Trellix Network Detection and Response and ThreatLocker Zero Trust Endpoint Protection Platform both compete in the cybersecurity category but focus on different aspects. While Trellix leads in network threat detection capabilities, ThreatLocker's strengths lie in its endpoint protection and application control features.
Features: Trellix Network Detection and Response utilizes a robust MVX engine to detect zero-day attacks, APTs, and malware, offering deep malware analysis and a user-friendly alert dashboard. ThreatLocker Zero Trust Endpoint Protection Platform excels in application control, providing granular endpoint activity control through its ring-fencing capabilities and comprehensive zero trust model, which enhances security automation.
Room for Improvement: Trellix needs to reduce false positives, improve reporting detail, and enhance feature customization. It also requires better cloud and machine learning integration. ThreatLocker could benefit from a more accessible learning mode and improved GUI design, as it currently demands strong technical skills, posing challenges for less experienced technicians. Enhancements in integration capabilities and user interfaces are necessary for both solutions.
Ease of Deployment and Customer Service: Trellix primarily supports on-premises deployment with a highly rated customer service team. ThreatLocker offers flexible deployment through hybrid and public cloud solutions. The Cyber Hero support team provides excellent and responsive customer service, making deployment versatile and support efficient.
Pricing and ROI: Trellix is perceived as expensive but provides substantial ROI through enhanced network security. ThreatLocker’s pricing is seen as reasonable and flexible, offering significant ROI by reducing security workload and time management for clients. Its adaptable pricing model supports business growth efficiently.
If something were to happen without ThreatLocker, the cost would be huge, and thus, having it is definitely worth it.
The main return on investment is peace of mind, knowing that with ThreatLocker on any endpoint, it will almost always block all malicious code or exploits, even zero-day exploits.
It keeps malware, Trojans, and ransomware at bay.
They have been very responsive, helpful, and knowledgeable.
I would rate their customer support a ten out of ten.
Their support is world-class.
Technical support needs improvement as sometimes engineers are not available promptly, especially during high-severity incidents.
I started off with just the servers, and within a month and a half, I set up the entire company with ThreatLocker.
It seems to primarily operate on the endpoints rather than at a central location pushing out policies.
I would rate it a ten out of ten for scalability.
For five years, we have not had a problem.
Once deployed, it downloads the policies locally, so even if the computer doesn't have internet, it doesn't matter.
It has been very stable, reliable, and accessible.
Controlling the cloud environment, not just endpoints, is crucial.
This is problematic when immediate attention is needed.
Comprehensive 24-hour log monitoring is a valuable enhancement for both business and enterprise-level users.
There should be improvements in AI intelligence, faster decision-making, and a more responsive technical support team.
After conversations with other partners, it became clear we underpriced it initially, which caused most of our issues.
We are moving towards the Unified solution, where they basically bundle everything together, providing us better stability with the ability to bring in new product offerings without having to go back to the customer and say, 'This is going to cost you.'
I had a really good deal at the time, and it continues to be cost-effective.
ThreatLocker Zero Trust Endpoint Protection Platform's ability to block access to unauthorized applications has been excellent.
It protects our customers.
The major benefit is fewer breaches overall, as nothing can be run without prior approval. This helps my company protect its data and secure itself effectively.
Trellix NDR provides an essential defense by automatically responding to network incidents that firewalls may not catch.
ThreatLocker Zero Trust Endpoint Protection Platform offers robust endpoint security through application control and allowlisting, safeguarding servers and workstations from unauthorized software execution.
ThreatLocker Zero Trust Endpoint Protection Platform provides extensive application control with features like ring-fencing and selective elevation, ensuring meticulous execution management. Offering learning mode and extensive support, it integrates threat detection and activity monitoring to enhance compliance, reduce costs, and bolster cybersecurity through alerts and approvals. Despite its strengths, there are areas for improvement in training flexibility, policy updates, and interface enhancements, along with challenges in handling non-digitally signed software. Deployed across environments, it works well with existing cybersecurity instruments for real-time threat prevention.
What are the top features of ThreatLocker?ThreatLocker Zero Trust Endpoint Protection Platform is widely implemented to safeguard IT infrastructures against unauthorized access and application use. In sectors where data security is paramount, this platform enables users to prevent unauthorized software installations and control device applications, ensuring real-time threat prevention and compliance with industry regulations.
Detect the undetectable and stop evasive attacks. Trellix Network Detection and Response (NDR) helps your team focus on real attacks, contain intrusions with speed and intelligence, and eliminate your cybersecurity weak points.
We monitor all Advanced Threat Protection (ATP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.