OpenText Core Endpoint Protection​ vs Trellix Endpoint Security Platform comparison

OpenText Core Endpoint Protection vs. Trellix Endpoint Security Platform

Download the complete report

Helped 893,244 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Mindshare comparison

As of May 2026, in the Endpoint Protection Platform (EPP) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.6%, down from 3.9% compared to the previous year. The mindshare of OpenText Core Endpoint Protection is 1.5%, up from 0.7% compared to the previous year. The mindshare of Trellix Endpoint Security Platform is 3.4%, down from 3.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Protection Platform (EPP) Mindshare Distribution
Product	Mindshare (%)
Cortex XDR by Palo Alto Networks	3.6%
Trellix Endpoint Security Platform	3.4%
OpenText Core Endpoint Protection	1.5%
Other	91.5%

Endpoint Protection Platform (EPP)

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

reviewer2584380

vCIO At Grove Networks Inc. at a computer software company with 11-50 employees

Improving threat detection is critical for enhanced protection

We use Webroot Business Endpoint Protection as a NextGen antivirus solution for our clients. It's included in the contract we have with our clients as a cost-effective option for antivirus protection Webroot Business Endpoint Protection is cost-effective for rolling it out to all of our clients,…

Read full review

PankajKumar24

IT Manager at Gigabit Technologies Pvt Ltd

Advanced threat prevention has strengthened incident response and customized security workflows

The biggest advantage of Trellix Endpoint Security Platform is the ATP solution, which provides advanced threat prevention. Machine learning algorithms are available in the product as part of the threat anti-malware, including predictive machine learning and behavioral analysis, which are integral to the anti-malware module of EPP. In terms of my experience with the machine learning algorithms for analysis and threat detection, we are analyzing logs provided by Trellix, but we are not able to conduct specific machine learning analysis on those logs. The automated response mechanisms in the products help with incident management because we have to create playbooks in Trellix console for automation, which we need to enable. The customizable dashboard of Trellix Endpoint Security Platform definitely contributes to the decision-making process, as we customize the dashboard according to customer requirements. When it comes to integration aspects, we are able to integrate Trellix Endpoint Security Platform with SIEM or SOAR solutions using the ePO console, which enhances threat detection capabilities. Reporting and analytics aspects have an impact on security posture assessment, as we are able to fetch reports in the ePO console customized according to customer requirements for downloading and sending via email.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The user interface of the solution is sophisticated and straightforward."

"Stability is one of the features we like the most."

"Cortex XDR alerts us on the dashboard when there's a threat, which allows us to restrict that user and helps secure our infrastructure."

"It can automatically correlate events and logs, which is very helpful for an IT administrator. It can correlate different kinds of malware activities over a network, agent, or host system. You do not need to do it manually. It is a good feature. It is also a user-friendly solution. We have deployed it on the cloud because our space does not provide any flexibility for on-premises deployment, but Palo Alto has added some flexibility to install it on-premises. It must be like the same Cortex XDR agent for all the VPN services, web filtering services, and everything else."

"Based on my experience, I would recommend Cortex XDR by Palo Alto Networks to other people."

"The stability of this product is very good."

"They did what they said, and this solution could apply to any scenario."

"But overall, when we speak about security and protection, they are one of the top providers."

More Cortex XDR by Palo Alto Networks pros

"Webroot pioneered integration of novel concepts in endpoint protection."

"My advice about this product is that it is a very good solution and offers a stable and trusted software that runs smoothly and is easy to deploy."

"Webroot Business Endpoint Protection is easy to use, stable, flexible, and the performance is great."

"I like that Webroot is very lightweight, it didn't bog down the machine, and more importantly, it had heuristics artificial intelligence to some degree, where you have one endpoint recognizing issues because it maintains a cloud database, so if one client recognizes a threat, it would add it to the database, and almost immediately, every agent in the world would also know about that threat."

"The solution has many features, is very easy to define and set the policies based on the user groups, does not take up a lot of resources in operation, and has provided us with a good track record of protection."

"The solution is very simple and straightforward to use."

"There aren't any features that really stand out — I just want it to keep malware out of my system. To date, I haven't had any malware in my system."

"The ease of use of the centralized admin console is its best asset."

More OpenText Core Endpoint Protection pros

"McAfee Endpoint Security does not hang the machines."

"The manageability of the product itself is its most valuable aspect. You have the underlying EPO, and on top of it, you can deploy the various components as you require. This is unlike other solutions like Symantec where you have to deploy everything or nothing. With this solution, you can choose to only deploy antivirus or only deploy a firewall, or only something else. I choose the components and that deployment is done through EPO. It makes manageability very flexible."

"We are able to use it as our primary encryption tool so we do not have to spend resources on another product for this purpose."

"In general, it is a really great product and I recommend it."

"The seamless deployment is very valuable."

"The most valuable feature of Trellix Endpoint Security is containment, which takes less than a minute."

"The centralized management of the solution is valuable since we are a diverse organization."

"It has improved my organization because it helps with visibility, in terms of security. We can see the actual attack and can contain it. The antivirus can detect that."

More Trellix Endpoint Security Platform pros

Cons

"It is not a suitable solution if you are looking for a single product with multiple features such as DLP, encryption, rollback, etc."

"I have seen lagging with Cortex XDR by Palo Alto Networks. There was one time when we faced a threat actor trying to gain access to our system. When our team utilized the tool, we were all on the same dashboard and we faced a lag issue at that time of around five minutes, which was quite significant."

"While using Cortex, I noticed some aspects that could be improved, such as increasing the synchronization speed between XDR and Xnor."

"It's very time-consuming to log support issues and the people that answer the tickets aren't very knowledgeable."

"They have the worst support, as a company, that I have ever worked with, as they are difficult to get a hold of and keep on the phone."

"The tool needs to be improved in terms of integration and interface."

"The GUI could be improved."

"The installation should be easier and the Palo Alto pre-sales and sales teams should have more information on the product because they don't know what they are selling."

More Cortex XDR by Palo Alto Networks cons

"Tech support needs to be improved. If we have an issue, and we don't have an issue very often, trying to get support's attention is a really difficult endeavor."

"Technical support is not the best. It's hard to get a hold of them if we need help. It's something that definitely needs improvement."

"Its detection capability for certain attacks should be improved. It should have better and wider detection for certain malware attacks."

"An updated UI would be nice, but is not hardly used."

"The only complaint I have with Webroot is its inability to prevent UoD phishing and its inability to check against bots or block anti-attacks. Plus the URL server is in zero-definition."

"Webroot used to be really good when they first came out, but now they've completely fallen behind, sadly."

"We need to know more details about how the virus interacted with the computer."

"Since they're dealing with multi-core environments now, the best option would be for them to enhance the product so that the product can automatically do an assessment on the machine."

More OpenText Core Endpoint Protection cons

"The product is consolidating its portfolio into one product. It is difficult at the moment."

"Upgrading to new versions isn't easy and it can take a long time. Also, other solutions' tamper protection features are better than FireEye's. Clients should have access to our local information, but they shouldn't change settings on the system itself."

"The endpoint has room for improvement because it's restrictive, it's very sensitive. Sometimes it can delete something that you need and so sometimes you have to disable the antivirus."

"In some cases, the detection part was not accurate enough. We even had some incidents that were not detected."

"I don't recommend McAfee for endpoint users."

"While we are pleased with the endpoint solution, there should also be a separate one for the firewall."

"The stability of the solution was not very good."

"Technical support is an area that can be improved because sometimes, the response time is a bit slow and the explanation is short."

More Trellix Endpoint Security Platform cons

Pricing and Cost Advice

"Traps pays for itself within the first 16 months of a three-year subscription. This is attributed to OPEX savings, as security teams spent less time trying to identify and isolate malware for analysis as a result of a reduction in malware incidents, false positives, and breach avoidance."

"If one wishes to work with another team or large number of users at a future point, he must purchase a license for them."

"The cost of Cortex XDR by Palo Alto Networks is $55 to $90 USD per endpoint per month."

"The price of the solution could be reduced. I have customers that have voiced that the solution is good for the value but if I want to sell more of the solution the price reduction would help."

"The pricing seems fair, and I do like the licensing model. You use wherever they are, and it is elastic."

"Cortex XDR by Palo Alto Networks is quite an expensive solution."

"The pricing is okay, although direct support can be expensive."

"I feel it is fairly priced."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"Webroot is less expensive than SentinelOne."

"If you purchase for clients, then you are the managing billing entity. It's better to either get a monthly subscription check from your clients, or to prepay for the year (so as to not keep cash in reserve to pay the bill each month) IMHO."

"With Webroot Business Endpoint Protection, I can select a yearly billing cycle."

"I think the price is fairly reasonable. I was really prepared to pay more, but the price is fine."

"Its cost is not much per month. Our price is a couple of bucks a user."

"From a pricing standpoint, I would rate it a four out of five."

"The solution is pretty cheap, actually. At our level, which is at 2,500 endpoints, we're paying 87 cents an agent per month."

"I rate the product's pricing a three on a scale of one to ten, where one is cheap, and ten is expensive. There are no costs in addition to the product's standard licensing fees."

More OpenText Core Endpoint Protection pricing and cost advice

"The pricing is comparable to other solutions on the market."

"Licensing is paid yearly."

"Microsoft Defender is not cheap and from a cost perspective, Trellix Endpoint Security (ENS) is a better option."

"Its price is reasonable, but it could be made free."

"The price of this product is good."

"The price of McAfee is pretty similar to Symantec, and there are no costs in addition to the standard licensing fees."

"Annual license fee is good"

"Compared to Bitdefender, Trellix Endpoint Security is more expensive, but considering it comes with DLP, the solution's price is fine."

More Trellix Endpoint Security Platform pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.

See recommendations

893,244 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

12%

Construction Company

12%

Comms Service Provider

Manufacturing Company

Comms Service Provider

Financial Services Firm

Construction Company

Computer Software Company

Manufacturing Company

12%

Government

10%

Financial Services Firm

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	45
Midsize Enterprise	21
Large Enterprise	48

By reviewers
Company Size	Count
Small Business	35
Midsize Enterprise	2
Large Enterprise	2

By reviewers
Company Size	Count
Small Business	68
Midsize Enterprise	39
Large Enterprise	65

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

What is your experience regarding pricing and costs for Webroot Business Endpoint Protection?

Webroot Business Endpoint Protection is probably on the cheaper side, so I would rate their pricing a one or a two ou...

What needs improvement with Webroot Business Endpoint Protection?

Webroot Business Endpoint Protection needs to improve its ability to detect threats. It does not do what it's adverti...

What is your primary use case for Webroot Business Endpoint Protection?

We use Webroot Business Endpoint Protection as a NextGen antivirus solution for our clients. It's included in the con...

How does McAfee Endpoint Security compare with MVISION?

The flexible manageability of McAfee Endpoint Security is one of our favorite aspects of this solution. You can deplo...

How does Crowdstrike Falcon compare with FireEye Endpoint Security?

The Crowdstrike Falcon program has a simple to use user interface, making it both an easy to use as well as an effec...

What is your experience regarding pricing and costs for McAfee Endpoint Security?

I don't have visibility on pricing because it is negotiated by a different team, as I look after the technical side.

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Comparisons

Compared 9% of the time

SentinelOne Singularity Endpoint vs Cortex XDR by Palo Alto Networks

Compared 5% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

TrendAI Vision One – Endpoint Security vs Cortex XDR by Palo Alto Networks

Compared 2% of the time

More Cortex XDR by Palo Alto Networks Competitors

Microsoft Defender for Endpoint vs OpenText Core Endpoint Protection

Compared 35% of the time

Huntress Managed EDR vs OpenText Core Endpoint Protection

Compared 5% of the time

SentinelOne Singularity Endpoint vs OpenText Core Endpoint Protection

Compared 5% of the time

Malwarebytes Teams vs OpenText Core Endpoint Protection

Compared 4% of the time

More OpenText Core Endpoint Protection Competitors

CrowdStrike Falcon vs Trellix Endpoint Security Platform

Compared 5% of the time

Microsoft Defender for Endpoint vs Trellix Endpoint Security Platform

Compared 4% of the time

SentinelOne Singularity Endpoint vs Trellix Endpoint Security Platform

Compared 4% of the time

Symantec Endpoint Security vs Trellix Endpoint Security Platform

Compared 3% of the time

Tanium vs Trellix Endpoint Security Platform

Compared 3% of the time

More Trellix Endpoint Security Platform Competitors

Product Reports

Cortex XDR by Palo Alto Networks

May 2026

Download Cortex XDR by Palo Alto Networks product report

OpenText Core Endpoint Protection

Download OpenText Core Endpoint Protection product report

OpenText Core Endpoint Protection report

Trellix Endpoint Security Platform

Download Trellix Endpoint Security Platform product report

Trellix Endpoint Security Platform report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

Webroot SecureAnywhere Business Endpoint Protection

McAfee Endpoint Security, McAfee Endpoint Protection, Intel Security Total Protection for Endpoint, McAfee Complete Endpoint Protection, Trellix Endpoint Security (ENS)

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

OpenText Core Endpoint Protection offers cloud-managed endpoint security with AI integration, providing real-time protection and lightweight performance. It ensures low system impact, seamless cloud integration, and cost-effective security solutions for various devices.

OpenText Core Endpoint Protection is a comprehensive endpoint security platform utilized by managed-service providers for antivirus and firewall functionality across servers, workstations, and mobile devices. It employs AI for robust threat detection, integrating with cloud applications for real-time updates. Multi-layered security features include malware protection, network defense, and DNS protection. Although connectivity and threat reporting need improvement, this platform extensively supports remote device management and integrates efficiently with Active Directory policies.

What are the key features of OpenText Core Endpoint Protection?

Cloud Management: Centralized admin console for easy oversight
AI Integration: Enhanced threat detection capabilities
Lightweight Performance: Minimal impact on system resources
Real-time Threat Database: Constant updates for effective protection
Web Control Interface: Monitors and controls web traffic

What benefits are associated with OpenText Core Endpoint Protection?

Ease of Setup and Maintenance: Facilitates quick deployment and upkeep
Seamless Cloud Integration: Simplifies scalability and operation
Cost-Effectiveness: Affordable pricing with comprehensive features
Mobile Security Capabilities: Supports remote device management

OpenText Core Endpoint Protection finds application in industries requiring stringent data protection and peace of mind over device security. Managed-service providers implement this for comprehensive antivirus and firewall features, safeguarding multi-device networks. It is particularly useful for DNS protection and integrating with Active Directory policies, enabling secure yet flexible operations across sectors.

OpenText

Trellix Endpoint Security Platform offers essential features like centralized management, threat prevention, and encryption, facilitating seamless scaling and integration with other systems while prioritizing user security.

This comprehensive platform focuses on endpoint protection, antivirus capabilities, and malware defense. It enhances cybersecurity with data loss prevention, advanced threat detection, and AI-driven features for reliable protection without impacting performance. Central management and advanced reporting streamline integration and ease of use. Flexible policy deployment through the management console and its robust security measures, such as DLP and device control, further increase protection. Challenges include high CPU and memory usage affecting performance, a complex interface, and lengthy deployment. Third-party integration and Windows Hello support need improvement. Additional concerns involve improved threat detection and faster technical support responses.

What are the key features of Trellix Endpoint Security Platform?

Centralized Management: Allows seamless integration and scaling with consistent control across environments.
Threat Prevention: Provides comprehensive antivirus and malware protection to secure systems.
Encryption: Ensures data security with robust encryption techniques.
Advanced Reporting: Facilitates detailed insights and analysis for better decision-making.
AI-Driven Detection: Offers reliable threat detection without impacting system performance.

What benefits should users look for in reviews?

Comprehensive Protection: Offers extensive security measures for protecting digital environments.
Ease of Integration: Simplifies the process of incorporating into current systems and processes.
Flexible Policy Deployment: Supports adaptable policy management to meet diverse requirements.
Scalability: Enables growth while maintaining efficiency and security.
Robust Security Features: Provides advanced security measures like DLP and device control.

Trellix Endpoint Security Platform is widely implemented in industries such as banking and government for securing mobile and desktop devices. Its capabilities cover network security, device control, and remote access protection, catering to diverse environments by offering robust cybersecurity management against advanced threats.

Trellix

Sample Customers

CBI Health Group, University Honda, VakifBank

Mytech Partners

inHouseIT, Seagate Technology

OpenText Core Endpoint Protection vs. Trellix Endpoint Security Platform