CrowdStrike Falcon vs Trellix Endpoint Detection and Response (EDR) comparison

CrowdStrike Falcon vs. Trellix Endpoint Detection and Response (EDR)

June 2025

Download the complete report

Helped 856,873 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

ROI

Sentiment score

7.4

CrowdStrike Falcon enhances productivity and security, reducing costs and downtime while efficiently managing threats with rapid deployment and detection.

Sentiment score

5.8

Trellix EDR offers improved security and compliance but has mixed reviews on cost-effectiveness and management needs.

CrowdStrike Falcon saves time and offers good value for money, especially for enterprise companies, because it can stop breaches.

BambangTrisilo

IT consultant at Asuransi Ramayana

For more quotes and insights, download the CrowdStrike Falcon report

No quotes available

For more quotes and insights, download the Trellix Endpoint Detection and Response (EDR) report

Customer Service

Sentiment score

7.0

CrowdStrike Falcon support is valued for responsiveness and expertise, though growth causes delays; premium support is highly rated.

Sentiment score

8.1

Trellix EDR customer service quality is inconsistent, with mixed reviews on response times, language barriers, and support effectiveness.

On a scale of one to ten, I would rate the technical support as a 10 because they resolve many issues for us.

Mahmoud Younes

Cybersecurity Infrastructure at VaporVM

The CrowdStrike team is very efficient; I would rate them ten out of ten.

Security Analyst at NTT Ltd

They could improve by initiating calls for high-priority cases instead of just opening tickets.

For more quotes and insights, download the CrowdStrike Falcon report

Information Security Specialist at Arab Open University

I have contracted support and also have an operating control so I can get various types of support.

For more quotes and insights, download the Trellix Endpoint Detection and Response (EDR) report

Committee of IT Cybersececurity at a energy/utilities company with 51-200 employees

Scalability Issues

Sentiment score

7.9

CrowdStrike Falcon's scalability and adaptability make it ideal for diverse platforms, though costs may limit expansive deployments.

Sentiment score

7.5

Trellix EDR provides scalable solutions for businesses of all sizes, despite some concerns about operational issues and performance.

It has adequate coverage and is easy to deploy.

For more quotes and insights, download the CrowdStrike Falcon report

Senior Principal Information Security Analyst at Veritas Technologies LLC

In terms of scalability, I find CrowdStrike to be stable, and I have not encountered any limitations with it.

Mahmoud Younes

Cybersecurity Infrastructure at VaporVM

There's no scalability limitation from CrowdStrike itself, as it just requires agent deployment.

Bhupesh-Sharma

Large account Manager at Softcell Technologies Limited

No quotes available

For more quotes and insights, download the Trellix Endpoint Detection and Response (EDR) report

Stability Issues

Sentiment score

8.1

CrowdStrike Falcon is highly regarded for its stability, efficiency, and reliability, with minor update issues quickly resolved.

Sentiment score

7.6

Trellix EDR is praised for stability and performance, but some browser and deployment issues have been noted.

I have never seen instability in the CrowdStrike tool.

Security Analyst at NTT Ltd

We are following N-1 versions across our environment, which is stable.

Senior Principal Information Security Analyst at Veritas Technologies LLC

The biggest issue occurred when every computer worldwide experienced a blue screen.

For more quotes and insights, download the CrowdStrike Falcon report

Information Security Specialist at Arab Open University

No quotes available

For more quotes and insights, download the Trellix Endpoint Detection and Response (EDR) report

Room For Improvement

CrowdStrike Falcon needs system integration, better reporting, reduced false positives, enhanced support, advanced features, and flexible pricing.

Trellix EDR needs enhanced performance, integration, user interface, historical search, and streamlined management for better user experience.

Simplifying the querying process, such as using double quote queries or directly obtaining logs based on IP addresses or usernames, would be beneficial.

Security Analyst at NTT Ltd

Another concern is CrowdStrike's GUI. It changes annually, making it hard to work and find options.

For more quotes and insights, download the CrowdStrike Falcon report

Senior Principal Information Security Analyst at Veritas Technologies LLC

Threat prevention should be their first priority.

Bhim Arora

Group Manager at HCLSoftware

I am seeing, for workflows, some sort of ethical hacking to test our environment.

For more quotes and insights, download the Trellix Endpoint Detection and Response (EDR) report

Committee of IT Cybersececurity at a energy/utilities company with 51-200 employees

Setup Cost

CrowdStrike Falcon's pricing ranges from $30-$100 per user annually, ideal for large enterprises but costly for smaller businesses.

Trellix EDR pricing starts at $25,000, offers flexibility for startups, but advanced features and retention fees can increase costs.

It is expensive compared to SentinelOne, but as the market leader, it is worth it.

Senior Principal Information Security Analyst at Veritas Technologies LLC

The licensing cost and setup costs are affordable.

Rojal Barreto

Computer Engineer at OIC, Alshirawi

The solution is a bit expensive.

For more quotes and insights, download the CrowdStrike Falcon report

Information Security Specialist at Arab Open University

No quotes available

For more quotes and insights, download the Trellix Endpoint Detection and Response (EDR) report

Valuable Features

CrowdStrike Falcon provides robust threat intelligence, AI-driven detection, and seamless integration with minimal system impact and intuitive interface.

Trellix Endpoint Detection and Response provides scalable, automated cybersecurity with real-time monitoring, threat visualization, and seamless integration capabilities.

I can investigate by accessing the customer's host based on the RTR environment and utilize host search to know details for the past seven days, including logins, processes, file installations, malicious processes, and network connections.

Security Analyst at NTT Ltd

The real-time analytics aspect of CrowdStrike performs well because we get all logs in real-time, with no delay, allowing us to take action immediately.

Mahmoud Younes

Cybersecurity Infrastructure at VaporVM

Being an EDR solution, it helps us identify attacks in real-time.

For more quotes and insights, download the CrowdStrike Falcon report

Information Security Specialist at Arab Open University

I have spent efforts on training our managers and others - what can software do if the knowledge base is low?

For more quotes and insights, download the Trellix Endpoint Detection and Response (EDR) report

Committee of IT Cybersececurity at a energy/utilities company with 51-200 employees

Categories and Ranking

CrowdStrike Falcon

Ranking in Endpoint Detection and Response (EDR)

1st

Average Rating

8.6

Reviews Sentiment

7.3

Number of Reviews

132

Ranking in other categories

Security Information and Event Management (SIEM) (6th), Endpoint Protection Platform (EPP) (2nd), Threat Intelligence Platforms (1st), Extended Detection and Response (XDR) (1st), Attack Surface Management (ASM) (1st), Identity Threat Detection and Response (ITDR) (2nd), AI-Powered Cybersecurity Platforms (1st)

Trellix Endpoint Detection ...

Ranking in Endpoint Detection and Response (EDR)

23rd

Average Rating

7.4

Reviews Sentiment

7.2

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of June 2025, in the Endpoint Detection and Response (EDR) category, the mindshare of CrowdStrike Falcon is 15.0%, down from 15.3% compared to the previous year. The mindshare of Trellix Endpoint Detection and Response (EDR) is 1.1%, up from 0.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Detection and Response (EDR)

Featured Reviews

Provides effective real-time threat detection with potential for cost optimization

Information Security Specialist at Arab Open University

Some features such as device control, firewall management, and file analysis are standalone products that we need to purchase separately. If these features came out of the box within the product, it would be much more beneficial for us. Other providers such as SentinelOne include these features in their base product. We attended a CrowdStrike Falcon event where they discussed some shallow AI features, but we cannot see these in our panel yet. We work with different solutions such as Darktrace and SocRadar, where AI features are automatically displayed in our dashboards after release. However, for CrowdStrike Falcon, we cannot see these features.

Read full review

Enhancements needed for security alerts while ongoing training strengthens defenses

Committee of IT Cybersececurity at a energy/utilities company with 51-200 employees

This year, I am going to improve some tools to be installed or maybe acquire some services to better manage our web services and work with my coworkers. Application fiber also needs attention. Nowadays I am making applications that are publicly seen on the Internet. I need some protection, possibly multi-factor authentication improvements. I am seeing, for workflows, some sort of ethical hacking to test our environment. Knowledge of everything, not only the product - maybe some kind of alerts - needs to emerge. I see the current ones as very low-tier, and they must improve.

Read full review

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.

See recommendations

856,873 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

15%

Financial Services Firm

10%

Manufacturing Company

Government

Computer Software Company

14%

Financial Services Firm

12%

Government

12%

Manufacturing Company

10%

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions that are very scalable, secure, and user-friendly. Cortex XDR by Palo Alto offers ...

How does Crowdstrike Falcon compare with Darktrace?

Both of these products perform similarly and have many outstanding attributes. CrowdStrike Falcon offers an amazing user interface that makes setup easy and seamless. CrowdStrike Falcon offers a cl...

How does Microsoft Defender for Endpoint compare with Crowdstrike Falcon?

The CrowdStrike solution delivers a lot of information about incidents. It has a very light sensor that will never push your machine hardware to "test", you don't have the usual "scan now" feature ...

What do you like most about McAfee MVISION Endpoint Detection and Response?

Trellix has a user-friendly interface.

What is your experience regarding pricing and costs for McAfee MVISION Endpoint Detection and Response?

I haven't had any really great problems with pricing in the past two or three years.

What needs improvement with McAfee MVISION Endpoint Detection and Response?

Microsoft Defender for Endpoint vs CrowdStrike Falcon

Comparisons

Compared 6% of the time

Kaspersky Endpoint Detection and Response vs CrowdStrike Falcon

Compared 5% of the time

Kaspersky Endpoint Security for Business vs CrowdStrike Falcon

Compared 3% of the time

Symantec Endpoint Security vs CrowdStrike Falcon

Compared 3% of the time

Microsoft Defender XDR vs CrowdStrike Falcon

Compared 3% of the time

More CrowdStrike Falcon Competitors

Trellix Endpoint Security Platform vs Trellix Endpoint Detection and Response (EDR)

Compared 48% of the time

SentinelOne Singularity Complete vs Trellix Endpoint Detection and Response (EDR)

Compared 7% of the time

Microsoft Defender for Endpoint vs Trellix Endpoint Detection and Response (EDR)

Compared 5% of the time

Trend Vision One vs Trellix Endpoint Detection and Response (EDR)

Compared 5% of the time

Elastic Security vs Trellix Endpoint Detection and Response (EDR)

Compared 4% of the time

More Trellix Endpoint Detection and Response (EDR) Competitors

Product Reports

Download CrowdStrike Falcon product report

CrowdStrike Falcon

June 2025

Trellix Endpoint Detection and Response (EDR)

May 2025

Trellix Endpoint Detection and Response (EDR) report

Download Trellix Endpoint Detection and Response (EDR) product report

Also Known As

CrowdStrike Falcon, CrowdStrike Falcon XDR, CrowdStrike Falcon Threat Intelligence, CrowdStrike Identity Protection, CrowdStrike Falcon Surface

McAfee MVISION EDR, MVISION EDR, MVISION Endpoint Detection and Response

Overview

CrowdStrike Falcon provides endpoint protection and threat intelligence using a cloud-based platform for real-time detection and response. Its minimal impact on system performance and ease of deployment are key benefits along with advanced logging and reporting for compliance and forensic analysis.

CrowdStrike Falcon is known for its efficacy in identifying malware, ransomware, and sophisticated cyber threats. The platform's cloud-native architecture and advanced AI capabilities ensure comprehensive endpoint visibility and rapid response times. Users appreciate the lightweight agent and seamless deployment process, along with detailed reporting features. Integration with security tools and efficient customer support are essential features.

What are the key features of CrowdStrike Falcon?

Real-time Threat Detection: Provides immediate threat identification and response.
Lightweight Agent: Minimal impact on system performance.
Cloud-native Architecture: Ensures flexibility and scalability.
Advanced AI Capabilities: Enhances threat detection and prevention.
Comprehensive Endpoint Visibility: Complete insight into endpoint activities.
Detailed Reporting: Facilitates compliance and forensic analysis.
Security Tool Integration: Seamless integration with other tools.
Efficient Customer Support: Robust support services.

What are the benefits or ROI of CrowdStrike Falcon?

Improved Threat Detection: Identifies sophisticated threats, reducing risk.
Enhanced System Performance: Lightweight agent ensures minimal disruption.
Faster Response Times: Swift reaction to incidents minimizes damage.
Better Compliance: Detailed logs meet regulatory requirements.
Streamlined Deployment: Easy to implement with minimal downtime.

In industries like finance, healthcare, and retail, CrowdStrike Falcon is often used for critical security due to its robust threat detection capabilities. Financial firms value its rapid response and detailed reporting for compliance, while healthcare providers appreciate the minimal system performance impact. Retailers benefit from its comprehensive endpoint visibility and integration with other security tools.

CrowdStrike

Reduce Alert Noise

Reduce the time to detect and respond to threats. Trellix EDR helps security analysts quickly prioritize threats and minimize potential disruption.

Do More with Existing Resources

Guided investigation automatically asks and answers questions while gathering, summarizing, and visualizing evidence from multiple sources—reducing the need for more SOC resources.

Low-Maintenance Cloud Solution

Cloud-based deployment and analytics enables your skilled security analysts to focus on strategic defense, instead of tool maintenance. Benefit from implementing the right solution for you.

Trellix

Sample Customers

Information Not Available

Sutherland Global Services