No more typing reviews! Try our Samantha, our new voice AI agent.

Digital Guardian vs Trellix Endpoint Security Platform comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Mar 22, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
4.7
Cortex XDR reduces operational costs, offers better value than Microsoft Defender, and enhances ROI via automation and integration.
Sentiment score
4.9
Digital Guardian improved data protection, reduced breach risks, ensured compliance, saved money, and enhanced security and operational efficiency.
Sentiment score
6.7
Trellix Endpoint Security saves money, reduces recovery costs, and efficiently combats threats, offering strong malware protection and compliance.
They appreciate the rich telemetry data from the solution, as it provides in-depth threat identification.
Cyber Security Manager at Welab bank
Cortex XDR by Palo Alto Networks helps to reduce my total cost of ownership significantly.
Detection and Response Consultant at Inovasys
In Cortex XDR by Palo Alto Networks, most of the remediation is automated and the accuracy is quite good.
Network Security Engineer at Cyberwell Solution
I believe the cost was approximately eight million per year, and in this situation, we avoided fees of approximately fifty million per year because of the situations that were prevented by blockages.
Sr Investigation Specialist at Ifood
We have observed tremendous return on investment after implementing Trellix Endpoint Security as it is a more cost-effective solution compared to other products.
Joint Director at PAA
Clients appreciate the solution’s customization capabilities and ongoing product improvements.
Information Security Engineer at Nhq Distribution Ltd
 

Customer Service

Sentiment score
7.0
Cortex XDR support is praised for expertise and responsiveness, but faces inconsistency and regional communication issues. Ratings: 8-9/10.
Sentiment score
6.1
Digital Guardian customer support efficiency varies; users praise global help but note inconsistency in response time and technical understanding.
Sentiment score
6.7
Trellix Endpoint Security receives praise for knowledgeable support but struggles with inconsistent response times and regional service variations.
The technical support from Palo Alto deserves a mark of ten because they reach out within an hour whenever assistance is needed.
Head of data centers at a non-profit with 10,001+ employees
There is no back and forth, and they know what we are asking for and come up with the best resolution for a solution.
Senior Process Expert at A.P. Moller - Maersk
If any of these services are missed, it becomes a problem in terms of support tickets, follow-up, or special configuration that needs to be done in the system.
Chief of IT Architecture at a financial services firm with 10,001+ employees
For vendor support, such as Fortra support, I would rate it a seven because all the support comes from different parts that sometimes have challenges meeting time zones, and sometimes they reroute to distributors and rely on partners.
Cyber Security Researcher at a tech services company with 11-50 employees
When the ISO examiner saw it, they were impressed by the compliance demonstration. That was one of the reasons that led to our certification.
IT Infrastructure Engineer
The response time is a notable issue.
Technical Associate at Valuepoint Systems
I would rate their customer service nine out of ten.
Joint Director at PAA
 

Scalability Issues

Sentiment score
7.6
Cortex XDR efficiently manages extensive workloads across company sizes, praised for scalability, cloud capabilities, and high user satisfaction.
Sentiment score
7.5
Digital Guardian excels in scalability, managing large deployments smoothly despite cloud storage limits and occasional regional replication issues.
Sentiment score
7.5
Trellix Endpoint Security Platform is scalable, integrates easily, and supports various platforms, receiving high user ratings for adaptability.
You can onboard 10,000 endpoints in just hours, which demonstrates the excellent scalability of this product.
Assistant Security Architect at Cloudnomics
Activating the newly purchased licenses is instantaneous, allowing installations without adjustments since it's cloud-based.
Junior Security Analyst at ITSEC Asia
Cortex XDR by Palo Alto Networks can be expanded anytime by purchasing another license without any issues related to scalability.
Head of data centers at a non-profit with 10,001+ employees
Regarding scalability, it is a 10 out of 10.
Cyber Security Researcher at a tech services company with 11-50 employees
There are no limitations; the solution is easily scalable.
IT Manager at Gigabit Technologies Pvt Ltd
Trellix Endpoint Security Platform is very scalable.
Account Manager at a tech vendor with 201-500 employees
It is not readily expandable.
Associate Cybersecurity Analyst at a tech vendor with 10,001+ employees
 

Stability Issues

Sentiment score
8.0
Cortex XDR is praised for reliable stability and improved performance, despite rare lag during high-stress data loads.
Sentiment score
7.5
Digital Guardian is stable and reliable, outperforming competitors but may face compatibility issues, needing maintenance and adherence to guidelines.
Sentiment score
7.9
Trellix Endpoint Security is praised for stability, reliability, and effective deployment, with minor issues resolved through updates.
Cortex remains fast and responsive, even with increasing data and alerts.
Final Year Student at Gitam University
The thresholds we've seen on our firewall boxes at some instances reached 80% to 85%, but even at that level of utilization, we don't observe any latency or any issues reported with respect to accessing the application.
Senior Process Expert at A.P. Moller - Maersk
Cortex XDR is stable, offering high quality and reliable performance.
Cyber Security Manager at Welab bank
I would rate its stability as nine out of ten.
Joint Director at PAA
I would rate the stability of Trellix Endpoint Security as near perfect, close to ten out of ten.
Information Security Engineer at Nhq Distribution Ltd
Sometimes it was a mess, and I have never seen that with other SIEM providers.
Associate Cybersecurity Analyst at a tech vendor with 10,001+ employees
 

Room For Improvement

Cortex XDR needs better integration, pricing, UI, feature parity, and automation, while reducing resource use and false positives.
Digital Guardian needs to enhance partner programs, policy simplicity, cross-platform features, resource efficiency, cloud integration, and technical support.
Trellix Endpoint Security needs better speed, usability, resource efficiency, support, automation, cross-platform compatibility, and threat detection features.
Improving reporting and dashboard customization, along with the addition of real-time and exportable reports, would help SOC teams greatly.
Final Year Student at Gitam University
The inclusion of this feature would allow the application of DLP policies alongside antivirus policies via a single agent and console, making it more competitive as other OEMs often offer DLP solutions as part of their antivirus products.
Pre Sales Architect at network techlab
If the per GB data could be provided at a certain level free of cost or at the same cost which the customer is taking for the entire bundle, that would be better.
Cyber Security Information Security Specialist at MHM Holding GmbH
The issue is that it works only with users or companies with more than 500 users.
Cyber Security Researcher at a tech services company with 11-50 employees
Digital Guardian can generate false positives initially, which can be significantly reduced through proper policy tuning and data classification.
Sr.Technical Support Executive at Digitaltrack Solution Private Limited
What needs improvement in Trellix Endpoint Security is the reduction of resource consumption by the scanning feature.
Technical Associate at Valuepoint Systems
Improvements are needed in forensic analytics to detect specific vulnerabilities.
Information Security Engineer at Nhq Distribution Ltd
The product does not seem to be cloud-native.
Architect at a government with 10,001+ employees
 

Setup Cost

Cortex XDR offers competitive pricing between $55-$90, though setup costs are high, with flexible licensing for cloud and on-prem use.
Digital Guardian is costly but ideal for enterprises needing strong data loss prevention, especially in manufacturing.
Trellix Endpoint Security provides competitive enterprise pricing with flexible licensing, offering value through standard and perpetual options with promotional discounts.
The pricing on SentinelOne is far more reasonable and cheaper than Cortex XDR by Palo Alto Networks.
Consultant at a tech services company with 1,001-5,000 employees
I would say it is definitely not a cheap product, considering how mature it is and how scalable all Palo Alto products are together.
Senior Process Expert at A.P. Moller - Maersk
Cortex XDR is perceived as expensive by some customers, yet offers dynamic pricing.
Cyber Security Manager at Welab bank
The licensing is straightforward, pricing is very competitive, and margins are good.
Account Manager at a tech vendor with 201-500 employees
The license costs are very reasonable, around 1,000 to 1,200 rupees per year.
Technical Associate at Valuepoint Systems
Trellix Endpoint Security is cost-effective and provides excellent value for money.
Joint Director at PAA
 

Valuable Features

Cortex XDR offers advanced AI-driven analytics, multi-layered security, and automation, enhancing threat detection and incident response efficiency.
Digital Guardian provides advanced DLP, forensic analysis, and adaptive inspection, offering comprehensive security and regulatory compliance.
Trellix Endpoint Security Platform offers centralized management, AI-driven threat detection, encryption, data loss prevention, and adaptive security features.
It incorporates AI for normal behavior detection, distinguishing unusual operations.
Cyber Security Manager at Welab bank
The product provides automation responses in case of a threat attack, severity assessments, centralized manageability, and comprehensive compliance features, resulting in reduced costs.
Pre Sales Architect at network techlab
It includes machine learning to easily analyze data and detect complex threats across endpoints, networks, or clouds.
Final Year Student at Gitam University
The strong impact of Digital Guardian on my organization is in preventing sensitive data leaks to USB, email, and cloud, and in blocking unauthorized access in real time.
Sr.Technical Support Executive at Digitaltrack Solution Private Limited
Digital Guardian can easily integrate with this data classification solution and has a very granular level of configuration and policy tuning.
Cyber Security Researcher at a tech services company with 11-50 employees
Trellix Endpoint Security is a proven, robust, and cost-effective solution that protects the organization from different types of ransomware and attacks.
Joint Director at PAA
Including options like Application Control (formerly Solidcore), integrated monitoring, change control, DLP, and advanced threat protection, the solution offers comprehensive security.
Information Security Engineer at Nhq Distribution Ltd
The detection capability of Trellix Endpoint Security is higher than traditional antivirus solutions.
Senior Vice President IT at AS IT Consulting Pvt. Ltd.
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Ranking in Endpoint Detection and Response (EDR)
6th
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
112
Ranking in other categories
Endpoint Protection Platform (EPP) (4th), Extended Detection and Response (XDR) (4th), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (1st)
Digital Guardian
Ranking in Endpoint Detection and Response (EDR)
55th
Average Rating
6.8
Reviews Sentiment
6.5
Number of Reviews
13
Ranking in other categories
Data Loss Prevention (DLP) (17th), Endpoint Encryption (7th), Mobile Data Protection (4th), Advanced Threat Protection (ATP) (27th)
Trellix Endpoint Security P...
Ranking in Endpoint Detection and Response (EDR)
9th
Average Rating
8.0
Reviews Sentiment
6.7
Number of Reviews
168
Ranking in other categories
Endpoint Protection Platform (EPP) (7th), Extended Detection and Response (XDR) (8th)
 

Mindshare comparison

As of June 2026, in the Endpoint Detection and Response (EDR) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.5%, down from 4.0% compared to the previous year. The mindshare of Digital Guardian is 0.7%, up from 0.4% compared to the previous year. The mindshare of Trellix Endpoint Security Platform is 3.1%, down from 4.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Detection and Response (EDR) Mindshare Distribution
ProductMindshare (%)
Cortex XDR by Palo Alto Networks3.5%
Trellix Endpoint Security Platform3.1%
Digital Guardian0.7%
Other92.7%
Endpoint Detection and Response (EDR)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
Syed Mubeen - PeerSpot reviewer
Cyber Security Researcher at a tech services company with 11-50 employees
Enterprise data protection has supported regulatory compliance and integrates with classification tools
In terms of functionality, many features are valuable in Digital Guardian, as the first thing for most customers is that they are using solutions such as Boldon James and Titus, which fall under the classification side, and Digital Guardian can easily integrate with this data classification solution and has a very granular level of configuration and policy tuning. Digital Guardian's data protection policies are indeed useful for my clients. Regarding Digital Guardian, I find it to be a very good solution, and in fact, it is an enterprise-level solution that has very tight integration with most of the products, with Fortra but also with others.
PankajKumar24 - PeerSpot reviewer
IT Manager at Gigabit Technologies Pvt Ltd
Advanced threat prevention has strengthened incident response and customized security workflows
The biggest advantage of Trellix Endpoint Security Platform is the ATP solution, which provides advanced threat prevention. Machine learning algorithms are available in the product as part of the threat anti-malware, including predictive machine learning and behavioral analysis, which are integral to the anti-malware module of EPP. In terms of my experience with the machine learning algorithms for analysis and threat detection, we are analyzing logs provided by Trellix, but we are not able to conduct specific machine learning analysis on those logs. The automated response mechanisms in the products help with incident management because we have to create playbooks in Trellix console for automation, which we need to enable. The customizable dashboard of Trellix Endpoint Security Platform definitely contributes to the decision-making process, as we customize the dashboard according to customer requirements. When it comes to integration aspects, we are able to integrate Trellix Endpoint Security Platform with SIEM or SOAR solutions using the ePO console, which enhances threat detection capabilities. Reporting and analytics aspects have an impact on security posture assessment, as we are able to fetch reports in the ePO console customized according to customer requirements for downloading and sending via email.
report
Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.
900,277 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
12%
Financial Services Firm
11%
Manufacturing Company
10%
Comms Service Provider
9%
Financial Services Firm
13%
Manufacturing Company
9%
Comms Service Provider
8%
Computer Software Company
7%
Manufacturing Company
11%
Financial Services Firm
11%
Government
9%
Comms Service Provider
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise20
Large Enterprise52
By reviewers
Company SizeCount
Small Business11
Large Enterprise4
By reviewers
Company SizeCount
Small Business68
Midsize Enterprise39
Large Enterprise67
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
What needs improvement with Digital Guardian?
In my experience, the area closest for improvement is the occurrence of strong false positives. Digital Guardian can ...
What is your primary use case for Digital Guardian?
My main use case for Digital Guardian is to prevent or stop sensitive data from being copied to USB, email, or cloud,...
What advice do you have for others considering Digital Guardian?
Digital Guardian has significantly improved incident response time by providing real-time detection, instant alerts, ...
How does McAfee Endpoint Security compare with MVISION?
The flexible manageability of McAfee Endpoint Security is one of our favorite aspects of this solution. You can deplo...
How does Crowdstrike Falcon compare with FireEye Endpoint Security?
The Crowdstrike Falcon program has a simple to use user interface, making it both an easy to use as well as an effec...
What is your experience regarding pricing and costs for McAfee Endpoint Security?
I don't have visibility on pricing because it is negotiated by a different team, as I look after the technical side.
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
No data available
McAfee Endpoint Security, McAfee Endpoint Protection, Intel Security Total Protection for Endpoint, McAfee Complete Endpoint Protection, Trellix Endpoint Security (ENS)
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
The Fifth Avenue Theatre, Jabil Circuit
inHouseIT, Seagate Technology
Find out what your peers are saying about Digital Guardian vs. Trellix Endpoint Security Platform and other solutions. Updated: June 2026.
900,277 professionals have used our research since 2012.