ESET Inspect vs Trellix Endpoint Detection and Response (EDR) comparison

ESET Inspect vs. Trellix Endpoint Detection and Response (EDR)

Download the complete report

Helped 885,376 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Mindshare comparison

As of March 2026, in the Endpoint Detection and Response (EDR) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.4%, down from 4.0% compared to the previous year. The mindshare of ESET Inspect is 1.3%, up from 1.0% compared to the previous year. The mindshare of Trellix Endpoint Detection and Response (EDR) is 1.1%, up from 0.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Detection and Response (EDR) Mindshare Distribution
Product	Mindshare (%)
Cortex XDR by Palo Alto Networks	3.4%
Trellix Endpoint Detection and Response (EDR)	1.1%
ESET Inspect	1.3%
Other	94.2%

Endpoint Detection and Response (EDR)

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

Moshiur-Rahman Khan

CEO at IOPoint.com

Provides reliable and comprehensive internet security solutions without significant system slowdowns

My organization uses ESET Inspect for antivirus and internet security on laptops and desktops. On the enterprise side, we utilize it on our Windows Server. The platform has improved our organization's security by providing comprehensive antivirus and internet security solutions. It is fast and…

Read full review

CESARCASTRO

Committee Of IT Cybersececurity at a energy/utilities company with 51-200 employees

Cross-site threat hunting has improved visibility and supports proactive incident response

I believe this is a product in evolution. I do not think it is a final tool to conduct forensics or information forensics of the incidents or information incidents that could arise in our network infrastructure. Trellix Endpoint Detection and Response (EDR) is interesting and is a very good entry point that has been evolving through the last years. In the next two months, I have a new contract, and we are pointing out to have an XDR solution with NDR and EDR together. I do not have enough time to do it because I am the manager. However, my coworkers do not understand it yet. I have a contract with a third-party company that is making reports around that, but also they do not have enough experience or enough utility of this. It would be interesting if I have a notification system from EDR. For example, if I am the manager, it would be interesting to have a warning, alarm, or something around that which could call me to get into the system and the dashboard to see what is happening. For example, if it is a high-level threat. However, most of them are just advisory or warnings. I do not enter the tool frequently. I guess I access it once every three months.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Stability is a primary factor, and then there's the ease of distribution and policy management."

"The product's initial setup phase is very easy."

"The product is mostly automated, and we do not have to make decisions, because all the decisions are made by the product itself and we are not required to create any custom policies since the policies that are created are well defined in the product itself."

"My advice for anybody who is considering Cortex XDR is that it is a complete solution, and has very good features."

"The tool is designed to scale for large enterprises and handle large volumes of data."

"The main benefit of using Cortex XDR by Palo Alto Networks while employing Palo Alto Firewall at the internet edge is that it improves security on our endpoint devices, integrating seamlessly with Palo Alto Firewalls to deliver comprehensive network, analyst, and security details all in a single dashboard, which allows us to manage everything from our network devices."

"The initial setup isn't too bad."

"It has a higher cost than other solutions, like CrowdStrike or Microsoft’s EDR tools, but it reduces the cost of our operations because it’s a new generation antivirus tool."

More Cortex XDR by Palo Alto Networks pros

"Scalability-wise, it is a very good solution."

"The rules are the best and most useful features."

"ESET Enterprise Inspector's most valuable feature is EDR."

"I find the multilayered endpoint security the most valuable feature."

"This solution is easy to install, setup and monitor."

"The product's most valuable features are its performance and stability."

"Rules are the most valuable feature of ESET Inspect. They are created through XML language, and they track and filter events from endpoints. If the event matches the rule, the rule is triggered. Exceptions are the second most valuable feature because it gives you the power to filter false positives in large numbers. The third most valuable feature is the Learning mode that facilitates making exceptions for known processes with a good reputation."

"ESET Enterprise Inspector's greatest asset lies in its user-friendly interface, which allows for easy navigation and thorough analysis of incidents."

"When Trellix detects some threats, the device is isolated in a quarantine zone for examination."

"The most useful features are behavior monitoring, DLP, and access control. The automation has gotten much better in the last two years than when it was McAfee. It works better now and integrates more smoothly."

"It is a stable solution. Stability-wise, I rate the solution a nine out of ten...I rate the solution's technical support team a nine and a half or ten out of ten."

"It has been helpful in terms of identifying unknown threats."

"The most valuable feature of the solution is its area for threat detection."

"The most valuable features of the solution are the ability to isolate or quarantine devices and block or detect Ransomware and other well-known tools that are used to exploit vulnerabilities on devices."

"The biggest strength of the solution is that it's an integrated product that includes EDR and antivirus."

"It is a scalable solution and very easy to use."

More Trellix Endpoint Detection and Response (EDR) pros

Cons

"There is a severe gap in functionality between Windows, Linux, and Mac versions. For example all folder restriction settings are Windows only. Traps 5.0+ does not have SAML / LDAP integration."

"I recommend adding a data loss prevention (DLP) solution to Cortex XDR by Palo Alto Networks. The inclusion of this feature would allow the application of DLP policies alongside antivirus policies via a single agent and console, making it more competitive as other OEMs often offer DLP solutions as part of their antivirus products."

"Every 30 or 40 days, there's a new version and we need to go and make sure our customer's laptops are upgraded."

"I would like to see them include NDR (Network Detection Response). Then it would work well with SIEM Response."

"There's room for improvement with Mac device installations, which can be challenging."

"The solution should add unwanted malicious hash values to a block list so that whenever the action is triggered, it will automatically prevent the malicious content."

"The solution could improve by providing better integration with their own products and others."

"Traps doesn't work with McAfee. You need to remove McAfee to install Traps. This is very common, and its nothing that should be an issue. Some antivirus engines recognize Traps as an threat component, so maybe they need to shake hands somewhere."

More Cortex XDR by Palo Alto Networks cons

"One area that needs improvement for the product is ransomware protection, which does not offer complete security."

"Every vendor is working on making the job of SOC analysts easier, with fewer false positives and more precise detections. ESET uses LiveGrid technology that provides feedback on the reputation of files and operations. It's hard to eliminate all of the false positives, but hopefully, we'll see some improvement with the advances in AI."

"It is not a stable product. We were disappointed in the stability of this product in comparison to McAffee."

"The platform's price could be better."

"It may be difficult for a first-time customer to understand all of the functions that are available to him."

"It is not a stable product. We were disappointed in the stability of this product in comparison to McAffee."

"The product is complex to configure, and there are too many errors that are not errors, making it an area that can be considered for improvement."

"The solution could improve the consumption of resources. The RAM and CPU usage increases during usage which can cause issues. We have three separate services and it would be beneficial if all were executed from one agent limiting the over usage of system resources."

"The alert feature of McAfee MVISION Endpoint Detection and Response needs improvement because for you to get the alerts, you have to log on to the portal. What my company needs is a tool that sends you alerts. For example, if it detects a threat on your machine, it should send you an alert. My company gets the alerts instead from the antivirus software rather than the EDR. If you want to see the alerts on McAfee MVISION Endpoint Detection and Response, you have to connect to the system manually. Another area for improvement in the tool is the reporting. My company needs weekly and monthly reports about the alerts, but you can't extract reports from McAfee MVISION Endpoint Detection and Response, so a decision was made to move to another EDR solution, particularly Microsoft Defender for Endpoint, next month. My company tested Microsoft Defender for Endpoint via a POC for one to three months. The resource usage of McAfee MVISION Endpoint Detection and Response is also an area for improvement because it consumes a lot of memory. For example, during the on-demand scan, you can't work because of the high CPU usage. You need to schedule the scans. McAfee MVISION Endpoint Detection and Response has a lot of modules, but my company doesn't use all modules."

"I need some protection, possibly multi-factor authentication improvements."

"An area for improvement in McAfee MVISION Endpoint Detection and Response is the historical search. For example: when you have information on the artifact and a precedent, you want to do a search, and that is a bit lacking in the tool."

"McAfee technical support has been not that great in the past two months, and it could be because they just merged with another company."

"The endpoints and utilization are too high, which impacts the production activity."

"The CPU utilization of the product is quite high compared to its competitors."

"The main drawbacks are resources and processing time, as it consumes a lot of CPU and RAM."

"The dashboard is split across different platforms. For example, if you want information on Incident Detection, you have to access one dashboard, and for DLP reporting, there's a separate platform. This fragmentation means you can't access everything from a single dashboard."

More Trellix Endpoint Detection and Response (EDR) cons

Pricing and Cost Advice

"Its pricing is kind of in line with its competitors and everybody else out there."

"The pricing is a little bit on the expensive side."

"In terms of the cost Cortex XDR by Palo Alto Networks is very expensive because we are a Mexican company and when you translate dollars to pesos the cost is very high. The solution is very expensive for Mexican companies. I understand that they have international prices, but I do not think it offsets the price enough for many companies in countries, such as Mexico. The amount it is reduced is not a massive percentage."

"We didn't have to pay any additional fee for the cloud instance. It just came with the renewal, which was nice."

"The cost of Cortex XDR by Palo Alto Networks is $55 to $90 USD per endpoint per month."

"The pricing is a little high. It is per user per year."

"It has a higher cost than other solutions, like CrowdStrike or Microsoft’s EDR tools, but it reduces the cost of our operations because it’s a new generation antivirus tool."

"It's way too expensive, but security is expensive. You pay for your licensing, and then you pay for someone to monitor the stuff."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"I feel it is a very expensive product."

"The platform is expensive; it could be cheaper."

"This is true in the case of licensing, we do not have the most expensive products, and we don't have the cheapest product, it's somewhere in the middle. Perhaps a little higher from the middle, but we are known for what we provide to our customers, and they are pleased."

"The pricing and licensing are the big issue now, in my opinion. If the price was less than other companies, or a one-time charge for service was available, I think there would be more users of this solution."

"The platform's licensing is affordable and straightforward."

"Pricing for McAfee MVISION Endpoint Detection and Response is not that expensive, but it's not something that a startup could buy. Pricing for it is for midsized businesses. There's an additional payment if you want data retention for more than thirty days. They gave us data retention for thirty days. Then if you want longer data retention, they have the paid option for a three-month data retention period and for a one-year data retention period."

"The cost is okay, compared to other products."

"The price is reasonable."

"Pricing is a problem in South Africa. It could be cheaper here. The rand-to-dollar exchange rate makes it expensive for us. A 25 dollar endpoint cost becomes quite significant when converted to rand."

"The pricing is always high."

"The product’s pricing is reasonable."

"McAfee MVISION Endpoint Detection and Response is reasonable in terms of cost. It's a tool my company has been using for a few years now. It costs $25,000 to $30,000 for six hundred users."

"Speaking about the price, you must use the product to find the product's cost for you."

More Trellix Endpoint Detection and Response (EDR) pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.

See recommendations

885,376 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Construction Company

13%

Manufacturing Company

Computer Software Company

Financial Services Firm

Comms Service Provider

11%

Computer Software Company

10%

Financial Services Firm

Manufacturing Company

Financial Services Firm

12%

Government

10%

Computer Software Company

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	44
Midsize Enterprise	20
Large Enterprise	47

By reviewers
Company Size	Count
Small Business	5
Large Enterprise	2

By reviewers
Company Size	Count
Small Business	14
Midsize Enterprise	3
Large Enterprise	11

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

What is your experience regarding pricing and costs for ESET Inspect?

The platform's licensing is affordable and straightforward. We purchase soft keys, install them, and manage the licen...

What needs improvement with ESET Inspect?

One area that needs improvement for the product is ransomware protection, which does not offer complete security.

What is your primary use case for ESET Inspect?

My organization uses ESET Inspect for antivirus and internet security on laptops and desktops. On the enterprise side...

What do you like most about McAfee MVISION Endpoint Detection and Response?

Trellix has a user-friendly interface.

What is your experience regarding pricing and costs for McAfee MVISION Endpoint Detection and Response?

I pay for what we get. But the service level from my partner company is not enough to overcome a complex case.

What needs improvement with McAfee MVISION Endpoint Detection and Response?

I believe this is a product in evolution. I do not think it is a final tool to conduct forensics or information foren...

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Comparisons

Compared 9% of the time

SentinelOne Singularity Complete vs Cortex XDR by Palo Alto Networks

Compared 6% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Symantec Endpoint Security vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

More Cortex XDR by Palo Alto Networks Competitors

CrowdStrike Falcon vs ESET Inspect

Compared 12% of the time

HP Wolf Security vs ESET Inspect

Compared 10% of the time

Fortinet FortiEDR vs ESET Inspect

Compared 6% of the time

SentinelOne Singularity Complete vs ESET Inspect

Compared 5% of the time

TrendAI Vision One vs ESET Inspect

Compared 4% of the time

More ESET Inspect Competitors

Trellix Endpoint Security Platform vs Trellix Endpoint Detection and Response (EDR)

Compared 20% of the time

CrowdStrike Falcon vs Trellix Endpoint Detection and Response (EDR)

Compared 10% of the time

TrendAI Vision One vs Trellix Endpoint Detection and Response (EDR)

Compared 8% of the time

SentinelOne Singularity Complete vs Trellix Endpoint Detection and Response (EDR)

Compared 6% of the time

Sangfor Endpoint Secure vs Trellix Endpoint Detection and Response (EDR)

Compared 3% of the time

More Trellix Endpoint Detection and Response (EDR) Competitors

Product Reports

Cortex XDR by Palo Alto Networks

Download Cortex XDR by Palo Alto Networks product report

ESET Inspect

Download ESET Inspect product report

Trellix Endpoint Detection and Response (EDR)

Download Trellix Endpoint Detection and Response (EDR) product report

Trellix Endpoint Detection and Response (EDR) report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

ESET Enterprise Inspector

McAfee MVISION EDR, MVISION EDR, MVISION Endpoint Detection and Response

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

ESET Inspect is an essential component to help ensure the highest level of enterprise security. While standard ESET Endpoint Security provides strong protection, ESET Inspect takes your environment's security to a new dimension. A security tool is needed to help security professionals protect their sensitive data and detect and investigate security incidents, advanced threats, and targeted attacks or breaches on endpoint devices. ESET Inspect is a tool that offers the peace of mind of continuous protection and security monitoring in a powerful and easy-to-use solution.

ESET

Reduce Alert Noise

Reduce the time to detect and respond to threats. Trellix EDR helps security analysts quickly prioritize threats and minimize potential disruption.

Do More with Existing Resources

Guided investigation automatically asks and answers questions while gathering, summarizing, and visualizing evidence from multiple sources—reducing the need for more SOC resources.

Low-Maintenance Cloud Solution

Cloud-based deployment and analytics enables your skilled security analysts to focus on strategic defense, instead of tool maintenance. Benefit from implementing the right solution for you.

Trellix

Sample Customers

CBI Health Group, University Honda, VakifBank

Mitsubishi Motors, Allianz Suisse, Cannon, T-Mobile

Sutherland Global Services

ESET Inspect vs. Trellix Endpoint Detection and Response (EDR)