DeepArmor vs Trellix Endpoint Security Platform comparison

SparkCognition and Trellix are both solutions in the Endpoint Protection Platform (EPP) category. SparkCognition is ranked #60, while Trellix is ranked #7 with an average rating of 7.8. SparkCognition holds a 0.3% mindshare in EPP, compared to Trellix’s 3.4% mindshare. Additionally, 88% of Trellix users are willing to recommend the solution.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Mar 22, 2026

Trellix Endpoint Security Platform and DeepArmor are two cybersecurity products with unique feature sets, competing to enhance security measures. While Trellix has strengths in deployment ease and integration abilities, DeepArmor leads with advanced AI-driven threat detection.

Features: Trellix Endpoint Security Platform offers robust integration, customizable security settings, and caters to complex enterprise needs. DeepArmor focuses on real-time threat detection, lightweight design, and cutting-edge AI capabilities.

Ease of Deployment and Customer Service: Trellix is recognized for streamlined deployment and responsive customer service, providing comprehensive implementation support. DeepArmor emphasizes minimal setup due to its cloud-based infrastructure with seamless cloud integration.

Pricing and ROI: Trellix requires a substantial initial setup cost, offering long-term value through extensive features. DeepArmor features lower upfront costs with efficient AI-driven threat management for quick ROI, appealing to cost-conscious organizations.

To learn more, read our detailed Endpoint Protection Platform (EPP) Report (Updated: May 2026).

Buyer's Guide

Endpoint Protection Platform (EPP)

May 2026

Download the complete report

Helped 893,915 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Mindshare comparison

As of May 2026, in the Endpoint Protection Platform (EPP) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.6%, down from 3.9% compared to the previous year. The mindshare of DeepArmor is 0.3%, up from 0.0% compared to the previous year. The mindshare of Trellix Endpoint Security Platform is 3.4%, down from 3.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Protection Platform (EPP) Mindshare Distribution
Product	Mindshare (%)
Cortex XDR by Palo Alto Networks	3.6%
Trellix Endpoint Security Platform	3.4%
DeepArmor	0.3%
Other	92.7%

Endpoint Protection Platform (EPP)

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

Muhammad Fahad

Manager Tech. & Support (Information Technology) at Texitech

Security needs improvement and email scanning features are not included

The email scanning feature is not available in DeepArmor. We cannot use this for email scanning. There are many options that are not available in DeepArmor. We cannot use separate applications for different internet applications or for different internet scanning. This is why we cannot use it. I would like to see additional features such as email scanning, which should be included, or malware detections, and other cybersecurity features should be included. It could also be more secure.

Read full review

PankajKumar24

IT Manager at Gigabit Technologies Pvt Ltd

Advanced threat prevention has strengthened incident response and customized security workflows

The biggest advantage of Trellix Endpoint Security Platform is the ATP solution, which provides advanced threat prevention. Machine learning algorithms are available in the product as part of the threat anti-malware, including predictive machine learning and behavioral analysis, which are integral to the anti-malware module of EPP. In terms of my experience with the machine learning algorithms for analysis and threat detection, we are analyzing logs provided by Trellix, but we are not able to conduct specific machine learning analysis on those logs. The automated response mechanisms in the products help with incident management because we have to create playbooks in Trellix console for automation, which we need to enable. The customizable dashboard of Trellix Endpoint Security Platform definitely contributes to the decision-making process, as we customize the dashboard according to customer requirements. When it comes to integration aspects, we are able to integrate Trellix Endpoint Security Platform with SIEM or SOAR solutions using the ePO console, which enhances threat detection capabilities. Reporting and analytics aspects have an impact on security posture assessment, as we are able to fetch reports in the ePO console customized according to customer requirements for downloading and sending via email.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Best solution for avoiding security breaches, malware attacks, and other kinds of security issues."

"Cortex XDR by Palo Alto Networks has helped lighten the load of our security analysts because it was the major tool that we were using and the one we utilized most."

"Stability is a primary factor, and then there's the ease of distribution and policy management; Cortex XDR by Palo Alto Networks is very easy to work with, and we're quite happy with them."

"It integrates well into the environment."

"I can highlight that we have not faced any security incidents with Cortex XDR by Palo Alto Networks, and even though our environment is quite dynamic, we have not faced any security incident with Cortex XDR by Palo Alto Networks until now."

"It's a perfect solution. It integrates well into the environment."

"Since they've done their most recent update, the ease to isolate endpoints is valuable. If we find one where there is a virus on it, we can easily isolate it. We don't even have to contact the user. We don't have to manually take them off the network. We can easily isolate them."

"They have a new GUI which is just fantastic."

More Cortex XDR by Palo Alto Networks pros

"It is easy to install."

"The endpoint security, antivirus and firewall are the most valuable features of Trellix Endpoint Security."

"The most valuable feature is the integration between environments."

"The exploit guard and malware protection features are very useful, and the logon tracker feature is also very useful."

"This product made it possible to protect critical data, investigate threat events, and prevent future events from occurring on every endpoint on our network."

"It has been protecting us for many years, and we hope it will continue to do so for many years to come."

"You can integrate this endpoint protection with a specific business process that you may want to link to the process of the antivirus."

"The solution has been quite stable."

"It's well worth the investment as we have a lot of laws governing us."

More Trellix Endpoint Security Platform pros

Cons

"Although I would say this product is highly-rated, it could probably do more because nothing does everything that you want."

"Cortex does not offer an on-premises solution. However, some customers would prefer not to be on the cloud. It would be ideal if it could offer something on-prem as well."

"Data privacy is a matter of concern. You have to be careful with data privacy, it can be sensitive and Cortex can have most of your access."

"The installation should be easier and the Palo Alto pre-sales and sales teams should have more information on the product because they don't know what they are selling."

"They are charging for Network Traffic Analyzer (NTA) services, so if the per GB data could be provided at a certain level free of cost or at the same cost which the customer is taking for the entire bundle, that would be better."

"It is not a suitable solution if you are looking for a single product with multiple features such as DLP, encryption, rollback, etc."

"We would also like to have advanced tech protection and email scanning."

"It'll help if customization was easier."

More Cortex XDR by Palo Alto Networks cons

"The email scanning feature is not available in DeepArmor."

"The email scanning feature is not available in DeepArmor. We cannot use this for email scanning."

"What needs improvement in Trellix Endpoint Security is the reduction of resource consumption by the scanning feature. There should be daily signature updates for protection."

"A policy-editing console should be added."

"The solution should provide a more easy way to uninstall it on specific stations."

"I would like to see more automation."

"I give it a seven because in today's scenario, the portal is complicated to handle."

"We have faced certain issues recovering the data from systems which could not be fully encrypted by McAfee and then the decryption was a nightmare, it took a lot of time."

"This solution is difficult to implement."

"Malware detection can be better. It doesn't have support and detection for the recent malware, but it has a compensatory control where it can do the behavior-based assessment and alert you when there is something malicious or unexpected."

More Trellix Endpoint Security Platform cons

Pricing and Cost Advice

"I feel it is fairly priced."

"The pricing is a little high. It is per user per year."

"Its pricing is kind of in line with its competitors and everybody else out there."

"It is present, but when compared to other competitive products, I would say it is not less expensive; however, when all of the other added values are considered, the price is reasonable."

"It has reasonable pricing for the use cases it provides to the company."

"The pricing is a little bit on the expensive side."

"When we first bought it, it was a bit expensive, but it was worth it. The licensing was straightforward."

"The solution is expensive. It's pricing is on a yearly-basis."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"There are licensing fees."

"Trellix may cost around $46 to $47 for a single license without an EDR."

"Trellix Endpoint Security (ENS) is not a cheap solution...I don't think any costs are involved in the maintenance of the solution."

"We pay 650 Rand for a license. It is a perpetual license which we normally run for two years."

"There is a one-year and a three-year license available for this solution, we are currently on a three-year license."

"The pricing is more or less the same as the other tools in the market."

"The pricing is reasonable."

"This product is costly."

"Its price is very high. It is higher than its competitors, and it should be less."

More Trellix Endpoint Security Platform pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.

See recommendations

893,915 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

12%

Construction Company

12%

Comms Service Provider

Manufacturing Company

No data available

Manufacturing Company

12%

Government

10%

Financial Services Firm

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	46
Midsize Enterprise	20
Large Enterprise	49

No data available

By reviewers
Company Size	Count
Small Business	68
Midsize Enterprise	39
Large Enterprise	67

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

See all answers

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

See all answers

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

See all answers

Ask a question

Earn 20 points

How does McAfee Endpoint Security compare with MVISION?

The flexible manageability of McAfee Endpoint Security is one of our favorite aspects of this solution. You can deplo...

See all answers

How does Crowdstrike Falcon compare with FireEye Endpoint Security?

The Crowdstrike Falcon program has a simple to use user interface, making it both an easy to use as well as an effec...

See all answers

What is your experience regarding pricing and costs for McAfee Endpoint Security?

I don't have visibility on pricing because it is negotiated by a different team, as I look after the technical side.

See all answers

Comparisons

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Compared 9% of the time

SentinelOne Singularity Endpoint vs Cortex XDR by Palo Alto Networks

Compared 5% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

TrendAI Vision One – Endpoint Security vs Cortex XDR by Palo Alto Networks

Compared 2% of the time

More Cortex XDR by Palo Alto Networks Competitors

ESET Endpoint Protection Platform vs DeepArmor

Compared 34% of the time

CrowdStrike Falcon vs DeepArmor

Compared 31% of the time

Morphisec vs DeepArmor

Compared 18% of the time

More DeepArmor Competitors

CrowdStrike Falcon vs Trellix Endpoint Security Platform

Compared 5% of the time

Microsoft Defender for Endpoint vs Trellix Endpoint Security Platform

Compared 4% of the time

SentinelOne Singularity Endpoint vs Trellix Endpoint Security Platform

Compared 4% of the time

Symantec Endpoint Security vs Trellix Endpoint Security Platform

Compared 3% of the time

Tanium vs Trellix Endpoint Security Platform

Compared 3% of the time

More Trellix Endpoint Security Platform Competitors

Product Reports

Buyer's Guide

Cortex XDR by Palo Alto Networks

May 2026

Download Cortex XDR by Palo Alto Networks product report

Buyer's Guide

Endpoint Protection Platform (EPP)

May 2026

Download DeepArmor product report

Buyer's Guide

Trellix Endpoint Security Platform

April 2026

Trellix Endpoint Security Platform report

Download Trellix Endpoint Security Platform product report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

No data available

McAfee Endpoint Security, McAfee Endpoint Protection, Intel Security Total Protection for Endpoint, McAfee Complete Endpoint Protection, Trellix Endpoint Security (ENS)

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

DeepArmor offers advanced cybersecurity solutions, specifically designed for businesses that require intelligent threat protection. Utilizing cutting-edge technology, it caters to both endpoint protection and network defense.

DeepArmor leverages machine learning and artificial intelligence to provide proactive security measures. These technologies enable accurate threat detection and swift action, minimizing risk and improving overall security posture. DeepArmor is suitable for enterprises seeking comprehensive defense against evolving cyber threats.

What are the notable features of DeepArmor?

Machine Learning: Enhances threat detection accuracy by learning from previous data.
AI-Powered Defense: Automates responses to emerging threats, reducing response times.
Behavioral Analysis: Identifies suspicious activities by analyzing user patterns.
Cloud-Based Management: Facilitates remote management and monitoring.

What benefits should users expect from DeepArmor?

Enhanced Security: Robust protection against sophisticated cyber attacks.
Cost Efficiency: Reduces potential losses from data breaches with preemptive measures.
Scalability: Easily adapts to growing business needs.
Operational Efficiency: Streamlines security processes through automation.

DeepArmor implementation is evident in industries like finance and healthcare, where data protection is paramount. In finance, it safeguards sensitive financial information, while in healthcare, it ensures compliance with protection regulations by securing patient records. The application of AI and machine learning across these fields strengthens defensive capabilities, aligning with industry-specific needs.

SparkCognition

Trellix Endpoint Security Platform offers essential features like centralized management, threat prevention, and encryption, facilitating seamless scaling and integration with other systems while prioritizing user security.

This comprehensive platform focuses on endpoint protection, antivirus capabilities, and malware defense. It enhances cybersecurity with data loss prevention, advanced threat detection, and AI-driven features for reliable protection without impacting performance. Central management and advanced reporting streamline integration and ease of use. Flexible policy deployment through the management console and its robust security measures, such as DLP and device control, further increase protection. Challenges include high CPU and memory usage affecting performance, a complex interface, and lengthy deployment. Third-party integration and Windows Hello support need improvement. Additional concerns involve improved threat detection and faster technical support responses.

What are the key features of Trellix Endpoint Security Platform?

Centralized Management: Allows seamless integration and scaling with consistent control across environments.
Threat Prevention: Provides comprehensive antivirus and malware protection to secure systems.
Encryption: Ensures data security with robust encryption techniques.
Advanced Reporting: Facilitates detailed insights and analysis for better decision-making.
AI-Driven Detection: Offers reliable threat detection without impacting system performance.

What benefits should users look for in reviews?

Comprehensive Protection: Offers extensive security measures for protecting digital environments.
Ease of Integration: Simplifies the process of incorporating into current systems and processes.
Flexible Policy Deployment: Supports adaptable policy management to meet diverse requirements.
Scalability: Enables growth while maintaining efficiency and security.
Robust Security Features: Provides advanced security measures like DLP and device control.

Trellix Endpoint Security Platform is widely implemented in industries such as banking and government for securing mobile and desktop devices. Its capabilities cover network security, device control, and remote access protection, catering to diverse environments by offering robust cybersecurity management against advanced threats.

Trellix

Sample Customers

CBI Health Group, University Honda, VakifBank

AV-Comparatives

inHouseIT, Seagate Technology

Buyer's Guide

Endpoint Protection Platform (EPP)

May 2026

Download Free Report

Find out what your peers are saying about CrowdStrike, Microsoft, SentinelOne and others in Endpoint Protection Platform (EPP). Updated: May 2026.

DOWNLOAD NOW

893,915 professionals have used our research since 2012.

See our list of best Endpoint Protection Platform (EPP) vendors.

We monitor all Endpoint Protection Platform (EPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.