obtaining logs based on IP addresses or usernames, would be beneficial.
We need more training resources for my team and I, such as developing labs and sessions to implement it more easily.
20% to 30% of endpoints faced difficulty in cleaning or uninstalling the software.
 

Setup Cost

CrowdStrike Falcon is pricier than competitors but valued for strong security, flexible features, and excellent support.
Trend Vision One Endpoint Security offers flexible pricing and straightforward setup, but some users find it expensive compared to competitors.
It is expensive compared to SentinelOne, but as the market leader, it is worth it.
The pricing is very high, despite the solution’s capabilities.
 

Valuable Features

CrowdStrike Falcon excels with real-time threat detection, cloud-native flexibility, and seamless integration, enhancing endpoint security and management.
Trend Vision One Endpoint Security offers virtual patching, centralized management, machine learning, and real-time protection for comprehensive security.
I can investigate by accessing the customer's host based on the RTR environment and utilize host search to know details for the past seven days, including logins, processes, file installations, malicious processes, and network connections.
The moment the user clicked on the file, it was quarantined thanks to CrowdStrike.
The machine learning behavior for anomaly detection is a valuable feature.
The integration of ML and AI provides complete visibility, suggests responses, detects threats, and includes integration into XDR, which covers email security, endpoint security, cloud security, among other aspects.
The behavior analytics feature is very useful, and its threat detection based on AI is very strong.
 

Categories and Ranking

CrowdStrike Falcon
Ranking in Endpoint Protection Platform (EPP)
2nd
Ranking in Endpoint Detection and Response (EDR)
1st
Average Rating
8.6
Reviews Sentiment
7.4
Number of Reviews
126
Ranking in other categories
Security Information and Event Management (SIEM) (6th), Identity Management (IM) (6th), Threat Intelligence Platforms (2nd), Active Directory Management (2nd), Extended Detection and Response (XDR) (1st), Attack Surface Management (ASM) (1st), Ransomware Protection (1st), Identity Threat Detection and Response (ITDR) (3rd), AI-Powered Cybersecurity Platforms (1st)
Trend Vision One Endpoint S...
Ranking in Endpoint Protection Platform (EPP)
5th
Ranking in Endpoint Detection and Response (EDR)
6th
Average Rating
8.2
Reviews Sentiment
7.2
Number of Reviews
131
Ranking in other categories
Endpoint Compliance (3rd)
 

Mindshare comparison

As of March 2025, in the Endpoint Protection Platform (EPP) category, the mindshare of CrowdStrike Falcon is 11.2%, up from 8.8% compared to the previous year. The mindshare of Trend Vision One Endpoint Security is 1.9%, down from 2.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Protection Platform (EPP)
 

Featured Reviews

Chintan-Vyas - PeerSpot reviewer
Easy to set up with good behavior-based analysis but needs a single-click recovery option
Most organizations are currently looking for a scheduled scan to meet their compliance needs. Other players like Symantec and Trend Micro, FireEye, et cetera, are still providing the signature-based regular scheduled scans also, which is not available in CrowdStrike. That is one parameter that we feel should be there in CrowdStrike. CrowdStrike is only working on the dynamic or the files under execution. CrowdStrike is not scanning the static files. The product could be more accurate in terms of performance. We'd like to have a single-click recovery option. With some machines getting corrupted by malware, we need an easy way to start with a blank slate if things happen. That one feature should be there in the EDR.
John Trembly - PeerSpot reviewer
Provides a single dashboard, integrates well, and has predictive machine learning
Microsoft's new Azure Code Signing is causing a lot of issues for us with One Endpoint Security. We currently have two systems in operation, on-prem and SaaS, and many of the agents won't upgrade beyond version B11564 because these newer versions require Azure Code Signing compliance on the endpoint. If we are not up to date with our Windows updates, we don't have this compliance. Irrespective of the Windows version we are running, we have to apply patches to the machines, if the OS is not damaged, to make them compliant. After that, we can upgrade to the latest version of the respective agent. This process also applies to both Deep Security and Workload Security. I have two production servers: one for Windows and another for Mac. These servers are available in both on-premise and SaaS versions. Additionally, I have a test server that is located on-premises. The significant distinction with the SaaS version is the absence of a test server where I can install a new version. This means I can't allow the agents on it to upgrade and then perform testing. In contrast, with the production SaaS version of One Endpoint Security, I have numerous agents transitioning and coming online. It's essential that these agents upgrade to a newer version. Among these agents, there are five or six different versions, not counting the really old ones that have yet to upgrade due to ACS non-compliance. I can't leave the testing phase for an extended period because I still have outdated agents that need to be updated. These agents can't be left hanging while I wait to test the newest version that has just been released. New versions seem to come out every couple of months in the SaaS environment. In the past, when I solely used the on-premises version, I would review security bulletins for the SaaS version to identify any issues. I'm apprehensive about potential future situations involving this, primarily because the majority of our agents now operate on the cloud version. If a problem is discovered, rolling back on those agents would be challenging. It would require careful operation to revert them to a different version. The on-premises version of One Endpoint Security has an update function that allows us to manually update a bunch of servers. For example, if I just turned on a policy, I can force the agents to quickly download the policy and start following the update procedure or update settings. However, this function is not available in the SaaS version. This is because the system cannot communicate with the agent through the firewall. The SaaS version has an automatic update function and an update source entry in the update agents sub-menu, but it does not have a way to force agents to update. This is a problem because we cannot automatically update the agents. We have to manually log in to the machines and give them an update command. Currently, we have no choice but to wait until the agents find the updates themselves.
report
Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.
842,296 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Financial Services Firm
10%
Manufacturing Company
9%
Government
7%
Educational Organization
52%
Computer Software Company
9%
Manufacturing Company
5%
Financial Services Firm
4%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions that are very scalable, secure, and user-friendly. Cortex XDR by Palo Alto offers ...
How does Crowdstrike Falcon compare with Darktrace?
Both of these products perform similarly and have many outstanding attributes. CrowdStrike Falcon offers an amazing user interface that makes setup easy and seamless. CrowdStrike Falcon offers a cl...
How does Microsoft Defender for Endpoint compare with Crowdstrike Falcon?
The CrowdStrike solution delivers a lot of information about incidents. It has a very light sensor that will never push your machine hardware to "test", you don't have the usual "scan now" feature ...
What's the difference between Trend Micro Deep Security and Trend Micro Apex One?
Trend Micro Deep Security offers a lot of features. It guarantees security for your data center, cloud, and containers - all with a unified and comprehensive SaaS solution and without compromising ...
What do you like most about Trend Micro Apex One?
It is updated automatically without much intervention from our side. We can also get some reports easily.
What is your experience regarding pricing and costs for Trend Micro Apex One?
The pricing is very high, despite the solution’s capabilities.
 

Also Known As

CrowdStrike Falcon, CrowdStrike Falcon XDR, CrowdStrike Falcon Threat Intelligence, CrowdStrike Identity Protection, CrowdStrike Falcon Surface
Trend Micro Apex One, OfficeScan, Trend Micro OfficeScan
 

Overview

 

Sample Customers

Information Not Available
Atma Jaya Catholic University of Indonesia, A&W Food Services of Canada, Babou, Beth Israel Deaconess Care Organization (BO), DCI Donor Services, Evalueserve, Gulftainer, Hiroshima Prefectural Government, MEDHOST
Find out what your peers are saying about CrowdStrike Falcon vs. Trend Vision One Endpoint Security and other solutions. Updated: February 2025.
842,296 professionals have used our research since 2012.