Try our new research platform with insights from 80,000+ expert users

NetWitness NDR vs Trellix Endpoint Security Platform comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 21, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
8.0
Implementing NetWitness NDR enhances security, improves network visibility, reduces costs, and boosts efficiency and productivity for businesses.
Sentiment score
8.0
Trellix Endpoint Security offers strong ROI with enhanced security, cost savings, ease of management, and effective ransomware protection.
We have saved money and required fewer employees because of the complicated architecture.
Senior Associate at a tech vendor with 10,001+ employees
Clients appreciate the solution’s customization capabilities and ongoing product improvements.
Information Security Engineer at Nhq Distribution Ltd
There are two parts: one is the encryption which is standard and no AI is needed, but the data protection part could benefit from AI to detect new types of data and protect it.
VP - Cyber Security at Olam International
 

Customer Service

Sentiment score
7.3
NetWitness NDR's customer service is generally efficient and highly regarded, though some users report occasional slow response times.
Sentiment score
7.4
Trellix Endpoint Security Platform's customer service is praised for efficiency but varies in consistency and response time regionally.
I would rate their customer service nine out of ten.
Joint Director at PAA
I rate the support from Trellix a perfect ten.
Technical Associate at VSecure Networks
The response time is a notable issue.
Technical Associate at Valuepoint Systems
 

Scalability Issues

Sentiment score
7.0
NetWitness NDR is scalable for large enterprises, though some users report issues with scalability and agent migration.
Sentiment score
8.2
Trellix Endpoint Security excels in scalability, adaptability, and integration, supporting large enterprises with flexible deployment and resource management.
I would rate the scalability of the solution as a six out of ten, indicating some challenges due to downtime requirements.
Technical Associate at Valuepoint Systems
Trellix Endpoint Security is scalable.
Joint Director at PAA
 

Stability Issues

Sentiment score
7.7
NetWitness NDR is generally reliable, providing real-time data and stability, though minor technical issues are occasionally reported.
Sentiment score
8.1
Trellix Endpoint Security Platform is reliable and well-rated, though occasional performance issues occur during updates or specific configurations.
I would rate its stability as nine out of ten.
Joint Director at PAA
I would rate the stability of Trellix Endpoint Security as near perfect, close to ten out of ten.
Information Security Engineer at Nhq Distribution Ltd
I think it's stable enough; earlier it had glitches, but now it's stable enough.
VP - Cyber Security at Olam International
 

Room For Improvement

NetWitness NDR requires improvements in UI, scalability, detectability, integration, session times, pricing, training, and features, making it complex and slow.
Trellix Endpoint Security needs improvements in speed, integration, user experience, resource usage, and compatibility for better security and support.
It would also help if detection specifics were identified more quickly and the problem-solving process accelerated, especially to meet larger clients' expectations.
Information Security Engineer at Nhq Distribution Ltd
The dashboard of Trellix Endpoint Security Platform is a bit difficult to understand, and it takes a lot of time to comprehend the tools and policies compared to other tools.
Senior Associate at a tech vendor with 10,001+ employees
The product does not seem to be cloud-native.
Architect at a government with 10,001+ employees
 

Setup Cost

Trellix Endpoint Security offers mid-range, flexible pricing with rich features, though renewal costs may rise and extras incur fees.
My experience with pricing, setup cost, and licensing is good; compared to other tools, Trellix Endpoint Security Platform provides lower costs.
Senior Associate at a tech vendor with 10,001+ employees
Trellix Endpoint Security is cost-effective and provides excellent value for money.
Joint Director at PAA
The license costs are very reasonable, around 1,000 to 1,200 rupees per year.
Technical Associate at Valuepoint Systems
 

Valuable Features

NetWitness NDR offers high detection rates, real-time malware response, third-party integration, and a user-friendly, interoperable interface with advanced analytics.
Trellix Endpoint Security excels with centralized management, integration, real-time monitoring, and adaptability for comprehensive threat protection.
The detection capability of Trellix Endpoint Security is higher than traditional antivirus solutions.
Senior Vice President IT at AS IT Consulting Pvt. Ltd.
Trellix Endpoint Security Platform has positively impacted our organization with strong protection against malware and ransomware, greatly improving our ability to detect and block threats in real time, and features like ATP and Exploit Prevention help reduce malware and zero-day attacks.
Senior Associate at a tech vendor with 10,001+ employees
Including options like Application Control (formerly Solidcore), integrated monitoring, change control, DLP, and advanced threat protection, the solution offers comprehensive security.
Information Security Engineer at Nhq Distribution Ltd
 

Categories and Ranking

NetWitness NDR
Ranking in Endpoint Protection Platform (EPP)
58th
Ranking in Endpoint Detection and Response (EDR)
59th
Ranking in Extended Detection and Response (XDR)
36th
Average Rating
8.0
Reviews Sentiment
6.9
Number of Reviews
15
Ranking in other categories
Threat Intelligence Platforms (TIP) (39th), Security Orchestration Automation and Response (SOAR) (25th), Network Detection and Response (NDR) (20th)
Trellix Endpoint Security P...
Ranking in Endpoint Protection Platform (EPP)
8th
Ranking in Endpoint Detection and Response (EDR)
10th
Ranking in Extended Detection and Response (XDR)
10th
Average Rating
7.8
Reviews Sentiment
7.2
Number of Reviews
159
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of December 2025, in the Endpoint Protection Platform (EPP) category, the mindshare of NetWitness NDR is 0.5%, up from 0.2% compared to the previous year. The mindshare of Trellix Endpoint Security Platform is 3.8%, down from 4.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Protection Platform (EPP) Market Share Distribution
ProductMarket Share (%)
Trellix Endpoint Security Platform3.8%
NetWitness NDR0.5%
Other95.7%
Endpoint Protection Platform (EPP)
 

Featured Reviews

reviewer1799727 - PeerSpot reviewer
Manager, IT Security Operations at a non-profit with 11-50 employees
Reliable and good support but can be expensive
I have no real complaints about the solution. Threat detection could be better. They need to enhance their threat intelligence feeds. We would like to have more IOCs or more trade intelligence to not only rely on the intelligence of the engineer in charge but to have some threat intelligence and some seeds of IOCs and to have the host have some artificial intelligence to reduce the number of false positives. I don't see this solution being very scalable. The solution is pricey.
Abhimanyu Das - PeerSpot reviewer
Senior Associate at a tech vendor with 10,001+ employees
Threat detection is effective, and the solution provides good control over device access, but it still needs better troubleshooting options for agent-related issues.
From an improvement perspective, I am looking for a way to troubleshoot situations where the endpoint agent becomes corrupted and requires reinstallation, as there is currently no option to resolve these issues without rebooting the system. I give it a rating of seven because, in today’s scenario, the portal is complicated to navigate. The Trellix Endpoint Security Platform dashboard is somewhat difficult to understand, and it takes considerable time to familiarize oneself with the tools and policies compared to other solutions. For on-premises deployment, I would also like to highlight that the architecture is quite complex, which is an area Trellix Endpoint Security Platform should consider improving.
report
Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.
879,259 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
10%
Computer Software Company
10%
Manufacturing Company
9%
Performing Arts
7%
Manufacturing Company
13%
Government
13%
Computer Software Company
10%
Financial Services Firm
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business10
Midsize Enterprise2
Large Enterprise5
By reviewers
Company SizeCount
Small Business67
Midsize Enterprise36
Large Enterprise61
 

Questions from the Community

Ask a question
Earn 20 points
How does McAfee Endpoint Security compare with MVISION?
The flexible manageability of McAfee Endpoint Security is one of our favorite aspects of this solution. You can deploy various components as desired with McAfee Endpoint Security, whereas many othe...
How does Crowdstrike Falcon compare with FireEye Endpoint Security?
The Crowdstrike Falcon program has a simple to use user interface, making it both an easy to use as well as an effective program. Its graphical design is such that it makes an extremely useful too...
What do you like most about McAfee Endpoint Security?
It provides a robust defense against cybersecurity threats while offering user-friendly features like notifications and approval prompts.
 

Also Known As

RSA ECAT, NetWitness Network
McAfee Endpoint Security, McAfee Endpoint Protection, Intel Security Total Protection for Endpoint, McAfee Complete Endpoint Protection, Trellix Endpoint Security (ENS)
 

Overview

 

Sample Customers

ADP, Ameritas, Partners Healthcare
inHouseIT, Seagate Technology
Find out what your peers are saying about NetWitness NDR vs. Trellix Endpoint Security Platform and other solutions. Updated: December 2025.
879,259 professionals have used our research since 2012.