Try our new research platform with insights from 80,000+ expert users

CrowdStrike Falcon vs Trellix Endpoint Detection and Response (EDR) comparison

CrowdStrike and Trellix are both solutions in the Endpoint Detection and Response (EDR) category. CrowdStrike is ranked #1 with an average rating of 8.6, while Trellix is ranked #22 with an average rating of 7.4. CrowdStrike holds a 16.0% mindshare in EDR, compared to Trellix’s 1.1% mindshare. Additionally, 96% of CrowdStrike users are willing to recommend the solution, compared to 83% of Trellix users who would recommend it.
CrowdStrike Falcon
Read 127 CrowdStrike Falcon reviews
  • 29,652 Views
  • 21,761 Comparison Views
96% willing to recommend
Trellix Endpoint Detection ...
Read 23 Trellix Endpoint Detection and Response (EDR) reviews
  • 1,728 Views
  • 1,103 Comparison Views
83% willing to recommend
 

Comparison Buyer's Guide

Download the report
Executive SummaryUpdated on Mar 9, 2025

CrowdStrike Falcon and Trellix Endpoint Detection and Response (EDR) compete in the EDR sector. CrowdStrike Falcon seems to have the upper hand due to its ease of deployment and customer service.

Features: CrowdStrike Falcon offers comprehensive threat detection, real-time response capabilities, and integration with various security tools. Trellix EDR features advanced analytics, extensive malware libraries, and automated response features. Users prefer Trellix for its robustness in handling complex threats.

Room for Improvement: CrowdStrike Falcon needs enhanced reporting capabilities, better scalability options, and more intuitive user interfaces. Trellix EDR requires a streamlined setup process, improved intuitive management tools, and enhanced customer support.

Ease of Deployment and Customer Service: CrowdStrike Falcon is noted for its straightforward deployment process and responsive customer service. Trellix EDR offers powerful tools but has a complex deployment process and users feel its customer support can be improved.

Pricing and ROI: CrowdStrike Falcon offers a clear pricing structure with a strong ROI, appreciated for its overall value and cost-effectiveness. Trellix EDR, although more expensive, provides substantial ROI due to its advanced features. Users are generally more satisfied with CrowdStrike’s pricing but acknowledge Trellix’s powerful features justify the higher cost for many.

DOWNLOAD THE COMPLETE REPORT
To learn more, read our detailed CrowdStrike Falcon vs. Trellix Endpoint Detection and Response (EDR) Report (Updated: April 2025).
Buyer's Guide
CrowdStrike Falcon vs. Trellix Endpoint Detection and Response (EDR)
April 2025
Download the complete report
Helped 851,604 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.4
CrowdStrike Falcon boosts efficiency and cost savings while enhancing security and performance without increasing system slowdown.
Sentiment score
5.8
Trellix EDR offers improved security and compliance but has mixed reviews on cost-effectiveness and management needs.
 

Customer Service

Sentiment score
7.1
CrowdStrike Falcon’s support is praised for responsiveness, but some report slow responses and inconsistency, especially on weekends.
Sentiment score
8.1
Trellix EDR customer service quality is inconsistent, with mixed reviews on response times, language barriers, and support effectiveness.
On a scale of one to ten, I would rate the technical support as a 10 because they resolve many issues for us.
The CrowdStrike team is very efficient; I would rate them ten out of ten.
For more quotes and insights, download the CrowdStrike Falcon report
I have contracted support and also have an operating control so I can get various types of support.
For more quotes and insights, download the Trellix Endpoint Detection and Response (EDR) report
MY
Sumanth Kandanuru - PeerSpot reviewerCESARCASTRO - PeerSpot reviewer
 

Scalability Issues

Sentiment score
7.9
CrowdStrike Falcon's scalability and cloud-based architecture support rapid deployment and seamless expansion for diverse business security needs.
Sentiment score
7.5
Trellix EDR provides scalable solutions for businesses of all sizes, despite some concerns about operational issues and performance.
Its scalability is good.
In terms of scalability, I find CrowdStrike to be stable, and I have not encountered any limitations with it.
When it comes to scalability, it is entirely based on premium models according to demand.
For more quotes and insights, download the CrowdStrike Falcon report
No quotes available
For more quotes and insights, download the Trellix Endpoint Detection and Response (EDR) report
Shubham Sinha. - PeerSpot reviewer
MY
Sumanth Kandanuru - PeerSpot reviewer
 

Stability Issues

Sentiment score
8.2
CrowdStrike Falcon offers stable, reliable performance across environments, managing endpoints effectively despite minor update challenges and connectivity issues.
Sentiment score
7.6
Trellix EDR is praised for stability and performance, but some browser and deployment issues have been noted.
I have never seen instability in the CrowdStrike tool.
We are following N-1 versions across our environment, which is stable.
I find CrowdStrike to be stable; there are no issues, although there was one instance when we had an outage for updating the Falcon Agent.
For more quotes and insights, download the CrowdStrike Falcon report
No quotes available
For more quotes and insights, download the Trellix Endpoint Detection and Response (EDR) report
Sumanth Kandanuru - PeerSpot reviewerShubham Sinha. - PeerSpot reviewer
MY
 

Room For Improvement

CrowdStrike Falcon users seek better third-party integration, intuitive UI, threat detection, support, pricing, and forensic tools.
Trellix EDR needs enhanced performance, integration, user interface, historical search, and streamlined management for better user experience.
Another concern is CrowdStrike's GUI. It changes annually, making it hard to work and find options.
Simplifying the querying process, such as using double quote queries or directly obtaining logs based on IP addresses or usernames, would be beneficial.
False positive reductions are needed.
For more quotes and insights, download the CrowdStrike Falcon report
I am seeing, for workflows, some sort of ethical hacking to test our environment.
For more quotes and insights, download the Trellix Endpoint Detection and Response (EDR) report
Shubham Sinha. - PeerSpot reviewerSumanth Kandanuru - PeerSpot reviewerBhim Arora - PeerSpot reviewerCESARCASTRO - PeerSpot reviewer
 

Setup Cost

CrowdStrike Falcon provides robust security at premium pricing, with flexible licensing but may be costly for some businesses.
Trellix EDR pricing starts at $25,000, offers flexibility for startups, but advanced features and retention fees can increase costs.
It is expensive compared to SentinelOne, but as the market leader, it is worth it.
For more quotes and insights, download the CrowdStrike Falcon report
No quotes available
For more quotes and insights, download the Trellix Endpoint Detection and Response (EDR) report
 

Valuable Features

CrowdStrike Falcon provides advanced, efficient threat protection with AI capabilities, ease of management, and comprehensive detection and prevention features.
Trellix Endpoint Detection and Response provides scalable, automated cybersecurity with real-time monitoring, threat visualization, and seamless integration capabilities.
The real-time analytics aspect of CrowdStrike performs well because we get all logs in real-time, with no delay, allowing us to take action immediately.
I can investigate by accessing the customer's host based on the RTR environment and utilize host search to know details for the past seven days, including logins, processes, file installations, malicious processes, and network connections.
CrowdStrike has improved our incident response capabilities.
For more quotes and insights, download the CrowdStrike Falcon report
I have spent efforts on training our managers and others - what can software do if the knowledge base is low?
For more quotes and insights, download the Trellix Endpoint Detection and Response (EDR) report
MY
Sumanth Kandanuru - PeerSpot reviewerHaroon-Rasheed - PeerSpot reviewerCESARCASTRO - PeerSpot reviewer
 

Categories and Ranking

CrowdStrike Falcon
Ranking in Endpoint Detection and Response (EDR)
1st
Average Rating
8.6
Reviews Sentiment
7.4
Number of Reviews
127
Ranking in other categories
Security Information and Event Management (SIEM) (6th), Endpoint Protection Platform (EPP) (2nd), Threat Intelligence Platforms (1st), Extended Detection and Response (XDR) (1st), Attack Surface Management (ASM) (1st), Identity Threat Detection and Response (ITDR) (3rd), AI-Powered Cybersecurity Platforms (1st)
Trellix Endpoint Detection ...
Ranking in Endpoint Detection and Response (EDR)
22nd
Average Rating
7.4
Reviews Sentiment
7.2
Number of Reviews
23
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of May 2025, in the Endpoint Detection and Response (EDR) category, the mindshare of CrowdStrike Falcon is 16.0%, up from 15.5% compared to the previous year. The mindshare of Trellix Endpoint Detection and Response (EDR) is 1.1%, up from 0.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Detection and Response (EDR)
 

Featured Reviews

Chintan-Vyas - PeerSpot reviewer
Easy to set up with good behavior-based analysis but needs a single-click recovery option
Most organizations are currently looking for a scheduled scan to meet their compliance needs. Other players like Symantec and Trend Micro, FireEye, et cetera, are still providing the signature-based regular scheduled scans also, which is not available in CrowdStrike. That is one parameter that we feel should be there in CrowdStrike. CrowdStrike is only working on the dynamic or the files under execution. CrowdStrike is not scanning the static files. The product could be more accurate in terms of performance. We'd like to have a single-click recovery option. With some machines getting corrupted by malware, we need an easy way to start with a blank slate if things happen. That one feature should be there in the EDR.
Read full review
CESARCASTRO - PeerSpot reviewer
Enhancements needed for security alerts while ongoing training strengthens defenses
This year, I am going to improve some tools to be installed or maybe acquire some services to better manage our web services and work with my coworkers. Application fiber also needs attention. Nowadays I am making applications that are publicly seen on the Internet. I need some protection, possibly multi-factor authentication improvements. I am seeing, for workflows, some sort of ethical hacking to test our environment. Knowledge of everything, not only the product - maybe some kind of alerts - needs to emerge. I see the current ones as very low-tier, and they must improve.
Read full review
report
See which vendors are best for you
Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.
See recommendations
851,604 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Financial Services Firm
10%
Manufacturing Company
9%
Government
7%
Computer Software Company
14%
Government
12%
Financial Services Firm
12%
Manufacturing Company
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions that are very scalable, secure, and user-friendly. Cortex XDR by Palo Alto offers ...
See all answers
How does Crowdstrike Falcon compare with Darktrace?
Both of these products perform similarly and have many outstanding attributes. CrowdStrike Falcon offers an amazing user interface that makes setup easy and seamless. CrowdStrike Falcon offers a cl...
See all answers
How does Microsoft Defender for Endpoint compare with Crowdstrike Falcon?
The CrowdStrike solution delivers a lot of information about incidents. It has a very light sensor that will never push your machine hardware to "test", you don't have the usual "scan now" feature ...
See all answers
What do you like most about McAfee MVISION Endpoint Detection and Response?
Trellix has a user-friendly interface.
See all answers
What is your experience regarding pricing and costs for McAfee MVISION Endpoint Detection and Response?
I haven't had any really great problems with pricing in the past two or three years.
See all answers
What needs improvement with McAfee MVISION Endpoint Detection and Response?
This year, I am going to improve some tools to be installed or maybe acquire some services to better manage our web services and work with my coworkers. Application fiber also needs attention. Nowa...
See all answers
 

Comparisons

Microsoft Defender for Endpoint vs CrowdStrike Falcon Logo
Microsoft Defender for Endpoint vs CrowdStrike Falcon
Compared 6% of the time
Kaspersky Endpoint Detection and Response vs CrowdStrike Falcon Logo
Kaspersky Endpoint Detection and Response vs CrowdStrike Falcon
Compared 5% of the time
Kaspersky Endpoint Security for Business vs CrowdStrike Falcon Logo
Kaspersky Endpoint Security for Business vs CrowdStrike Falcon
Compared 3% of the time
Microsoft Defender XDR vs CrowdStrike Falcon Logo
Microsoft Defender XDR vs CrowdStrike Falcon
Compared 3% of the time
Symantec Endpoint Security vs CrowdStrike Falcon Logo
Symantec Endpoint Security vs CrowdStrike Falcon
Compared 3% of the time
More CrowdStrike Falcon Competitors
Trellix Endpoint Security (ENS) vs Trellix Endpoint Detection and Response (EDR) Logo
Trellix Endpoint Security (ENS) vs Trellix Endpoint Detection and Response (EDR)
Compared 48% of the time
SentinelOne Singularity Complete vs Trellix Endpoint Detection and Response (EDR) Logo
SentinelOne Singularity Complete vs Trellix Endpoint Detection and Response (EDR)
Compared 6% of the time
Microsoft Defender for Endpoint vs Trellix Endpoint Detection and Response (EDR) Logo
Microsoft Defender for Endpoint vs Trellix Endpoint Detection and Response (EDR)
Compared 6% of the time
Trend Vision One vs Trellix Endpoint Detection and Response (EDR) Logo
Trend Vision One vs Trellix Endpoint Detection and Response (EDR)
Compared 5% of the time
Elastic Security vs Trellix Endpoint Detection and Response (EDR) Logo
Elastic Security vs Trellix Endpoint Detection and Response (EDR)
Compared 4% of the time
More Trellix Endpoint Detection and Response (EDR) Competitors
 

Product Reports

Buyer's Guide
CrowdStrike Falcon
May 2025
CrowdStrike Falcon reportDownload CrowdStrike Falcon product report
Buyer's Guide
Trellix Endpoint Detection and Response (EDR)
April 2025
Trellix Endpoint Detection and Response (EDR) reportDownload Trellix Endpoint Detection and Response (EDR) product report
 

Also Known As

CrowdStrike Falcon, CrowdStrike Falcon XDR, CrowdStrike Falcon Threat Intelligence, CrowdStrike Identity Protection, CrowdStrike Falcon Surface
McAfee MVISION EDR, MVISION EDR, MVISION Endpoint Detection and Response
 

Overview

CrowdStrike Falcon provides endpoint protection and threat intelligence using a cloud-based platform for real-time detection and response. Its minimal impact on system performance and ease of deployment are key benefits along with advanced logging and reporting for compliance and forensic analysis.

CrowdStrike Falcon is known for its efficacy in identifying malware, ransomware, and sophisticated cyber threats. The platform's cloud-native architecture and advanced AI capabilities ensure comprehensive endpoint visibility and rapid response times. Users appreciate the lightweight agent and seamless deployment process, along with detailed reporting features. Integration with security tools and efficient customer support are essential features.

What are the key features of CrowdStrike Falcon?

  • Real-time Threat Detection: Provides immediate threat identification and response.
  • Lightweight Agent: Minimal impact on system performance.
  • Cloud-native Architecture: Ensures flexibility and scalability.
  • Advanced AI Capabilities: Enhances threat detection and prevention.
  • Comprehensive Endpoint Visibility: Complete insight into endpoint activities.
  • Detailed Reporting: Facilitates compliance and forensic analysis.
  • Security Tool Integration: Seamless integration with other tools.
  • Efficient Customer Support: Robust support services.

What are the benefits or ROI of CrowdStrike Falcon?

  • Improved Threat Detection: Identifies sophisticated threats, reducing risk.
  • Enhanced System Performance: Lightweight agent ensures minimal disruption.
  • Faster Response Times: Swift reaction to incidents minimizes damage.
  • Better Compliance: Detailed logs meet regulatory requirements.
  • Streamlined Deployment: Easy to implement with minimal downtime.

In industries like finance, healthcare, and retail, CrowdStrike Falcon is often used for critical security due to its robust threat detection capabilities. Financial firms value its rapid response and detailed reporting for compliance, while healthcare providers appreciate the minimal system performance impact. Retailers benefit from its comprehensive endpoint visibility and integration with other security tools.

CrowdStrike

Reduce Alert Noise

Reduce the time to detect and respond to threats. Trellix EDR helps security analysts quickly prioritize threats and minimize potential disruption.

Do More with Existing Resources

Guided investigation automatically asks and answers questions while gathering, summarizing, and visualizing evidence from multiple sources—reducing the need for more SOC resources.

Low-Maintenance Cloud Solution

Cloud-based deployment and analytics enables your skilled security analysts to focus on strategic defense, instead of tool maintenance. Benefit from implementing the right solution for you.

Trellix
 

Sample Customers

Information Not Available
Sutherland Global Services
Buyer's Guide
CrowdStrike Falcon vs. Trellix Endpoint Detection and Response (EDR)
April 2025
Free Report: CrowdStrike Falcon vs. Trellix Endpoint Detection and Response (EDR)
Find out what your peers are saying about CrowdStrike Falcon vs. Trellix Endpoint Detection and Response (EDR) and other solutions. Updated: April 2025.
DOWNLOAD NOW
851,604 professionals have used our research since 2012.
See our CrowdStrike Falcon vs. Trellix Endpoint Detection and Response (EDR) report.
See our list of best Endpoint Detection and Response (EDR) vendors.

We monitor all Endpoint Detection and Response (EDR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.