Open EDR vs Trellix Active Response comparison

Xcitium and Trellix are both solutions in the Endpoint Detection and Response (EDR) category. Xcitium is ranked #35 with an average rating of 8.0, while Trellix is ranked #45 with an average rating of 8.0. Xcitium holds a 1.0% mindshare in EDR, compared to Trellix’s 0.2% mindshare. Additionally, 100% of Xcitium users are willing to recommend the solution, compared to 50% of Trellix users who would recommend it.

Open EDR

Read 1 Open EDR review

2,080 Views
2,059 Comparison Views

100% willing to recommend

Trellix Active Response

Read 5 Trellix Active Response reviews

360 Views
349 Comparison Views

50% willing to recommend

Open EDR

Trellix Active Response

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Open EDR and Trellix Active Response based on real PeerSpot user reviews.

Find out what your peers are saying about CrowdStrike, SentinelOne, Microsoft and others in Endpoint Detection and Response (EDR).

To learn more, read our detailed Endpoint Detection and Response (EDR) Report (Updated: January 2025).

Buyer's Guide

Endpoint Detection and Response (EDR)

January 2025

Download the complete report

Helped 862,499 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Open EDR

Ranking in Endpoint Detection and Response (EDR)

35th

Average Rating

8.0

Number of Reviews

Ranking in other categories

No ranking in other categories

Trellix Active Response

Ranking in Endpoint Detection and Response (EDR)

45th

Average Rating

7.0

Reviews Sentiment

5.1

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of July 2025, in the Endpoint Detection and Response (EDR) category, the mindshare of Open EDR is 1.0%, up from 0.8% compared to the previous year. The mindshare of Trellix Active Response is 0.2%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Detection and Response (EDR)

Featured Reviews

Timothy Muriithi

Chief Information Officer at a tech consulting company with 51-200 employees

I also like the ability to remotely manage update packages on your systems, and the fact that there is an open source version

Setting OpenEDR was challenging at first, but I got it done by following their documentation and online videos. You need to install the client and configure it to work with their online open platform. Next, you have to configure it on the device if it's a phone. You input a cloud link to the EDR, so you can monitor it from the cloud. There isn't any maintenance aside from updating the client. It's mostly on the cloud.

Read full review

Abdullah Al Hadi

Information Security Engineer at Nhq Distribution Ltd

Offers comprehensive incident visualization and quick response capabilities but requires clearer dashboard interface

I am an Information Security Engineer at NHQ Distribution Limited and a partner of Trellix. I work with different products in Trellix, including Trellix EDR, SDR, and MDR. Trellix Active Response is the EDR solution from Trellix that has moved from an on-premise solution to a cloud solution. The Trellix MDR solution is helpful for SOC analysis and is integrated with Trellix EDR and SDR capabilities, providing full visibility of threat detection and hunting and detection response correlating with other solutions like endpoint security and encryption. On a scale of one to ten, I rate Trellix Active Response an eight.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Comodo includes a firewall and antivirus in one solution. I also like the ability to remotely manage update packages on your systems. Comodo can even find a lost device and secure it remotely."

"It's a little lighter compared to the older version, which was mostly signature-based."

"The alerts provided by Trellix Active Response are its most valuable feature."

"The solution is scalable."

"We are hoping to automate detection and response and take advantage of user behavior analytics, given that we are working from home. About half of our workers are still remote, so Active Response gives us that visibility and lets us automate a number of those events."

"The alerts provided by Trellix Active Response are its most valuable feature."

Cons

"Comodo includes a firewall and antivirus in one solution. I also like the ability to remotely manage update packages on your systems. Comodo can even find a lost device and secure it remotely."

"I also expected Active Response 's user interface to be much more analytical."

"While the product is good, we are currently facing support issues."

"I would rate technical support from Trellix Active Response as a seven because sometimes we face difficulties finding engineers quickly, leading to customer frustration."

"There are some components on the cloud that should also reside in the on-prem deployment models but don't."

"The only area for improvement is regarding operational technology devices, specifically the engineering automation systems."

Pricing and Cost Advice

Information not available

"Our costs were somewhere around $600K in Trinidad dollars, which might be about $100K US. We have the ETP plus the EDR. Our recent renewal was 1800 licenses as opposed to the full amount. Our transaction cost was about $600K Trinidad dollars, which is somewhere around $90-100K US."

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.

See recommendations

862,499 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

21%

Government

Comms Service Provider

Retailer

Government

17%

Comms Service Provider

13%

Financial Services Firm

11%

University

10%

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

Questions from the Community

Ask a question

Earn 20 points

What is your experience regarding pricing and costs for McAfee Active Response?

Based on our evaluations, Trellix Active Response's pricing was the most feasible from a cost perspective. I rate the pricing between a six and an eight. It is justified.

See all answers

What needs improvement with McAfee Active Response?

The only area for improvement is regarding operational technology devices, specifically the engineering automation systems. We would like Trellix to optimize the technology for these systems simila...

See all answers

What is your primary use case for McAfee Active Response?

We use Trellix Active Response primarily for our endpoints, including desktop computers. It monitors all the tools that our users use for their day-to-day work.

See all answers

Comparisons

Elastic Security vs Open EDR

Compared 22% of the time

Microsoft Defender for Endpoint vs Open EDR

Compared 13% of the time

CrowdStrike Falcon vs Open EDR

Compared 11% of the time

SentinelOne Singularity Complete vs Open EDR

Compared 9% of the time

Trellix Endpoint Security Platform vs Open EDR

Compared 7% of the time

More Open EDR Competitors

Trellix Endpoint Security Platform vs Trellix Active Response

Compared 60% of the time

Trellix Endpoint Detection and Response (EDR) vs Trellix Active Response

Compared 40% of the time

More Trellix Active Response Competitors

Product Reports

Buyer's Guide

Endpoint Detection and Response (EDR)

January 2025

Download Open EDR product report

Buyer's Guide

Endpoint Detection and Response (EDR)

January 2025

Download Trellix Active Response product report

Also Known As

No data available

McAfee Active Response

Overview

Open EDR is a robust solution for real-time threat detection, monitoring, and response. Known for its effective identification of security breaches, it offers valuable insights for endpoint protection.

Open EDR provides comprehensive security coverage by ensuring endpoint protection across multiple devices. Its key strengths lie in automated response features and seamless integration with existing IT infrastructure. Users value its ability to deliver centralized visibility into network activities, customizable alerts, and detailed forensic analysis. Despite its powerful capabilities, some users report occasional system crashes and note that the setup process can be complex. Improvements in customer support, documentation, and resource management could enhance its overall performance.

What are the key features of Open EDR?

Real-time Threat Detection: Identifies and mitigates security breaches as they occur.
Comprehensive Endpoint Visibility: Monitors activities across multiple devices to provide a holistic security view.
Automated Response: Implements automatic actions to address identified threats.
Customizable Alerts: Allows users to set custom alerts based on specific security needs.
Seamless Integration: Easily integrates with existing security infrastructures.
Scalability: Adapts to the needs of growing organizations with support for multiple operating systems.
Forensic Analysis: Offers detailed reporting and analysis for in-depth investigation.

What are some benefits to look for in reviews?

Centralized Visibility: Provides a unified view of all network activities.
Actionable Insights: Delivers practical information to enhance security measures.
Ease of Integration: Simplifies the incorporation of the tool into existing systems.
Automated Responses: Enhances efficiency by addressing threats without manual intervention.

Open EDR is highly valued in industries requiring stringent security measures, such as financial services and healthcare. Its comprehensive endpoint protection and automated response capabilities ensure critical assets remain secure, meeting the unique demands of these sectors.

Xcitium

Continuous Visibility into Your Endpoints:
Capture and monitor events, files, host flows, process objects, context, and system state changes that may be indicators of attack or dormant attack components.

Identify and Remediate Breaches Faster:
Access tools you need to quickly correct security issues. Send intelligence to analytics, operations, and forensic teams.

Target Critical Threats:
Get preconfigured and customizable actions when triggered, so you can target and eliminate threats.

Trellix

Sample Customers

Information Not Available

Liquor Control Board of Ontario

Buyer's Guide

Endpoint Detection and Response (EDR)

January 2025

Download Free Report

Find out what your peers are saying about CrowdStrike, SentinelOne, Microsoft and others in Endpoint Detection and Response (EDR). Updated: January 2025.

DOWNLOAD NOW

862,499 professionals have used our research since 2012.

See our list of best Endpoint Detection and Response (EDR) vendors.

We monitor all Endpoint Detection and Response (EDR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.