No more typing reviews! Try our Samantha, our new voice AI agent.

ESET EDR/XDR vs Trellix XDR comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Ranking in Extended Detection and Response (XDR)
5th
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
110
Ranking in other categories
Endpoint Protection Platform (EPP) (4th), Endpoint Detection and Response (EDR) (6th), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (1st)
ESET EDR/XDR
Ranking in Extended Detection and Response (XDR)
24th
Average Rating
9.0
Reviews Sentiment
4.7
Number of Reviews
4
Ranking in other categories
Authentication Systems (20th), Endpoint Detection and Response (EDR) (28th)
Trellix XDR
Ranking in Extended Detection and Response (XDR)
35th
Average Rating
7.4
Reviews Sentiment
7.3
Number of Reviews
5
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of May 2026, in the Extended Detection and Response (XDR) category, the mindshare of Cortex XDR by Palo Alto Networks is 4.7%, down from 5.1% compared to the previous year. The mindshare of ESET EDR/XDR is 1.4%, up from 1.0% compared to the previous year. The mindshare of Trellix XDR is 0.8%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Extended Detection and Response (XDR) Mindshare Distribution
ProductMindshare (%)
Cortex XDR by Palo Alto Networks4.7%
ESET EDR/XDR1.4%
Trellix XDR0.8%
Other93.1%
Extended Detection and Response (XDR)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
GirdharMishra - PeerSpot reviewer
Program Manager at iONE IT Solutions
Centralized monitoring has improved threat visibility and reduced incident response time
In terms of valuable features in ESET EDR/XDR, we focus on endpoint device management as well as for the firewall team, including our log analysis and monitoring the firewall, which are three significant functions for us. ESET EDR/XDR has automated threat detection that gives us real-time incident alerts, and it helps us proactively receive and work on incidents that could have an impact. Regarding the usefulness of ESET EDR/XDR's behavior-based analysis in detecting potential breaches, we have identified some files or configuration files that should remain static, and if any changes occur without proper change management, we are able to identify those changes, including detecting zero-day attacks. The integration of threat intelligence feeds has helped our response strategies, as we are using Oracle OCA-based data analysis, and we have integrated it so that logs are forwarded to our SIEM, allowing us to analyze the data effectively. I evaluate the impact of centralized management on our security operations as very useful because it eliminates the need to log into individual systems to find sources, allowing us to identify all types of risks and vulnerabilities from a single desk.
reviewer2840397 - PeerSpot reviewer
Associate Cybersecurity Analyst at a tech vendor with 10,001+ employees
Automated response has reduced manual workloads but setup complexity and support still need work
Trellix XDR can be improved because it has a complex initial setup. We personally had trouble in the initial configuration of Trellix XDR and it was very time-consuming for us. It requires careful planning and expertise as well because the syntaxes are not that user-friendly and the UI/UX is not that user-friendly either. For the first-time user, the designing part will be a bit tricky and it will be a bit annoying as well because there's no readily available documentation for this. There is the false positive problem which Trellix XDR is known for, which can lead to alert fatigue and increased workload for the security analyst. The product also has poor SKU guidance from the sales team, and the support team is also not that well-versed in what they are doing. Trellix support team is not highly regarded because they follow a whole hierarchical process to escalate the complaints and the feedback requests, and the resolution can take very long, from two to three weeks to a month, which is not really viable in a cyber security landscape which is moving this fast.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The initial setup is easy."
"Palo Alto is one of the tech vendors that always provides top-of-the-line products."
"The multi-layered approach to the product gives you confidence that it will stop exploits, ransomware, worms, or viruses from compromising endpoints, essentially providing peace of mind."
"Cortex XDR features advanced threat detection capabilities."
"When the pandemic started, Palo Alto came up with many solutions, which helped with the quick shift from on-premises to the cloud."
"Cortex XDR by Palo Alto Networks saves time in various ways, although the user interface is fairly standard."
"If you are looking for security, mainly for advanced threat prevention from ransomware and malware attacks, I would recommend Cortex."
"The solution is a new generation XDR that has a lot of artificial intelligence modules."
"It is pretty easy to install without any hassles, and ESET EDR_XDR has its own cloud portal where everything is available."
"The solution is easy to use."
"The initial setup of ESET EDR_XDR is very simple, easy to deploy, and manage."
"ESET EDR/XDR has automated threat detection that gives us real-time incident alerts, and it helps us proactively receive and work on incidents that could have an impact."
"ESET EDR/XDR has automated threat detection that gives us real-time incident alerts, and it helps us proactively receive and work on incidents that could have an impact."
"The AI-assisted troubleshooting and threat hunting capabilities, along with the machine learning functionality, are the biggest advantages of Trellix XDR that stand out for me."
"Because Trellix gives us multiple types of modules, we are using a single ePO console for multiple solutions including application control, DLP, and XDR."
"Trellix XDR has impacted my organization positively because time was definitely saved because of the automated response, and the positive impact was definitely there in terms of both time saved and people being cut down from the team to have a more efficient and cost-saving team."
"It contributes to our system's robust event detection and analysis, enabling us to respond effectively to incidents."
"Trellix XDR is an excellent solution that is continually improving."
"The analytics assessment and flexibility of the platform are valuable."
 

Cons

"Whenever the tool releases a new version when deploying the product across the organization, I feel like there are some disturbances in the CPU usage after upgrading the tool to the latest version."
"If he is using a smaller company, he can depend on some other tools because Cortex XDR by Palo Alto Networks is a bit expensive."
"In an upcoming release, the solution could improve by providing hard disk encryption."
"The configuration could be simplified. I would like to see better protection, specifically to protect email applications."
"I would like to see them include NDR (Network Detection Response)."
"Although I would say this product is highly-rated, it could probably do more because nothing does everything that you want."
"The solution lags to the real-time scenarios here and there."
"The solution should add unwanted malicious hash values to a block list so that whenever the action is triggered, it will automatically prevent the malicious content."
"The memory and CPU footprint can affect performance. It sometimes slows down the CPU performance."
"The solution could improve how it scours each website."
"ESET EDR_XDR needs to conduct more research and development and innovations in early detection of attacks."
"We have left Trellix XDR. The pricing was the main factor because the features were not there and they were charging more from us."
"Trellix XDR should get involved in AI security itself."
"The CPU utilization is very high with Trellix XDR; we are getting multiple types of CPU utilization from the EPP solution, with the EPP agent reaching as high as 80 percent CPU utilization, which creates big challenges for us."
"Technical support is crucial, especially when facing critical issues. It's rated six out of ten. Improvements are needed in the support sector, with a focus on providing expert assistance during production periods."
"The EdgeGear solution is an area that requires attention, specifically regarding AI solutions and intelligence features."
"The platform should enhance compatibility with all other SIEM solutions."
 

Pricing and Cost Advice

"We didn't have to pay any additional fee for the cloud instance. It just came with the renewal, which was nice."
"It's way too expensive, but security is expensive. You pay for your licensing, and then you pay for someone to monitor the stuff."
"I feel it is fairly priced."
"I did PoCs on products called Cylance and CrowdStrike. Although, I consider these products and they were also good, when it come to cost and budgetary factors, Traps has been proven to be better than the other two products. It is quite cost-effective and delivers all the entire solution which we require."
"Its pricing is kind of in line with its competitors and everybody else out there."
"The pricing is a little bit on the expensive side."
"The tool's price is moderate."
"When we first bought it, it was a bit expensive, but it was worth it. The licensing was straightforward."
"I rate the solution’s pricing a six or seven out of ten.."
Information not available
report
Use our free recommendation engine to learn which Extended Detection and Response (XDR) solutions are best for your needs.
894,738 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
12%
Construction Company
12%
Comms Service Provider
9%
Manufacturing Company
8%
Financial Services Firm
15%
Comms Service Provider
14%
Manufacturing Company
8%
Construction Company
8%
Computer Software Company
17%
Healthcare Company
9%
Financial Services Firm
9%
Comms Service Provider
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise20
Large Enterprise49
No data available
By reviewers
Company SizeCount
Small Business2
Midsize Enterprise1
Large Enterprise4
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
What is your experience regarding pricing and costs for ESET EDR/XDR?
I find the price of ESET EDR/XDR to be competitive to the market, which is a reasonable aspect for us.
What needs improvement with ESET EDR/XDR?
I just deploy and forget it, so I don't get into much detail about improvements. The major setback we face with ESET ...
What advice do you have for others considering ESET EDR/XDR?
We might get good pricing one year, and then the next year there could be significant pricing issues. Integration wit...
What is your experience regarding pricing and costs for Trellix XDR?
Since I'm a technical engineer, I don't deal with pricing or licensing. Our sales team handles those aspects.
What needs improvement with Trellix XDR?
The CPU utilization is very high with Trellix XDR. We are getting multiple types of CPU utilization from the EPP solu...
What is your primary use case for Trellix XDR?
We are selling Trellix XDR products including DLP and EPP solutions. We sell Trellix XDR for endpoint protection. We ...
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
ESET Secure Authentication
MVision XDR, MVision eXtended Detection and Response
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Mitsubishi Motors, Canon
Information Not Available
Find out what your peers are saying about ESET EDR/XDR vs. Trellix XDR and other solutions. Updated: April 2026.
894,738 professionals have used our research since 2012.