No more typing reviews! Try our Samantha, our new voice AI agent.
Trellix Endpoint Detection and Response (EDR) Logo

Trellix Endpoint Detection and Response (EDR) Reviews

Vendor: Trellix
3.8 out of 5
Leave a review

What is Trellix Endpoint Detection and Response (EDR)?

Trellix Endpoint Detection and Response (EDR) offers advanced threat detection using AI-driven analytics, real-time monitoring, and integration with the MITRE Framework, enhancing security through comprehensive detection and response features.

Get the Trellix Endpoint Detection and Response (EDR) Buyer's Guide and find out what your peers are saying about Trellix Endpoint Detection and Response (EDR), CrowdStrike Falcon, Microsoft Defender for Endpoint and more!
Trellix Endpoint Detection and Response (EDR) is the #23 ranked solution in EDR tools. PeerSpot users give Trellix Endpoint Detection and Response (EDR) an average rating of 7.6 out of 10. Trellix Endpoint Detection and Response (EDR) is most commonly compared to CrowdStrike Falcon: Trellix Endpoint Detection and Response (EDR) vs CrowdStrike Falcon. Trellix Endpoint Detection and Response (EDR) is popular among the large enterprise segment, accounting for 51% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a financial services firm, accounting for 14% of all views.
Buyer's Guide
Trellix Endpoint Detection and Response (EDR)
April 2026
Get the report
Helped 892,487 peers since 2012

Featured Trellix Endpoint Detection and Response (EDR) reviews

Read more reviews

Trellix Endpoint Detection and Response (EDR) mindshare

As of May 2026, the mindshare of Trellix Endpoint Detection and Response (EDR) in the Endpoint Detection and Response (EDR) category stands at 1.0%, up from 1.0% compared to the previous year, according to calculations based on PeerSpot user engagement data.
Endpoint Detection and Response (EDR) Mindshare Distribution
ProductMindshare (%)
Trellix Endpoint Detection and Response (EDR)1.0%
CrowdStrike Falcon7.7%
Microsoft Defender for Endpoint6.0%
Other85.3%
Endpoint Detection and Response (EDR)

PeerResearch reports based on Trellix Endpoint Detection and Response (EDR) reviews

TypeTitleDate
CategoryEndpoint Detection and Response (EDR)May 1, 2026Download
ProductReviews, tips, and advice from real usersMay 1, 2026Download
ComparisonTrellix Endpoint Detection and Response (EDR) vs CrowdStrike FalconMay 1, 2026Download
ComparisonTrellix Endpoint Detection and Response (EDR) vs SentinelOne Singularity EndpointMay 1, 2026Download
ComparisonTrellix Endpoint Detection and Response (EDR) vs Microsoft Defender for EndpointMay 1, 2026Download
Suggested products
TitleRatingMindshareRecommending
CrowdStrike Falcon4.37.7%97%140 interviewsAdd to research
Microsoft Defender for Endpoint4.16.0%95%215 interviewsAdd to research
 
 
Key learnings from peers
Last updated Apr 26, 2026

Valuable Features

Trellix Endpoint Detection and Response (EDR) is valued for its user-friendly interface, advanced threat detection, integration capabilities, and robust threat hunting features. Users highlight its real-time monitoring, effective incident response, centralized management, and seamless integration with other security systems. The platform offers comprehensive threat intelligence, automated analysis, and strong forensic capabilities. It enhances security posture through behavior monitoring, policy configuration, malicious activity isolation, and detailed reporting, supported by excellent customer service and system scalability.
  • "Trellix Endpoint Detection and Response (EDR) has positively impacted our organization by improving overall efficiency, overall detection and response capabilities, and the capability to improve threat detections as well as the overall efficiency, time utilized, resource management, and analytic use cases review, significantly enhancing the business functionality."
  • "Trellix Endpoint Detection and Response (EDR) has positively impacted my organization with threat exchange and intel, low false positive ratios, and very high uptime values for both inline and spam modes, along with advanced detection and mitigation capabilities ensuring the highest level of protection and proper detection for command and control and bot attacks."
  • "The solution is scalable and the product has a good strategy when everything is in place."

Room for Improvement

Trellix Endpoint Detection and Response needs enhancement in AI-driven reporting, threat analysis, and policy automation. Users face high CPU and RAM utilization, a lack of integration with other platforms, and poor user-friendliness. Technical support and the alert system require improvement, with integration between the EDR and external systems desired. The dashboard should be streamlined for simplicity, and compatibility issues with macOS persist. Resource intensity and administrative scalability are also concerns.
  • "One area where Trellix Endpoint Detection and Response (EDR) can be improved is the lack of device or user mapping."
  • "One of their issues is that they were very much based on agents, whereas most of the other solutions are clientless."
  • "The dashboard and reporting features are not so user-friendly or intuitive, so they need some work."

ROI

Users report mixed outcomes from Trellix Endpoint Detection and Response (EDR). Some entities have observed a measurable return on investment, noting faster detection and containment, improved operational efficiency, and enhanced data security. In particular, regulated or critical infrastructure environments benefit. Others view it primarily as a necessary security policy rather than a profit-generating tool. Users highlight its capabilities in threat exchange, intel, and reducing false positives, with some citing the need for technical expertise and on-premises integration.

Pricing

Trellix Endpoint Detection and Response (EDR) pricing is typical for mid-sized enterprises, offering tier-based models with additional costs for extended data retention and integration. Users generally find it reasonable, with varying opinions on cost-effectiveness depending on region and organization size. Enterprise buyers should consider potential long-term commitments, as some contracts require three-year minimums. Licensing is manageable, with agent-based costs and additional fees for advanced features. Pricing rates range from moderate to expensive, comparable to other market solutions.
  • "Pricing is a problem in South Africa. It could be cheaper here. The rand-to-dollar exchange rate makes it expensive for us. A 25 dollar endpoint cost becomes quite significant when converted to rand."
  • "The price is reasonable."
  • "The pricing is always high."

Popular Use Cases

Organizations utilize Trellix Endpoint Detection and Response (EDR) for endpoint protection, threat hunting, and detecting suspicious activities like ransomware and fileless malware. Utilizing behavior-based analysis and machine learning, Trellix EDR consolidates threat intelligence, integrates with security systems, and monitors endpoint activity. Companies in diverse sectors, including energy, banking, and government, prioritize endpoint security, detection, and response, benefitting from Trellix's scalable detection capabilities, threat investigation, signature and behavior checks, and low false positive rates.

Service and Support

Trellix Endpoint Detection and Response (EDR) receives mixed feedback on customer service and support. Some find the support excellent, with high ratings, while others experience delays and insufficient engineer availability. Language barriers and offshore support are concerns for some US customers. Their experience varies with some satisfied by swift responses, while others report struggles when accessing support through regular channels, citing a need for improved knowledge and timely intervention.

Deployment

Initial setup of Trellix Endpoint Detection and Response (EDR) varies. Some find it straightforward, others face challenges with policy aggregation and configuration complexity. Deployment time ranges from minutes to months, depending on the environment size. Updates and policy enforcement can complicate the process. Cloud deployment is common, while on-premises setups address security concerns. Beginners may struggle, though experienced users find it manageable. Third-party tools and cloud services often aid deployment.

Scalability

Trellix Endpoint Detection and Response (EDR) is widely recognized for its scalability. Users find it scalable, with seamless deployment on various networks and cloud infrastructures allowing centralized management. It's suited for small to large enterprises, including banking environments where thousands of users operate. Despite some reports of it functioning slowly, most users rate its scalability favorably, appreciating its capacity to support extensive user bases and networks.

Stability

Users find Trellix Endpoint Detection and Response (EDR) generally stable, with ratings often between eight and nine out of ten for stability. Some note high resource consumption leading to performance issues. Instances of past problems on certain systems, such as Windows 10, are mentioned, but newer versions are seen as improved. Stability may be affected by incorrect deployments rather than inherent issues. The service effectively reduces threats, with users noting improvements over time.
These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.
Download our Trellix Endpoint Detection and Response (EDR) Buyer's Guide for additional reliable information.

Review data by company size

By reviewers
Company SizeCount
Small Business10
Midsize Enterprise3
Large Enterprise10
By reviewers
By visitors reading reviews
Company SizeCount
Small Business105
Midsize Enterprise60
Large Enterprise173
By visitors reading reviews

Top industries

By visitors reading reviews
Financial Services Firm
14%
Computer Software Company
8%
Government
7%
Manufacturing Company
7%
University
7%
Comms Service Provider
6%
Energy/Utilities Company
6%
Educational Organization
5%
Construction Company
5%
Healthcare Company
4%
Outsourcing Company
4%
Insurance Company
3%
Marketing Services Firm
3%
Aerospace/Defense Firm
2%
Retailer
2%
Non Profit
2%
Performing Arts
2%
Media Company
2%
Transportation Company
1%
Recreational Facilities/Services Company
1%
Wholesaler/Distributor
1%
Real Estate/Law Firm
1%
Consumer Goods Company
1%
Logistics Company
1%
Legal Firm
1%
Hospitality Company
1%
Museum Or Institution
1%
Pharma/Biotech Company
1%

Compare Trellix Endpoint Detection and Response (EDR) with alternative products

Go!

Learn more about Trellix Endpoint Detection and Response (EDR)

Trellix EDR provides users with tools for threat hunting, powerful forensic capabilities, and intuitive dashboards. It integrates with diverse systems and supports cloud-based multi-site configurations, which facilitates a more robust security posture. With features like effective quarantine measures, behavior monitoring, and automation, it enhances operational efficiency. Despite its strengths, areas for refinement include better AI-driven threat analysis, improved resource efficiency, and faster processing times. Enhancing detection capabilities for unknown threats and improving integration with other tools can significantly upgrade performance and usability.

What features define Trellix EDR?
  • Advanced Threat Detection: Leverages AI analytics for comprehensive threat identification.
  • Threat Hunting: Empowers users to proactively search for threats.
  • Real-Time Monitoring: Provides immediate insights into security incidents and status.
  • Integration with MITRE Framework: Ensures thorough detection and response alignment.
  • Forensic Capabilities: Offers tools for detailed investigation of security events.
  • Cloud-Based Support: Facilitates configuration for multi-site environments.
What benefits can users expect?
  • Enhanced Threat Intelligence: Improved detection capabilities for seamless integration with SIEM systems.
  • Operational Efficiency: Automation and intuitive dashboards increase productivity.
  • Robust Risk Management: Comprehensive protection against advanced threats such as ransomware.
  • Zero Trust Compliance: Telemetry visibility aligns with compliance standards.

Trellix EDR is widely implemented in industries for endpoint protection and incident response. It helps protect workstations and improve threat intelligence by supporting integrations with cloud security and SIEM. Users benefit from its ability to identify malicious files and ransomware while adhering to zero-trust principles through improved telemetry visibility.

Trellix Endpoint Detection and Response (EDR) was previously known as McAfee MVISION EDR, MVISION EDR, MVISION Endpoint Detection and Response.

Trellix Endpoint Detection and Response (EDR) customers

Sutherland Global Services

Related questions

  • 320
What is the biggest difference between EPP and EDR products?
  • 99
What is the difference between EDR and traditional antivirus?
  • 70
What is your recommendation for a 5-star EDR with low resource consumption for a financial services company?
  • 72
Which is the best EDR for a logistics company with 500-1000 employees?
  • 144
What is the best EDR or XDR product for a company with 9000 employees?
  • 175
What to choose: an endpoint antivirus, an EDR solution or both?
  • 259
Do we need to use both EDR and Antivirus (AV) solutions for better protection of IT assets?
  • 82
How does EternalBlue work?
  • 76
What are the best on-premise Endpoint Security solutions for a Tech Services company with 10,000 employees?
  • 186
Which is better for Endpoint Security: EDR or XDR solutions?

Product Categories

Product Categories
Endpoint Detection and Response (EDR)

Popular Comparisons

Popular Comparisons
CrowdStrike Falcon vs Trellix Endpoint Detection and Response (EDR) Logo
CrowdStrike Falcon vs Trellix Endpoint Detection and Response (EDR)
Microsoft Defender for Endpoint vs Trellix Endpoint Detection and Response (EDR) Logo
Microsoft Defender for Endpoint vs Trellix Endpoint Detection and Response (EDR)
Cortex XDR by Palo Alto Networks vs Trellix Endpoint Detection and Response (EDR) Logo
Cortex XDR by Palo Alto Networks vs Trellix Endpoint Detection and Response (EDR)
SentinelOne Singularity Endpoint vs Trellix Endpoint Detection and Response (EDR) Logo
SentinelOne Singularity Endpoint vs Trellix Endpoint Detection and Response (EDR)
Huntress Managed EDR vs Trellix Endpoint Detection and Response (EDR) Logo
Huntress Managed EDR vs Trellix Endpoint Detection and Response (EDR)
Elastic Security vs Trellix Endpoint Detection and Response (EDR) Logo
Elastic Security vs Trellix Endpoint Detection and Response (EDR)
Trellix Endpoint Security Platform vs Trellix Endpoint Detection and Response (EDR) Logo
Trellix Endpoint Security Platform vs Trellix Endpoint Detection and Response (EDR)
Microsoft Defender XDR vs Trellix Endpoint Detection and Response (EDR) Logo
Microsoft Defender XDR vs Trellix Endpoint Detection and Response (EDR)
Fortinet FortiEDR vs Trellix Endpoint Detection and Response (EDR) Logo
Fortinet FortiEDR vs Trellix Endpoint Detection and Response (EDR)
WatchGuard Firebox vs Trellix Endpoint Detection and Response (EDR) Logo
WatchGuard Firebox vs Trellix Endpoint Detection and Response (EDR)
TrendAI Vision One vs Trellix Endpoint Detection and Response (EDR) Logo
TrendAI Vision One vs Trellix Endpoint Detection and Response (EDR)
Check Point Harmony Endpoint vs Trellix Endpoint Detection and Response (EDR) Logo
Check Point Harmony Endpoint vs Trellix Endpoint Detection and Response (EDR)
Rapid7 InsightIDR vs Trellix Endpoint Detection and Response (EDR) Logo
Rapid7 InsightIDR vs Trellix Endpoint Detection and Response (EDR)
TrendAI Vision One – Endpoint Security vs Trellix Endpoint Detection and Response (EDR) Logo
TrendAI Vision One – Endpoint Security vs Trellix Endpoint Detection and Response (EDR)
Cynet vs Trellix Endpoint Detection and Response (EDR) Logo
Cynet vs Trellix Endpoint Detection and Response (EDR)
See all alternatives
 
Trellix Endpoint Detection and Response (EDR) Reviews Summary
Author infoRatingReview Summary
Business Development Manager at a retailer with 10,001+ employees4.5I find Trellix EDR highly effective for detecting and mitigating advanced threats with low false positives and good ROI. I appreciate its cost-effectiveness, but wish for better device/user mapping and improved performance on busy networks.
Committee Of IT Cybersececurity at a energy/utilities company with 51-200 employees4.0I've used Trellix EDR for six years; it's useful across our multi-site energy network, though managing alerts is overwhelming. It needs better notifications and usability, but it's evolving, and I plan broader training and possibly integrating XDR soon.
Security Administrator at a insurance company with 1,001-5,000 employees4.0I've used Trellix EDR for 16 years, valuing its user-friendliness, reporting, and threat hunting that saves time. It's resource-intensive on servers but easy to manage elsewhere. I'd like more AI integration and automated tasks.
Cyber Security Senior Specialist at a tech vendor with 10,001+ employees5.0I rate Trellix EDR 10/10 for its excellent AI-driven threat detection, automated response, and forensic capabilities, greatly improving our efficiency and ROI. It's stable, scalable, and superior to alternatives, with minor support improvements desired.
Committee Of IT Cybersececurity at a energy/utilities company with 51-200 employees2.5I use Trellix EDR for endpoint security and continue to seek improvements, including enhanced multi-factor authentication and alerting systems. Although crucial for security, it provides no ROI. Previously, I used McAfee, and I consider upgrading support.
Senior Cyber Security Specialist Architect at a outsourcing company with 11-50 employees4.0I have used Trellix EDR to enhance the security of endpoints and servers with valuable features like behavior monitoring, DLP, and improved automation. However, I wish it would evolve into an XDR with unified management and endpoint activation.
Security Consultant at Trinexia3.5Trellix Endpoint Detection and Response excels in investigative capabilities, resembling a layered approach for comprehensive detection and response. It rapidly resolves attacks, protects data, and ensures compliance, although it needs to build trust and improve its market image.
Head of Data Link at Telecom Egypt4.5Trellix Endpoint Detection and Response (EDR) provides advanced threat detection and extensive attack coverage. Despite its effectiveness, improvements are needed in administrative scalability and user interface. It's highly beneficial with deep insights but requires technical expertise to manage.