OpenText Core Endpoint Protection vs Trellix Endpoint Security Platform comparison

Why PeerSpot?

OpenText and Trellix are both solutions in the Endpoint Protection Platform (EPP) category. OpenText is ranked #32, while Trellix is ranked #6 with an average rating of 8.0. OpenText holds a 1.9% mindshare in EPP, compared to Trellix’s 3.3% mindshare. Additionally, 89% of OpenText users are willing to recommend the solution, compared to 88% of Trellix users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Mar 29, 2026

Trellix Endpoint Security Platform and OpenText Core Endpoint Protection are prominent contenders in the cybersecurity domain, offering advanced endpoint protection solutions. Trellix holds a slight edge due to its comprehensive feature set and robust management capabilities.

Features: Trellix Endpoint Security Platform provides comprehensive security measures such as robust access protection, centralized management through ePO, and advanced integration capabilities like AI and quick updates. It also includes strong encryption and data loss prevention, facilitating multifunctionality and ease of use. OpenText Core Endpoint Protection focuses on lightweight operations with AI functionality, low resource consumption, and emphasizes stable performance and cloud integration.

Room for Improvement: Trellix Endpoint Security experiences challenges with high resource demands, complex configuration, and the need for better integration with other platforms like FireEye. It requires enhanced automation, faster response times, better documentation, and improved technical support. For OpenText Core Endpoint Protection, there is room for improvement in threat detection capabilities, reporting features, and customer support, with a particular need for enhanced analytics and phishing protection.

Ease of Deployment and Customer Service: Trellix Endpoint Security supports diverse deployment options, including on-premises, hybrid, and cloud environments, with strong customer service and efficient technical support. OpenText Core Endpoint Protection primarily offers cloud and hybrid deployments, known for ease of use and quick implementation, though its customer service and technical support could benefit from improvements in response time and solution depth.

Pricing and ROI: Trellix Endpoint Security adopts a moderate pricing strategy that balances feature richness with cost-effectiveness, offering substantial ROI through lower integration and deployment costs. OpenText Core Endpoint Protection is less expensive than competitors like SentinelOne and provides significant management and integration cost savings, backed by a straightforward pricing model and long-term economic benefits.

To learn more, read our detailed OpenText Core Endpoint Protection vs. Trellix Endpoint Security Platform Report (Updated: September 2026).

Buyer's Guide

OpenText Core Endpoint Protection vs. Trellix Endpoint Security Platform

September 2026

Download the complete report

Helped 920,929 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Mindshare comparison

As of November 2026, in the Endpoint Protection Platform (EPP) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.8%, up from 3.6% compared to the previous year. The mindshare of OpenText Core Endpoint Protection is 1.9%, up from 0.9% compared to the previous year. The mindshare of Trellix Endpoint Security Platform is 3.3%, down from 3.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Protection Platform (EPP) Mindshare Distribution
Product	Mindshare (%)
Cortex XDR by Palo Alto Networks	3.8%
Trellix Endpoint Security Platform	3.3%
OpenText Core Endpoint Protection	1.9%
Other	91.0%

Endpoint Protection Platform (EPP)

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

reviewer2584380

vCIO At Grove Networks Inc. at a computer software company with 11-50 employees

Improving threat detection is critical for enhanced protection

We use Webroot Business Endpoint Protection as a NextGen antivirus solution for our clients. It's included in the contract we have with our clients as a cost-effective option for antivirus protection Webroot Business Endpoint Protection is cost-effective for rolling it out to all of our clients,…

Read full review

AmitKumar22

Product Manager at Frontier Business systems

Strong endpoint protection has simplified compliance and reduced effort for large user environments

One of the best features of Trellix Endpoint Security Platform is its endpoint security, and I have been using it for the last four and a half to five years, so I can say this is one of the best EDR endpoint security solutions I have ever seen. The features that make Trellix Endpoint Security Platform stand out for me are ease of use and analytics, which I really appreciate the most. Trellix Endpoint Security Platform positively impacts my organization, ensuring we are compliant with SOC 2, HIPAA, and all other compliance requirements, so there are no issues with that.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Cortex is the best tool for endpoint detection, and I have used it to verify hashes or domains to identify malicious activity, trigger playbooks that automate and gather endpoint logs, block malicious processes, and update incident tickets, showcasing end-to-end processes with automation in investigation and reducing the analysis workflow."

"Cortex XDR by Palo Alto Networks has helped us a lot with securing the whole environment and the whole IT structure, giving us full knowledge of what is happening on the client and enabling us to take action right away from a single point for managing security operations on the hosts."

"The positive impacts I see from Cortex XDR by Palo Alto Networks include a complete 360-degree view of our security posture altogether, being a uniform platform where we are ingesting logs from multiple resources."

"The solution is a new generation XDR that has a lot of artificial intelligence modules."

"We switched because there were a lot of added features with Palo Alto that Check Point didn't have, and it was an upgrade for us."

"If the user leaves our premises or network, Palo Alto Traps will still be on that endpoint and will still apply our policies."

"It'll not slow down your system when compared to others."

"The policy configuration is great, the granularity of policies that are available is very helpful, it is straightforward to set up, and it has pretty much everything we need and works well within the Palo Alto ecosystem."

More Cortex XDR by Palo Alto Networks pros

"Their policy management, their cloud-based dashboard and user interface are very easy to navigate."

"Customer Service: Top-of-the-line; the busy community as well. Technical Support: Top-of-the-line; the busy community as well."

"It is very light, it is the only solution that can be installed on a machine that already has an antivirus, and it is a pretty complete solution."

"The traffic security monitoring, traffic application access feature called the agent, the main feature which is the endpoint security feature are the ones I found valuable. And it also had the in branch security in kind of SD WAN, good three hundred and sixty protection. It is specific and there is ease of deployment also present."

"Webroot pioneered integration of novel concepts in endpoint protection."

"The main reason we had Webroot is that it was cost-effective for our clients."

"The ability to generate profiles specific to both business groups and organizations has made managing nearly 1000 endpoints very simple."

"There aren't any features that really stand out — I just want it to keep malware out of my system. To date, I haven't had any malware in my system."

More OpenText Core Endpoint Protection pros

"The seamless deployment is very valuable."

"The manageability of the product itself is its most valuable aspect."

"The most valuable feature of Trellix Endpoint Security is its extensive customization capability, which allows me to create and deploy policies autonomously, suiting my individual needs."

"The setup is not that complex. It takes five to ten minutes to set up."

"I like trap prevention DNS and threat prevention."

"We can manage everything from the central console and it is very easy."

"The solution offers very good endpoint security."

"Trellix integrates well with most SIEM and data classification solutions."

More Trellix Endpoint Security Platform pros

Cons

"The only issues that we have are, one the cost, two the dashboard is not very intuitive, even though you can drill down within the dashboard, we usually have to gather information from other sources to determine locations and if its a false positive."

"A better pricing plan would make this product more competitive."

"Cortex XDR by Palo Alto Networks can improve mobile integration to allow access to the console."

"The dashboard could use some significant improvement, just making it more useful with more information. It has a limited amount of information right now. It is customizable, but I'd love to see a better out-of-box dashboard."

"The encryption is not up to the mark."

"The solution should enhance the ADR and reporting."

"I would rate it an 8 rather than a 10 mainly because there is still room to improve the user experience around complex investigations, including alert tuning and third-party integration."

"There are some default policies which sometimes affect our applications and cause them to run around. In the hotel industry, we use a different type of data versus Oracle and SQL. By default, there are some policies which stop us from running properly. Because of this, the support level is also not that strong. We have to wait to get a results."

More Cortex XDR by Palo Alto Networks cons

"Usually, when it comes to reliability, McAfee and Norton are at 99 percent. Webroot's percentage is lower. It is 94% reliable in terms of what it catches, but you're trading that percentage for customer satisfaction because your computer isn't being constantly told that it just blocked something, or it just did something."

"Its detection capability for certain attacks should be improved. It should have better and wider detection for certain malware attacks. It could also have some sort of RMN."

"Reporting system could be improved."

"The console spins up relatively slowly, and some of the configuration items are obscure (e.g., reporting back one time per day is a default setting) and need to be tweaked."

"One of the biggest pain points is that it's not really ransomware-oriented. They will be able to catch some, but that's where Sentinel One is a better player compared to Webroot."

"The reporting is the weakest part of the Webroot console. Frequently, I export to Excel to massage something into it to pass on to others."

"It would be great if there was a feature which would allow you to scan an individual file on an endpoint user's computer."

"Webroot used to be really good when they first came out, but now they've completely fallen behind, sadly."

More OpenText Core Endpoint Protection cons

"The solution could provide open XDR in addition to EDR."

"The only challenge we found is the integration with its product modules."

"What needs improvement in Trellix Endpoint Security is the reduction of resource consumption by the scanning feature. There should be daily signature updates for protection."

"So far, McAfee MVISION Endpoint ticks off all of our boxes, but its pricing could always be better."

"I'd like to see the searches enhanced because when I hand over the product to someone without experience, it should be user-friendly to them as well."

"One thing I could have used was a more detailed description of the HIPS signatures."

"The customer support is the worst part of Trellix Endpoint Security Platform. They do not support, they do not reply on time, and they take a lot of time when they have a ticket open."

"The DAC (Dynamic Application Containment) component of this product needs improvement."

More Trellix Endpoint Security Platform cons

Pricing and Cost Advice

"Cortex XDR’s pricing is very reasonable."

"The cost of Cortex XDR by Palo Alto Networks is $55 to $90 USD per endpoint per month."

"Its pricing is kind of in line with its competitors and everybody else out there."

"It's the most expensive solution, but features-wise, it's quite strong. It's very good for protection, so the results are very good in the case of protection. I would rate it a two out of ten in terms of pricing."

"Our customers have expressed that the price is high."

"The return on investment is from the user side because we have seen the performance of it increase the delivery time of the product if we are using too many web-based and on-premise applications. In indirect ways, we saw the return of investment in terms of performance and user satisfaction increase."

"I don't have any issues with the pricing. We are satisfied with the price."

"Compared to CrowdStrike, Cortex XDR is an expensive solution."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"Work on a price tier plan."

"The pricing is high."

"We are on an annual subscription for the use of Webroot Business Endpoint Protection."

"From a pricing standpoint, I would rate it a four out of five."

"Webroot is less expensive than SentinelOne."

"Our strategy was to overestimate the complexity and cost. It turned out that Webroot's assurance was justified."

"The solution doesn't cost too much. It's about 30 Euros a year for each endpoint. It's pretty affordable for us and for many other companies."

"Webroot Business Endpoint Protection is not too expensive. My licenses cost me between $300 and $400. It is really good price wise."

More OpenText Core Endpoint Protection pricing and cost advice

"Licensing fees are paid yearly."

"Trellix Endpoint Security (ENS) is not a cheap solution...I don't think any costs are involved in the maintenance of the solution."

"Pricing for McAfee MVISION Endpoint is not very good, and I would rate its cost three out of five, though I won't be able to mention how much its actual price is."

"The license costs are very reasonable, around 1,000 to 1,200 rupees per year."

"The pricing is mid-ranged and quite reasonable compared to other similar products."

"There is a one-year and a three-year license available for this solution, we are currently on a three-year license."

"When comparing the solution to others it is a bit expensive. We are on a monthly license."

"Microsoft Defender is not cheap and from a cost perspective, Trellix Endpoint Security (ENS) is a better option."

More Trellix Endpoint Security Platform pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.

See recommendations

920,929 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Comms Service Provider

14%

Outsourcing Company

12%

Construction Company

10%

Manufacturing Company

10%

Construction Company

11%

Outsourcing Company

10%

Comms Service Provider

10%

Financial Services Firm

Outsourcing Company

14%

Manufacturing Company

10%

Financial Services Firm

Construction Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	50
Midsize Enterprise	21
Large Enterprise	57

By reviewers
Company Size	Count
Small Business	35
Midsize Enterprise	2
Large Enterprise	2

By reviewers
Company Size	Count
Small Business	68
Midsize Enterprise	39
Large Enterprise	67

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

See all answers

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

See all answers

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

See all answers

What is your experience regarding pricing and costs for Webroot Business Endpoint Protection?

Webroot Business Endpoint Protection is probably on the cheaper side, so I would rate their pricing a one or a two ou...

See all answers

What needs improvement with Webroot Business Endpoint Protection?

Webroot Business Endpoint Protection needs to improve its ability to detect threats. It does not do what it's adverti...

See all answers

What is your primary use case for Webroot Business Endpoint Protection?

We use Webroot Business Endpoint Protection as a NextGen antivirus solution for our clients. It's included in the con...

See all answers

How does McAfee Endpoint Security compare with MVISION?

The flexible manageability of McAfee Endpoint Security is one of our favorite aspects of this solution. You can deplo...

See all answers

How does Crowdstrike Falcon compare with FireEye Endpoint Security?

The Crowdstrike Falcon program has a simple to use user interface, making it both an easy to use as well as an effec...

See all answers

What is your experience regarding pricing and costs for McAfee Endpoint Security?

I don't have visibility on pricing because it is negotiated by a different team, as I look after the technical side.

See all answers

Comparisons

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Compared 16% of the time

SentinelOne Singularity Endpoint vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Symantec Endpoint Security vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

TrendAI Vision One vs Cortex XDR by Palo Alto Networks

Compared 2% of the time

More Cortex XDR by Palo Alto Networks Competitors

Microsoft Defender for Endpoint vs OpenText Core Endpoint Protection

Compared 47% of the time

Symantec Endpoint Security vs OpenText Core Endpoint Protection

Compared 5% of the time

SentinelOne Singularity Endpoint vs OpenText Core Endpoint Protection

Compared 4% of the time

Huntress Managed EDR vs OpenText Core Endpoint Protection

Compared 3% of the time

HP Wolf Security vs OpenText Core Endpoint Protection

Compared 1% of the time

More OpenText Core Endpoint Protection Competitors

SentinelOne Singularity Endpoint vs Trellix Endpoint Security Platform

Compared 6% of the time

CrowdStrike Falcon vs Trellix Endpoint Security Platform

Compared 5% of the time

Symantec Endpoint Security vs Trellix Endpoint Security Platform

Compared 4% of the time

HP Wolf Security vs Trellix Endpoint Security Platform

Compared 3% of the time

Microsoft Defender for Endpoint vs Trellix Endpoint Security Platform

Compared 3% of the time

More Trellix Endpoint Security Platform Competitors

Product Reports

Buyer's Guide

Cortex XDR by Palo Alto Networks

November 2026

Download Cortex XDR by Palo Alto Networks product report

Buyer's Guide

OpenText Core Endpoint Protection

October 2026

OpenText Core Endpoint Protection report

Download OpenText Core Endpoint Protection product report

Buyer's Guide

Trellix Endpoint Security Platform

October 2026

Trellix Endpoint Security Platform report

Download Trellix Endpoint Security Platform product report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

Webroot SecureAnywhere Business Endpoint Protection

McAfee Endpoint Security, McAfee Endpoint Protection, Intel Security Total Protection for Endpoint, McAfee Complete Endpoint Protection, Trellix Endpoint Security (ENS)

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

OpenText Core Endpoint Protection offers cloud-managed endpoint security with AI integration, providing real-time protection and lightweight performance. It ensures low system impact, seamless cloud integration, and cost-effective security solutions for various devices.

OpenText Core Endpoint Protection is a comprehensive endpoint security platform utilized by managed-service providers for antivirus and firewall functionality across servers, workstations, and mobile devices. It employs AI for robust threat detection, integrating with cloud applications for real-time updates. Multi-layered security features include malware protection, network defense, and DNS protection. Although connectivity and threat reporting need improvement, this platform extensively supports remote device management and integrates efficiently with Active Directory policies.

What are the key features of OpenText Core Endpoint Protection?

Cloud Management: Centralized admin console for easy oversight
AI Integration: Enhanced threat detection capabilities
Lightweight Performance: Minimal impact on system resources
Real-time Threat Database: Constant updates for effective protection
Web Control Interface: Monitors and controls web traffic

What benefits are associated with OpenText Core Endpoint Protection?

Ease of Setup and Maintenance: Facilitates quick deployment and upkeep
Seamless Cloud Integration: Simplifies scalability and operation
Cost-Effectiveness: Affordable pricing with comprehensive features
Mobile Security Capabilities: Supports remote device management

OpenText Core Endpoint Protection finds application in industries requiring stringent data protection and peace of mind over device security. Managed-service providers implement this for comprehensive antivirus and firewall features, safeguarding multi-device networks. It is particularly useful for DNS protection and integrating with Active Directory policies, enabling secure yet flexible operations across sectors.

OpenText

Trellix Endpoint Security Platform offers essential features like centralized management, threat prevention, and encryption, facilitating seamless scaling and integration with other systems while prioritizing user security.

This comprehensive platform focuses on endpoint protection, antivirus capabilities, and malware defense. It enhances cybersecurity with data loss prevention, advanced threat detection, and AI-driven features for reliable protection without impacting performance. Central management and advanced reporting streamline integration and ease of use. Flexible policy deployment through the management console and its robust security measures, such as DLP and device control, further increase protection. Challenges include high CPU and memory usage affecting performance, a complex interface, and lengthy deployment. Third-party integration and Windows Hello support need improvement. Additional concerns involve improved threat detection and faster technical support responses.

What are the key features of Trellix Endpoint Security Platform?

Centralized Management: Allows seamless integration and scaling with consistent control across environments.
Threat Prevention: Provides comprehensive antivirus and malware protection to secure systems.
Encryption: Ensures data security with robust encryption techniques.
Advanced Reporting: Facilitates detailed insights and analysis for better decision-making.
AI-Driven Detection: Offers reliable threat detection without impacting system performance.

What benefits should users look for in reviews?

Comprehensive Protection: Offers extensive security measures for protecting digital environments.
Ease of Integration: Simplifies the process of incorporating into current systems and processes.
Flexible Policy Deployment: Supports adaptable policy management to meet diverse requirements.
Scalability: Enables growth while maintaining efficiency and security.
Robust Security Features: Provides advanced security measures like DLP and device control.

Trellix Endpoint Security Platform is widely implemented in industries such as banking and government for securing mobile and desktop devices. Its capabilities cover network security, device control, and remote access protection, catering to diverse environments by offering robust cybersecurity management against advanced threats.

Trellix

Sample Customers

CBI Health Group, University Honda, VakifBank

Mytech Partners

inHouseIT, Seagate Technology

Buyer's Guide

OpenText Core Endpoint Protection vs. Trellix Endpoint Security Platform

September 2026

Free Report: OpenText Core Endpoint Protection vs. Trellix Endpoint Security Platform

Find out what your peers are saying about OpenText Core Endpoint Protection vs. Trellix Endpoint Security Platform and other solutions. Updated: September 2026.

DOWNLOAD NOW

920,929 professionals have used our research since 2012.

See our OpenText Core Endpoint Protection vs. Trellix Endpoint Security Platform report.

See our list of best Endpoint Protection Platform (EPP) vendors.

We monitor all Endpoint Protection Platform (EPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.