Trellix Active Response vs Trellix Endpoint Security Platform comparison

Trellix Active Response vs. Trellix Endpoint Security Platform

July 2025

Download the complete report

Helped 867,370 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

ROI

Sentiment score

3.8

Trellix Active Response improved threat detection, reduced incident response times, increased efficiency, and enhanced productivity with an intuitive interface.

Sentiment score

8.0

Trellix Endpoint Security offers valuable ROI by reducing threats and costs, with high satisfaction despite some false positives.

While we haven't yet quantified the financial benefits, we recognize that there has been a return on investment, particularly with operational efficiencies provided by the alerts.

For more quotes and insights, download the Trellix Active Response report

Senior Manager Operational Technology and Cyber Security at Eskom Ltd

We have observed tremendous return on investment after implementing Trellix Endpoint Security as it is a more cost-effective solution compared to other products.

Sr. Deputy Director Information Technology at Pakistan Airpot Authority

There are two parts: one is the encryption which is standard and no AI is needed, but the data protection part could benefit from AI to detect new types of data and protect it.

VenkatKrishnan

VP - Cyber Security at Olam International

Clients appreciate the solution’s customization capabilities and ongoing product improvements.

For more quotes and insights, download the Trellix Endpoint Security Platform report

Information Security Engineer at Nhq Distribution Ltd

Customer Service

Sentiment score

7.8

Trellix Active Response's customer support is generally positive, but availability and contact speed could improve, rated seven out of ten.

Sentiment score

6.9

Trellix Endpoint Security Platform support is generally praised, though some users note response time inconsistencies and platform-specific service gaps.

I would rate technical support from Trellix Active Response as a seven because sometimes we face difficulties finding engineers quickly, leading to customer frustration.

For more quotes and insights, download the Trellix Active Response report

Information Security Engineer at Nhq Distribution Ltd

I would rate their customer service nine out of ten.

For more quotes and insights, download the Trellix Endpoint Security Platform report

Sr. Deputy Director Information Technology at Pakistan Airpot Authority

The response time is a notable issue.

Sampath Acharya

Technical Associate at Valuepoint Systems

I rate the support from Trellix a perfect ten.

KarthiS

Technical Associate at VSecure Networks

Scalability Issues

Sentiment score

4.1

Trellix Active Response is scalable, integrates easily, handles large data seamlessly, and maintains performance and security with minimal latency.

Sentiment score

7.8

Trellix Endpoint Security efficiently scales across diverse environments, handling thousands of endpoints with seamless expansion and robust performance.

The scalability of Active Response is satisfactory.

For more quotes and insights, download the Trellix Active Response report

Senior Manager Operational Technology and Cyber Security at Eskom Ltd

I would rate the scalability of the solution as a six out of ten, indicating some challenges due to downtime requirements.

Sampath Acharya

Technical Associate at Valuepoint Systems

Trellix Endpoint Security is scalable.

For more quotes and insights, download the Trellix Endpoint Security Platform report

Sr. Deputy Director Information Technology at Pakistan Airpot Authority

Stability Issues

Sentiment score

4.6

Trellix Active Response is praised for reliability, efficient data handling, quick threat detection, adaptability, and stability with minimal downtime.

Sentiment score

8.2

Trellix Endpoint Security Platform is stable, reliable, and handles high loads well, though some performance issues are acknowledged.

No quotes available

For more quotes and insights, download the Trellix Active Response report

I would rate the stability of Trellix Endpoint Security as near perfect, close to ten out of ten.

Information Security Engineer at Nhq Distribution Ltd

I would rate its stability as nine out of ten.

For more quotes and insights, download the Trellix Endpoint Security Platform report

Sr. Deputy Director Information Technology at Pakistan Airpot Authority

I think it's stable enough; earlier it had glitches, but now it's stable enough.

VenkatKrishnan

VP - Cyber Security at Olam International

Room For Improvement

Trellix Active Response needs better resource management, advanced analytics, and improved integrations for efficient monitoring and AI features.

Users seek performance, UI, integration improvements in Trellix Endpoint Security, along with faster updates and better support.

We would like Trellix to optimize the technology for these systems similarly to how it is deployed for normal endpoints.

Senior Manager Operational Technology and Cyber Security at Eskom Ltd

There is room for improvement in the platform area and security area to make the dashboard visibility clearer and easier for customers to monitor malicious activities occurring in their environment.

For more quotes and insights, download the Trellix Active Response report

Information Security Engineer at Nhq Distribution Ltd

It doesn't support Microsoft Windows Hello authentication.

VenkatKrishnan

VP - Cyber Security at Olam International

It would also help if detection specifics were identified more quickly and the problem-solving process accelerated, especially to meet larger clients' expectations.

For more quotes and insights, download the Trellix Endpoint Security Platform report

Information Security Engineer at Nhq Distribution Ltd

The product does not seem to be cloud-native.

reviewer2696286

Architect at a government with 10,001+ employees

Setup Cost

Trellix Endpoint Security is competitively priced, offering flexible licensing and value, though renewal costs might increase over time.

Based on our evaluations, Trellix Active Response's pricing was the most feasible from a cost perspective.

For more quotes and insights, download the Trellix Active Response report

Senior Manager Operational Technology and Cyber Security at Eskom Ltd

Trellix Endpoint Security is cost-effective and provides excellent value for money.

For more quotes and insights, download the Trellix Endpoint Security Platform report

Sr. Deputy Director Information Technology at Pakistan Airpot Authority

The license costs are very reasonable, around 1,000 to 1,200 rupees per year.

Sampath Acharya

Technical Associate at Valuepoint Systems

Valuable Features

Trellix Active Response enhances analytics, user insights, and incident handling, excelling in detection and response with holistic EDR benefits.

Trellix Endpoint Security provides advanced threat protection, ease of use, and customizable policies for effective ransomware and malware defense.

They notify us immediately of any vulnerabilities on the endpoints, allowing us to deploy a response quickly.

Senior Manager Operational Technology and Cyber Security at Eskom Ltd

The most valuable feature of Trellix Active Response is that whenever any incident occurs, it allows us to disconnect from that particular network or area and shut down the system using commands.

For more quotes and insights, download the Trellix Active Response report

Information Security Engineer at Nhq Distribution Ltd

Trellix Endpoint Security is a proven, robust, and cost-effective solution that protects the organization from different types of ransomware and attacks.

Sr. Deputy Director Information Technology at Pakistan Airpot Authority

The detection capability of Trellix Endpoint Security is higher than traditional antivirus solutions.

Mohit Dhingra

Senior Vice President IT at AS IT Consulting Pvt. Ltd.

Including options like Application Control (formerly Solidcore), integrated monitoring, change control, DLP, and advanced threat protection, the solution offers comprehensive security.

For more quotes and insights, download the Trellix Endpoint Security Platform report

Information Security Engineer at Nhq Distribution Ltd

Categories and Ranking

Trellix Active Response

Ranking in Endpoint Detection and Response (EDR)

45th

Average Rating

7.0

Reviews Sentiment

5.1

Number of Reviews

Ranking in other categories

No ranking in other categories

Trellix Endpoint Security P...

Ranking in Endpoint Detection and Response (EDR)

9th

Average Rating

8.0

Reviews Sentiment

7.2

Number of Reviews

158

Ranking in other categories

Endpoint Protection Platform (EPP) (9th), Extended Detection and Response (XDR) (10th)

Mindshare comparison

As of September 2025, in the Endpoint Detection and Response (EDR) category, the mindshare of Trellix Active Response is 0.3%, up from 0.1% compared to the previous year. The mindshare of Trellix Endpoint Security Platform is 4.4%, down from 4.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Detection and Response (EDR) Market Share Distribution
Product	Market Share (%)
Trellix Endpoint Security Platform	4.4%
Trellix Active Response	0.3%
Other	95.3%

Endpoint Detection and Response (EDR)

Featured Reviews

Offers comprehensive incident visualization and quick response capabilities but requires clearer dashboard interface

Information Security Engineer at Nhq Distribution Ltd

I am an Information Security Engineer at NHQ Distribution Limited and a partner of Trellix. I work with different products in Trellix, including Trellix EDR, SDR, and MDR. Trellix Active Response is the EDR solution from Trellix that has moved from an on-premise solution to a cloud solution. The Trellix MDR solution is helpful for SOC analysis and is integrated with Trellix EDR and SDR capabilities, providing full visibility of threat detection and hunting and detection response correlating with other solutions like endpoint security and encryption. On a scale of one to ten, I rate Trellix Active Response an eight.

Read full review

Customization capabilities allow clients to autonomously deploy policies

Information Security Engineer at Nhq Distribution Ltd

There are a few areas where Trellix Endpoint Security can improve. Firstly, the high CPU utilization when agents are installed can negatively impact client systems. Another issue is with end-users outside the network, where the agent handler sometimes fails to deploy the product properly. Improvements are needed in forensic analytics to detect specific vulnerabilities. It would also help if detection specifics were identified more quickly and the problem-solving process accelerated, especially to meet larger clients' expectations.

Read full review

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.

See recommendations

867,370 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Government

17%

Comms Service Provider

14%

University

10%

Financial Services Firm

Manufacturing Company

13%

Government

13%

Computer Software Company

11%

Financial Services Firm

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

By reviewers
Company Size	Count
Small Business	67
Midsize Enterprise	36
Large Enterprise	59

Questions from the Community

What is your experience regarding pricing and costs for McAfee Active Response?

Based on our evaluations, Trellix Active Response's pricing was the most feasible from a cost perspective. I rate the pricing between a six and an eight. It is justified.

What needs improvement with McAfee Active Response?

For Trellix Active Response, there is room for improvement in the platform area and security area to make the dashboard visibility clearer and easier for customers to monitor malicious activities o...

What is your primary use case for McAfee Active Response?

The typical use case for Trellix Active Response is to provide quick incident response, as the product collects and correlates logs with the ePO dashboard, allowing customers to get visibility of t...

How does McAfee Endpoint Security compare with MVISION?

The flexible manageability of McAfee Endpoint Security is one of our favorite aspects of this solution. You can deploy various components as desired with McAfee Endpoint Security, whereas many othe...

How does Crowdstrike Falcon compare with FireEye Endpoint Security?

The Crowdstrike Falcon program has a simple to use user interface, making it both an easy to use as well as an effective program. Its graphical design is such that it makes an extremely useful too...

What do you like most about McAfee Endpoint Security?

It provides a robust defense against cybersecurity threats while offering user-friendly features like notifications and approval prompts.

Trellix Endpoint Detection and Response (EDR) vs Trellix Active Response

Comparisons

Compared 44% of the time

More Trellix Active Response Competitors

Microsoft Defender for Endpoint vs Trellix Endpoint Security Platform

Compared 14% of the time

Trellix Endpoint Detection and Response (EDR) vs Trellix Endpoint Security Platform

Compared 8% of the time

CrowdStrike Falcon vs Trellix Endpoint Security Platform

Compared 7% of the time

SentinelOne Singularity Complete vs Trellix Endpoint Security Platform

Compared 6% of the time

Tanium vs Trellix Endpoint Security Platform

Compared 4% of the time

More Trellix Endpoint Security Platform Competitors

Product Reports

Endpoint Detection and Response (EDR)

January 2025

Download Trellix Active Response product report

Trellix Endpoint Security Platform

August 2025

Trellix Endpoint Security Platform report

Download Trellix Endpoint Security Platform product report

Also Known As

McAfee Active Response

McAfee Endpoint Security, McAfee Endpoint Protection, Intel Security Total Protection for Endpoint, McAfee Complete Endpoint Protection, Trellix Endpoint Security (ENS)

Overview

Continuous Visibility into Your Endpoints:
Capture and monitor events, files, host flows, process objects, context, and system state changes that may be indicators of attack or dormant attack components.

Identify and Remediate Breaches Faster:
Access tools you need to quickly correct security issues. Send intelligence to analytics, operations, and forensic teams.

Target Critical Threats:
Get preconfigured and customizable actions when triggered, so you can target and eliminate threats.

Trellix

Trellix Endpoint Security Platform offers essential features like centralized management, threat prevention, and encryption, facilitating seamless scaling and integration with other systems while prioritizing user security.

This comprehensive platform focuses on endpoint protection, antivirus capabilities, and malware defense. It enhances cybersecurity with data loss prevention, advanced threat detection, and AI-driven features for reliable protection without impacting performance. Central management and advanced reporting streamline integration and ease of use. Flexible policy deployment through the management console and its robust security measures, such as DLP and device control, further increase protection. Challenges include high CPU and memory usage affecting performance, a complex interface, and lengthy deployment. Third-party integration and Windows Hello support need improvement. Additional concerns involve improved threat detection and faster technical support responses.

What are the key features of Trellix Endpoint Security Platform?

Centralized Management: Allows seamless integration and scaling with consistent control across environments.
Threat Prevention: Provides comprehensive antivirus and malware protection to secure systems.
Encryption: Ensures data security with robust encryption techniques.
Advanced Reporting: Facilitates detailed insights and analysis for better decision-making.
AI-Driven Detection: Offers reliable threat detection without impacting system performance.

What benefits should users look for in reviews?

Comprehensive Protection: Offers extensive security measures for protecting digital environments.
Ease of Integration: Simplifies the process of incorporating into current systems and processes.
Flexible Policy Deployment: Supports adaptable policy management to meet diverse requirements.
Scalability: Enables growth while maintaining efficiency and security.
Robust Security Features: Provides advanced security measures like DLP and device control.

Trellix Endpoint Security Platform is widely implemented in industries such as banking and government for securing mobile and desktop devices. Its capabilities cover network security, device control, and remote access protection, catering to diverse environments by offering robust cybersecurity management against advanced threats.

Trellix

Sample Customers

Liquor Control Board of Ontario

inHouseIT, Seagate Technology