Lookout vs Trellix Endpoint Security Platform comparison

Lookout and Trellix are both solutions in the Endpoint Detection and Response (EDR) category. Lookout is ranked #51 with an average rating of 7.0, while Trellix is ranked #11 with an average rating of 7.7. Lookout holds a 0.7% mindshare in EDR, compared to Trellix’s 3.3% mindshare. Additionally, 75% of Lookout users are willing to recommend the solution, compared to 88% of Trellix users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Mar 22, 2026

Both Trellix Endpoint Security Platform and Lookout operate in the cybersecurity space, with Trellix standing out due to its comprehensive feature set and threat intelligence, while Lookout is preferred for its mobile security capabilities. Trellix is viewed favorably for pricing and support, but Lookout's mobile protection offers a distinct advantage for clients needing mobile security.

Features: Trellix offers comprehensive threat intelligence, endpoint detection, and a wide range of security protocols. Lookout is focused on mobile risk detection, data leakage prevention, and mobile security features. Trellix provides extensive platform coverage, whereas Lookout specializes in mobile-focused solutions.

Ease of Deployment and Customer Service: Trellix manages complex deployments and requires considerable resources, offering detailed support and extensive documentation. Lookout is known for quick, streamlined deployment with efficient customer service focused on resolving issues promptly. Trellix supports complex deployments, and Lookout supports mobile settings.

Pricing and ROI: Trellix has higher setup costs, but its broad feature set promises long-term ROI through comprehensive protection. Lookout offers competitive pricing to businesses prioritizing mobile security, with an attractive ROI by mitigating mobile threats. While Trellix may require a larger initial investment, Lookout's pricing appeals to enterprises focused on mobile protection.

To learn more, read our detailed Lookout vs. Trellix Endpoint Security Platform Report (Updated: March 2026).

Buyer's Guide

Lookout vs. Trellix Endpoint Security Platform

March 2026

Download the complete report

Helped 885,311 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Mindshare comparison

As of March 2026, in the Endpoint Detection and Response (EDR) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.4%, down from 4.0% compared to the previous year. The mindshare of Lookout is 0.7%, up from 0.4% compared to the previous year. The mindshare of Trellix Endpoint Security Platform is 3.3%, down from 4.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Detection and Response (EDR) Mindshare Distribution
Product	Mindshare (%)
Cortex XDR by Palo Alto Networks	3.4%
Trellix Endpoint Security Platform	3.3%
Lookout	0.7%
Other	92.6%

Endpoint Detection and Response (EDR)

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

David Baynton

IT Manager at NHS Trust

Enhanced mobile security with visibility into app and website usage, but installation challenges remain

We use Lookout for mobile devices, such as phones It has reduced our risk around mobile devices. I like the security features and being able to see what apps and websites people are using. There is nothing we have come across that we've desired. We have been using Lookout for one year. The…

Read full review

PankajKumar24

IT Manager at Gigabit Technologies Pvt Ltd

Advanced threat prevention has strengthened incident response and customized security workflows

The biggest advantage of Trellix Endpoint Security Platform is the ATP solution, which provides advanced threat prevention. Machine learning algorithms are available in the product as part of the threat anti-malware, including predictive machine learning and behavioral analysis, which are integral to the anti-malware module of EPP. In terms of my experience with the machine learning algorithms for analysis and threat detection, we are analyzing logs provided by Trellix, but we are not able to conduct specific machine learning analysis on those logs. The automated response mechanisms in the products help with incident management because we have to create playbooks in Trellix console for automation, which we need to enable. The customizable dashboard of Trellix Endpoint Security Platform definitely contributes to the decision-making process, as we customize the dashboard according to customer requirements. When it comes to integration aspects, we are able to integrate Trellix Endpoint Security Platform with SIEM or SOAR solutions using the ePO console, which enhances threat detection capabilities. Reporting and analytics aspects have an impact on security posture assessment, as we are able to fetch reports in the ePO console customized according to customer requirements for downloading and sending via email.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The solution's stability is generally good."

"Cortex XDR by Palo Alto Networks is easy to use and does not consume a lot of hardware resources."

"The dashboard is customizable."

"The initial setup is pretty easy."

"One of the main benefits of the solution is its intelligence to correlate the events into an incident."

"The solution's most valuable feature is its ability to rapidly detect certain hardware files."

"Cortex Xnor's playbooks predefine the workflow of the automation, such as response processes, alert triggering, and enriching the context, collecting relevant indicators such as hashes, IP addresses, or domains efficiently and can detect and block malicious attacks with firewalls."

"If any application performs suspicious activities, such as changing registries or modifying other applications, Cortex XDR detects and blocks the entire application."

More Cortex XDR by Palo Alto Networks pros

"We have not had any issues with bugs or breakdowns."

"The protection offered by the product is the most valuable feature. It detects vulnerabilities or traps on our users' phones and then prompts them to clean up their devices. Tools we used previously would only discover, which required us to gather information on the backend, so Lookout is a welcome upgrade."

"The most valuable features are the antivirus as a whole, the anti-malware, and all of the protection features that scan our enterprise devices."

"At the same time, McAfee's deployment was seamless."

"A big advantage of McAfee Endpoint Security is the ability to manage very big environments. We are supporting environments with 200,000 to 300,000 endpoints. The ability to manage with one single console is very important for us. McAfee has phenomenally improved in terms of detection. It provides real-time detection and response with the error, Real Protect, and reputations. It is not only based on signatures but also on behavior analytics, artificial intelligence, or machine learning. We have environments that never had issues with ransomware in the last 20 years. McAfee has a very good performance in this field."

"The most valuable features are the prevention layer that detects the signature value and prevents threats in the network."

"The response part of EDR was most valuable; we used that to separate the endpoint from the network, utilized the solution during incident response, and also benefited from its advanced malware detection capabilities."

"Initially, the DLP was very valuable for disabling access to USB drives."

"Trellix Endpoint Security's dashboard is very flexible, and I can create my own user-specific dashboard depending on user privilege or preference."

"It is a very good solution and gives good blanket protection."

"The central management console is powerful. You can manage endpoints, DLP, encryption, and all the other features from a single console."

More Trellix Endpoint Security Platform pros

Cons

"There are some default policies which sometimes affect our applications and cause them to run around. In the hotel industry, we use a different type of data versus Oracle and SQL. By default, there are some policies which stop us from running properly. Because of this, the support level is also not that strong. We have to wait to get a results."

"Managing the product should be easier."

"It is a complex solution to implement."

"Cortex XDR by Palo Alto Networks is a very good product, but financially, it is very expensive, so the company should look into that area."

"It tends to do 99.9% of things. The only thing I'd like is single sign-on authentication into their cloud platform so that my users can be properly authenticated against it."

"Cortex XDR should have a lightweight agent, and the agent size should not be heavy."

"The complexity and confusion regarding product variants, such as XDR, Forexiant, and Forexon, must be addressed."

"Cortex XDR could be improved with more GUI features."

More Cortex XDR by Palo Alto Networks cons

"The initial setup requires a little bit of experience with configuration."

"From the analysis that we've done, they do seem to be maybe a step behind in trying to enter the market with a new solution. But when they do pick up, they do come out with some good products."

"We just submitted an enhancement request reflecting the main area we want to see improvement in; the APIs. Currently, we're able to build dashboards, but it's somewhat backward because we use our MDM API to create them. Lookout should provide API to customers so we can query our data and use it in our cloud, and this is the only outstanding area for improvement with the product right now."

"The initial setup is complex. It is a very complex product. You must have experience with it."

"In my personal and professional view, I think the reports need more development."

"The customization capabilities of the solution are an area where it lacks, so it would be great if our company could customize the solution to meet the demands of our customers."

"We have faced certain issues recovering the data from systems which could not be fully encrypted by McAfee and then the decryption was a nightmare, it took a lot of time."

"It can be quite complicated to learn McAfee Endpoint Security and to feel comfortable with the environment."

"I would like to see more integration with third-party products."

"We have a lot of problems with the user experience and it's difficult to implement."

"The only challenge we found is the integration with its product modules."

More Trellix Endpoint Security Platform cons

Pricing and Cost Advice

"I don't like that they have different types of licenses."

"It has a higher cost than other solutions, like CrowdStrike or Microsoft’s EDR tools, but it reduces the cost of our operations because it’s a new generation antivirus tool."

"When we first bought it, it was a bit expensive, but it was worth it. The licensing was straightforward."

"Our customers have expressed that the price is high."

"Every customer has to pay for a license because it doesn't work with what you get from a managed services provider."

"The price of the product is not very economical."

"The pricing is a little bit on the expensive side."

"The pricing is okay, although direct support can be expensive."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"The pricing is fair; it's comparable to our previous solution, and we carried out multiple POCs and POVs (proof of value). The product is worth the money we pay for it."

"Lookout is definitely on the lower end when it comes to price point and that seems to be the only differentiator. The technology is in place in this space and it's really about who is coming in at the better price point now."

"There is a one-year and a three-year license available for this solution, we are currently on a three-year license."

"I do licensing on an annual basis and this is what I always recommend to my clients over the monthly option."

"MVISION is intended as an enterprise product and it is priced like one. This solution is within the price range of competitors at the enterprise level."

"The initial price is very good as they give good initial discounts, but it seems a little expensive once you renew the license."

"Pricing for McAfee MVISION Endpoint is not very good, and I would rate its cost three out of five, though I won't be able to mention how much its actual price is."

"The price of the solution is fair, we have a complete security package."

"Trellix Endpoint Security is an inexpensive platform."

"The pricing is reasonable."

More Trellix Endpoint Security Platform pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.

See recommendations

885,311 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Construction Company

13%

Manufacturing Company

Computer Software Company

Financial Services Firm

Computer Software Company

15%

Manufacturing Company

10%

Financial Services Firm

Government

Manufacturing Company

13%

Government

11%

Financial Services Firm

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	44
Midsize Enterprise	20
Large Enterprise	47

By reviewers
Company Size	Count
Small Business	2
Large Enterprise	5

By reviewers
Company Size	Count
Small Business	68
Midsize Enterprise	36
Large Enterprise	62

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

See all answers

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

See all answers

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

See all answers

What is your experience regarding pricing and costs for Lookout?

The pricing is a little expensive. We are currently looking at comparisons with other solutions, including Umbrella.

See all answers

What needs improvement with Lookout?

There is nothing we have come across that we've desired.

See all answers

What is your primary use case for Lookout?

We use Lookout for mobile devices, such as phones.

See all answers

How does McAfee Endpoint Security compare with MVISION?

The flexible manageability of McAfee Endpoint Security is one of our favorite aspects of this solution. You can deplo...

See all answers

How does Crowdstrike Falcon compare with FireEye Endpoint Security?

The Crowdstrike Falcon program has a simple to use user interface, making it both an easy to use as well as an effec...

See all answers

What is your experience regarding pricing and costs for McAfee Endpoint Security?

I don't have visibility on pricing because it is negotiated by a different team, as I look after the technical side.

See all answers

Comparisons

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Compared 9% of the time

SentinelOne Singularity Complete vs Cortex XDR by Palo Alto Networks

Compared 6% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Wazuh vs Cortex XDR by Palo Alto Networks

Compared 2% of the time

More Cortex XDR by Palo Alto Networks Competitors

Zimperium vs Lookout

Compared 13% of the time

Microsoft Defender for Endpoint vs Lookout

Compared 5% of the time

CrowdStrike Falcon vs Lookout

Compared 5% of the time

Check Point Harmony Mobile vs Lookout

Compared 5% of the time

Workspace ONE UEM vs Lookout

Compared 3% of the time

More Lookout Competitors

Microsoft Defender for Endpoint vs Trellix Endpoint Security Platform

Compared 6% of the time

CrowdStrike Falcon vs Trellix Endpoint Security Platform

Compared 5% of the time

SentinelOne Singularity Complete vs Trellix Endpoint Security Platform

Compared 5% of the time

Trellix Endpoint Detection and Response (EDR) vs Trellix Endpoint Security Platform

Compared 3% of the time

Symantec Endpoint Security vs Trellix Endpoint Security Platform

Compared 3% of the time

More Trellix Endpoint Security Platform Competitors

Product Reports

Buyer's Guide

Cortex XDR by Palo Alto Networks

March 2026

Download Cortex XDR by Palo Alto Networks product report

Buyer's Guide

Mobile Threat Defense

March 2026

Download Lookout product report

Buyer's Guide

Trellix Endpoint Security Platform

March 2026

Trellix Endpoint Security Platform report

Download Trellix Endpoint Security Platform product report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

CipherCloud

McAfee Endpoint Security, McAfee Endpoint Protection, Intel Security Total Protection for Endpoint, McAfee Complete Endpoint Protection, Trellix Endpoint Security (ENS)

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

Lookout’s mobile EDR solution goes beyond traditional endpoint solutions by addressing the unique architecture, behaviors, and risks of iOS and Android devices. It provides industry-leading mobile threat defense on employee devices while also granting security teams the visibility and actionability needed to align mobile risk with traditional endpoint risk. By leveraging the world's largest AI-driven mobile security dataset, Lookout utilizes artificial intelligence (AI) and behavioral analysis to detect threats before they escalate, ensuring comprehensive protection for sensitive data and enabling secure mobile productivity.

Recognizing that employees using mobile devices are the new frontline, attackers are increasingly employing sophisticated social engineering techniques like phishing and smishing. These tactics exploit basic human instincts—trust, curiosity, and urgency—to trick users into revealing sensitive credentials, allowing threats to bypass traditional legacy security solutions. To combat this, Lookout provides AI-first protection against advanced social engineering attacks, device compromises, vulnerabilities, mobile malware, network threats.

Lookout

Trellix Endpoint Security Platform offers essential features like centralized management, threat prevention, and encryption, facilitating seamless scaling and integration with other systems while prioritizing user security.

This comprehensive platform focuses on endpoint protection, antivirus capabilities, and malware defense. It enhances cybersecurity with data loss prevention, advanced threat detection, and AI-driven features for reliable protection without impacting performance. Central management and advanced reporting streamline integration and ease of use. Flexible policy deployment through the management console and its robust security measures, such as DLP and device control, further increase protection. Challenges include high CPU and memory usage affecting performance, a complex interface, and lengthy deployment. Third-party integration and Windows Hello support need improvement. Additional concerns involve improved threat detection and faster technical support responses.

What are the key features of Trellix Endpoint Security Platform?

Centralized Management: Allows seamless integration and scaling with consistent control across environments.
Threat Prevention: Provides comprehensive antivirus and malware protection to secure systems.
Encryption: Ensures data security with robust encryption techniques.
Advanced Reporting: Facilitates detailed insights and analysis for better decision-making.
AI-Driven Detection: Offers reliable threat detection without impacting system performance.

What benefits should users look for in reviews?

Comprehensive Protection: Offers extensive security measures for protecting digital environments.
Ease of Integration: Simplifies the process of incorporating into current systems and processes.
Flexible Policy Deployment: Supports adaptable policy management to meet diverse requirements.
Scalability: Enables growth while maintaining efficiency and security.
Robust Security Features: Provides advanced security measures like DLP and device control.

Trellix Endpoint Security Platform is widely implemented in industries such as banking and government for securing mobile and desktop devices. Its capabilities cover network security, device control, and remote access protection, catering to diverse environments by offering robust cybersecurity management against advanced threats.

Trellix

Sample Customers

CBI Health Group, University Honda, VakifBank

Information Not Available

inHouseIT, Seagate Technology

Buyer's Guide

Lookout vs. Trellix Endpoint Security Platform

March 2026

Free Report: Lookout vs. Trellix Endpoint Security Platform

Find out what your peers are saying about Lookout vs. Trellix Endpoint Security Platform and other solutions. Updated: March 2026.

DOWNLOAD NOW

885,311 professionals have used our research since 2012.

See our Lookout vs. Trellix Endpoint Security Platform report.

See our list of best Endpoint Detection and Response (EDR) vendors.

We monitor all Endpoint Detection and Response (EDR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.