No more typing reviews! Try our Samantha, our new voice AI agent.

Datto Endpoint Detection and Response (EDR) vs Trellix Endpoint Detection and Response (EDR) comparison

Why PeerSpot?
Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 9, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Ranking in Endpoint Detection and Response (EDR)
5th
Average Rating
8.6
Reviews Sentiment
6.7
Number of Reviews
122
Ranking in other categories
Endpoint Protection Platform (EPP) (4th), Extended Detection and Response (XDR) (3rd), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (1st)
Datto Endpoint Detection an...
Ranking in Endpoint Detection and Response (EDR)
47th
Average Rating
7.6
Reviews Sentiment
7.0
Number of Reviews
4
Ranking in other categories
No ranking in other categories
Trellix Endpoint Detection ...
Ranking in Endpoint Detection and Response (EDR)
21st
Average Rating
7.6
Reviews Sentiment
7.0
Number of Reviews
28
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of November 2026, in the Endpoint Detection and Response (EDR) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.8%, down from 3.8% compared to the previous year. The mindshare of Datto Endpoint Detection and Response (EDR) is 1.1%, down from 1.6% compared to the previous year. The mindshare of Trellix Endpoint Detection and Response (EDR) is 1.0%, down from 1.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Detection and Response (EDR) Mindshare Distribution
ProductMindshare (%)
Cortex XDR by Palo Alto Networks3.8%
Trellix Endpoint Detection and Response (EDR)1.0%
Datto Endpoint Detection and Response (EDR)1.1%
Other94.1%
Endpoint Detection and Response (EDR)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
reviewer2406663 - PeerSpot reviewer
Director at a computer software company with 11-50 employees
Effective risk response, easy deployment, and enhanced security
They use Datto EDR as part of the solutions that we supply Datto EDR has helped reduce overall security incident costs by fifteen percent. The ease of deployment has been good, and the responsiveness of the application to risks has been quite effective. The inclusion of web filtering would be…
CESARCASTRO - PeerSpot reviewer
Committee Of IT Cybersececurity at a energy/utilities company with 51-200 employees
Cross-site threat hunting has improved visibility and supports proactive incident response
I believe this is a product in evolution. I do not think it is a final tool to conduct forensics or information forensics of the incidents or information incidents that could arise in our network infrastructure. Trellix Endpoint Detection and Response (EDR) is interesting and is a very good entry point that has been evolving through the last years. In the next two months, I have a new contract, and we are pointing out to have an XDR solution with NDR and EDR together. I do not have enough time to do it because I am the manager. However, my coworkers do not understand it yet. I have a contract with a third-party company that is making reports around that, but also they do not have enough experience or enough utility of this. It would be interesting if I have a notification system from EDR. For example, if I am the manager, it would be interesting to have a warning, alarm, or something around that which could call me to get into the system and the dashboard to see what is happening. For example, if it is a high-level threat. However, most of them are just advisory or warnings. I do not enter the tool frequently. I guess I access it once every three months.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The user interface of the solution is sophisticated and straightforward."
"Cortex XDR lets us manage several clients from the same console, and its endpoint defense is more advanced than traditional antivirus."
"The solution allows us to make investigations. Other XDR solutions also provide similar capabilities but for investigation, Cortex XDR is better."
"Based on my experience, I would recommend Cortex XDR by Palo Alto Networks to other people."
"From a single pane of glass, you can easily manage all of your endpoints."
"In one single alert, we are getting the network telemetry, endpoint telemetry, email security telemetry, and proxy telemetry all in one single ticket, making it very easy."
"One of the things that I enjoy the most is using policy extensions. It's like having host firewalls to control USB connections. I think it's a wonderful tool to restrict use when connecting to our computers. Another important tool is Home Insights. That is an add-on to the Cortex solution. I like that because we can see all the vulnerabilities in the environment and control what assets are connected to our network."
"Palo Alto is constantly adding new features."
"The insight that the solution provides is the most valuable aspect. The security scanning they do is excellent."
"The most valuable feature of Datto EDR is the visibility of the endpoints."
"Datto Endpoint Detection and Response is a perfect product for endpoint security."
"The ease of deployment has been good."
"It is a stable solution. Stability-wise, I rate the solution a nine out of ten...I rate the solution's technical support team a nine and a half or ten out of ten."
"The product's initial setup phase was very straightforward since you just need to install it, and it works."
"Trellix Endpoint Detection and Response (EDR) offers endpoint protection and helps collect information while also allowing users to investigate malicious files in an IT environment...It is a stable solution...It is a scalable solution."
"It is a scalable solution and very easy to use."
"What we're using the most and what we found valuable in McAfee MVISION Endpoint Detection and Response are Web Control, Advanced Threat Protection, and Threat Prevention features."
"The dashboard makes it easier and more effective to analyze data."
"When Trellix detects some threats, the device is isolated in a quarantine zone for examination."
"The most valuable feature of the solution is its area for threat detection."
 

Cons

"In some cases, there are too many options for me, and it is a bit too hard to find some settings which I really need to implement."
"Being able to filter the events to see those that are related to the actual alert would save time spent by the engineer."
"It takes time to scan the servers and devices."
"I would like to see some additional features related to email protection included."
"They have the worst support, as a company, that I have ever worked with, as they are difficult to get a hold of and keep on the phone. They don't know what they are talking about when you get them on the phone. They don't like to respond to messages when you send them to them. They like to "research problems" for weeks on end, then pass you off to somebody else."
"Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth."
"It is not easy to sell Cortex XDR, not because it isn't a good tool. Its marketing needs to be improved."
"Although I would say this product is highly-rated, it could probably do more because nothing does everything that you want."
"The solution could improve by having more deployment methods."
"The deployment of the solution right now is terrible. We find it to be very bad. It could be improved enormously."
"The solution should allow the automation of playbooks."
"The inclusion of web filtering would be good."
"Although Trellix Endpoint Detection and Response (EDR) offers those detection, investigation and response capabilities, one area for improvement could be the expansion and increased flexibility of its APIs."
"The console has a lot of bugs, and it creates many issues."
"The solution's downside stems from the fact that Trellix Endpoint Detection and Response (EDR) and McAfee MVISION Endpoint are not combined into a single solution, so from an improvement perspective, they need to be combined into a single solution."
"The searching capabilities for the IOCs can be further improved"
"The graphical view for nodes must be increased."
"The solution lacks the ability to integrate with external platforms. In future releases of the solution, I would like to see the solution increase its integration capabilities with external platforms."
"When it comes to some unknown fileless attacks, the tool is not able to detect them properly, making it an area where improvements are required."
"The CPU utilization of the product is quite high compared to its competitors."
 

Pricing and Cost Advice

"We pay about $50,000 USD per year for a bundle that includes Cortex XDR."
"I feel it is fairly priced."
"The pricing seems fair, and I do like the licensing model. You use wherever they are, and it is elastic."
"We didn't have to pay any additional fee for the cloud instance. It just came with the renewal, which was nice."
"This is an expensive solution."
"It has a yearly renewal."
"It's the most expensive solution, but features-wise, it's quite strong. It's very good for protection, so the results are very good in the case of protection. I would rate it a two out of ten in terms of pricing."
"Every customer has to pay for a license because it doesn't work with what you get from a managed services provider."
"Datto Endpoint Detection and Response is not an expensive solution."
"There is an annual license to use this solution. The price of the solution can be expensive depending on the company."
"The cost is okay, compared to other products."
"The licensing costs attached to the solution are very easy to manage. There is a need to make yearly payments towards the licensing costs."
"On a scale of one to ten, where one is low and ten is high, I rate the solution's pricing an eight out of ten."
"The product’s pricing is reasonable."
"The pricing is always high."
"Speaking about the price, you must use the product to find the product's cost for you."
"Pricing is a problem in South Africa. It could be cheaper here. The rand-to-dollar exchange rate makes it expensive for us. A 25 dollar endpoint cost becomes quite significant when converted to rand."
"The price is reasonable."
report
Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.
920,929 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
14%
Outsourcing Company
12%
Construction Company
10%
Manufacturing Company
10%
Comms Service Provider
11%
Computer Software Company
7%
Manufacturing Company
7%
Retailer
6%
Financial Services Firm
14%
Outsourcing Company
8%
Construction Company
8%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business50
Midsize Enterprise21
Large Enterprise57
No data available
By reviewers
Company SizeCount
Small Business17
Midsize Enterprise3
Large Enterprise14
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
Ask a question
Earn 20 points
What is your experience regarding pricing and costs for McAfee MVISION Endpoint Detection and Response?
My experience with pricing, implementation costs and platform licensing has been positive. The solution offers a robu...
What needs improvement with McAfee MVISION Endpoint Detection and Response?
Although Trellix Endpoint Detection and Response (EDR) offers those detection, investigation and response capabilitie...
What is your primary use case for McAfee MVISION Endpoint Detection and Response?
The main use case for Trellix Endpoint Detection and Response (EDR) in my organization is for continuous monitoring o...
 

Comparisons

 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
Infocyte HUNT
McAfee MVISION EDR, MVISION EDR, MVISION Endpoint Detection and Response
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Check Point Software, PwC, Grant Thornton, AT&T, DHL, U.S. Department of Defense
Sutherland Global Services
Find out what your peers are saying about Datto Endpoint Detection and Response (EDR) vs. Trellix Endpoint Detection and Response (EDR) and other solutions. Updated: September 2026.
920,929 professionals have used our research since 2012.