Trellix Endpoint Security Platform vs ZoneAlarm comparison

The compared Trellix and Check Point Software Technologies solutions aren't in the same category. Trellix is ranked #7 in EPP , with an average rating of 7.7, and holds a 3.5% mindshare in the category. Check Point Software Technologies is ranked #21 in Anti-Malware Tools , with an average rating of 7.5, and holds a 1.7% mindshare. Additionally, 88% of Trellix users are willing to recommend the solution, compared to 88% of Check Point Software Technologies users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Trellix Endpoint Security Platform and ZoneAlarm based on real PeerSpot user reviews.

Find out what your peers are saying about CrowdStrike, Microsoft, SentinelOne and others in Endpoint Protection Platform (EPP).

To learn more, read our detailed Endpoint Protection Platform (EPP) Report (Updated: April 2026).

Buyer's Guide

Endpoint Protection Platform (EPP)

April 2026

Download the complete report

Helped 886,077 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Mindshare comparison

Endpoint Protection Platform (EPP) Mindshare Distribution
Product	Mindshare (%)
Trellix Endpoint Security Platform	3.5%
Microsoft Defender for Endpoint	7.2%
CrowdStrike Falcon	6.3%
Other	83.0%

Endpoint Protection Platform (EPP)

Anti-Malware Tools Mindshare Distribution
Product	Mindshare (%)
ZoneAlarm	1.7%
Microsoft Defender for Endpoint	6.9%
VirusTotal	3.0%
Other	88.4%

Anti-Malware Tools

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

PankajKumar24

IT Manager at Gigabit Technologies Pvt Ltd

Advanced threat prevention has strengthened incident response and customized security workflows

The biggest advantage of Trellix Endpoint Security Platform is the ATP solution, which provides advanced threat prevention. Machine learning algorithms are available in the product as part of the threat anti-malware, including predictive machine learning and behavioral analysis, which are integral to the anti-malware module of EPP. In terms of my experience with the machine learning algorithms for analysis and threat detection, we are analyzing logs provided by Trellix, but we are not able to conduct specific machine learning analysis on those logs. The automated response mechanisms in the products help with incident management because we have to create playbooks in Trellix console for automation, which we need to enable. The customizable dashboard of Trellix Endpoint Security Platform definitely contributes to the decision-making process, as we customize the dashboard according to customer requirements. When it comes to integration aspects, we are able to integrate Trellix Endpoint Security Platform with SIEM or SOAR solutions using the ePO console, which enhances threat detection capabilities. Reporting and analytics aspects have an impact on security posture assessment, as we are able to fetch reports in the ePO console customized according to customer requirements for downloading and sending via email.

Read full review

Bala_Krishna

Director at esupport Solutions Pvt ltd

Security suite has protected individual devices from threats, while installation and network features require improvements

BIG-IP is actually the LTM, Link Load Balancer, which comes with ASM, meaning Application Security Module. It consists of multiple modules, such as ASM, SWG, and a domain DNS manager. ZoneAlarm allows defining trusted and public networks, which helps maintain security in public Wi-Fi environments. It offers comprehensive protection, securing PCs against threats. Users do not experience any system slowdowns while scanning. Harmony Browser protects all your browsing activity and is bundled with Harmony Endpoint and Harmony Connect. It provides a small but effective security layer and sometimes comes packaged with the larger Harmony suite.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The most valuable features are incident creation, policy-based protection, IP whitelisting, and device encryption. These are beneficial for endpoint and server security."

"The most valuable feature of Cortex XDR by Palo Alto Networks is the low consumption of system resources. The solution uses a lot of AI and machine learning."

"The anti-exploit is impenetrable. We chose Traps because it is the only product that we were not able to get anything past."

"Cortex XDR is a simple platform that's easy for administrators and users. You have a lot of flexibility to change or customize the features."

"Cortex XDR by Palo Alto Networks saves time in various ways, although the user interface is fairly standard."

"The protection offered by this product is good, as is the endpoint reporting."

"The management capabilities, allow an IT organization to get quite a good picture of attempted cyber attacks."

"One thing that I like about Cortex XDR is its ability to detect all the suspicious or malicious binaries, and it can integrate with Palo Alto Firewall."

More Cortex XDR by Palo Alto Networks pros

"It can be deployed quickly, and it's scalable. Those are the two advantages of it."

"Trellix Endpoint Security Platform has positively impacted our organization with strong protection against malware and ransomware, greatly improving our ability to detect and block threats in real time, and features like ATP and Exploit Prevention help reduce malware and zero-day attacks."

"It is generally a valuable tool that helps us with our security."

"McAfee has phenomenally improved in terms of detection; it provides real-time detection and response with Real Protect and reputations, is not only based on signatures but also on behavior analytics, artificial intelligence, and machine learning, and we have environments that never had issues with ransomware in the last 20 years."

"I personally really like what the folks at Intel did when creating the Endpoint Protection Suites."

"The reporting capabilities are a valuable feature. In enables more visibility on our network."

"The centralized management of the solution is valuable since we are a diverse organization."

"Centrally, from just one console, you can block malicious attacks across your environment."

More Trellix Endpoint Security Platform pros

"I strongly recommend ZoneAlarm as a simple but efficient solution, especially if your organization doesn't have a dedicated budget for providing a security solution for BYOD devices."

"It gives us security for the users' mobiles and ends up protecting us in a significant way."

"It is quick and easy to configure."

"The phone access scan stands out as the most valuable feature for me."

"The solution maintains reasonable scalability."

"ZoneAlarm protects all computers from viruses, spyware, and hackers."

"It is easy to use through interfaces and easy to configure each of the customizations we created based on the characteristics that we wanted."

"ZoneAlarm is one of the best rated security products from Checkpoint, which comprises of inbuilt antivirus, anti spyware, anti phishing, and advanced threat protection features."

More ZoneAlarm pros

Cons

"Cortex XDR could be improved with more GUI features."

"There's room for improvement with Mac device installations, which can be challenging."

"Impact on system performance is horrible, adding a lot of delays for users."

"I would like to see improvement in the tool's user interface, particularly in the area of managing alerts and providing more reporting capabilities."

"The dashboard could use some significant improvement, just making it more useful with more information."

"If you compare it to SentinelOne, which has more functionalities and detection capabilities on an open platform, the pricing on SentinelOne is far more reasonable and cheaper than Cortex XDR by Palo Alto Networks."

"The solution should add unwanted malicious hash values to a block list so that whenever the action is triggered, it will automatically prevent the malicious content."

"I would like to see better protection, specifically to protect email applications."

More Cortex XDR by Palo Alto Networks cons

"Every time we open a ticket with McAfee, their response differs and they are not consistent."

"I wouldn't recommend it to others because it's not secure enough."

"It can be quite complicated to learn McAfee Endpoint Security and to feel comfortable with the environment."

"I hope the solution can be used in cloud systems going forward."

"The resolution time should be faster."

"In some cases, the detection part was not accurate enough. We even had some incidents that were not detected."

"Looking at the current ePolicy orchestrator, and the transition of most vendors to the cloud, they need to do an improvement with the current dashboard or the overall aesthetic of their GUI."

"Technical support is an area that can be improved because sometimes, the response time is a bit slow and the explanation is short."

More Trellix Endpoint Security Platform cons

"They should release a single update with all the necessary characteristics to avoid being in a cycle of consecutive updates."

"They need to update and improve the features available for Mac."

"Some of our users say that the interface is a little bit outdated for 2020, and want it to be more modern and cozy."

"Currently, the client is only available for the Windows Operating System but it would be good if it were released for Mac OS as well."

"Some of our users say that the interface is a little bit outdated for 2020, and want it to be more modern and cozy."

"Updating ZoneAlarm is a problem at times."

"I would like it to be integrated with the Check Point centralization solution like Infinity Portal. It would be great to be able to manage it through the same website."

"The solution's efficiency in threat containment and overall protection needs improvement."

More ZoneAlarm cons

Pricing and Cost Advice

"It's about $55 per license on a yearly basis."

"Cortex XDR by Palo Alto Networks is quite an expensive solution."

"The pricing seems fair, and I do like the licensing model. You use wherever they are, and it is elastic."

"Our customers have expressed that the price is high."

"The return on investment is from the user side because we have seen the performance of it increase the delivery time of the product if we are using too many web-based and on-premise applications. In indirect ways, we saw the return of investment in terms of performance and user satisfaction increase."

"The cost of Cortex XDR by Palo Alto Networks is $55 to $90 USD per endpoint per month."

"The pricing is okay, although direct support can be expensive."

"The cost depends on your chosen license type, like Pro or other licenses."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"It is not so cheap in comparison to Sophos and other solutions."

"No comment."

"Licensing fees are billed on a yearly basis."

"The price of the solution is fair, we have a complete security package."

"The pricing is more or less the same as the other tools in the market."

"The pricing is great and licensing fees are billed on a yearly basis."

"I do licensing on an annual basis and this is what I always recommend to my clients over the monthly option."

"Licensing fees are paid yearly."

More Trellix Endpoint Security Platform pricing and cost advice

"I rate the product pricing a seven out of ten."

"This is a freeware product and I recommend using it."

"The pricing is reasonable, with a yearly renewal license costing seventy dollars."

"We use the free version of the software, but it can be upgraded to the paid Extreme Security edition."

"We have to pay a yearly licensing fee for ZoneAlarm, which is cheap."

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.

See recommendations

886,077 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Construction Company

13%

Financial Services Firm

13%

Manufacturing Company

Comms Service Provider

Manufacturing Company

12%

Government

10%

Financial Services Firm

10%

Comms Service Provider

11%

Hospitality Company

10%

Construction Company

Performing Arts

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	44
Midsize Enterprise	20
Large Enterprise	48

By reviewers
Company Size	Count
Small Business	67
Midsize Enterprise	37
Large Enterprise	62

By reviewers
Company Size	Count
Small Business	14
Midsize Enterprise	2
Large Enterprise	4

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

See all answers

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

See all answers

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

See all answers

How does McAfee Endpoint Security compare with MVISION?

The flexible manageability of McAfee Endpoint Security is one of our favorite aspects of this solution. You can deplo...

See all answers

How does Crowdstrike Falcon compare with FireEye Endpoint Security?

The Crowdstrike Falcon program has a simple to use user interface, making it both an easy to use as well as an effec...

See all answers

What is your experience regarding pricing and costs for McAfee Endpoint Security?

I don't have visibility on pricing because it is negotiated by a different team, as I look after the technical side.

See all answers

What is your experience regarding pricing and costs for ZoneAlarm?

ZoneAlarm has an acceptable price. Not much detail can be provided as I am not the one to judge the price.

See all answers

What needs improvement with ZoneAlarm?

Check Point support needs improvement. Currently rated at 9 out of 10, more support is required. There are some conce...

See all answers

What is your primary use case for ZoneAlarm?

I work with vendors such as F5 and deal with F5 as a reseller. I work with F5 BIG-IP regarding F5 Shape Security. BIG...

See all answers

Comparisons

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Compared 8% of the time

SentinelOne Singularity Complete vs Cortex XDR by Palo Alto Networks

Compared 5% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Wazuh vs Cortex XDR by Palo Alto Networks

Compared 2% of the time

More Cortex XDR by Palo Alto Networks Competitors

CrowdStrike Falcon vs Trellix Endpoint Security Platform

Compared 5% of the time

Microsoft Defender for Endpoint vs Trellix Endpoint Security Platform

Compared 5% of the time

SentinelOne Singularity Complete vs Trellix Endpoint Security Platform

Compared 4% of the time

Symantec Endpoint Security vs Trellix Endpoint Security Platform

Compared 3% of the time

Trellix Endpoint Detection and Response (EDR) vs Trellix Endpoint Security Platform

Compared 3% of the time

More Trellix Endpoint Security Platform Competitors

Microsoft Defender for Endpoint vs ZoneAlarm

Compared 28% of the time

Check Point Harmony Endpoint vs ZoneAlarm

Compared 9% of the time

Avast One vs ZoneAlarm

Compared 5% of the time

CrowdStrike Falcon vs ZoneAlarm

Compared 5% of the time

AVG Internet Security Business Edition vs ZoneAlarm

Compared 5% of the time

More ZoneAlarm Competitors

Product Reports

Buyer's Guide

Cortex XDR by Palo Alto Networks

April 2026

Download Cortex XDR by Palo Alto Networks product report

Buyer's Guide

Trellix Endpoint Security Platform

March 2026

Trellix Endpoint Security Platform report

Download Trellix Endpoint Security Platform product report

Buyer's Guide

ZoneAlarm

March 2026

Download ZoneAlarm product report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

McAfee Endpoint Security, McAfee Endpoint Protection, Intel Security Total Protection for Endpoint, McAfee Complete Endpoint Protection, Trellix Endpoint Security (ENS)

No data available

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

Trellix Endpoint Security Platform offers essential features like centralized management, threat prevention, and encryption, facilitating seamless scaling and integration with other systems while prioritizing user security.

This comprehensive platform focuses on endpoint protection, antivirus capabilities, and malware defense. It enhances cybersecurity with data loss prevention, advanced threat detection, and AI-driven features for reliable protection without impacting performance. Central management and advanced reporting streamline integration and ease of use. Flexible policy deployment through the management console and its robust security measures, such as DLP and device control, further increase protection. Challenges include high CPU and memory usage affecting performance, a complex interface, and lengthy deployment. Third-party integration and Windows Hello support need improvement. Additional concerns involve improved threat detection and faster technical support responses.

What are the key features of Trellix Endpoint Security Platform?

Centralized Management: Allows seamless integration and scaling with consistent control across environments.
Threat Prevention: Provides comprehensive antivirus and malware protection to secure systems.
Encryption: Ensures data security with robust encryption techniques.
Advanced Reporting: Facilitates detailed insights and analysis for better decision-making.
AI-Driven Detection: Offers reliable threat detection without impacting system performance.

What benefits should users look for in reviews?

Comprehensive Protection: Offers extensive security measures for protecting digital environments.
Ease of Integration: Simplifies the process of incorporating into current systems and processes.
Flexible Policy Deployment: Supports adaptable policy management to meet diverse requirements.
Scalability: Enables growth while maintaining efficiency and security.
Robust Security Features: Provides advanced security measures like DLP and device control.

Trellix Endpoint Security Platform is widely implemented in industries such as banking and government for securing mobile and desktop devices. Its capabilities cover network security, device control, and remote access protection, catering to diverse environments by offering robust cybersecurity management against advanced threats.

Trellix

ZoneAlarm protects you by preventing hackers from remotely accessing and controlling your device, and lets you know which apps have excessive permissions so you can decide whether they threaten your privacy.

Check Point Software Technologies

Sample Customers

CBI Health Group, University Honda, VakifBank

inHouseIT, Seagate Technology

Terma, Optix, Samsung Research Amercia, SF Police Credit Union, Independence Care System, Mattias Thomsen, Carmel Partners, Desert Research Institute, CRIF, FXCM Inc, US State Agency

Buyer's Guide

Endpoint Protection Platform (EPP)

April 2026

Download Free Report

Find out what your peers are saying about CrowdStrike, Microsoft, SentinelOne and others in Endpoint Protection Platform (EPP). Updated: April 2026.

DOWNLOAD NOW

886,077 professionals have used our research since 2012.

We monitor all Endpoint Protection Platform (EPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.