No more typing reviews! Try our Samantha, our new voice AI agent.

ESET PROTECT Enterprise vs Trellix XDR comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Ranking in Extended Detection and Response (XDR)
5th
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
110
Ranking in other categories
Endpoint Protection Platform (EPP) (4th), Endpoint Detection and Response (EDR) (6th), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (1st)
ESET PROTECT Enterprise
Ranking in Extended Detection and Response (XDR)
18th
Average Rating
8.8
Reviews Sentiment
7.0
Number of Reviews
16
Ranking in other categories
Anti-Malware Tools (11th)
Trellix XDR
Ranking in Extended Detection and Response (XDR)
35th
Average Rating
7.4
Reviews Sentiment
7.3
Number of Reviews
5
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of May 2026, in the Extended Detection and Response (XDR) category, the mindshare of Cortex XDR by Palo Alto Networks is 4.7%, down from 5.1% compared to the previous year. The mindshare of ESET PROTECT Enterprise is 1.3%, up from 0.6% compared to the previous year. The mindshare of Trellix XDR is 0.8%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Extended Detection and Response (XDR) Mindshare Distribution
ProductMindshare (%)
Cortex XDR by Palo Alto Networks4.7%
ESET PROTECT Enterprise1.3%
Trellix XDR0.8%
Other93.2%
Extended Detection and Response (XDR)
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
Manikumar David - PeerSpot reviewer
IT Manager at R K Khanna and Associates
Provides comprehensive monitoring and policy implementation with room for memory optimization
ESET PROTECT Enterprise makes the system a little slow sometimes and updates occur at startup. Sometimes unwanted pop-ups appear to users, and they are unable to disable them. The user-friendliness is lacking in some areas. When users are using any computer, ESET PROTECT Enterprise should work in the background without consuming much memory, and any updates should proceed in the background without disturbing the user.
reviewer2840397 - PeerSpot reviewer
Associate Cybersecurity Analyst at a tech vendor with 10,001+ employees
Automated response has reduced manual workloads but setup complexity and support still need work
Trellix XDR can be improved because it has a complex initial setup. We personally had trouble in the initial configuration of Trellix XDR and it was very time-consuming for us. It requires careful planning and expertise as well because the syntaxes are not that user-friendly and the UI/UX is not that user-friendly either. For the first-time user, the designing part will be a bit tricky and it will be a bit annoying as well because there's no readily available documentation for this. There is the false positive problem which Trellix XDR is known for, which can lead to alert fatigue and increased workload for the security analyst. The product also has poor SKU guidance from the sales team, and the support team is also not that well-versed in what they are doing. Trellix support team is not highly regarded because they follow a whole hierarchical process to escalate the complaints and the feedback requests, and the resolution can take very long, from two to three weeks to a month, which is not really viable in a cyber security landscape which is moving this fast.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The main benefit of using Cortex XDR by Palo Alto Networks while employing Palo Alto Firewall at the internet edge is that it improves security on our endpoint devices, integrating seamlessly with Palo Alto Firewalls to deliver comprehensive network, analyst, and security details all in a single dashboard, which allows us to manage everything from our network devices."
"Stability is a primary factor, and then there's the ease of distribution and policy management; Cortex XDR by Palo Alto Networks is very easy to work with, and we're quite happy with them."
"The most valuable aspect of Cortex XDR by Palo Alto Networks for me is its integration with AI detection, where we get to know the behavioral detection based on users, traffic patterns, and different services that we consume."
"It has pretty much everything we need and works well within the Palo Alto ecosystem."
"Stability is a primary factor, and then there's the ease of distribution and policy management."
"It is an easy-to-use tool."
"The stability of the solution is very good, we have about 100 users on it right now, and we use it twice a week."
"The stability of this product is very good."
"Regarding real-time analytics and threat detection capabilities in ESET PROTECT Enterprise, I find them excellent."
"It is easy to patch, update, and set up scheduled scans."
"The solution provides EDR. You can customize how you prepare the endpoint for clients and the dashboard alerts."
"The most valuable features of ESET File Security are the performance and it doesn't take too many resources."
"It's helped us with restrictions and knowing which users we can provide permissions to and which users we need to restrict."
"The solution offers a lot of configuration capabilities."
"I like the dynamic groups feature. They give the ability to filter endpoint machines by any parameter, software, or hardware inventory, and that's a significant advantage when you need to, for example, automate a secondary firewall profile for endpoints outside your network. Or if you want to automatically isolate the computer from the rest of the network if the ransomware is found."
"The solution is easy to use and install, with good pricing."
"The AI-assisted troubleshooting and threat hunting capabilities, along with the machine learning functionality, are the biggest advantages of Trellix XDR that stand out for me."
"Because Trellix gives us multiple types of modules, we are using a single ePO console for multiple solutions including application control, DLP, and XDR."
"The analytics assessment and flexibility of the platform are valuable."
"Trellix XDR has impacted my organization positively because time was definitely saved because of the automated response, and the positive impact was definitely there in terms of both time saved and people being cut down from the team to have a more efficient and cost-saving team."
"It contributes to our system's robust event detection and analysis, enabling us to respond effectively to incidents."
"Trellix XDR is an excellent solution that is continually improving."
 

Cons

"The playbooks could be improved to include more functionalities or actions."
"Basically, they don't provide customer support tools just to investigate the logs."
"The solution should force customers to integrate with network traffic to see the full benefits of XDR."
"Every 30 or 40 days, there's a new version and we need to go and make sure our customer's laptops are upgraded."
"Limited remote connection."
"It would be good if they could make an exception for applications. Sometimes, it can be a bit of a challenge to make exceptions for certain applications that have been used as rogue."
"I recommend adding a data loss prevention (DLP) solution to Cortex XDR by Palo Alto Networks. The inclusion of this feature would allow the application of DLP policies alongside antivirus policies via a single agent and console, making it more competitive as other OEMs often offer DLP solutions as part of their antivirus products."
"Managing the product should be easier."
"I would like to see more in managing mobile devices in an on-premise solution. The latest news I've heard is that ESET drops mobile management module development for the on-prem version. It's moving to the cloud. Like in endpoint client protection, I would also like to see more of the vulnerability management features and additional app control functionality in ESET Protect."
"Its automation can be improved."
"In terms of management accounts, there's a lot of manuals that seem to be mixed up. Sometimes, it's a little bit confusing."
"In terms of management accounts, there's a lot of manuals that seem to be mixed up. Sometimes, it's a little bit confusing."
"Certain updates prompt the computer to restart automatically. Users have complained that it initiates computer restarts during their work without intervention."
"I would like to see more features on the reporting side of things."
"They need to reduce the number of notifications on the endpoints."
"The management console could be improved. Sometimes, agents lose connection with the management console, and the administration team needs to reinstall the agents on the computers."
"The CPU utilization is very high with Trellix XDR; we are getting multiple types of CPU utilization from the EPP solution, with the EPP agent reaching as high as 80 percent CPU utilization, which creates big challenges for us."
"Technical support is crucial, especially when facing critical issues. It's rated six out of ten. Improvements are needed in the support sector, with a focus on providing expert assistance during production periods."
"Trellix XDR should get involved in AI security itself."
"The platform should enhance compatibility with all other SIEM solutions."
"We have left Trellix XDR. The pricing was the main factor because the features were not there and they were charging more from us."
"The EdgeGear solution is an area that requires attention, specifically regarding AI solutions and intelligence features."
 

Pricing and Cost Advice

"It's way too expensive, but security is expensive. You pay for your licensing, and then you pay for someone to monitor the stuff."
"It has a yearly renewal."
"Cortex XDR's pricing is ok."
"Licensing for Palo Alto Networks Cortex XDR can be costly, especially when it comes to a hundred users. A license is required for each user, and the subscription must be renewed on a yearly basis."
"When we first bought it, it was a bit expensive, but it was worth it. The licensing was straightforward."
"I don't have any issues with the pricing. We are satisfied with the price."
"We pay about $50,000 USD per year for a bundle that includes Cortex XDR."
"The solution has one subscription for endpoint protection and one subscription for detection and response. The two licenses combined give you the BRO version."
"There is a license needed to use ESET Protect. The licensing cost is very low, it is approximately $10 per license."
"ESET PROTECT Enterprise is affordable."
"The product is cost-effective compared to one of its competitors."
Information not available
report
Use our free recommendation engine to learn which Extended Detection and Response (XDR) solutions are best for your needs.
894,738 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
12%
Construction Company
12%
Comms Service Provider
9%
Manufacturing Company
8%
Comms Service Provider
13%
Financial Services Firm
11%
Computer Software Company
10%
Manufacturing Company
10%
Computer Software Company
17%
Healthcare Company
9%
Financial Services Firm
9%
Comms Service Provider
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise20
Large Enterprise49
By reviewers
Company SizeCount
Small Business11
Midsize Enterprise2
Large Enterprise2
By reviewers
Company SizeCount
Small Business2
Midsize Enterprise1
Large Enterprise4
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
What needs improvement with ESET Protect?
One area for improvement in ESET PROTECT Enterprise is its capabilities on Mac devices, which are less functional com...
What is your primary use case for ESET Protect?
My customers use ESET PROTECT Enterprise to secure all their operating systems; we have a lot of customers who rely o...
What advice do you have for others considering ESET Protect?
I suggest that other users considering ESET PROTECT Enterprise utilize this platform to manage all their laptops and ...
What is your experience regarding pricing and costs for Trellix XDR?
Since I'm a technical engineer, I don't deal with pricing or licensing. Our sales team handles those aspects.
What needs improvement with Trellix XDR?
The CPU utilization is very high with Trellix XDR. We are getting multiple types of CPU utilization from the EPP solu...
What is your primary use case for Trellix XDR?
We are selling Trellix XDR products including DLP and EPP solutions. We sell Trellix XDR for endpoint protection. We ...
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
ESET Protect, ESET File Security
MVision XDR, MVision eXtended Detection and Response
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Information Not Available
Information Not Available
Find out what your peers are saying about ESET PROTECT Enterprise vs. Trellix XDR and other solutions. Updated: April 2026.
894,738 professionals have used our research since 2012.