DeepArmor vs Trellix Endpoint Security Platform comparison

Why PeerSpot?

SparkCognition and Trellix are both solutions in the Endpoint Protection Platform (EPP) category. SparkCognition is ranked #58, while Trellix is ranked #6 with an average rating of 8.0. SparkCognition holds a 0.5% mindshare in EPP, compared to Trellix’s 3.3% mindshare. Additionally, 88% of Trellix users are willing to recommend the solution.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Mar 22, 2026

Trellix Endpoint Security Platform and DeepArmor are two cybersecurity products with unique feature sets, competing to enhance security measures. While Trellix has strengths in deployment ease and integration abilities, DeepArmor leads with advanced AI-driven threat detection.

Features: Trellix Endpoint Security Platform offers robust integration, customizable security settings, and caters to complex enterprise needs. DeepArmor focuses on real-time threat detection, lightweight design, and cutting-edge AI capabilities.

Ease of Deployment and Customer Service: Trellix is recognized for streamlined deployment and responsive customer service, providing comprehensive implementation support. DeepArmor emphasizes minimal setup due to its cloud-based infrastructure with seamless cloud integration.

Pricing and ROI: Trellix requires a substantial initial setup cost, offering long-term value through extensive features. DeepArmor features lower upfront costs with efficient AI-driven threat management for quick ROI, appealing to cost-conscious organizations.

To learn more, read our detailed Endpoint Protection Platform (EPP) Report (Updated: October 2026).

Buyer's Guide

Endpoint Protection Platform (EPP)

October 2026

Download the complete report

Helped 920,769 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Mindshare comparison

As of November 2026, in the Endpoint Protection Platform (EPP) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.8%, up from 3.6% compared to the previous year. The mindshare of DeepArmor is 0.5%, up from 0.1% compared to the previous year. The mindshare of Trellix Endpoint Security Platform is 3.3%, down from 3.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Protection Platform (EPP) Mindshare Distribution
Product	Mindshare (%)
Cortex XDR by Palo Alto Networks	3.8%
Trellix Endpoint Security Platform	3.3%
DeepArmor	0.5%
Other	92.4%

Endpoint Protection Platform (EPP)

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

Muhammad Fahad

Manager Tech. & Support (Information Technology) at Texitech

Security needs improvement and email scanning features are not included

The email scanning feature is not available in DeepArmor. We cannot use this for email scanning. There are many options that are not available in DeepArmor. We cannot use separate applications for different internet applications or for different internet scanning. This is why we cannot use it. I would like to see additional features such as email scanning, which should be included, or malware detections, and other cybersecurity features should be included. It could also be more secure.

Read full review

AmitKumar22

Product Manager at Frontier Business systems

Strong endpoint protection has simplified compliance and reduced effort for large user environments

One of the best features of Trellix Endpoint Security Platform is its endpoint security, and I have been using it for the last four and a half to five years, so I can say this is one of the best EDR endpoint security solutions I have ever seen. The features that make Trellix Endpoint Security Platform stand out for me are ease of use and analytics, which I really appreciate the most. Trellix Endpoint Security Platform positively impacts my organization, ensuring we are compliant with SOC 2, HIPAA, and all other compliance requirements, so there are no issues with that.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"One of the things that I enjoy the most is using policy extensions. It's like having host firewalls to control USB connections. I think it's a wonderful tool to restrict use when connecting to our computers. Another important tool is Home Insights. That is an add-on to the Cortex solution. I like that because we can see all the vulnerabilities in the environment and control what assets are connected to our network."

"It has pretty much everything we need and works well within the Palo Alto ecosystem."

"Traps has drastically reduced our endpoint attack surface via advanced detection capabilities, sandboxing of never before seen programs, and by drastically limiting where executables can launch in the first place."

"The biggest positive impact I see from Cortex XDR by Palo Alto Networks is a significant reduction in the number of people required to manage it."

"We use it for malicious connections from malicious websites, to identify payloads that might be inside the traffic, to identify malicious processes or bugs that are running on the network, and any activities that tend to lead to data infiltration."

"The multi-layered approach to the product gives you confidence that it will stop exploits, ransomware, worms, or viruses from compromising endpoints, essentially providing peace of mind."

"Cortex XDR lets us manage several clients from the same console, and its endpoint defense is more advanced than traditional antivirus."

"If you are looking for security, mainly for advanced threat prevention from ransomware and malware attacks, I would recommend Cortex."

More Cortex XDR by Palo Alto Networks pros

"It is easy to install."

"The threat scanning is excellent. It uses predictive technology and I can utilize attack data to help us fine-tune our systems and network infrastructure. This protects us against current and future attacks."

"It's very stable and reliable."

"The solution provides dashboard control, so we can centrally monitor the entire status of our organization."

"The platform's most valuable features are AI capabilities and its quick updates."

"There are many other endpoint security solutions that are available today, but McAfee Suite has several distinct advantages when you make a procurement decision."

"In general, it is a really great product and I recommend it."

"MVISION offers decent protection."

"It can be deployed quickly, and it's scalable. Those are the two advantages of it."

More Trellix Endpoint Security Platform pros

Cons

"I think Cortex XDR by Palo Alto Networks could be improved by having tiered pricing by device, especially since we have not covered mobile devices because the cost is very high."

"While using Cortex, I noticed some aspects that could be improved, such as increasing the synchronization speed between XDR and Xnor."

"It's very time-consuming to log support issues and the people that answer the tickets aren't very knowledgeable."

"In some cases, there are too many options for me, and it is a bit too hard to find some settings which I really need to implement."

"They are charging for Network Traffic Analyzer (NTA) services, so if the per GB data could be provided at a certain level free of cost or at the same cost which the customer is taking for the entire bundle, that would be better."

"The solution should force customers to integrate with network traffic to see the full benefits of XDR."

"I don't like that they have different types of licenses. For example, if users select a license, they think they will have all the platforms they need to improve their network or security. But after some time, Palo Alto Networks changed their licensing, and some of the features that, for example, were free at the beginning now have a cost. I think the integration can be improved. For example, a lot of tools are just integrated through APIs."

"Traps doesn't work with McAfee. You need to remove McAfee to install Traps. This is very common, and its nothing that should be an issue. Some antivirus engines recognize Traps as an threat component, so maybe they need to shake hands somewhere."

More Cortex XDR by Palo Alto Networks cons

"The email scanning feature is not available in DeepArmor. We cannot use this for email scanning."

"Search feature could be made more user-friendly."

"We experienced some bad behavior when we first installed the product. The system also starts slowly in some instances. If for some reason this solution crashes, we could lose all our data."

"Sometimes when it runs in the background of the endpoint, the devices get slowed down for some software applications."

"The complexity of advanced modules can be improved."

"The way that signatures work when using this solution could be improved. They could be more user friendly. We would like the ability to select a client's signature from a menu or file share to save time."

"Tech support is not as helpful as they were in the past."

"I wouldn't recommend it to others because it's not secure enough."

"It would be nice if the solution were to allow not just on-cloud management, but on-premises, as well."

More Trellix Endpoint Security Platform cons

Pricing and Cost Advice

"In terms of the cost Cortex XDR by Palo Alto Networks is very expensive because we are a Mexican company and when you translate dollars to pesos the cost is very high. The solution is very expensive for Mexican companies. I understand that they have international prices, but I do not think it offsets the price enough for many companies in countries, such as Mexico. The amount it is reduced is not a massive percentage."

"The price is on the higher side, but it's okay."

"The pricing seems fair, and I do like the licensing model. You use wherever they are, and it is elastic."

"We pay about $50,000 USD per year for a bundle that includes Cortex XDR."

"It is present, but when compared to other competitive products, I would say it is not less expensive; however, when all of the other added values are considered, the price is reasonable."

"It has a higher cost than other solutions, like CrowdStrike or Microsoft’s EDR tools, but it reduces the cost of our operations because it’s a new generation antivirus tool."

"Our license will require renewal in August, after which the maintenance will continue as usual."

"It's the most expensive solution, but features-wise, it's quite strong. It's very good for protection, so the results are very good in the case of protection. I would rate it a two out of ten in terms of pricing."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"There are licensing fees."

"There is a one-year and a three-year license available for this solution, we are currently on a three-year license."

"They should reduce the cost or make it free, open-source software."

"Trellix Endpoint Security is neither a cheap nor an expensive solution."

"I think Trellix is more on the higher side of the market, just on a general scale, but I also think it depends on what particular package you choose."

"When comparing the solution to others it is a bit expensive. We are on a monthly license."

"It provides good value by striking a balance between cost-effectiveness and feature richness."

"Compared to Bitdefender, Trellix Endpoint Security is more expensive, but considering it comes with DLP, the solution's price is fine."

"It is not so cheap in comparison to Sophos and other solutions."

More Trellix Endpoint Security Platform pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.

See recommendations

920,769 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Comms Service Provider

14%

Outsourcing Company

12%

Construction Company

10%

Manufacturing Company

10%

No data available

Outsourcing Company

13%

Manufacturing Company

10%

Financial Services Firm

Construction Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	50
Midsize Enterprise	21
Large Enterprise	57

No data available

By reviewers
Company Size	Count
Small Business	68
Midsize Enterprise	39
Large Enterprise	67

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

See all answers

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

See all answers

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

See all answers

Ask a question

Earn 20 points

How does McAfee Endpoint Security compare with MVISION?

The flexible manageability of McAfee Endpoint Security is one of our favorite aspects of this solution. You can deplo...

See all answers

How does Crowdstrike Falcon compare with FireEye Endpoint Security?

The Crowdstrike Falcon program has a simple to use user interface, making it both an easy to use as well as an effec...

See all answers

What is your experience regarding pricing and costs for McAfee Endpoint Security?

I don't have visibility on pricing because it is negotiated by a different team, as I look after the technical side.

See all answers

Comparisons

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Compared 16% of the time

SentinelOne Singularity Endpoint vs Cortex XDR by Palo Alto Networks

Compared 5% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Symantec Endpoint Security vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

TrendAI Vision One vs Cortex XDR by Palo Alto Networks

Compared 2% of the time

More Cortex XDR by Palo Alto Networks Competitors

Microsoft Defender for Endpoint vs DeepArmor

Compared 22% of the time

CrowdStrike Falcon vs DeepArmor

Compared 16% of the time

ESET Endpoint Protection Platform vs DeepArmor

Compared 15% of the time

VIPRE Endpoint Security vs DeepArmor

Compared 7% of the time

Comodo Advanced Endpoint Protection vs DeepArmor

Compared 6% of the time

More DeepArmor Competitors

SentinelOne Singularity Endpoint vs Trellix Endpoint Security Platform

Compared 6% of the time

CrowdStrike Falcon vs Trellix Endpoint Security Platform

Compared 5% of the time

Symantec Endpoint Security vs Trellix Endpoint Security Platform

Compared 4% of the time

HP Wolf Security vs Trellix Endpoint Security Platform

Compared 3% of the time

Microsoft Defender for Endpoint vs Trellix Endpoint Security Platform

Compared 3% of the time

More Trellix Endpoint Security Platform Competitors

Product Reports

Buyer's Guide

Cortex XDR by Palo Alto Networks

October 2026

Download Cortex XDR by Palo Alto Networks product report

Buyer's Guide

Endpoint Protection Platform (EPP)

October 2026

Download DeepArmor product report

Buyer's Guide

Trellix Endpoint Security Platform

October 2026

Trellix Endpoint Security Platform report

Download Trellix Endpoint Security Platform product report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

No data available

McAfee Endpoint Security, McAfee Endpoint Protection, Intel Security Total Protection for Endpoint, McAfee Complete Endpoint Protection, Trellix Endpoint Security (ENS)

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

DeepArmor offers advanced cybersecurity solutions, specifically designed for businesses that require intelligent threat protection. Utilizing cutting-edge technology, it caters to both endpoint protection and network defense.

DeepArmor leverages machine learning and artificial intelligence to provide proactive security measures. These technologies enable accurate threat detection and swift action, minimizing risk and improving overall security posture. DeepArmor is suitable for enterprises seeking comprehensive defense against evolving cyber threats.

What are the notable features of DeepArmor?

Machine Learning: Enhances threat detection accuracy by learning from previous data.
AI-Powered Defense: Automates responses to emerging threats, reducing response times.
Behavioral Analysis: Identifies suspicious activities by analyzing user patterns.
Cloud-Based Management: Facilitates remote management and monitoring.

What benefits should users expect from DeepArmor?

Enhanced Security: Robust protection against sophisticated cyber attacks.
Cost Efficiency: Reduces potential losses from data breaches with preemptive measures.
Scalability: Easily adapts to growing business needs.
Operational Efficiency: Streamlines security processes through automation.

DeepArmor implementation is evident in industries like finance and healthcare, where data protection is paramount. In finance, it safeguards sensitive financial information, while in healthcare, it ensures compliance with protection regulations by securing patient records. The application of AI and machine learning across these fields strengthens defensive capabilities, aligning with industry-specific needs.

SparkCognition

Trellix Endpoint Security Platform offers essential features like centralized management, threat prevention, and encryption, facilitating seamless scaling and integration with other systems while prioritizing user security.

This comprehensive platform focuses on endpoint protection, antivirus capabilities, and malware defense. It enhances cybersecurity with data loss prevention, advanced threat detection, and AI-driven features for reliable protection without impacting performance. Central management and advanced reporting streamline integration and ease of use. Flexible policy deployment through the management console and its robust security measures, such as DLP and device control, further increase protection. Challenges include high CPU and memory usage affecting performance, a complex interface, and lengthy deployment. Third-party integration and Windows Hello support need improvement. Additional concerns involve improved threat detection and faster technical support responses.

What are the key features of Trellix Endpoint Security Platform?

Centralized Management: Allows seamless integration and scaling with consistent control across environments.
Threat Prevention: Provides comprehensive antivirus and malware protection to secure systems.
Encryption: Ensures data security with robust encryption techniques.
Advanced Reporting: Facilitates detailed insights and analysis for better decision-making.
AI-Driven Detection: Offers reliable threat detection without impacting system performance.

What benefits should users look for in reviews?

Comprehensive Protection: Offers extensive security measures for protecting digital environments.
Ease of Integration: Simplifies the process of incorporating into current systems and processes.
Flexible Policy Deployment: Supports adaptable policy management to meet diverse requirements.
Scalability: Enables growth while maintaining efficiency and security.
Robust Security Features: Provides advanced security measures like DLP and device control.

Trellix Endpoint Security Platform is widely implemented in industries such as banking and government for securing mobile and desktop devices. Its capabilities cover network security, device control, and remote access protection, catering to diverse environments by offering robust cybersecurity management against advanced threats.

Trellix

Sample Customers

CBI Health Group, University Honda, VakifBank

AV-Comparatives

inHouseIT, Seagate Technology

Buyer's Guide

Endpoint Protection Platform (EPP)

October 2026

Download Free Report

Find out what your peers are saying about SentinelOne, Microsoft, CrowdStrike and others in Endpoint Protection Platform (EPP). Updated: October 2026.

DOWNLOAD NOW

920,769 professionals have used our research since 2012.

See our list of best Endpoint Protection Platform (EPP) vendors.

We monitor all Endpoint Protection Platform (EPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.