Try our new research platform with insights from 80,000+ expert users
Trellix Endpoint Detection and Response (EDR) Logo

Trellix Endpoint Detection and Response (EDR) Reviews

Vendor: Trellix
3.7 out of 5
Leave a review

What is Trellix Endpoint Detection and Response (EDR)?

Reduce Alert Noise

Reduce the time to detect and respond to threats. Trellix EDR helps security analysts quickly prioritize threats and minimize potential disruption.

Get the Trellix Endpoint Detection and Response (EDR) Buyer's Guide and find out what your peers are saying about Trellix Endpoint Detection and Response (EDR), CrowdStrike Falcon, Microsoft Defender for Endpoint and more!
Trellix Endpoint Detection and Response (EDR) is the #22 ranked solution in EDR tools. PeerSpot users give Trellix Endpoint Detection and Response (EDR) an average rating of 7.4 out of 10. Trellix Endpoint Detection and Response (EDR) is most commonly compared to CrowdStrike Falcon: Trellix Endpoint Detection and Response (EDR) vs CrowdStrike Falcon. Trellix Endpoint Detection and Response (EDR) is popular among the large enterprise segment, accounting for 60% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a financial services firm, accounting for 12% of all views.
Buyer's Guide
Trellix Endpoint Detection and Response (EDR)
September 2025
Get the report
Helped 868,706 peers since 2012

Featured Trellix Endpoint Detection and Response (EDR) reviews

Read more reviews

Trellix Endpoint Detection and Response (EDR) mindshare

As of October 2025, the mindshare of Trellix Endpoint Detection and Response (EDR) in the Endpoint Detection and Response (EDR) category stands at 1.2%, up from 0.6% compared to the previous year, according to calculations based on PeerSpot user engagement data.
Endpoint Detection and Response (EDR) Market Share Distribution
ProductMarket Share (%)
Trellix Endpoint Detection and Response (EDR)1.2%
CrowdStrike Falcon10.3%
Microsoft Defender for Endpoint9.8%
Other78.7%
Endpoint Detection and Response (EDR)

PeerResearch reports based on Trellix Endpoint Detection and Response (EDR) reviews

TypeTitleDate
CategoryEndpoint Detection and Response (EDR)Oct 2, 2025Download
ProductReviews, tips, and advice from real usersOct 2, 2025Download
ComparisonTrellix Endpoint Detection and Response (EDR) vs CrowdStrike FalconOct 2, 2025Download
ComparisonTrellix Endpoint Detection and Response (EDR) vs SentinelOne Singularity CompleteOct 2, 2025Download
ComparisonTrellix Endpoint Detection and Response (EDR) vs Microsoft Defender for EndpointOct 2, 2025Download
Suggested products
TitleRatingMindshareRecommending
CrowdStrike Falcon4.310.3%97%135 interviewsAdd to research
Microsoft Defender for Endpoint4.19.8%94%198 interviewsAdd to research
 
 
Key learnings from peers

Valuable Features

Trellix Endpoint Detection and Response (EDR) is valued for its guided EDR investigation, scalability, ransomware detection, isolation capabilities, and user-friendly interface. Its integrated approach combines EDR and antivirus functionalities. Features like one-click recovery, visualization of cyberattacks, behavior monitoring, advanced threat protection, and threat hunting are vital. It excels in real-time monitoring, incident reports, and dashboard analytics. Its comprehensive threat detection and investigative capabilities ensure effective response and coverage.
  • "Trellix has done a good job reducing threats."
  • "The product and the services we have are quite good."
  • "The most valuable feature of the solution is its area for threat detection."

Room for Improvement

Trellix Endpoint Detection and Response (EDR) requires improvement in several areas. Resource consumption is high, straining CPU and RAM. The alert system lacks efficiency, requiring users to manually check alerts. The interface and dashboard need enhancements for user-friendliness. Integration with external platforms is limited. Historical search and automation features are inadequate. Compatibility with macOS is insufficient, and technical support is lacking. Endpoint detection relies too heavily on a signature base.
  • "I remember doing many tickets for Trellix support, and my EDR was not properly functioning. I didn't feel the detection or the real protection."
  • "I need some protection, possibly multi-factor authentication improvements."
  • "When it comes to some unknown fileless attacks, the tool is not able to detect them properly, making it an area where improvements are required."

ROI

Users have varied experiences with ROI from Trellix Endpoint Detection and Response (EDR). Some observe a positive return, integrating it into services, while others see it merely as a security policy. Trellix EDR offers AI-like capabilities, enhancing investigation speed, avoiding compliance issues, and protecting brand reputation. Despite the cost-effective nature and need for technical oversight, users find value in its comprehensive visibility and security enhancement. Ratings vary, with some rating it four out of ten.

Pricing

Trellix Endpoint Detection and Response (EDR) pricing suits midsized businesses but may not be ideal for startups. Costs range from $25,000 to $30,000 for 600 users, generally perceived as reasonable. Pricing involves annual licensing with additional charges for data retention beyond thirty days, and a minimum three-year contract. Some rate it moderately expensive compared to other solutions, especially due to exchange rates and advanced features. Flexibility and ease in managing licensing costs are appreciated.
  • "Pricing is a problem in South Africa. It could be cheaper here. The rand-to-dollar exchange rate makes it expensive for us. A 25 dollar endpoint cost becomes quite significant when converted to rand."
  • "The price is reasonable."
  • "The pricing is always high."

Popular Use Cases

Trellix Endpoint Detection and Response (EDR) is primarily used for endpoint protection, threat hunting, and incident response. Organizations utilize it for identifying and managing threats, analyzing suspicious files, and integrating with Trellix SIEM. It supports advanced threat intelligence, early attack detection, and forensic investigations. Trellix EDR scans network activities, provides endpoint and server security, and aids in malware detection, making it valuable for banking and government sectors.

Service and Support

Customers express mixed opinions about Trellix Endpoint Detection and Response (EDR) support. Some find it satisfactory or comparable to competitors like Symantec Broadcom, while others report issues such as language barriers and slow response times. OEM support is deemed crucial but sometimes ineffective. Ratings vary, with some giving high scores and others suggesting room for improvement. Multiple support channels are available, though certain users experience delays and inefficiencies.

Deployment

Users found Trellix Endpoint Detection and Response initial setup varied in complexity. Some experienced straightforward installations, often rating it highly, while others faced challenges with policy aggregation and resource demands. Deployment times ranged from a few days to several months, influenced by cloud or on-premises preferences. Admin tasks were complex for some users, requiring additional support. Despite difficulties, many noted ease with proper guidance and tools, while organizations with endpoint management systems found deployment simplified.

Scalability

Trellix Endpoint Detection and Response (EDR) exhibits strong scalability, deploying without traditional hardware constraints. Many entities appreciate its seamless expansion, capable of supporting thousands of users and robust centralized management through cloud infrastructure. It's ideal for varied business sizes, from small firms to large enterprises. While some have noted occasional performance challenges, on the whole, users find it well-suited for extensive environments and highly adaptable to different organizational needs.

Stability

Trellix Endpoint Detection and Response (EDR) is regarded as having good stability. Many rate it highly, mentioning it as stable with improved versions resolving past performance issues. A few have noted that browser-related issues remain. Stability ratings vary, with several users giving it eight or nine out of ten. Some problems arise from incorrect deployments, not from Trellix EDR itself. Stability can require knowledgeable handling for optimal performance.
These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.
Download our Trellix Endpoint Detection and Response (EDR) Buyer's Guide for additional reliable information.

Review data by company size

By reviewers
Company SizeCount
Small Business10
Midsize Enterprise3
Large Enterprise7
By reviewers
By visitors reading reviews
Company SizeCount
Small Business78
Midsize Enterprise48
Large Enterprise192
By visitors reading reviews

Top industries

By visitors reading reviews
Computer Software Company
12%
Financial Services Firm
12%
Government
11%
Manufacturing Company
9%
University
5%
Comms Service Provider
5%
Educational Organization
5%
Insurance Company
4%
Energy/Utilities Company
4%
Construction Company
3%
Healthcare Company
3%
Outsourcing Company
3%
Non Profit
2%
Transportation Company
2%
Performing Arts
2%
Retailer
2%
Aerospace/Defense Firm
2%
Media Company
2%
Wholesaler/Distributor
2%
Pharma/Biotech Company
1%
Recreational Facilities/Services Company
1%
Consumer Goods Company
1%
Real Estate/Law Firm
1%
International Affairs Institute
1%
Hospitality Company
1%
Logistics Company
1%
Legal Firm
1%

Compare Trellix Endpoint Detection and Response (EDR) with alternative products

Go!

Learn more about Trellix Endpoint Detection and Response (EDR)

Do More with Existing Resources

Guided investigation automatically asks and answers questions while gathering, summarizing, and visualizing evidence from multiple sources—reducing the need for more SOC resources.

Low-Maintenance Cloud Solution

Cloud-based deployment and analytics enables your skilled security analysts to focus on strategic defense, instead of tool maintenance. Benefit from implementing the right solution for you.

Trellix Endpoint Detection and Response (EDR) was previously known as McAfee MVISION EDR, MVISION EDR, MVISION Endpoint Detection and Response.

Trellix Endpoint Detection and Response (EDR) customers

Sutherland Global Services

Related questions

  • 683
What is the biggest difference between EPP and EDR products?
  • 106
What is the difference between EDR and traditional antivirus?
  • 22
What is your recommendation for a 5-star EDR with low resource consumption for a financial services company?
  • 24
Which is the best EDR for a logistics company with 500-1000 employees?
  • 55
What is the best EDR or XDR product for a company with 9000 employees?
  • 90
What to choose: an endpoint antivirus, an EDR solution or both?
  • 214
Do we need to use both EDR and Antivirus (AV) solutions for better protection of IT assets?
  • 55
How does EternalBlue work?
  • 66
What are the best on-premise Endpoint Security solutions for a Tech Services company with 10,000 employees?
  • 86
Which is better for Endpoint Security: EDR or XDR solutions?

Product Categories

Product Categories
Endpoint Detection and Response (EDR)

Popular Comparisons

Popular Comparisons
CrowdStrike Falcon vs Trellix Endpoint Detection and Response (EDR) Logo
CrowdStrike Falcon vs Trellix Endpoint Detection and Response (EDR)
Microsoft Defender for Endpoint vs Trellix Endpoint Detection and Response (EDR) Logo
Microsoft Defender for Endpoint vs Trellix Endpoint Detection and Response (EDR)
Fortinet FortiEDR vs Trellix Endpoint Detection and Response (EDR) Logo
Fortinet FortiEDR vs Trellix Endpoint Detection and Response (EDR)
SentinelOne Singularity Complete vs Trellix Endpoint Detection and Response (EDR) Logo
SentinelOne Singularity Complete vs Trellix Endpoint Detection and Response (EDR)
Cortex XDR by Palo Alto Networks vs Trellix Endpoint Detection and Response (EDR) Logo
Cortex XDR by Palo Alto Networks vs Trellix Endpoint Detection and Response (EDR)
Elastic Security vs Trellix Endpoint Detection and Response (EDR) Logo
Elastic Security vs Trellix Endpoint Detection and Response (EDR)
Trellix Endpoint Security Platform vs Trellix Endpoint Detection and Response (EDR) Logo
Trellix Endpoint Security Platform vs Trellix Endpoint Detection and Response (EDR)
Trend Vision One vs Trellix Endpoint Detection and Response (EDR) Logo
Trend Vision One vs Trellix Endpoint Detection and Response (EDR)
Cynet vs Trellix Endpoint Detection and Response (EDR) Logo
Cynet vs Trellix Endpoint Detection and Response (EDR)
VMware Carbon Black Endpoint vs Trellix Endpoint Detection and Response (EDR) Logo
VMware Carbon Black Endpoint vs Trellix Endpoint Detection and Response (EDR)
Kaspersky Endpoint Detection and Response Expert vs Trellix Endpoint Detection and Response (EDR) Logo
Kaspersky Endpoint Detection and Response Expert vs Trellix Endpoint Detection and Response (EDR)
Kaspersky Endpoint Detection and Response vs Trellix Endpoint Detection and Response (EDR) Logo
Kaspersky Endpoint Detection and Response vs Trellix Endpoint Detection and Response (EDR)
Sangfor Endpoint Secure vs Trellix Endpoint Detection and Response (EDR) Logo
Sangfor Endpoint Secure vs Trellix Endpoint Detection and Response (EDR)
Trellix Active Response vs Trellix Endpoint Detection and Response (EDR) Logo
Trellix Active Response vs Trellix Endpoint Detection and Response (EDR)
See all alternatives
 
Trellix Endpoint Detection and Response (EDR) Reviews Summary
Author infoRatingReview Summary
Committee of IT Cybersececurity at a energy/utilities company with 51-200 employees2.5I use Trellix EDR for endpoint security and continue to seek improvements, including enhanced multi-factor authentication and alerting systems. Although crucial for security, it provides no ROI. Previously, I used McAfee, and I consider upgrading support.
Head of Data Link at Telecom Egypt4.5Trellix Endpoint Detection and Response (EDR) provides advanced threat detection and extensive attack coverage. Despite its effectiveness, improvements are needed in administrative scalability and user interface. It's highly beneficial with deep insights but requires technical expertise to manage.
Group IT Manager at Discova4.0In my company, we use Trellix Endpoint Detection and Response (EDR) for endpoint protection and integration with Trellix SIEM. However, combining it with McAfee MVISION Endpoint into a single solution would simplify IT management and reduce workload.
IT Management Specialist at a computer software company with 10,001+ employees4.0We use Trellix Endpoint Detection and Response for threat hunting due to its valuable antivirus and DLP features. Despite needing better technical support, particularly with browser plug-ins, we switched from McAfee to Trellix for its price and capabilities.
Security Consultant at Trinexia3.5Trellix Endpoint Detection and Response excels in investigative capabilities, resembling a layered approach for comprehensive detection and response. It rapidly resolves attacks, protects data, and ensures compliance, although it needs to build trust and improve its market image.
IT Security Specialist at Commercial Bank of Ethiopia3.5No summary available
Senior Vice President IT at AS IT Consulting Pvt. Ltd.4.5I find Trellix EDR valuable for its one-click recovery of encrypted files and exceptional threat hunting. However, it needs improvements in compatibility with Windows and macOS, and it has high CPU usage and large agent size compared to its competitors SentinelOne and CrowdStrike.
Technical Associate at Valuepoint Systems4.0I use Trellix EDR for malware detection in banking and government sectors. Its threat detection is valuable, but it struggles with unknown fileless attacks and requires better support. The tool is cost-effective despite needing multiple agents and on-premises integration.