Try our new research platform with insights from 80,000+ expert users

Elastic Security vs McAfee ePolicy Orchestrator comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 5, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Elastic Security
Ranking in Security Orchestration Automation and Response (SOAR)
7th
Average Rating
7.8
Reviews Sentiment
6.8
Number of Reviews
65
Ranking in other categories
Log Management (11th), Security Information and Event Management (SIEM) (5th), Endpoint Detection and Response (EDR) (16th), Extended Detection and Response (XDR) (9th)
McAfee ePolicy Orchestrator
Ranking in Security Orchestration Automation and Response (SOAR)
13th
Average Rating
8.0
Reviews Sentiment
6.6
Number of Reviews
42
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of September 2025, in the Security Orchestration Automation and Response (SOAR) category, the mindshare of Elastic Security is 4.7%, down from 5.4% compared to the previous year. The mindshare of McAfee ePolicy Orchestrator is 0.7%, up from 0.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Orchestration Automation and Response (SOAR) Market Share Distribution
ProductMarket Share (%)
Elastic Security4.7%
McAfee ePolicy Orchestrator0.7%
Other94.6%
Security Orchestration Automation and Response (SOAR)
 

Featured Reviews

SyedAli17 - PeerSpot reviewer
Centralized monitoring improves security posture through rapid data processing
The processing part of Elastic Security is very interesting for us since we handle almost 7,000 to 8,000 alerts per minute. We require rapid processing speed for alerts and event data, and Elastic Security is very efficient at handling this level of data. Additionally, Elastic Security helps improve the security posture of Pakistan through centralized visibility and real-time processing.
Binu Haneef - PeerSpot reviewer
Comprehensive security management enabled through efficient integration and automation
McAfee ePolicy Orchestrator helps automate routine security tasks. We created customized automation. For example, when we did not have an EDR or XDR solution, we created tasks exclusively for detection and response automation and automatic segregation of infected PCs. The ability to customize the dashboard in McAfee ePolicy Orchestrator helps us significantly. The main feature is automation for auto-segmentation and segregation. As we are in an AI era, McAfee can focus on AI tools. Instead of putting manual effort into each security-related task, it can implement more advanced automation using AI. This enhancement could improve cybersecurity significantly. Regarding the reporting area in McAfee ePolicy Orchestrator, we are satisfied with what we currently have. Our cybersecurity team needs customized reports beyond the default ones. We have more than 20 separate reports for identifying threats, managing, and understanding the security posture of our company and assets.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The solution is compatible with the cloud-native environment and they can adapt to it faster."
"It is scalable."
"Elastic is straightforward, easy to integrate, and highly customizable."
"The most valuable feature is the speed, as it responds in a very short time."
"Elastic Security helps improve the security posture of Pakistan through centralized visibility and real-time processing."
"It's open-source and free to use."
"We've found the initial setup to be quite straightforward."
"ELK Logstash is easy and fast, at least for the initial setup with the out of box uses."
"McAfee ePolicy Orchestrator's performance is good."
"The advantages of McAfee ePolicy Orchestrator include being a centralized management console, which we possess when managing multiple solutions in Trellix DLP and EPP through the EPO solution."
"The most valuable feature of the solution is the central management console, which is used for DLP, endpoint security, drive encryption, and application control."
"If you set it up right, it can really manage a very complex environment which require fine tuning where there are a lot of exceptions. That's what it caters to. It can just do those specifics in those exceptional situations, which is good."
"The feature that I have found most valuable is its general purpose of protecting our endpoints from infections, malicious files, and all those kinds of things. The fact that there are organized policies and policy inheritance. The general management."
"The security is a key feature and the console is very user friendly."
"McAfee ePolicy Orchestrator has a built-in advanced pattern, which is very useful because it can detect any pattern."
"The graphical interface of the solution is its most valuable aspect."
 

Cons

"There isn't really a very good user experience. You need a lot of training."
"The initial configuration and setup are complicated and not straightforward."
"The tool should improve its scalability."
"Upgrades currently released as stacks when it should be a plugin or an extension to save removal and reinstallation."
"Sometimes, the solution isn't the easiest to use."
"The setup process is complex. You need a solid working knowledge of networking, operating systems, and a little programming."
"In terms of what could be improved with Elastic, in some use cases, especially on the advanced level, they are not ready made, so you'll have to write some scripts."
"Elastic Security could improve the documentation. It would help if they were more simple and clean."
"While there are bugs and a few functionality issues, it is just a matter of raising them with the support team. However, support is part of the problem as well. You want everything to be seamless in a perfect world, but the support is spread across different countries. They have Level 1, 2, and 3. Level 1 is most likely in a developing country. They don't provide the best service."
"We would like to see more integration with different platforms and extend this to other platforms. We are migrating to the cloud and want to extend it from our on-premises setup to the cloud."
"McAfee should improve in terms of customer support and assigning a knowledgeable TAM to customers."
"The issues with the integration capabilities of the product, specifically the ones that are deployed on an on-premises model, need to be improved."
"There is a problem when it comes to agent communication and duplicate records, where the rebooting of a machine leads to the installation of a new agent and you get a lot of duplicate records that ultimately affect your compliance monitoring."
"McAfee ePolicy Orchestrator should improve its integration with other tools."
"It would be highly beneficial if the metrics or dashboards could be customized"
"The rollout to cover the online resources, such as SharePoint, One Drive, and Office 365 doesn't seem to have a very clear path."
 

Pricing and Cost Advice

"We use the open-source version, so there is no charge for this solution."
"Compared to other tools, Elastic Security is a cheaper solution."
"It's a monthly cost with Elastic SIEM, but I am not sure of the exact cost."
"The solution is free."
"The solution is not expensive and costs around ten dollars a month."
"Its price is fine. Its licensing works on a yearly basis. We have to renew the license every year. I also have a good experience with Darktrace. When we buy Darktrace, we get training free of cost, which is not there in Elastic. We have to pay extra for training. There is certainly room for improvement."
"The licensing cost of Elastic Security is based on the daily ingestion rate. I can't recall the exact figure, but for 10GB of log action daily, it would cost around $20,000."
"The price is reasonable. It probably costs the same as ArcSight and LogRhythm SIEM. FortiSIEM might cost less than Elastic Security. There are no hidden or additional costs."
"This solution is priced in the mid-range."
"McAfee ePolicy Orchestrator is a cheaply priced product, meaning it is not expensive since McAfee provides a free version of ePO, which includes phone support as well."
"On a scale from one to ten, where one is cheap, and ten is expensive, I rate the solution's pricing a three out of ten."
"$The price of McAfee ePolicy Orchestrator is expensive, it is approximately $6,000 to $9,000 per license annually."
"McAfee ePolicy Orchestrator is not an expensive solution."
"Compared to other Antivirus products, the cost of this solution is a bit high."
"There is a license required to use this solution. If we use the additional components, such as DLP encryption, there is an additional cost. However, it is similar to a separate product altogether. If you want to use that or not, it is optional, but when you use it, it will cost you additional pricing."
"McAfee tries to package different things into different products, then sell them as different products with different licenses. They just split everything up into multiple things. That's just their sales pitch and how they do it."
report
Use our free recommendation engine to learn which Security Orchestration Automation and Response (SOAR) solutions are best for your needs.
867,370 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Government
10%
Comms Service Provider
8%
Financial Services Firm
7%
Manufacturing Company
10%
Computer Software Company
8%
Financial Services Firm
8%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business40
Midsize Enterprise11
Large Enterprise14
By reviewers
Company SizeCount
Small Business13
Midsize Enterprise11
Large Enterprise19
 

Questions from the Community

Datadog vs ELK: which one is good in terms of performance, cost and efficiency?
With Datadog, we have near-live visibility across our entire platform. We have seen APM metrics impacted several times lately using the dashboards we have created with Datadog; they are very good c...
What do you like most about Elastic Security?
Elastic provides the capability to index quickly due to the reverse indexes it offers. This data is crucial as it contains critical information. The reverse index allows fast data indexing because ...
What is your experience regarding pricing and costs for Elastic Security?
I am satisfied with the pricing, setup cost, and licensing cost. It is a pure 10.
Which is better - Mcafee's MVision ePO or ePolicy Orchestrator?
Our organization ran comparison tests to determine whether Mcafee's MVision ePO or ePolicy Orchestrator network security software was the better fit for us. We decided to go with Mcafee's ePolicy O...
What do you like most about McAfee MVISION ePO?
McAfee ePolicy Orchestrator's performance is good.
 

Also Known As

Elastic SIEM, ELK Logstash
McAfee ePO, ePolicy Orchestrator, Intel Security ePolicy Orchestrator, McAfee MVISION ePO
 

Overview

 

Sample Customers

Texas A&M, U.S. Air Force, NuScale Power, Martin's Point Health Care
Brelje & Race, Cognizant, Sutherland Global Services, Eagle Rock Energy, Arab National Bank, Bank Central Asia, Kleberg Bank, Leading Mexican Bank, SF Police Credit Union, Macquarie Telecom, Seagate Technology, Blackburn & Darwen Council, California Department of Corrections & Rehabilitation, IRCEP, Major U.S. State Government, State of Alaska, State of Colorado, Cemex, Deutsche Edelstahlwerke
Find out what your peers are saying about Elastic Security vs. McAfee ePolicy Orchestrator and other solutions. Updated: July 2025.
867,370 professionals have used our research since 2012.