Cybereason Endpoint Detection & Response vs Trellix Endpoint Detection and Response (EDR) comparison

Cybereason and Trellix are both solutions in the Endpoint Detection and Response (EDR) category. Cybereason is ranked #23 with an average rating of 8.2, while Trellix is ranked #22 with an average rating of 7.4. Cybereason holds a 1.0% mindshare in EDR, compared to Trellix’s 1.1% mindshare. Additionally, 89% of Cybereason users are willing to recommend the solution, compared to 83% of Trellix users who would recommend it.

Cybereason Endpoint Detecti...

Read 21 Cybereason Endpoint Detection & Response reviews

2,717 Views
1,536 Comparison Views

89% willing to recommend

Trellix Endpoint Detection ...

Read 23 Trellix Endpoint Detection and Response (EDR) reviews

1,728 Views
1,103 Comparison Views

83% willing to recommend

Cybereason Endpoint Detecti...

Trellix Endpoint Detection ...

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 9, 2024

Cybereason Endpoint Detection & Response is compared against Trellix Endpoint Detection and Response (EDR). Trellix stands out in terms of its features, making it a more valued choice despite higher costs.

Features: Cybereason offers real-time threat detection, automated response capabilities, and user-friendly interface. Trellix provides comprehensive threat intelligence, machine learning integration, and advanced analytics. Trellix offers superior features that users find more valuable.

Room for Improvement: Cybereason could enhance its reporting capabilities, reduce system resource usage, and improve user training resources. Trellix could improve integration with third-party tools, offer faster updates, and streamline feature complexity. Users identify more technical facets for Trellix.

Ease of Deployment and Customer Service: Cybereason is praised for straightforward deployment and responsive support. Trellix gets positive reviews for deployment but is slightly less user-friendly. Trellix's customer service is considered excellent. Cybereason may be easier for initial setup, while Trellix is reliable in ongoing support.

Pricing and ROI: Cybereason is noted for cost-effectiveness and good return on investment. Trellix, though higher in cost, is seen as worth the investment due to advanced features and reliable performance. Cybereason is more budget-friendly, while Trellix provides higher value relative to its price.

To learn more, read our detailed Cybereason Endpoint Detection & Response vs. Trellix Endpoint Detection and Response (EDR) Report (Updated: April 2025).

Buyer's Guide

Cybereason Endpoint Detection & Response vs. Trellix Endpoint Detection and Response (EDR)

April 2025

Download the complete report

Helped 850,349 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cybereason Endpoint Detecti...

Ranking in Endpoint Detection and Response (EDR)

23rd

Average Rating

8.0

Reviews Sentiment

7.9

Number of Reviews

Ranking in other categories

Endpoint Protection Platform (EPP) (34th)

Trellix Endpoint Detection ...

Ranking in Endpoint Detection and Response (EDR)

22nd

Average Rating

7.4

Reviews Sentiment

7.2

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of May 2025, in the Endpoint Detection and Response (EDR) category, the mindshare of Cybereason Endpoint Detection & Response is 1.0%, down from 1.2% compared to the previous year. The mindshare of Trellix Endpoint Detection and Response (EDR) is 1.1%, up from 0.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Detection and Response (EDR)

Featured Reviews

Chad Kliewer

Information Security Officer at PTCI

We can make more informed decisions on whether an action is malicious

The ease of use and dashboards are improving. We came in at a time when they were developing a new dashboard screen. Therefore, we have had some confusing times between the old and new dashboards. Knowing how the new one works, I have seen vast improvements with it. While the product is very good, there are still some areas for improvement. The initial triage area could be a bit simpler. They get into the weeds real fast; it gets very detailed very fast. I am still looking for an easier triage layer on top with the ability to dig deeper. They are improving on this because I have seen some improvements in the user interface that helps with this. Part of it was moving two different screens into one, merging the two together. It is very good, but it is very technically detailed and would be harder for an entry-level person to decipher. However, improvements are being made. It leverages indicators of behavior to help us remediate faster against attacks. Sometimes, I wish there was more detail on why they consider it malicious.

Read full review

CESARCASTRO

Committee of IT Cybersececurity at a energy/utilities company with 51-200 employees

Enhancements needed for security alerts while ongoing training strengthens defenses

This year, I am going to improve some tools to be installed or maybe acquire some services to better manage our web services and work with my coworkers. Application fiber also needs attention. Nowadays I am making applications that are publicly seen on the Internet. I need some protection, possibly multi-factor authentication improvements. I am seeing, for workflows, some sort of ethical hacking to test our environment. Knowledge of everything, not only the product - maybe some kind of alerts - needs to emerge. I see the current ones as very low-tier, and they must improve.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"What I find most valuable is the clarity of the platform."

"What I find most valuable is the clarity of the platform. It is very straightforward."

"For me, the technical support is good."

"They do a very good job of providing multi-stage visualizations of malicious operations that immediately show all attack details across all devices and users. Since it is MalOp-centric model, you can see if there has been a similar operation across multiple machines. If it is the same thing appearing on multiple machines, you see all the machines and users affected in one screen."

"The initial setup was easy and straightforward."

"We didn't have the visibility that we now have. It has increased our visibility by a lot. So, we put a lot more time into really looking at our environment and what is happening throughout our different networks. It has increased our visibility by around fivefold."

"The solution is efficient."

"The initial setup process is straightforward."

More Cybereason Endpoint Detection & Response pros

"When Trellix detects some threats, the device is isolated in a quarantine zone for examination."

"Trellix has a user-friendly interface."

"The product provides a one-click recovery of encrypted files."

"What we're using the most and what we found valuable in McAfee MVISION Endpoint Detection and Response are Web Control, Advanced Threat Protection, and Threat Prevention features."

"The most useful features are behavior monitoring, DLP, and access control. The automation has gotten much better in the last two years than when it was McAfee. It works better now and integrates more smoothly."

"The investigation and rule detection feature of the solution has proven most useful for our company"

"The most valuable feature of the solution is its area for threat detection."

"Trellix Endpoint Detection and Response (EDR) offers endpoint protection and helps collect information while also allowing users to investigate malicious files in an IT environment...It is a stable solution...It is a scalable solution."

More Trellix Endpoint Detection and Response (EDR) pros

Cons

"I would like to see improvements on the operational side, specifically in grouping."

"There can be problems with the EDI."

"There is room for improvement in the product features related to device control, particularly USB management."

"The reporting feature needs improvement."

"It initially took some time to deploy."

"The network coverage becomes an issue most of the time."

"Compared to our previous endpoint, we have a lot more false positives and a lot more duplication of alerts. So we're chasing more alerts."

"The product's reporting isn't great."

More Cybereason Endpoint Detection & Response cons

"The searching capabilities for the IOCs can be further improved"

"I'd like the tool to become more like an XDR, with one management system and endpoint activation."

"The dashboard and reporting features are not so user-friendly or intuitive, so they need some work."

"I need some protection, possibly multi-factor authentication improvements."

"The solution's downside stems from the fact that Trellix Endpoint Detection and Response (EDR) and McAfee MVISION Endpoint are not combined into a single solution, so from an improvement perspective, they need to be combined into a single solution."

"The alert feature of McAfee MVISION Endpoint Detection and Response needs improvement because for you to get the alerts, you have to log on to the portal. What my company needs is a tool that sends you alerts. For example, if it detects a threat on your machine, it should send you an alert. My company gets the alerts instead from the antivirus software rather than the EDR. If you want to see the alerts on McAfee MVISION Endpoint Detection and Response, you have to connect to the system manually. Another area for improvement in the tool is the reporting. My company needs weekly and monthly reports about the alerts, but you can't extract reports from McAfee MVISION Endpoint Detection and Response, so a decision was made to move to another EDR solution, particularly Microsoft Defender for Endpoint, next month. My company tested Microsoft Defender for Endpoint via a POC for one to three months. The resource usage of McAfee MVISION Endpoint Detection and Response is also an area for improvement because it consumes a lot of memory. For example, during the on-demand scan, you can't work because of the high CPU usage. You need to schedule the scans. McAfee MVISION Endpoint Detection and Response has a lot of modules, but my company doesn't use all modules."

"Trellix does not support Linux and Mac."

"The main drawbacks are resources and processing time, as it consumes a lot of CPU and RAM."

More Trellix Endpoint Detection and Response (EDR) cons

Pricing and Cost Advice

"We considered a few other solutions. Some were ridiculously overpriced, while others didn't have solutions for Mac endpoints. That was a deal-breaker because most of our organization is on Mac. It came down to two vendors: Cybereason and another. They had similar pitches and almost identical approaches, but in the end, Cybereason gave us the best value for our money."

"Though it is not the cheapest solution but it fits our budget. We pay an annual licensing fee."

"I do not have experience with the licensing of the product."

"I had to go through a third-party to purchase it, which I wasn't really pleased about."

"On a scale of one to ten, where one is cheap and ten is expensive, I rate the pricing an eight."

"The pricing is manageable."

"This product is somewhat expensive and should be cheaper."

"In terms of cost, this is a good choice for our needs."

More Cybereason Endpoint Detection & Response pricing and cost advice

"McAfee MVISION Endpoint Detection and Response is reasonable in terms of cost. It's a tool my company has been using for a few years now. It costs $25,000 to $30,000 for six hundred users."

"Pricing is a problem in South Africa. It could be cheaper here. The rand-to-dollar exchange rate makes it expensive for us. A 25 dollar endpoint cost becomes quite significant when converted to rand."

"Pricing for McAfee MVISION Endpoint Detection and Response is not that expensive, but it's not something that a startup could buy. Pricing for it is for midsized businesses. There's an additional payment if you want data retention for more than thirty days. They gave us data retention for thirty days. Then if you want longer data retention, they have the paid option for a three-month data retention period and for a one-year data retention period."

"The cost is okay, compared to other products."

"The product’s pricing is reasonable."

"On a scale of one to ten, where one is low and ten is high, I rate the solution's pricing an eight out of ten."

"Speaking about the price, you must use the product to find the product's cost for you."

"The price is reasonable."

More Trellix Endpoint Detection and Response (EDR) pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.

See recommendations

850,349 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

17%

Financial Services Firm

11%

Manufacturing Company

Government

Computer Software Company

14%

Government

12%

Financial Services Firm

12%

Manufacturing Company

10%

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What is your experience regarding pricing and costs for Cybereason Endpoint Detection & Response?

Comparison with other products showed it be cheaper than some larger competitors. Set up cost for us were cheaper as we already had users experienced with the product in other business units. Initi...

See all answers

What is your primary use case for Cybereason Endpoint Detection & Response?

We use it to improve detection in the whole industrial sector. We are a big energy company. Across multiple endpoints, we deploy the EDR to secure all, improve detection, and also attempt to automa...

See all answers

What do you like most about Cybereason Endpoint Detection & Response?

The interface is user-friendly.

See all answers

What do you like most about McAfee MVISION Endpoint Detection and Response?

Trellix has a user-friendly interface.

See all answers

What is your experience regarding pricing and costs for McAfee MVISION Endpoint Detection and Response?

I haven't had any really great problems with pricing in the past two or three years.

See all answers

What needs improvement with McAfee MVISION Endpoint Detection and Response?

See all answers

Comparisons

Darktrace vs Cybereason Endpoint Detection & Response

Compared 28% of the time

CrowdStrike Falcon vs Cybereason Endpoint Detection & Response

Compared 15% of the time

SentinelOne Singularity Complete vs Cybereason Endpoint Detection & Response

Compared 10% of the time

Microsoft Defender for Endpoint vs Cybereason Endpoint Detection & Response

Compared 10% of the time

Kaspersky Endpoint Security for Business vs Cybereason Endpoint Detection & Response

Compared 5% of the time

More Cybereason Endpoint Detection & Response Competitors

Trellix Endpoint Security (ENS) vs Trellix Endpoint Detection and Response (EDR)

Compared 49% of the time

CrowdStrike Falcon vs Trellix Endpoint Detection and Response (EDR)

Compared 15% of the time

Microsoft Defender for Endpoint vs Trellix Endpoint Detection and Response (EDR)

Compared 6% of the time

Trend Vision One vs Trellix Endpoint Detection and Response (EDR)

Compared 5% of the time

SentinelOne Singularity Complete vs Trellix Endpoint Detection and Response (EDR)

Compared 4% of the time

More Trellix Endpoint Detection and Response (EDR) Competitors

Product Reports

Buyer's Guide

Cybereason Endpoint Detection & Response

May 2025

Cybereason Endpoint Detection & Response report

Download Cybereason Endpoint Detection & Response product report

Buyer's Guide

Trellix Endpoint Detection and Response (EDR)

April 2025

Trellix Endpoint Detection and Response (EDR) report

Download Trellix Endpoint Detection and Response (EDR) product report

Also Known As

Cybereason EDR, Cybereason Deep Detect & Respond

McAfee MVISION EDR, MVISION EDR, MVISION Endpoint Detection and Response

Overview

Cybereason's Endpoint Detection and Response platform detects in real-time both signature and non-signature-based attacks and accelerates incident investigation and response. Cybereason connects together individual pieces of evidence to form a complete picture of a malicious operation.

Cybereason

Reduce Alert Noise

Reduce the time to detect and respond to threats. Trellix EDR helps security analysts quickly prioritize threats and minimize potential disruption.

Do More with Existing Resources

Guided investigation automatically asks and answers questions while gathering, summarizing, and visualizing evidence from multiple sources—reducing the need for more SOC resources.

Low-Maintenance Cloud Solution

Cloud-based deployment and analytics enables your skilled security analysts to focus on strategic defense, instead of tool maintenance. Benefit from implementing the right solution for you.

Trellix

Sample Customers

Lockheed Martin, Spark Capital, DocuSign, Softbank Capital

Sutherland Global Services

Buyer's Guide

Cybereason Endpoint Detection & Response vs. Trellix Endpoint Detection and Response (EDR)

April 2025

Free Report: Cybereason Endpoint Detection & Response vs. Trellix Endpoint Detection and Response (EDR)

Find out what your peers are saying about Cybereason Endpoint Detection & Response vs. Trellix Endpoint Detection and Response (EDR) and other solutions. Updated: April 2025.

DOWNLOAD NOW

850,349 professionals have used our research since 2012.

See our Cybereason Endpoint Detection & Response vs. Trellix Endpoint Detection and Response (EDR) report.

See our list of best Endpoint Detection and Response (EDR) vendors.

We monitor all Endpoint Detection and Response (EDR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.