


Cynet and Trellix Helix Connect are advanced security solutions competing in the cybersecurity market. Cynet may have the upper hand for its holistic and comprehensive features, while Trellix is noted for its AI capabilities aiding larger enterprises with integrations.
Features: Cynet's notable features include network visibility, user behavior analysis, and deception tactics. Its autonomous breach protection and SOC support make it a robust solution. Trellix Helix Connect is recognized for its powerful automation, strong SOAR capabilities, and seamless integration with other cybersecurity tools.
Room for Improvement: Cynet needs to improve mobile device support, enhance reporting capabilities, and streamline third-party tools integration. Trellix Helix Connect could improve its user interface, enhance cloud connectivity, and offer more competitive pricing.
Ease of Deployment and Customer Service: Cynet offers flexibility with public, private, and hybrid cloud deployments, alongside highly responsive customer service. Trellix Helix Connect provides flexible deployment but may pose challenges in ease of setup. Both solutions offer strong customer support.
Pricing and ROI: Cynet is competitively priced with flexible licensing and rapid ROI due to its single license offering. Trellix Helix Connect tends to be more expensive, limiting appeal to smaller enterprises, though it provides returns with comprehensive capabilities.
They appreciate the rich telemetry data from the solution, as it provides in-depth threat identification.
Cortex XDR by Palo Alto Networks helps to reduce my total cost of ownership significantly.
In Cortex XDR by Palo Alto Networks, most of the remediation is automated and the accuracy is quite good.
The return on investment with Cynet is pretty good, as it doesn't require a dedicated resource to manage, being highly automated.
We have seen a return on investment with Trellix Helix Connect, and we can share relevant metrics as we reduce the MTTD and MTTR and have KPIs indicating our ROI.
From an analyst's perspective, it has required fewer L2 operators since we already have a broader view of what is happening with the endpoint machines.
The technical support from Palo Alto deserves a mark of ten because they reach out within an hour whenever assistance is needed.
There is no back and forth, and they know what we are asking for and come up with the best resolution for a solution.
If any of these services are missed, it becomes a problem in terms of support tickets, follow-up, or special configuration that needs to be done in the system.
Their SOC side support, when a threat is detected, is excellent.
My experience with the technical support of Cynet is excellent; they are just one click away.
Based on our needs, they schedule remote sessions and resolve the issues.
I assess the effectiveness of Trellix Helix Connect's threat detection capabilities as robust, making it more powerful than Trend Micro and other solutions like CrowdStrike.
We often wait for weeks to get a response from the engineering team due to a long relay process from customer representatives to the engineering team and then back to us.
We experienced some challenges due to the ongoing transformation and fusion of McAfee and FireEye, but we are committed to improving response times.
You can onboard 10,000 endpoints in just hours, which demonstrates the excellent scalability of this product.
Activating the newly purchased licenses is instantaneous, allowing installations without adjustments since it's cloud-based.
Cortex XDR by Palo Alto Networks can be expanded anytime by purchasing another license without any issues related to scalability.
The solution is highly scalable.
We can deploy Cynet for 50,000 users, and we have deployed it at that scale, with the capability to scale higher to 100,000 users without any challenges.
Cynet is very scalable.
We support the largest companies in the world and can cater to large environments.
Trellix Helix Connect's scalability is excellent as the solution has a library to make integrations with other brands.
The scalability of Trellix Helix Connect is good as it has over 400 ready-to-go connectors, which is a strong feature.
Cortex remains fast and responsive, even with increasing data and alerts.
The thresholds we've seen on our firewall boxes at some instances reached 80% to 85%, but even at that level of utilization, we don't observe any latency or any issues reported with respect to accessing the application.
Cortex XDR is stable, offering high quality and reliable performance.
Within six years of usage, we have not had any issues such as outages or downtime.
The availability is high, which is critical for our customers who rely on a single panel of glass to operate.
Trellix Helix Connect is very stable, and I have experienced almost no downtime or issues.
Trellix Helix Connect has stability issues as it experienced downtimes during off-hours that affected our night shifts and late hours.
Improving reporting and dashboard customization, along with the addition of real-time and exportable reports, would help SOC teams greatly.
The inclusion of this feature would allow the application of DLP policies alongside antivirus policies via a single agent and console, making it more competitive as other OEMs often offer DLP solutions as part of their antivirus products.
If the per GB data could be provided at a certain level free of cost or at the same cost which the customer is taking for the entire bundle, that would be better.
There should be more options than deploying solely through group policy, as the assumption that GPO is working isn’t always the case.
Having a DLP feature would also add value.
Integration with local Active Directory, not only Azure AD, is a must.
The GUI and dashboard feel very old-school and legacy, needing improvement, as all competitors have far superior GUIs and UI/UX interfaces.
We have just released the solutions to the market recently, making it a revolution in the cybersecurity sector.
The usability of hyperautomation is something to improve in the solution because it is expensive regarding the needed improvements.
The pricing on SentinelOne is far more reasonable and cheaper than Cortex XDR by Palo Alto Networks.
I would say it is definitely not a cheap product, considering how mature it is and how scalable all Palo Alto products are together.
Cortex XDR is perceived as expensive by some customers, yet offers dynamic pricing.
I think the pricing of Cynet is fair and one of the better options in the market.
The price of Cynet is reasonable considering its features and support.
Cynet does not ask for additional costs for add-on features.
We mainly chose this solution because of the pricing factor alone; many other options were more lucrative feature-wise, but for pricing, it was quite competitive at the time.
It is not the cheapest, but also not the most expensive solution.
We do not face much performance issues; for pricing, it was close to other competitors.
It incorporates AI for normal behavior detection, distinguishing unusual operations.
The product provides automation responses in case of a threat attack, severity assessments, centralized manageability, and comprehensive compliance features, resulting in reduced costs.
It includes machine learning to easily analyze data and detect complex threats across endpoints, networks, or clouds.
The valuable aspects of Cynet are its EDR and XDR components, which are available at a reasonable price point.
The most effective features of Cynet are its ransomware protection and lateral movement deception.
The SOAR function, deception, and forensics are very useful.
Trellix Helix, as an AI XDR platform, helps our organization by offering an extensive number of connectors for integration, enabling us to consolidate all information in a single dashboard.
Trellix Helix Connect easily integrates with Office 365 and also integrates well with FortiGate, Palo Alto, and Barracuda, especially within AWS environments.
The features that I find most valuable in Trellix Helix Connect are the incident response capabilities, which include EDR and XDR, along with the SoC capabilities added in the new advanced Trellix AI intelligence.


| Company Size | Count |
|---|---|
| Small Business | 46 |
| Midsize Enterprise | 20 |
| Large Enterprise | 49 |
| Company Size | Count |
|---|---|
| Small Business | 30 |
| Midsize Enterprise | 7 |
| Large Enterprise | 12 |
| Company Size | Count |
|---|---|
| Small Business | 9 |
| Midsize Enterprise | 1 |
| Large Enterprise | 9 |
Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.
Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.
What are the key features of Cortex XDR?Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.
Cynet provides comprehensive endpoint protection and advanced threat detection, offering intuitive deployment and monitored support. It ensures real-time visibility and minimal management, enhancing security for diverse and remote teams.
Cynet integrates seamlessly with existing infrastructure, providing an efficient solution for endpoint protection, threat detection, and response. Its automation, scalability, and stability are key benefits. Users benefit from real-time network visibility, ransomware protection, and deception capabilities. Cynet serves as a robust alternative to CrowdStrike, offering a multifaceted approach to security operations, especially in environments needing continuous threat monitoring and zero-day threat management. Areas needing improvement include mobile device support, enhanced reporting, third-party integrations, and AI-based detection.
What are Cynet's most important features?In the financial sector, Cynet's ability to support efficient threat detection and endpoint protection is crucial. Healthcare industries leverage its data protection features for compliance and security. In manufacturing, real-time threat monitoring supports safeguarding intellectual property. Retail sectors benefit from its scalability and minimal management demands, helping secure diverse, distributed locations.
Trellix Helix Connect leverages automation with playbooks and AI, enhancing incident management, data correlation, and reducing response times while easing integration and improving threat visibility.
Trellix Helix Connect transforms cyber operations with automated workflows, cutting response times and decreasing analyst fatigue. Its ability to integrate seamlessly with existing infrastructures improves incident handling through advanced AI and data correlation techniques. Quick to implement, it enhances threat visibility, enabling faster incident triage, alert correlation, and threat intelligence integration. While the platform excels in these areas, users have noted areas for enhancement, such as integration with third-party tools, better dashboard functionalities, and reduced false positives. Despite concerns over licensing costs and connectivity issues, Trellix Helix Connect remains a valuable asset for centralized security event management and response automation.
What are the key features of Trellix Helix Connect?Organizations rely on Trellix Helix Connect for centralized correlation and security event management, integrating it with existing tools for streamlined alert management and enhanced cybersecurity measures. It supports tasks like phishing detection, data protection, and endpoint security, essential in industries facing persistent network threats, including managing logs, detecting malware, and automating responses, reducing investigation times and improving notification efficiency.
We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.