No more typing reviews! Try our Samantha, our new voice AI agent.
Trellix Endpoint Detection and Response (EDR) Logo

Trellix Endpoint Detection and Response (EDR) Reviews

Vendor: Trellix
3.7 out of 5
Leave a review

What is Trellix Endpoint Detection and Response (EDR)?

Reduce Alert Noise

Reduce the time to detect and respond to threats. Trellix EDR helps security analysts quickly prioritize threats and minimize potential disruption.

Get the Trellix Endpoint Detection and Response (EDR) Buyer's Guide and find out what your peers are saying about Trellix Endpoint Detection and Response (EDR), CrowdStrike Falcon, Microsoft Defender for Endpoint and more!
Trellix Endpoint Detection and Response (EDR) is the #24 ranked solution in EDR tools. PeerSpot users give Trellix Endpoint Detection and Response (EDR) an average rating of 7.4 out of 10. Trellix Endpoint Detection and Response (EDR) is most commonly compared to CrowdStrike Falcon: Trellix Endpoint Detection and Response (EDR) vs CrowdStrike Falcon. Trellix Endpoint Detection and Response (EDR) is popular among the large enterprise segment, accounting for 50% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a financial services firm, accounting for 14% of all views.
Buyer's Guide
Trellix Endpoint Detection and Response (EDR)
March 2026
Get the report
Helped 886,664 peers since 2012

Featured Trellix Endpoint Detection and Response (EDR) reviews

Read more reviews

Trellix Endpoint Detection and Response (EDR) mindshare

As of April 2026, the mindshare of Trellix Endpoint Detection and Response (EDR) in the Endpoint Detection and Response (EDR) category stands at 1.0%, up from 0.9% compared to the previous year, according to calculations based on PeerSpot user engagement data.
Endpoint Detection and Response (EDR) Mindshare Distribution
ProductMindshare (%)
Trellix Endpoint Detection and Response (EDR)1.0%
CrowdStrike Falcon7.8%
Microsoft Defender for Endpoint6.2%
Other85.0%
Endpoint Detection and Response (EDR)

PeerResearch reports based on Trellix Endpoint Detection and Response (EDR) reviews

TypeTitleDate
CategoryEndpoint Detection and Response (EDR)Apr 15, 2026Download
ProductReviews, tips, and advice from real usersApr 15, 2026Download
ComparisonTrellix Endpoint Detection and Response (EDR) vs CrowdStrike FalconApr 15, 2026Download
ComparisonTrellix Endpoint Detection and Response (EDR) vs SentinelOne Singularity EndpointApr 15, 2026Download
ComparisonTrellix Endpoint Detection and Response (EDR) vs Microsoft Defender for EndpointApr 15, 2026Download
Suggested products
TitleRatingMindshareRecommending
CrowdStrike Falcon4.37.8%97%139 interviewsAdd to research
Microsoft Defender for Endpoint4.16.2%95%213 interviewsAdd to research
 
 
Key learnings from peers
Last updated Apr 15, 2026

Valuable Features

Trellix Endpoint Detection and Response (EDR) excels in threat intelligence and management with its user-friendly interface. Its highlights include guided analytics, advanced threat protection, ransomware detection, real-time monitoring, process tree analysis, and automated isolation actions. Integration with various systems, central console for endpoint management, scalability, and strong visualization of cyberattacks enhance its value. Behavioral monitoring, policy configuration, and comprehensive threat hunting capabilities strengthen the security posture significantly.
  • "Trellix Endpoint Detection and Response (EDR) has positively impacted my organization with threat exchange and intel, low false positive ratios, and very high uptime values for both inline and spam modes, along with advanced detection and mitigation capabilities ensuring the highest level of protection and proper detection for command and control and bot attacks."
  • "The solution is scalable and the product has a good strategy when everything is in place."
  • "The most valuable features of the solution are the ability to isolate or quarantine devices and block or detect Ransomware and other well-known tools that are used to exploit vulnerabilities on devices."

Room for Improvement

Trellix Endpoint Detection and Response (EDR) requires better integration with other platforms for a unified experience. The dashboard and alerting system need enhancements for user-friendliness and rapid threat detection. High CPU and memory consumption are concerns. Improved technical support and more effective centralized policy enforcement are needed. Spanish users request a dedicated knowledge base. Enhancements in AI-driven threat analysis and workflow automation are essential. Compatibility with various operating systems should be prioritized.
  • "One area where Trellix Endpoint Detection and Response (EDR) can be improved is the lack of device or user mapping."
  • "One of their issues is that they were very much based on agents, whereas most of the other solutions are clientless."
  • "The dashboard and reporting features are not so user-friendly or intuitive, so they need some work."

ROI

Trellix Endpoint Detection and Response enhances IT support efficiency, allows quick investigations, and helps reduce compliance burden by preventing breaches. It maintains customer trust and brand reputation. Some experience measurable returns, especially in regulated environments due to reduced detection and containment times. Others appreciate its cost-effectiveness and visibility but emphasize the need for technical expertise. Some find ROI insufficient and see it primarily as a security measure.

Pricing

Trellix Endpoint Detection and Response (EDR) pricing is generally perceived as reasonable, especially for midsize businesses. The cost typically ranges from $25,000 to $30,000 for six hundred users, with a perpetual license that is renewed annually. Pricing is tier-based, with options for additional costs for extended data retention and advanced features. Though competitive, it may be considered high compared to some solutions and can be affected by exchange rates in specific regions.
  • "Pricing is a problem in South Africa. It could be cheaper here. The rand-to-dollar exchange rate makes it expensive for us. A 25 dollar endpoint cost becomes quite significant when converted to rand."
  • "The price is reasonable."
  • "The pricing is always high."

Popular Use Cases

Organizations primarily utilize Trellix Endpoint Detection and Response (EDR) for endpoint protection and threat hunting. They employ it to identify unknown threats, investigate malicious files, and integrate threat intelligence. Trellix EDR assists in managing threat events, performing forensic investigations, and enhancing endpoint telemetry visibility. It detects attack patterns, provides signature and behavior analysis, and consolidates information into MVISION Insights for threat intelligence, benefiting sectors like banking, government, and energy.

Service and Support

Customers find Trellix Endpoint Detection and Response customer service resource-intensive and sometimes slow, with language barriers in support. Recent mergers have reportedly decreased service quality. Some rate technical support highly, while others find it inadequate, requiring mandatory OEM support. Comparison with competitors shows varied experiences; some find it better than Symantec. There are concerns about insufficient engineers and slow responses, although numerous support channels exist for issue escalation.

Deployment

Trellix EDR's initial setup varies in complexity. Some find it straightforward and quick, especially in cloud deployments, while others experience challenges, particularly with updates and policy enforcement. Timeframes and resource needs differ based on deployment environments, from small setups taking days to larger ones spanning months. Ease is subjective, with seasoned experts finding it simpler compared to beginners. Involving third-party tools or services can optionally expedite the setup process.

Scalability

Several users find Trellix Endpoint Detection and Response (EDR) scalable with cloud-based architecture aiding scalability across small to enterprise environments. Some report ease of scalability, accessing up to many thousands of nodes without significant issues. Users from various sectors, including finance, note its performance can vary. Large deployments are supported, though some experience challenges under high loads or require additional managerial resources. EDR is suitable for diverse business sizes, accommodating varied user requirements.

Stability

Users consider Trellix Endpoint Detection and Response stable, with many rating its stability between eight and nine out of ten. Some encountered resource consumption issues on older systems, but improvements in newer versions have enhanced performance. Good internet connectivity supports effective function. Occasional deployment issues arise from partners, not Trellix itself. While some mention architectural changes causing concerns, most find stability satisfactory. A few report no problems, particularly appreciating threat reduction effectiveness.
These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.
Download our Trellix Endpoint Detection and Response (EDR) Buyer's Guide for additional reliable information.

Review data by company size

By reviewers
Company SizeCount
Small Business10
Midsize Enterprise3
Large Enterprise9
By reviewers
By visitors reading reviews
Company SizeCount
Small Business105
Midsize Enterprise64
Large Enterprise172
By visitors reading reviews

Top industries

By visitors reading reviews
Financial Services Firm
14%
Government
8%
Computer Software Company
8%
University
7%
Manufacturing Company
7%
Comms Service Provider
6%
Energy/Utilities Company
6%
Construction Company
5%
Educational Organization
5%
Outsourcing Company
4%
Healthcare Company
4%
Insurance Company
3%
Marketing Services Firm
3%
Non Profit
2%
Retailer
2%
Performing Arts
2%
Media Company
2%
Aerospace/Defense Firm
2%
Transportation Company
1%
Recreational Facilities/Services Company
1%
Logistics Company
1%
Real Estate/Law Firm
1%
Wholesaler/Distributor
1%
Consumer Goods Company
1%
Pharma/Biotech Company
1%
Legal Firm
1%
Hospitality Company
1%

Compare Trellix Endpoint Detection and Response (EDR) with alternative products

Go!

Learn more about Trellix Endpoint Detection and Response (EDR)

Do More with Existing Resources

Guided investigation automatically asks and answers questions while gathering, summarizing, and visualizing evidence from multiple sources—reducing the need for more SOC resources.

Low-Maintenance Cloud Solution

Cloud-based deployment and analytics enables your skilled security analysts to focus on strategic defense, instead of tool maintenance. Benefit from implementing the right solution for you.

Trellix Endpoint Detection and Response (EDR) was previously known as McAfee MVISION EDR, MVISION EDR, MVISION Endpoint Detection and Response.

Trellix Endpoint Detection and Response (EDR) customers

Sutherland Global Services

Related questions

  • 327
What is the biggest difference between EPP and EDR products?
  • 84
What is the difference between EDR and traditional antivirus?
  • 55
What is your recommendation for a 5-star EDR with low resource consumption for a financial services company?
  • 60
Which is the best EDR for a logistics company with 500-1000 employees?
  • 120
What is the best EDR or XDR product for a company with 9000 employees?
  • 150
What to choose: an endpoint antivirus, an EDR solution or both?
  • 229
Do we need to use both EDR and Antivirus (AV) solutions for better protection of IT assets?
  • 69
How does EternalBlue work?
  • 66
What are the best on-premise Endpoint Security solutions for a Tech Services company with 10,000 employees?
  • 169
Which is better for Endpoint Security: EDR or XDR solutions?

Product Categories

Product Categories
Endpoint Detection and Response (EDR)

Popular Comparisons

Popular Comparisons
CrowdStrike Falcon vs Trellix Endpoint Detection and Response (EDR) Logo
CrowdStrike Falcon vs Trellix Endpoint Detection and Response (EDR)
Microsoft Defender for Endpoint vs Trellix Endpoint Detection and Response (EDR) Logo
Microsoft Defender for Endpoint vs Trellix Endpoint Detection and Response (EDR)
Cortex XDR by Palo Alto Networks vs Trellix Endpoint Detection and Response (EDR) Logo
Cortex XDR by Palo Alto Networks vs Trellix Endpoint Detection and Response (EDR)
SentinelOne Singularity Endpoint vs Trellix Endpoint Detection and Response (EDR) Logo
SentinelOne Singularity Endpoint vs Trellix Endpoint Detection and Response (EDR)
Huntress Managed EDR vs Trellix Endpoint Detection and Response (EDR) Logo
Huntress Managed EDR vs Trellix Endpoint Detection and Response (EDR)
Fortinet FortiEDR vs Trellix Endpoint Detection and Response (EDR) Logo
Fortinet FortiEDR vs Trellix Endpoint Detection and Response (EDR)
Elastic Security vs Trellix Endpoint Detection and Response (EDR) Logo
Elastic Security vs Trellix Endpoint Detection and Response (EDR)
Microsoft Defender XDR vs Trellix Endpoint Detection and Response (EDR) Logo
Microsoft Defender XDR vs Trellix Endpoint Detection and Response (EDR)
Trellix Endpoint Security Platform vs Trellix Endpoint Detection and Response (EDR) Logo
Trellix Endpoint Security Platform vs Trellix Endpoint Detection and Response (EDR)
WatchGuard Firebox vs Trellix Endpoint Detection and Response (EDR) Logo
WatchGuard Firebox vs Trellix Endpoint Detection and Response (EDR)
TrendAI Vision One vs Trellix Endpoint Detection and Response (EDR) Logo
TrendAI Vision One vs Trellix Endpoint Detection and Response (EDR)
Check Point Harmony Endpoint vs Trellix Endpoint Detection and Response (EDR) Logo
Check Point Harmony Endpoint vs Trellix Endpoint Detection and Response (EDR)
Rapid7 InsightIDR vs Trellix Endpoint Detection and Response (EDR) Logo
Rapid7 InsightIDR vs Trellix Endpoint Detection and Response (EDR)
TrendAI Vision One – Endpoint Security vs Trellix Endpoint Detection and Response (EDR) Logo
TrendAI Vision One – Endpoint Security vs Trellix Endpoint Detection and Response (EDR)
Cynet vs Trellix Endpoint Detection and Response (EDR) Logo
Cynet vs Trellix Endpoint Detection and Response (EDR)
See all alternatives
 
Trellix Endpoint Detection and Response (EDR) Reviews Summary
Author infoRatingReview Summary
Business Development Manager at a retailer with 10,001+ employees4.5I find Trellix EDR highly effective for detecting and mitigating advanced threats with low false positives and good ROI. I appreciate its cost-effectiveness, but wish for better device/user mapping and improved performance on busy networks.
Committee Of IT Cybersececurity at a energy/utilities company with 51-200 employees4.0I've used Trellix EDR for six years; it's useful across our multi-site energy network, though managing alerts is overwhelming. It needs better notifications and usability, but it's evolving, and I plan broader training and possibly integrating XDR soon.
Security Administrator at a insurance company with 1,001-5,000 employees4.0I've used Trellix EDR for 16 years, valuing its user-friendliness, reporting, and threat hunting that saves time. It's resource-intensive on servers but easy to manage elsewhere. I'd like more AI integration and automated tasks.
Committee Of IT Cybersececurity at a energy/utilities company with 51-200 employees2.5I use Trellix EDR for endpoint security and continue to seek improvements, including enhanced multi-factor authentication and alerting systems. Although crucial for security, it provides no ROI. Previously, I used McAfee, and I consider upgrading support.
Senior Cyber Security Specialist Architect at a tech consulting company with 11-50 employees4.0I have used Trellix EDR to enhance the security of endpoints and servers with valuable features like behavior monitoring, DLP, and improved automation. However, I wish it would evolve into an XDR with unified management and endpoint activation.
Security Consultant at Trinexia3.5Trellix Endpoint Detection and Response excels in investigative capabilities, resembling a layered approach for comprehensive detection and response. It rapidly resolves attacks, protects data, and ensures compliance, although it needs to build trust and improve its market image.
Head of Data Link at Telecom Egypt4.5Trellix Endpoint Detection and Response (EDR) provides advanced threat detection and extensive attack coverage. Despite its effectiveness, improvements are needed in administrative scalability and user interface. It's highly beneficial with deep insights but requires technical expertise to manage.
IT Management Specialist at a computer software company with 10,001+ employees4.0We use Trellix Endpoint Detection and Response for threat hunting due to its valuable antivirus and DLP features. Despite needing better technical support, particularly with browser plug-ins, we switched from McAfee to Trellix for its price and capabilities.