Trellix Active Response and Trellix Endpoint Detection and Response (EDR) are both security solutions catering to different needs. Based on user reviews, Trellix Endpoint Detection and Response (EDR) holds a superior position due to its comprehensive feature set, despite Trellix Active Response's favorable pricing and support feedback.
Features: Trellix Active Response offers robust real-time visibility, automated threat response, and straightforward threat detection capabilities. Trellix Endpoint Detection and Response (EDR) features advanced behavioral analytics, threat intelligence integration, and automated remediation with more valuable extended detection capabilities.
Room for Improvement: Users of Trellix Active Response cite the need for more advanced threat detection features, enhanced reporting capabilities, and additional functionalities. Trellix Endpoint Detection and Response (EDR) users seek improvements in performance efficiency, lower false-positive rates, and further optimization in resource usage.
Ease of Deployment and Customer Service: Trellix Active Response users report a relatively quick deployment process, reliable customer support, and ease of integration within existing systems. Trellix Endpoint Detection and Response (EDR) is noted for a smoother deployment process and proactive customer service aiding significantly in troubleshooting.
Pricing and ROI: Trellix Active Response is favored for its competitive pricing and perceived high return on investment from a cost perspective. Trellix Endpoint Detection and Response (EDR) is seen as a higher initial investment but considered worthwhile for its extensive features and robust threat detection, delivering a strong ROI through advanced security measures.
While we haven't yet quantified the financial benefits, we recognize that there has been a return on investment, particularly with operational efficiencies provided by the alerts.
I would rate technical support from Trellix Active Response as a seven because sometimes we face difficulties finding engineers quickly, leading to customer frustration.
I have contracted support and also have an operating control so I can get various types of support.
The scalability of Active Response is satisfactory.
We would like Trellix to optimize the technology for these systems similarly to how it is deployed for normal endpoints.
There is room for improvement in the platform area and security area to make the dashboard visibility clearer and easier for customers to monitor malicious activities occurring in their environment.
I am seeing, for workflows, some sort of ethical hacking to test our environment.
Trellix Endpoint Detection and Response (EDR) is interesting and is a very good entry point that has been evolving through the last years.
Based on our evaluations, Trellix Active Response's pricing was the most feasible from a cost perspective.
They notify us immediately of any vulnerabilities on the endpoints, allowing us to deploy a response quickly.
The most valuable feature of Trellix Active Response is that whenever any incident occurs, it allows us to disconnect from that particular network or area and shut down the system using commands.
All the tree of data that we have, which may be a lot of information to argue whether it is going to be a threat or not, can be analyzed.
I have spent efforts on training our managers and others - what can software do if the knowledge base is low?
| Product | Market Share (%) |
|---|---|
| Trellix Endpoint Detection and Response (EDR) | 1.1% |
| Trellix Active Response | 0.4% |
| Other | 98.5% |
| Company Size | Count |
|---|---|
| Small Business | 13 |
| Midsize Enterprise | 3 |
| Large Enterprise | 10 |
Continuous Visibility into Your Endpoints:
Capture and monitor events, files, host flows, process objects, context, and system state changes that may be indicators of attack or dormant attack components.
Identify and Remediate Breaches Faster:
Access tools you need to quickly correct security issues. Send intelligence to analytics, operations, and forensic teams.
Target Critical Threats:
Get preconfigured and customizable actions when triggered, so you can target and eliminate threats.
Reduce the time to detect and respond to threats. Trellix EDR helps security analysts quickly prioritize threats and minimize potential disruption.
Guided investigation automatically asks and answers questions while gathering, summarizing, and visualizing evidence from multiple sources—reducing the need for more SOC resources.
Cloud-based deployment and analytics enables your skilled security analysts to focus on strategic defense, instead of tool maintenance. Benefit from implementing the right solution for you.
We monitor all Endpoint Detection and Response (EDR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
