Try our new research platform with insights from 80,000+ expert users

Sangfor Endpoint Secure vs Trellix Active Response comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 9, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Sangfor Endpoint Secure
Ranking in Endpoint Detection and Response (EDR)
28th
Average Rating
8.2
Reviews Sentiment
7.4
Number of Reviews
11
Ranking in other categories
No ranking in other categories
Trellix Active Response
Ranking in Endpoint Detection and Response (EDR)
45th
Average Rating
7.0
Reviews Sentiment
5.1
Number of Reviews
5
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of January 2026, in the Endpoint Detection and Response (EDR) category, the mindshare of Sangfor Endpoint Secure is 0.7%, up from 0.7% compared to the previous year. The mindshare of Trellix Active Response is 0.4%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Detection and Response (EDR) Market Share Distribution
ProductMarket Share (%)
Sangfor Endpoint Secure0.7%
Trellix Active Response0.4%
Other98.9%
Endpoint Detection and Response (EDR)
 

Featured Reviews

OA
Coordinator Associate at National Institute of Cardiovascular Diseases
Quick threat response and behavior analysis while enhancing network security
The main use case is usually related to security. It deals with attacks that come day-to-day such as zero-day attacks and APT attacks. Our main task is to secure the network infrastructure in the hospital where I work It facilitates the departments of IT and other departments to procure and…
ED
Senior Manager Operational Technology and Cyber Security at Eskom Ltd
Operational efficiencies increase with immediate threat alerts for endpoints
We use Trellix Active Response primarily for our endpoints, including desktop computers. It monitors all the tools that our users use for their day-to-day work The alerts provided by Trellix Active Response are its most valuable feature. They notify us immediately of any vulnerabilities on the…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"What stands out to me is the dual-end user interface they provide."
"We use the product for network protection from any malicious threat."
"The tool's AI feature is helpful in endpoint security."
"Sangfor Endpoint Secure has some good policy certificates."
"The product's initial setup phase was straightforward."
"The most valuable feature I have found in the system is its comprehensive end-to-end protection."
"It has a quick response time, threat intelligence, cybersecurity features, quick report generation, behavior analysis, dynamic detection, and quarantine features."
"I like the tool's honeypot feature. Some features include having a honeypot to detect attacks in a certain area. Additionally, there is RDP protection, which means that when we remote into our server or any endpoint, we must enter a password as a second layer of security. It can also integrate with next-generation firewalls."
"The solution is scalable."
"We are hoping to automate detection and response and take advantage of user behavior analytics, given that we are working from home. About half of our workers are still remote, so Active Response gives us that visibility and lets us automate a number of those events."
"The alerts provided by Trellix Active Response are its most valuable feature."
"It's a little lighter compared to the older version, which was mostly signature-based."
"The alerts provided by Trellix Active Response are its most valuable feature."
"The continuous monitoring component of this solution allows Trellix to launch the MDR solution, which correlates all incidents and provides investigation reports within a short period of time, hence offering an advantage to the customers using Trellix Active Response and its integrated products."
 

Cons

"Sangfor Endpoint Secure should include healing capabilities."
"It would be much more convenient if the migration tool could be installed directly on the customer's VMs, enabling a smoother migration process to the new infrastructure, with potential restrictions addressed accordingly."
"There are a few areas for improvement. We have encountered licensing issues on occasion, and sometimes updates don't apply properly."
"When an issue occurs, the response time for first-level support and the time taken for meetings could be improved."
"It is complicated to establish a tunnel due to technical issues in the VPN system."
"Sangfor Endpoint Secure performs poorly."
"The interface has too many buttons, making it cluttered."
"I believe Sangfor Endpoint Secure could improve in terms of its user interface and management capabilities."
"The only area for improvement is regarding operational technology devices, specifically the engineering automation systems."
"I also expected Active Response 's user interface to be much more analytical."
"While the product is good, we are currently facing support issues."
"I would rate technical support from Trellix Active Response as a seven because sometimes we face difficulties finding engineers quickly, leading to customer frustration."
"There are some components on the cloud that should also reside in the on-prem deployment models but don't."
 

Pricing and Cost Advice

"Sangfor Endpoint Secure's pricing is cheap. I rate it seven out of ten."
"Sangfor Endpoint Secure is not a cheap solution."
"We were using Hyper-V. So, we switched to Sangfor because of the pricing."
"Price-wise, Sangfor Endpoint Secure can be considered a competitively priced product in the market as it offers quite low prices compared to other solutions."
"The product is expensive compared to other vendors."
"Its "pay as you grow" model offers cost-effectiveness compared to major cloud providers."
"The solution is cheap. It is cheaper than other products by 15-20 percent."
"Our costs were somewhere around $600K in Trinidad dollars, which might be about $100K US. We have the ETP plus the EDR. Our recent renewal was 1800 licenses as opposed to the full amount. Our transaction cost was about $600K Trinidad dollars, which is somewhere around $90-100K US."
report
Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.
881,114 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
14%
Government
9%
Computer Software Company
9%
Comms Service Provider
8%
No data available
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business5
Midsize Enterprise3
Large Enterprise3
No data available
 

Questions from the Community

What needs improvement with Sangfor Endpoint Secure?
The interface has too many buttons, making it cluttered. It would be better if it were a simplified version with fewer buttons and a more consolidated layout.
What is your primary use case for Sangfor Endpoint Secure?
Sangfor Endpoint Secure is easy to handle with its user-friendly interface. The four engines it utilizes for endpoint detection provide fewer false positives compared to other solutions. It is used...
What advice do you have for others considering Sangfor Endpoint Secure?
At first, people might not understand the interface, which is why it should be simplified. However, once they understand it and see its functionality firsthand, everyone would recommend Sangfor.
What is your experience regarding pricing and costs for McAfee Active Response?
Based on our evaluations, Trellix Active Response's pricing was the most feasible from a cost perspective. I rate the pricing between a six and an eight. It is justified.
What needs improvement with McAfee Active Response?
For Trellix Active Response, there is room for improvement in the platform area and security area to make the dashboard visibility clearer and easier for customers to monitor malicious activities o...
What is your primary use case for McAfee Active Response?
The typical use case for Trellix Active Response is to provide quick incident response, as the product collects and correlates logs with the ePO dashboard, allowing customers to get visibility of t...
 

Also Known As

No data available
McAfee Active Response
 

Overview

 

Sample Customers

Information Not Available
Liquor Control Board of Ontario
Find out what your peers are saying about Sangfor Endpoint Secure vs. Trellix Active Response and other solutions. Updated: December 2025.
881,114 professionals have used our research since 2012.