Sangfor Endpoint Secure vs Trellix Endpoint Detection and Response (EDR) comparison

Sangfor Endpoint Secure vs. Trellix Endpoint Detection and Response (EDR)

Download the complete report

Helped 868,787 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Sangfor Endpoint Secure

Ranking in Endpoint Detection and Response (EDR)

19th

Average Rating

8.2

Reviews Sentiment

7.4

Number of Reviews

Ranking in other categories

No ranking in other categories

Trellix Endpoint Detection ...

Ranking in Endpoint Detection and Response (EDR)

22nd

Average Rating

7.4

Reviews Sentiment

7.2

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of October 2025, in the Endpoint Detection and Response (EDR) category, the mindshare of Sangfor Endpoint Secure is 0.7%, up from 0.7% compared to the previous year. The mindshare of Trellix Endpoint Detection and Response (EDR) is 1.2%, up from 0.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Detection and Response (EDR) Market Share Distribution
Product	Market Share (%)
Sangfor Endpoint Secure	0.7%
Trellix Endpoint Detection and Response (EDR)	1.2%
Other	98.1%

Endpoint Detection and Response (EDR)

Featured Reviews

Shiraz Ali

Networking Solutions Specialist at GBM

Provides a unified and multi-layer security solution

I believe Sangfor Endpoint Secure could improve in terms of its user interface and management capabilities. Having a single, more user-friendly management console, like a one-window approach, would streamline the user experience and make it easier for administrators to handle security tasks more efficiently. Sangfor Endpoint Secure currently only allows one manager to control clients, and it lacks a backup system. It would be better if it supported a secondary manager for backup in case the primary one fails, ensuring uninterrupted service.

Read full review

CESARCASTRO

Committee of IT Cybersececurity at a energy/utilities company with 51-200 employees

Enhancements needed for security alerts while ongoing training strengthens defenses

This year, I am going to improve some tools to be installed or maybe acquire some services to better manage our web services and work with my coworkers. Application fiber also needs attention. Nowadays I am making applications that are publicly seen on the Internet. I need some protection, possibly multi-factor authentication improvements. I am seeing, for workflows, some sort of ethical hacking to test our environment. Knowledge of everything, not only the product - maybe some kind of alerts - needs to emerge. I see the current ones as very low-tier, and they must improve.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Sangfor Endpoint Secure has some good policy certificates."

"What stands out to me is the dual-end user interface they provide."

"I like the tool's honeypot feature. Some features include having a honeypot to detect attacks in a certain area. Additionally, there is RDP protection, which means that when we remote into our server or any endpoint, we must enter a password as a second layer of security. It can also integrate with next-generation firewalls."

"The tool's AI feature is helpful in endpoint security."

"The tool's most valuable features are control access, endpoint security, and load balancing of ISPs."

"The real-time monitoring feature of Sangfor Endpoint Secure is truly real-time, with no delay compared to other solutions."

"The most valuable feature I have found in the system is its comprehensive end-to-end protection."

"The product's initial setup phase was straightforward."

More Sangfor Endpoint Secure pros

"The product is user-friendly."

"Trellix has done a good job reducing threats."

"The product's initial setup phase was very straightforward since you just need to install it, and it works."

"If there is any malicious behavior in the workstation or server, the tool stops or isolates it automatically and generates alerts."

"The dashboard makes it easier and more effective to analyze data."

"The product and the services we have are quite good."

"The most valuable feature of the solution is its area for threat detection."

"It is a stable solution. Stability-wise, I rate the solution a nine out of ten...I rate the solution's technical support team a nine and a half or ten out of ten."

More Trellix Endpoint Detection and Response (EDR) pros

Cons

"When an issue occurs, the response time for first-level support and the time taken for meetings could be improved."

"Sangfor Endpoint Secure performs poorly."

"There are a few areas for improvement. We have encountered licensing issues on occasion, and sometimes updates don't apply properly."

"Sometimes, the VPN is not secure and doesn't work properly in Sangfor Endpoint Secure."

"Currently, the tool lacks reporting functionalities."

"It would be much more convenient if the migration tool could be installed directly on the customer's VMs, enabling a smoother migration process to the new infrastructure, with potential restrictions addressed accordingly."

"I face issues while migrating from Kaspersky to Sangfor Endpoint Secure."

"Sangfor Endpoint Secure should include healing capabilities."

More Sangfor Endpoint Secure cons

"The solution lacks the ability to integrate with external platforms. In future releases of the solution, I would like to see the solution increase its integration capabilities with external platforms."

"I remember doing many tickets for Trellix support, and my EDR was not properly functioning. I didn't feel the detection or the real protection."

"The alert feature of McAfee MVISION Endpoint Detection and Response needs improvement because for you to get the alerts, you have to log on to the portal. What my company needs is a tool that sends you alerts. For example, if it detects a threat on your machine, it should send you an alert. My company gets the alerts instead from the antivirus software rather than the EDR. If you want to see the alerts on McAfee MVISION Endpoint Detection and Response, you have to connect to the system manually. Another area for improvement in the tool is the reporting. My company needs weekly and monthly reports about the alerts, but you can't extract reports from McAfee MVISION Endpoint Detection and Response, so a decision was made to move to another EDR solution, particularly Microsoft Defender for Endpoint, next month. My company tested Microsoft Defender for Endpoint via a POC for one to three months. The resource usage of McAfee MVISION Endpoint Detection and Response is also an area for improvement because it consumes a lot of memory. For example, during the on-demand scan, you can't work because of the high CPU usage. You need to schedule the scans. McAfee MVISION Endpoint Detection and Response has a lot of modules, but my company doesn't use all modules."

"For Spanish users, it is necessary to have a knowledge base specifically designed for them, which is currently not available."

"The graphical view for nodes must be increased."

"Some modules that are doing machine learning and artificial intelligence are blocking our processes."

"I need some protection, possibly multi-factor authentication improvements."

"One of the issues about the product stems from the failure to work on its administrative scalability. The aforementioned area can be considered for improvement."

More Trellix Endpoint Detection and Response (EDR) cons

Pricing and Cost Advice

"Sangfor Endpoint Secure is not a cheap solution."

"Price-wise, Sangfor Endpoint Secure can be considered a competitively priced product in the market as it offers quite low prices compared to other solutions."

"We were using Hyper-V. So, we switched to Sangfor because of the pricing."

"The solution is cheap. It is cheaper than other products by 15-20 percent."

"Sangfor Endpoint Secure's pricing is cheap. I rate it seven out of ten."

"The product is expensive compared to other vendors."

"Its "pay as you grow" model offers cost-effectiveness compared to major cloud providers."

"The pricing is always high."

"The licensing costs attached to the solution are very easy to manage. There is a need to make yearly payments towards the licensing costs."

"Pricing for McAfee MVISION Endpoint Detection and Response is not that expensive, but it's not something that a startup could buy. Pricing for it is for midsized businesses. There's an additional payment if you want data retention for more than thirty days. They gave us data retention for thirty days. Then if you want longer data retention, they have the paid option for a three-month data retention period and for a one-year data retention period."

"The price is reasonable."

"The product’s pricing is reasonable."

"McAfee MVISION Endpoint Detection and Response is reasonable in terms of cost. It's a tool my company has been using for a few years now. It costs $25,000 to $30,000 for six hundred users."

"The cost is okay, compared to other products."

"Pricing is a problem in South Africa. It could be cheaper here. The rand-to-dollar exchange rate makes it expensive for us. A 25 dollar endpoint cost becomes quite significant when converted to rand."

More Trellix Endpoint Detection and Response (EDR) pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.

See recommendations

868,787 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

14%

Computer Software Company

11%

Government

Comms Service Provider

Computer Software Company

12%

Financial Services Firm

12%

Government

11%

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	5
Midsize Enterprise	3
Large Enterprise	3

By reviewers
Company Size	Count
Small Business	11
Midsize Enterprise	3
Large Enterprise	9

Questions from the Community

What do you like most about Sangfor Endpoint Secure?

Sangfor Endpoint Secure has some good policy certificates.

What needs improvement with Sangfor Endpoint Secure?

The interface has too many buttons, making it cluttered. It would be better if it were a simplified version with fewer buttons and a more consolidated layout.

What is your primary use case for Sangfor Endpoint Secure?

Sangfor Endpoint Secure is easy to handle with its user-friendly interface. The four engines it utilizes for endpoint detection provide fewer false positives compared to other solutions. It is used...

What do you like most about McAfee MVISION Endpoint Detection and Response?

Trellix has a user-friendly interface.

What is your experience regarding pricing and costs for McAfee MVISION Endpoint Detection and Response?

I haven't had any really great problems with pricing in the past two or three years.

What needs improvement with McAfee MVISION Endpoint Detection and Response?

Kaspersky Endpoint Detection and Response vs Sangfor Endpoint Secure

Comparisons

Compared 22% of the time

Bitdefender GravityZone EDR vs Sangfor Endpoint Secure

Compared 11% of the time

ESET Inspect vs Sangfor Endpoint Secure

Compared 11% of the time

CrowdStrike Falcon vs Sangfor Endpoint Secure

Compared 10% of the time

Symantec Endpoint Detection and Response vs Sangfor Endpoint Secure

Compared 4% of the time

More Sangfor Endpoint Secure Competitors

Trellix Endpoint Security Platform vs Trellix Endpoint Detection and Response (EDR)

Compared 42% of the time

CrowdStrike Falcon vs Trellix Endpoint Detection and Response (EDR)

Compared 18% of the time

SentinelOne Singularity Complete vs Trellix Endpoint Detection and Response (EDR)

Compared 9% of the time

Trend Vision One vs Trellix Endpoint Detection and Response (EDR)

Compared 9% of the time

More Trellix Endpoint Detection and Response (EDR) Competitors

Product Reports

Sangfor Endpoint Secure

Download Sangfor Endpoint Secure product report

Trellix Endpoint Detection and Response (EDR)

Download Trellix Endpoint Detection and Response (EDR) product report

Trellix Endpoint Detection and Response (EDR) report

Also Known As

No data available

McAfee MVISION EDR, MVISION EDR, MVISION Endpoint Detection and Response

Overview

Organizations use Sangfor Endpoint Secure for endpoint protection and security management, managing devices, servers, and networks against malicious threats. It also assists in blocking websites, managing infrastructure, applications, antivirus needs, and aids in migrating to cloud environments.

Sangfor Endpoint Secure offers end-to-end protection, incorporating file protection, AI detection, behavior analysis, access control, and ISP load balancing. It facilitates VM migration with minimal downtime and includes a dual-end user interface for creating firewall rules, uploading images, and configuring VM settings. Enhancements such as Hyper-V capabilities, policy certificates, honeypot features, and next-generation firewall integrations are available. However, Sangfor Endpoint Secure could improve on console management, reporting functionalities, public cloud migration support, navigation, VPN system issues, licensing, update management, transitioning processes, and incorporating healing capabilities.

What are its most important features?

Comprehensive end-to-end protection including file protection
AI detection and behavior analysis
Access control and ISP load balancing
Ease of VM migration with minimal downtime
Streamlined dual-end user interface for firewall rules and VM settings
Hyper-V capabilities and policy certificates
Honeypot feature for attack detection and RDP protection
Integration with next-generation firewalls

What benefits or ROI should users look for?

Enhanced device, server, and network security from malicious threats
Simplified migration from on-premises to cloud environments
User-friendly navigation and management capabilities
Advanced detection and behavior analysis reducing potential threats
Streamlined enforcement of robust security policies

Sangfor Endpoint Secure is implemented across various industries to ensure comprehensive security management and protection. IT departments leverage its VM migration capabilities for seamless transitions to cloud environments. Healthcare organizations use it to secure sensitive patient data, while educational institutions utilize it for safeguarding academic records and personal information. Financial services employ it to protect critical transactional data and adhere to stringent compliance requirements.

Sangfor

Reduce Alert Noise

Reduce the time to detect and respond to threats. Trellix EDR helps security analysts quickly prioritize threats and minimize potential disruption.

Do More with Existing Resources

Guided investigation automatically asks and answers questions while gathering, summarizing, and visualizing evidence from multiple sources—reducing the need for more SOC resources.

Low-Maintenance Cloud Solution

Cloud-based deployment and analytics enables your skilled security analysts to focus on strategic defense, instead of tool maintenance. Benefit from implementing the right solution for you.

Trellix

Sample Customers

Information Not Available

Sutherland Global Services

Sangfor Endpoint Secure vs. Trellix Endpoint Detection and Response (EDR)