Try our new research platform with insights from 80,000+ expert users
Trellix Endpoint Detection and Response (EDR) Logo

Trellix Endpoint Detection and Response (EDR) Reviews

Vendor: Trellix
3.7 out of 5
Leave a review

What is Trellix Endpoint Detection and Response (EDR)?

Reduce Alert Noise

Reduce the time to detect and respond to threats. Trellix EDR helps security analysts quickly prioritize threats and minimize potential disruption.

Get the Trellix Endpoint Detection and Response (EDR) Buyer's Guide and find out what your peers are saying about Trellix Endpoint Detection and Response (EDR), CrowdStrike Falcon, Microsoft Defender for Endpoint and more!
Trellix Endpoint Detection and Response (EDR) is the #23 ranked solution in EDR tools. PeerSpot users give Trellix Endpoint Detection and Response (EDR) an average rating of 7.4 out of 10. Trellix Endpoint Detection and Response (EDR) is most commonly compared to CrowdStrike Falcon: Trellix Endpoint Detection and Response (EDR) vs CrowdStrike Falcon. Trellix Endpoint Detection and Response (EDR) is popular among the large enterprise segment, accounting for 53% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a financial services firm, accounting for 12% of all views.
Buyer's Guide
Trellix Endpoint Detection and Response (EDR)
February 2026
Get the report
Helped 884,797 peers since 2012

Featured Trellix Endpoint Detection and Response (EDR) reviews

Read more reviews

Trellix Endpoint Detection and Response (EDR) mindshare

As of March 2026, the mindshare of Trellix Endpoint Detection and Response (EDR) in the Endpoint Detection and Response (EDR) category stands at 1.1%, up from 0.8% compared to the previous year, according to calculations based on PeerSpot user engagement data.
Endpoint Detection and Response (EDR) Mindshare Distribution
ProductMindshare (%)
Trellix Endpoint Detection and Response (EDR)1.1%
CrowdStrike Falcon8.4%
Microsoft Defender for Endpoint6.9%
Other83.6%
Endpoint Detection and Response (EDR)

PeerResearch reports based on Trellix Endpoint Detection and Response (EDR) reviews

TypeTitleDate
CategoryEndpoint Detection and Response (EDR)Mar 24, 2026Download
ProductReviews, tips, and advice from real usersMar 24, 2026Download
ComparisonTrellix Endpoint Detection and Response (EDR) vs CrowdStrike FalconMar 24, 2026Download
ComparisonTrellix Endpoint Detection and Response (EDR) vs SentinelOne Singularity CompleteMar 24, 2026Download
ComparisonTrellix Endpoint Detection and Response (EDR) vs Microsoft Defender for EndpointMar 24, 2026Download
Suggested products
TitleRatingMindshareRecommending
CrowdStrike Falcon4.38.4%97%138 interviewsAdd to research
Microsoft Defender for Endpoint4.16.9%95%212 interviewsAdd to research
 
 
Key learnings from peers
Last updated Mar 22, 2026

Valuable Features

Trellix Endpoint Detection and Response (EDR) excels in threat intelligence and management with its user-friendly interface. Its highlights include guided analytics, advanced threat protection, ransomware detection, real-time monitoring, process tree analysis, and automated isolation actions. Integration with various systems, central console for endpoint management, scalability, and strong visualization of cyberattacks enhance its value. Behavioral monitoring, policy configuration, and comprehensive threat hunting capabilities strengthen the security posture significantly.
  • "Trellix Endpoint Detection and Response (EDR) does everything; it saves time, it saves money, and of course, it provides peace of mind."
  • "Trellix Endpoint Detection and Response (EDR) has positively impacted my organization by reducing business risk, facilitating faster incident response, and improving endpoint security posture."
  • "Trellix Endpoint Detection and Response (EDR) has positively impacted my organization by reducing business risk, facilitating faster incident response, and improving endpoint security posture."

Room for Improvement

Trellix Endpoint Detection and Response (EDR) requires better integration with other platforms for a unified experience. The dashboard and alerting system need enhancements for user-friendliness and rapid threat detection. High CPU and memory consumption are concerns. Improved technical support and more effective centralized policy enforcement are needed. Spanish users request a dedicated knowledge base. Enhancements in AI-driven threat analysis and workflow automation are essential. Compatibility with various operating systems should be prioritized.
  • "Initially, I was using it on servers, but it consumes a lot of resources on servers."
  • "Customer support for Trellix Endpoint Detection and Response (EDR) specifically is not good; it is slow and lacks sufficient engineers to attend to client cases effectively."
  • "Customer support for Trellix Endpoint Detection and Response (EDR) specifically is not good; it is slow and lacks sufficient engineers to attend to client cases effectively."

ROI

Trellix Endpoint Detection and Response enhances IT support efficiency, allows quick investigations, and helps reduce compliance burden by preventing breaches. It maintains customer trust and brand reputation. Some experience measurable returns, especially in regulated environments due to reduced detection and containment times. Others appreciate its cost-effectiveness and visibility but emphasize the need for technical expertise. Some find ROI insufficient and see it primarily as a security measure.

Pricing

Trellix Endpoint Detection and Response (EDR) pricing is generally perceived as reasonable, especially for midsize businesses. The cost typically ranges from $25,000 to $30,000 for six hundred users, with a perpetual license that is renewed annually. Pricing is tier-based, with options for additional costs for extended data retention and advanced features. Though competitive, it may be considered high compared to some solutions and can be affected by exchange rates in specific regions.
  • "Pricing is a problem in South Africa. It could be cheaper here. The rand-to-dollar exchange rate makes it expensive for us. A 25 dollar endpoint cost becomes quite significant when converted to rand."
  • "The price is reasonable."
  • "The pricing is always high."

Popular Use Cases

Organizations primarily utilize Trellix Endpoint Detection and Response (EDR) for endpoint protection and threat hunting. They employ it to identify unknown threats, investigate malicious files, and integrate threat intelligence. Trellix EDR assists in managing threat events, performing forensic investigations, and enhancing endpoint telemetry visibility. It detects attack patterns, provides signature and behavior analysis, and consolidates information into MVISION Insights for threat intelligence, benefiting sectors like banking, government, and energy.

Service and Support

Customers find Trellix Endpoint Detection and Response customer service resource-intensive and sometimes slow, with language barriers in support. Recent mergers have reportedly decreased service quality. Some rate technical support highly, while others find it inadequate, requiring mandatory OEM support. Comparison with competitors shows varied experiences; some find it better than Symantec. There are concerns about insufficient engineers and slow responses, although numerous support channels exist for issue escalation.

Deployment

Trellix EDR's initial setup varies in complexity. Some find it straightforward and quick, especially in cloud deployments, while others experience challenges, particularly with updates and policy enforcement. Timeframes and resource needs differ based on deployment environments, from small setups taking days to larger ones spanning months. Ease is subjective, with seasoned experts finding it simpler compared to beginners. Involving third-party tools or services can optionally expedite the setup process.

Scalability

Several users find Trellix Endpoint Detection and Response (EDR) scalable with cloud-based architecture aiding scalability across small to enterprise environments. Some report ease of scalability, accessing up to many thousands of nodes without significant issues. Users from various sectors, including finance, note its performance can vary. Large deployments are supported, though some experience challenges under high loads or require additional managerial resources. EDR is suitable for diverse business sizes, accommodating varied user requirements.

Stability

Users consider Trellix Endpoint Detection and Response stable, with many rating its stability between eight and nine out of ten. Some encountered resource consumption issues on older systems, but improvements in newer versions have enhanced performance. Good internet connectivity supports effective function. Occasional deployment issues arise from partners, not Trellix itself. While some mention architectural changes causing concerns, most find stability satisfactory. A few report no problems, particularly appreciating threat reduction effectiveness.
These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.
Download our Trellix Endpoint Detection and Response (EDR) Buyer's Guide for additional reliable information.

Review data by company size

By reviewers
Company SizeCount
Small Business11
Midsize Enterprise3
Large Enterprise8
By reviewers
By visitors reading reviews
Company SizeCount
Small Business92
Midsize Enterprise57
Large Enterprise170
By visitors reading reviews

Top industries

By visitors reading reviews
Financial Services Firm
12%
Government
10%
Computer Software Company
9%
Manufacturing Company
8%
University
6%
Energy/Utilities Company
6%
Comms Service Provider
6%
Educational Organization
5%
Outsourcing Company
4%
Healthcare Company
4%
Insurance Company
3%
Construction Company
3%
Marketing Services Firm
3%
Performing Arts
2%
Non Profit
2%
Retailer
2%
Aerospace/Defense Firm
2%
Media Company
2%
Transportation Company
2%
Recreational Facilities/Services Company
1%
Wholesaler/Distributor
1%
Logistics Company
1%
Consumer Goods Company
1%
Real Estate/Law Firm
1%
Legal Firm
1%
Hospitality Company
1%
Pharma/Biotech Company
1%

Compare Trellix Endpoint Detection and Response (EDR) with alternative products

Go!

Learn more about Trellix Endpoint Detection and Response (EDR)

Do More with Existing Resources

Guided investigation automatically asks and answers questions while gathering, summarizing, and visualizing evidence from multiple sources—reducing the need for more SOC resources.

Low-Maintenance Cloud Solution

Cloud-based deployment and analytics enables your skilled security analysts to focus on strategic defense, instead of tool maintenance. Benefit from implementing the right solution for you.

Trellix Endpoint Detection and Response (EDR) was previously known as McAfee MVISION EDR, MVISION EDR, MVISION Endpoint Detection and Response.

Trellix Endpoint Detection and Response (EDR) customers

Sutherland Global Services

Related questions

  • 331
What is the biggest difference between EPP and EDR products?
  • 65
What is the difference between EDR and traditional antivirus?
  • 38
What is your recommendation for a 5-star EDR with low resource consumption for a financial services company?
  • 42
Which is the best EDR for a logistics company with 500-1000 employees?
  • 81
What is the best EDR or XDR product for a company with 9000 employees?
  • 116
What to choose: an endpoint antivirus, an EDR solution or both?
  • 188
Do we need to use both EDR and Antivirus (AV) solutions for better protection of IT assets?
  • 52
How does EternalBlue work?
  • 50
What are the best on-premise Endpoint Security solutions for a Tech Services company with 10,000 employees?
  • 133
Which is better for Endpoint Security: EDR or XDR solutions?

Product Categories

Product Categories
Endpoint Detection and Response (EDR)

Popular Comparisons

Popular Comparisons
CrowdStrike Falcon vs Trellix Endpoint Detection and Response (EDR) Logo
CrowdStrike Falcon vs Trellix Endpoint Detection and Response (EDR)
Microsoft Defender for Endpoint vs Trellix Endpoint Detection and Response (EDR) Logo
Microsoft Defender for Endpoint vs Trellix Endpoint Detection and Response (EDR)
Cortex XDR by Palo Alto Networks vs Trellix Endpoint Detection and Response (EDR) Logo
Cortex XDR by Palo Alto Networks vs Trellix Endpoint Detection and Response (EDR)
SentinelOne Singularity Complete vs Trellix Endpoint Detection and Response (EDR) Logo
SentinelOne Singularity Complete vs Trellix Endpoint Detection and Response (EDR)
Fortinet FortiEDR vs Trellix Endpoint Detection and Response (EDR) Logo
Fortinet FortiEDR vs Trellix Endpoint Detection and Response (EDR)
Huntress Managed EDR vs Trellix Endpoint Detection and Response (EDR) Logo
Huntress Managed EDR vs Trellix Endpoint Detection and Response (EDR)
Elastic Security vs Trellix Endpoint Detection and Response (EDR) Logo
Elastic Security vs Trellix Endpoint Detection and Response (EDR)
Trellix Endpoint Security Platform vs Trellix Endpoint Detection and Response (EDR) Logo
Trellix Endpoint Security Platform vs Trellix Endpoint Detection and Response (EDR)
TrendAI Vision One vs Trellix Endpoint Detection and Response (EDR) Logo
TrendAI Vision One vs Trellix Endpoint Detection and Response (EDR)
Check Point Harmony Endpoint vs Trellix Endpoint Detection and Response (EDR) Logo
Check Point Harmony Endpoint vs Trellix Endpoint Detection and Response (EDR)
TrendAI Vision One – Endpoint Security vs Trellix Endpoint Detection and Response (EDR) Logo
TrendAI Vision One – Endpoint Security vs Trellix Endpoint Detection and Response (EDR)
Cynet vs Trellix Endpoint Detection and Response (EDR) Logo
Cynet vs Trellix Endpoint Detection and Response (EDR)
Lookout vs Trellix Endpoint Detection and Response (EDR) Logo
Lookout vs Trellix Endpoint Detection and Response (EDR)
WatchGuard EPDR vs Trellix Endpoint Detection and Response (EDR) Logo
WatchGuard EPDR vs Trellix Endpoint Detection and Response (EDR)
VMware Carbon Black Endpoint vs Trellix Endpoint Detection and Response (EDR) Logo
VMware Carbon Black Endpoint vs Trellix Endpoint Detection and Response (EDR)
See all alternatives
 
Trellix Endpoint Detection and Response (EDR) Reviews Summary
Author infoRatingReview Summary
Consulting Systems Engineer at Boomslang Tech3.0I’ve used Trellix EDR for four years; it’s stable, scalable, improves telemetry, reduces risk, and speeds response through behavioral alerts and process-tree analysis. However, I rate it 6/10 due to weak integrations, clunky workflows, noisy alerts, and slow support.
Committee Of IT Cybersececurity at a energy/utilities company with 51-200 employees4.0I've used Trellix EDR for six years; it's useful across our multi-site energy network, though managing alerts is overwhelming. It needs better notifications and usability, but it's evolving, and I plan broader training and possibly integrating XDR soon.
Security Administrator at a insurance company with 1,001-5,000 employees4.0I've used Trellix EDR for 16 years, valuing its user-friendliness, reporting, and threat hunting that saves time. It's resource-intensive on servers but easy to manage elsewhere. I'd like more AI integration and automated tasks.
Committee Of IT Cybersececurity at a energy/utilities company with 51-200 employees2.5I use Trellix EDR for endpoint security and continue to seek improvements, including enhanced multi-factor authentication and alerting systems. Although crucial for security, it provides no ROI. Previously, I used McAfee, and I consider upgrading support.
Senior Cyber Security Specialist Architect at a tech consulting company with 11-50 employees4.0I have used Trellix EDR to enhance the security of endpoints and servers with valuable features like behavior monitoring, DLP, and improved automation. However, I wish it would evolve into an XDR with unified management and endpoint activation.
Security Consultant at Trinexia3.5Trellix Endpoint Detection and Response excels in investigative capabilities, resembling a layered approach for comprehensive detection and response. It rapidly resolves attacks, protects data, and ensures compliance, although it needs to build trust and improve its market image.
Head of Data Link at Telecom Egypt4.5Trellix Endpoint Detection and Response (EDR) provides advanced threat detection and extensive attack coverage. Despite its effectiveness, improvements are needed in administrative scalability and user interface. It's highly beneficial with deep insights but requires technical expertise to manage.
IT Management Specialist at a computer software company with 10,001+ employees4.0We use Trellix Endpoint Detection and Response for threat hunting due to its valuable antivirus and DLP features. Despite needing better technical support, particularly with browser plug-ins, we switched from McAfee to Trellix for its price and capabilities.