Try our new research platform with insights from 80,000+ expert users

OpenText Enterprise Security Manager vs Trellix ESM comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 28, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
4.9
ROI from OpenText Enterprise Security Manager varies widely, influenced by threat detection, compliance benefits, and prevention of incidents.
Sentiment score
3.2
In-house teams claim McAfee offers high ROI, but executives struggle to see it without C-level focused reports.
 

Customer Service

Sentiment score
5.4
OpenText Enterprise Security Manager support receives mixed reviews, with common complaints about slow resolution and inadequate expertise in complex issues.
Sentiment score
4.3
Trellix ESM customer service is generally satisfactory, but technical support varies with noted delays and skill gaps.
If I raise a P1 or P0 ticket, the response time is often delayed by four to eight hours.
Senior Security Engineer at Valuepoint Systems
I would rate support for Trellix ESM 10 out of 10 because if we connect with the support in the UK, we get excellent support.
Senior Vice President IT at AS IT Consulting Pvt. Ltd.
It's rare for me to need them unless it's an issue with licensing, and they are the best in that regard.
Cyber Security Engineer at Protec
 

Scalability Issues

Sentiment score
5.9
OpenText Enterprise Security Manager is scalable for large deployments but faces cost challenges at the logger level.
Sentiment score
8.6
Trellix ESM is highly scalable and adaptable, excelling in enterprise environments but may have limitations for medium enterprises.
It lacks some capabilities compared to other tools available in the market.
Senior Security Engineer at Valuepoint Systems
Scalability is quite easier with Trellix ESM, because all we need to do is add more receivers to it, so it can go to any point.
Senior Vice President IT at AS IT Consulting Pvt. Ltd.
 

Stability Issues

Sentiment score
5.1
OpenText Enterprise Security Manager is stable and reliable, though performance varies with challenges in virtualization and specific components.
Sentiment score
8.3
Trellix ESM is generally stable with effective support, though some users experience bugs and interruptions affecting reliability.
The stability of ArcSight Enterprise Security Manager (ESM) is not very robust.
Senior Security Engineer at Valuepoint Systems
 

Room For Improvement

OpenText Enterprise Security Manager needs user interface upgrades, better integration, improved documentation, and enhancements in analytics and scalability.
Trellix ESM requires stability, HTML5 migration, and upgrades in customization, integration, support, usability, and AI for improved functionality.
The integration aspect of ArcSight Enterprise Security Manager (ESM) needs improvement.
Senior Security Engineer at Valuepoint Systems
If there is any device which is not covered, there should not be any additional charges for writing the custom parsers on that.
Senior Vice President IT at AS IT Consulting Pvt. Ltd.
 

Setup Cost

OpenText Enterprise Security Manager is costly but offers robust features and scalability, with possible discounts and cost management strategies.
Trellix ESM offers flexible, slightly costly licensing, valued for its SOC features, with straightforward setup and deployment.
ArcSight Enterprise Security Manager (ESM) is very cheap compared to other tools.
Senior Security Engineer at Valuepoint Systems
 

Valuable Features

ArcSight offers advanced threat detection, robust integration, customizable dashboards, and automates event correlation for efficient security operations.
Trellix ESM excels in real-time threat detection, user-friendly interface, quick deployment, and strong integration with other technologies.
The ability to interpret data is highly valued.
Senior Security Engineer at Valuepoint Systems
The weakest point is it doesn't cover almost all the devices, so the customer has to be more dependent on the parsers to be written by the Professional Services team.
Senior Vice President IT at AS IT Consulting Pvt. Ltd.
 

Categories and Ranking

OpenText Enterprise Securit...
Ranking in Security Information and Event Management (SIEM)
26th
Average Rating
7.8
Reviews Sentiment
6.7
Number of Reviews
98
Ranking in other categories
No ranking in other categories
Trellix ESM
Ranking in Security Information and Event Management (SIEM)
28th
Average Rating
7.4
Reviews Sentiment
7.0
Number of Reviews
38
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of March 2026, in the Security Information and Event Management (SIEM) category, the mindshare of OpenText Enterprise Security Manager is 1.5%, up from 1.1% compared to the previous year. The mindshare of Trellix ESM is 1.2%, up from 0.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Information and Event Management (SIEM) Mindshare Distribution
ProductMindshare (%)
OpenText Enterprise Security Manager1.5%
Trellix ESM1.2%
Other97.3%
Security Information and Event Management (SIEM)
 

Featured Reviews

DayaramGoyal - PeerSpot reviewer
Vice President, Technology at Cache Digitech Pvt Ltd.
Integration shines but threat detection and technical support need attention
Regarding threat detection capabilities, I think OpenText Enterprise Security Manager covers the MITRE ATT&CK framework at an average level, and on a scale of one to ten, I would rate it only five. They have to improve in those areas in terms of threat detection capabilities. For ArcSight, they need to give the complete package, with UBA being part of that. They have added it, but I question what capabilities are there, especially on the SOAR side where they have to improve because the SIEM was very strong. For the SOAR side, because SIEM was very strong when they were earlier launched, but for SOAR, they were integrating with third-party solutions initially, and then they built the capability. They have acquired some company, but it is not up to that potential. They slowly and gradually lost that ground to Splunk, QRadar, and other companies, so when anybody talks about the full capabilities, they are not thinking about Micro Focus as of now. I would desire additional features in OpenText Enterprise Security Manager, especially on the SOAR side, and maybe on the UBA side, as threats intel and all, which are part of bundled solutions. Those are the areas they have to improve so that customers can trust and enhance those things, and maybe the customers will feel they should go for this product. As of now, if we are evaluating our own scenario, we are not even thinking about it. Earlier, that was not the scenario when they were selling this SIEM solution in the market; everybody was thinking OpenText was the default option, but now, if you're looking for a complete solution stack, nobody is even considering it.
MD
Senior Vice President IT at AS IT Consulting Pvt. Ltd.
Offers comprehensive report generation while maintaining ease of integration
We need to improve Trellix ESM by making sure that most of the logging devices available in the global market should be covered, and if there is any device which is not covered, there should not be any additional charges for writing the custom parsers on that. We can add some new features regarding AI in the future for Trellix ESM, but the maturity will take a longer time. There are many false positives that happen in an environment during the first couple of months, or around six months, so the system analyst is not able to identify whether the event which has occurred is a true positive or a false positive.
report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
884,873 professionals have used our research since 2012.
 

Comparison Review

VS
Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
Marketing Services Firm
12%
Manufacturing Company
9%
Financial Services Firm
8%
Performing Arts
8%
Comms Service Provider
17%
Manufacturing Company
9%
Financial Services Firm
8%
Construction Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business37
Midsize Enterprise14
Large Enterprise57
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise6
Large Enterprise24
 

Questions from the Community

Which is the best SIEM tool for a mid-sized financial services firm: Arcsight or Securonix?
In my market, a lot of financial companies had or have an ArcSight installation. Just because in former times it was pretty good. Now a lot of them are looking for a more effective solution due to ...
What do you like most about ArcSight Enterprise Security Manager (ESM)?
We utilize ArcSight ESM for real-time threat detection in our organization. We have custom rules that we've developed on top of the WAN services, along with scheduled licensing activities.
What is your experience regarding pricing and costs for ArcSight Enterprise Security Manager (ESM)?
ArcSight Enterprise Security Manager (ESM) is very cheap compared to other tools. It is worth the investment if you are considering the cost.
What is your experience regarding pricing and costs for McAfee ESM?
When discussing Trellix ESM pricing and licensing, if you consider some premium product, the pricing also has to be premium, however, enterprise customers who look for a premium product, alongside ...
What needs improvement with McAfee ESM?
Areas of Trellix ESM that could be improved or enhanced include checking on the clients who are still on-prem, especially banks, as most are not moving everything to the cloud due to confidentialit...
What is your primary use case for McAfee ESM?
My customer's usual use case for Trellix ESM involves one client, as most of the users have moved to ESM. Nowadays, they don't use IPS only, since McAfee IPS is standalone; they incorporate firewal...
 

Also Known As

Micro Focus ArcSight, HPE ArcSight, ArcSight
McAfee ESM, NitroSecurity, McAfee Enterprise Security Manager
 

Overview

 

Sample Customers

Lake Health, U.S. Department of Health and Human Services, Bank AlJazira, Banca Intesa, and Obrela.
San Francisco Police Credit Union, Wªstenrot Gruppe, Volusion, California Department of Corrections & Rehabilitation, Government of New Brunswick, State of Colorado, Macquarie Telecom, Texas Tech University Health Sciences Center, Cologne Bonn Airport
Find out what your peers are saying about OpenText Enterprise Security Manager vs. Trellix ESM and other solutions. Updated: March 2026.
884,873 professionals have used our research since 2012.