Try our new research platform with insights from 80,000+ expert users

Lumu vs TrendAI Vision One – Cloud Security comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Feb 26, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Ranking in Extended Detection and Response (XDR)
6th
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
107
Ranking in other categories
Endpoint Protection Platform (EPP) (5th), Endpoint Detection and Response (EDR) (7th), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (2nd)
Lumu
Ranking in Extended Detection and Response (XDR)
16th
Average Rating
9.2
Reviews Sentiment
7.7
Number of Reviews
8
Ranking in other categories
Intrusion Detection and Prevention Software (IDPS) (10th), Network Detection and Response (NDR) (6th)
TrendAI Vision One – Cloud ...
Ranking in Extended Detection and Response (XDR)
19th
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
23
Ranking in other categories
Vulnerability Management (25th), Container Security (24th), Cloud Workload Protection Platforms (CWPP) (10th), Hybrid Cloud Computing Platforms (9th), Cloud Security Posture Management (CSPM) (17th), Cloud-Native Application Protection Platforms (CNAPP) (13th), Attack Surface Management (ASM) (14th), Cloud Infrastructure Entitlement Management (CIEM) (4th), Cloud Detection and Response (CDR) (5th), AI Security (10th)
 

Mindshare comparison

As of March 2026, in the Extended Detection and Response (XDR) category, the mindshare of Cortex XDR by Palo Alto Networks is 4.9%, down from 5.6% compared to the previous year. The mindshare of Lumu is 1.3%, up from 1.0% compared to the previous year. The mindshare of TrendAI Vision One – Cloud Security is 1.0%, up from 0.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Extended Detection and Response (XDR) Mindshare Distribution
ProductMindshare (%)
Cortex XDR by Palo Alto Networks4.9%
Lumu1.3%
TrendAI Vision One – Cloud Security1.0%
Other92.8%
Extended Detection and Response (XDR)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
JJ
Director, Information Technology at a educational organization with 201-500 employees
Constant monitoring and analysis boosts network security
There is always room for improvement. I am not giving it a perfect score because I am sure there is something that could be enhanced.Having some sort of certification or training, along with more periodic webinars might be helpful. Having a larger support network would be beneficial. Nobody I know has heard of Lumu, so they are in the same space as Darktrace or CrowdStrike, but people give blank stares. As the community grows for Lumu then that will improve, but that is not really a criticism of Lumu, they simply have not been around that long.
reviewer2793894 - PeerSpot reviewer
Platform Engineer Ii at a outsourcing company with 5,001-10,000 employees
Centralized cloud view has improved threat response and simplified compliance reporting
We are using Trend Vision One - Cloud Security for getting complete visibility of all the assets that exist within our cloud, and it helps us identify any sort of misconfigurations or fine-tuning that can be done to better our compliance. Trend Vision One - Cloud Security helps in onboarding all the cloud solutions or cloud providers that we have within our organization into a single dashboard, thereby providing greater visibility of all the assets. Earlier we used to have multiple dashboards to manage the same solution or capability, but with Trend Micro, we are able to get everything in a single pane of glass, benefiting our operations significantly. We are using the playbooks built into Trend Vision One - Cloud Security, which help us take a lot of response actions and bring automation capabilities into play. Trend Vision One - Cloud Security has positively impacted our organization by providing a single pane of glass visibility across all the cloud solutions that we have and reducing the number of threats we used to see earlier in the cloud. We are seeing that the number of cloud operations required earlier in terms of threat detection and response, and the time taken to detect a particular threat and take a response action, has considerably improved after onboarding Trend Micro.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"If any application performs suspicious activities, such as changing registries or modifying other applications, Cortex XDR detects and blocks the entire application."
"The initial setup isn't too bad."
"The best feature of Cortex XDR by Palo Alto Networks is that it collects logs from different sections such as the endpoint, the network, and the cloud, making it easy to investigate alerts, collect some of the investigation packages related to the infected machines, and provide live response."
"Cortex XDR by Palo Alto Networks should be a stable solution."
"The positive impacts I see from Cortex XDR by Palo Alto Networks include a complete 360-degree view of our security posture altogether, being a uniform platform where we are ingesting logs from multiple resources."
"The product has an intuitive dashboard."
"The ability to kind of stitch everything together and see the actual complete picture is very useful. I guess you'd call it a playbook. Some people call it the forensics analysis of what was happening on particular endpoints when they detected some malicious behavior, and what transpired before that to cause that. It is also very user friendly. The way they have done everything and integrated all the solutions that they've purchased over the years to make it a very seamless, effective product is very good. One thing about Palo Alto is that they take the products or services that they purchase and make them seamless for the end user as compared to some companies that purchase other companies and then just kind of have their products off to the side or keep different interfaces. Palo Alto doesn't do that."
"The initial setup is easy."
"The automated response to incidents works effectively out of the box, and the number of interfaces and platforms it can work with is impressive."
"It's been helpful for overall extended network visibility."
"You can access external links, playbooks, MITRE Matrix, and a lot of information."
"Most of it is automated, so I do not have to watch it to get alerts."
"Lumu protects against threats immediately and handles them in time."
"I like Lumu's simple user interface. When we deployed it, we got full access, allowing us to identify IP addresses on the network and connect machine names to users. It helped us identify and block threats via the firewall. I also appreciate the chat support and ticket closure process. We're currently reviewing network detection solutions, and my recommendations include Lumu, Sentinel, and a few others. Regarding functionality and user-friendliness, I would recommend Lumu over the others."
"The context provided by the tool is very complete, it includes the miter matrix, playbooks, links, hashes, and much more."
"The tool's support team helps partners resolve any problems with the product."
"The tech support is excellent. They really know their products. They also know a lot of about the integrations between different solutions."
"Vision One is versatile and can be integrated with many SIEMs. You're not limited to only one SIEM, such as Microsoft Sentinel. The API integrations are seamless, and we have all the documentation needed to integrate Vision One via API."
"The perfect package for all security platforms, providing more than any other endpoint solution."
"The product helps us understand our environment better."
"It has the best EDR functionality for cloud and typical endpoints."
"The most valuable part of Trend Vision One - Cloud Security is its dashboard, as it's simple. It's easy to manage, and you can better control the solution."
"Trend Vision One - Cloud Security has positively impacted our organization by providing a single pane of glass visibility across all the cloud solutions that we have and reducing the number of threats we used to see earlier in the cloud."
"Detection response and cloud conformity are valuable features."
 

Cons

"Cortex XDR by Palo Alto Networks could improve by offering remote management. It would be useful to look at the client's issue to fix it."
"The price could be a little lower."
"If they had pulse rate detection, it would be better."
"They've been having some issues with updating their endpoint agents, and it has been quite frustrating."
"The solution could improve by providing better integration with their own products and others."
"Managing the product should be easier."
"It'll help if customization was easier."
"It's more focused on network communication. If a customer wants to increase the level of protection and start working with documents, it's impossible to integrate these features into the system. It's more of a communication-oriented system than a content security-oriented system."
"The integration with different vendors and endpoints could be improved."
"Lumu's ability to discover threats is an area of concern where improvements are needed."
"It would be good if we could access the physical logs."
"Having a larger support network would be beneficial. Nobody I know has heard of Lumu, so they are in the same space as Darktrace or CrowdStrike, but people give blank stares."
"The reports need improvement."
"The free version is minimal compared to the full version."
"I am happy with the current features. However, one important one is to improve the reports."
"Nothing so far needs to be improved."
"Trend Vision One - Cloud Security should address threats automatically without having user input."
"Currently, we must procure and configure the server hardware independently, as we obtain the software separately from Trend Micro."
"Securing S3 using Trend Vision One - Cloud Security can cost too much. Trend Vision One - Cloud Security has a tool that requires lots of privileges. From my understanding, it's only for static application testing, so they need to add dynamic application testing, and there should be more collaboration with the application testing tools on the market. We have not used this product, and I don't know if they plan to decommission it or something. They should focus on application security because this tool's unique feature is multi-cloud support. However, they should improve integration with tools for these kinds of use cases, especially application security and dynamic scanning. For example, I would like it to support Dell SecureOps. I'd also like to see some enhancements to API gateway security."
"The tool should improve integration with trend products."
"The initial setup can be complex for the inexperienced."
"The firewall configuration should have been automated based on the understanding of the application, utilities, and protocols."
"Documentation on cloud architecture and job architecture would be helpful."
"Trend Vision One - Cloud Security could improve connections with different types of authentication and user groups concerning cloud services."
 

Pricing and Cost Advice

"I don't have any issues with the pricing. We are satisfied with the price."
"This is an expensive solution."
"The pricing seems fair, and I do like the licensing model. You use wherever they are, and it is elastic."
"It has reasonable pricing for the use cases it provides to the company."
"I feel it is fairly priced."
"I am using the Community edition."
"The solution has one subscription for endpoint protection and one subscription for detection and response. The two licenses combined give you the BRO version."
"Compared to CrowdStrike, Cortex XDR is an expensive solution."
"It is the cheapest solution we found."
"Compared to Lumu, other solutions are more expensive. SentinelOne was a bit cheaper, and another provider's price structure is unclear, but Lumu fit our budget nicely. SentinelOne's cost depends on the number of devices, and it might be similar to Lumu's, depending on deployment."
"The tool is available at a good price. The tool offers a good and competitive price for customers."
"Two years ago, it cost $200 for 20 credits, which was a high cost."
"The Trend Vision One pricing is reasonable."
"The pricing for Cloud One is reasonable because my costs scale up and down based on my infrastructure usage."
"Pricing for Trend Micro Cloud One Container Security in the corporate market is okay."
"It's a slightly expensive product."
"One year ago, Trend transitioned to a credit system for licensing, which has confused users."
"With everything I deal with, Trend Micro Cloud One's pricing is somewhere in the middle."
"I rate the solution's pricing a six out of ten."
report
Use our free recommendation engine to learn which Extended Detection and Response (XDR) solutions are best for your needs.
884,371 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
10%
Financial Services Firm
9%
Manufacturing Company
9%
Comms Service Provider
7%
Financial Services Firm
10%
Insurance Company
9%
Comms Service Provider
8%
Government
7%
Computer Software Company
9%
Manufacturing Company
8%
Comms Service Provider
7%
Performing Arts
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business44
Midsize Enterprise20
Large Enterprise47
By reviewers
Company SizeCount
Small Business5
Midsize Enterprise1
Large Enterprise4
By reviewers
Company SizeCount
Small Business12
Midsize Enterprise6
Large Enterprise9
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
What do you like most about Lumu?
Lumu protects against threats immediately and handles them in time.
What needs improvement with Lumu?
There is always room for improvement. I am not giving it a perfect score because I am sure there is something that co...
What is your primary use case for Lumu?
We use it as our managed SOC instead of contracting with an MSP. It coordinates endpoint and gives us a single pane o...
What do you like most about Trend Micro Cloud One Container Security?
Vision One is versatile and can be integrated with many SIEMs. You're not limited to only one SIEM, such as Microsoft...
What is your experience regarding pricing and costs for Trend Micro Cloud One Container Security?
The pricing for Trend Vision One - Cloud Security is very straightforward; we are using credits for calculating the s...
What needs improvement with Trend Micro Cloud One Container Security?
I would like to see more third-party integrations being added into Trend Vision One - Cloud Security, as it currently...
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
No data available
Trend Micro Cloud One , Cloud One Workload Security, Trend Micro Cloud One Container Security, Trend Micro Cloud One Application Security, Cloud One File Storage Security, Cloud One Network Security, Cloud One Conformity
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Information Not Available
Information Not Available
Find out what your peers are saying about Lumu vs. TrendAI Vision One – Cloud Security and other solutions. Updated: February 2026.
884,371 professionals have used our research since 2012.