Trellix Endpoint Security Platform vs ZoneAlarm comparison

The compared Trellix and Check Point Software Technologies solutions aren't in the same category. Trellix is ranked #7 in EPP , with an average rating of 7.7, and holds a 3.5% mindshare in the category. Check Point Software Technologies is ranked #20 in Anti-Malware Tools , with an average rating of 7.5, and holds a 1.7% mindshare. Additionally, 88% of Trellix users are willing to recommend the solution, compared to 88% of Check Point Software Technologies users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Trellix Endpoint Security Platform and ZoneAlarm based on real PeerSpot user reviews.

Find out what your peers are saying about CrowdStrike, Microsoft, SentinelOne and others in Endpoint Protection Platform (EPP).

To learn more, read our detailed Endpoint Protection Platform (EPP) Report (Updated: April 2026).

Buyer's Guide

Endpoint Protection Platform (EPP)

April 2026

Download the complete report

Helped 890,071 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Mindshare comparison

Endpoint Protection Platform (EPP) Mindshare Distribution
Product	Mindshare (%)
Trellix Endpoint Security Platform	3.5%
Microsoft Defender for Endpoint	7.2%
CrowdStrike Falcon	6.3%
Other	83.0%

Endpoint Protection Platform (EPP)

Anti-Malware Tools Mindshare Distribution
Product	Mindshare (%)
ZoneAlarm	1.7%
Microsoft Defender for Endpoint	6.9%
VirusTotal	3.0%
Other	88.4%

Anti-Malware Tools

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

PankajKumar24

IT Manager at Gigabit Technologies Pvt Ltd

Advanced threat prevention has strengthened incident response and customized security workflows

The biggest advantage of Trellix Endpoint Security Platform is the ATP solution, which provides advanced threat prevention. Machine learning algorithms are available in the product as part of the threat anti-malware, including predictive machine learning and behavioral analysis, which are integral to the anti-malware module of EPP. In terms of my experience with the machine learning algorithms for analysis and threat detection, we are analyzing logs provided by Trellix, but we are not able to conduct specific machine learning analysis on those logs. The automated response mechanisms in the products help with incident management because we have to create playbooks in Trellix console for automation, which we need to enable. The customizable dashboard of Trellix Endpoint Security Platform definitely contributes to the decision-making process, as we customize the dashboard according to customer requirements. When it comes to integration aspects, we are able to integrate Trellix Endpoint Security Platform with SIEM or SOAR solutions using the ePO console, which enhances threat detection capabilities. Reporting and analytics aspects have an impact on security posture assessment, as we are able to fetch reports in the ePO console customized according to customer requirements for downloading and sending via email.

Read full review

Bala_Krishna

Director at esupport Solutions Pvt ltd

Security suite has protected individual devices from threats, while installation and network features require improvements

BIG-IP is actually the LTM, Link Load Balancer, which comes with ASM, meaning Application Security Module. It consists of multiple modules, such as ASM, SWG, and a domain DNS manager. ZoneAlarm allows defining trusted and public networks, which helps maintain security in public Wi-Fi environments. It offers comprehensive protection, securing PCs against threats. Users do not experience any system slowdowns while scanning. Harmony Browser protects all your browsing activity and is bundled with Harmony Endpoint and Harmony Connect. It provides a small but effective security layer and sometimes comes packaged with the larger Harmony suite.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Cortex XDR's most valuable feature is its intelligence-based dashboards."

"The most valuable features of this product are the management capabilities, which allow an IT organization to get quite a good picture of attempted cyber attacks, and its out-of-the-box investigation capabilities."

"Since they've done their most recent update, the ease to isolate endpoints is valuable. If we find one where there is a virus on it, we can easily isolate it. We don't even have to contact the user. We don't have to manually take them off the network. We can easily isolate them."

"The product is very good, it has caught a lot of exploits that most products would not."

"The dashboard is customizable."

"We can visualize and control the activities in the environment from anywhere."

"Stability is a primary factor, and then there's the ease of distribution and policy management."

"The one feature of Palo Alto Networks Traps that our organization finds most valuable is the App ID service."

More Cortex XDR by Palo Alto Networks pros

"It is a really strong solution for endpoint security."

"The solution has been quite stable."

"Anyone can use it, the protection is good, and they have all of the features."

"FireEye Endpoint Security's scalability is awesome. I think it is one of the best on that front."

"The loss prevention feature would be the most valuable."

"I would like to recommend the solution; it's better and, pricing wise, it's worth it, especially compared to other advanced malware security solutions in the market that are very costly."

"Trellix Endpoint Security's dashboard is very flexible, and I can create my own user-specific dashboard depending on user privilege or preference."

"It is a great solution overall."

More Trellix Endpoint Security Platform pros

"It is quick and easy to configure."

"ZoneAlarm is one of the best rated security products from Checkpoint, which comprises of inbuilt antivirus, anti spyware, anti phishing, and advanced threat protection features."

"It gives us security for the users' mobiles and ends up protecting us in a significant way."

"It is easy to use through interfaces and easy to configure each of the customizations we created based on the characteristics that we wanted."

"The solution maintains reasonable scalability."

"ZoneAlarm provides us with very good security and we are using both of the modules, including antivirus as well as firewall features, and it is very easy and stable for us."

"The product's most valuable feature is the detection engine due to its ability to identify threats."

"ZoneAlarm protects all computers from viruses, spyware, and hackers."

More ZoneAlarm pros

Cons

"The GUI could be improved."

"Although I would say this product is highly-rated, it could probably do more because nothing does everything that you want."

"For Cortex XDR by Palo Alto Networks, if I had to point out improvements, I would say the UI is still somewhat difficult for beginners."

"Cortex XDR by Palo Alto Networks can improve mobile integration to allow access to the console."

"There are some false positives."

"It's not an ideal choice for smaller businesses, as you need a minimum of 200 endpoints to even use the solution at all."

"Managing the product should be easier."

More Cortex XDR by Palo Alto Networks cons

"Because sometimes it makes machines really slow."

"Trying to move away from the signature model for antivirus and malware blocking is something that would be nice. Instead of having to update every day, which is signature-based, moving to more of a kernel or architecture-based model would probably be beneficial."

"Sometimes, while installing the ePO, we were getting so many errors and I don't know why it happened."

"Intrusion detection and intervention seem to be falling behind the competition."

"I would like to see more integration with third-party products."

"The agent is very heavy, so we have to ensure that we have a lightweight agent for Windows systems."

"There are two main areas that require improvement. One is the size of the packages. Although I'll admit manageability is good, if I want to deploy, let's say just the antivirus or just the firewall, each of those package sizes are quite large. They are sometimes as big as 200MB or 250MB. When I have operations in remote areas where connectivity is always poor, it's difficult. To deploy such a package in a remote location over the internet or something like that is always challenging."

"FireEye allows three releases per day which are automated. If the automation fails for some reason, the release fails."

More Trellix Endpoint Security Platform cons

"Some of our users say that the interface is a little bit outdated for 2020, and want it to be more modern and cozy."

"They need to update and improve the features available for Mac."

"They should release a single update with all the necessary characteristics to avoid being in a cycle of consecutive updates."

"Updating ZoneAlarm is a problem at times."

"I would like it to be integrated with the Check Point centralization solution like Infinity Portal. It would be great to be able to manage it through the same website."

"We'd like better performance of the network equipment. There are high-speed environments where an immediate response is required."

"Currently, the client is only available for the Windows Operating System but it would be good if it were released for Mac OS as well."

"ZoneAlarm should be a light application that does not take too much memory in mobile phones."

More ZoneAlarm cons

Pricing and Cost Advice

"The return on investment is from the user side because we have seen the performance of it increase the delivery time of the product if we are using too many web-based and on-premise applications. In indirect ways, we saw the return of investment in terms of performance and user satisfaction increase."

"The cost of Cortex XDR by Palo Alto Networks is $55 to $90 USD per endpoint per month."

"The price was fine."

"If one wishes to work with another team or large number of users at a future point, he must purchase a license for them."

"It's the most expensive solution, but features-wise, it's quite strong. It's very good for protection, so the results are very good in the case of protection. I would rate it a two out of ten in terms of pricing."

"When we first bought it, it was a bit expensive, but it was worth it. The licensing was straightforward."

"It is "expensive" and flexible."

"It has reasonable pricing for the use cases it provides to the company."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"McAfee's prices are flexible and can be quite competitive, although there are other solutions that are even more so."

"It is based on an annual subscription."

"The product is expensive."

"The solution is not an expensive tool. Compared to other options, it's mostly average-priced. I've deployed it for customers ranging from 100 nodes to over 5,000 nodes. Its renewal prices are very low, and it offers both perpetual and subscription licenses. With a perpetual license, the product will keep working as long as it's not end-of-life, which benefits companies."

"It provides good value by striking a balance between cost-effectiveness and feature richness."

"We are on an annual subscription for McAfee MVISION Endpoint. The cost for the license could be less expensive."

"Its price is very high. It is higher than its competitors, and it should be less."

"Trellix may cost around $46 to $47 for a single license without an EDR."

More Trellix Endpoint Security Platform pricing and cost advice

"I rate the product pricing a seven out of ten."

"The pricing is reasonable, with a yearly renewal license costing seventy dollars."

"We use the free version of the software, but it can be upgraded to the paid Extreme Security edition."

"We have to pay a yearly licensing fee for ZoneAlarm, which is cheap."

"This is a freeware product and I recommend using it."

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.

See recommendations

890,071 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Construction Company

13%

Financial Services Firm

12%

Comms Service Provider

Manufacturing Company

12%

Government

10%

Financial Services Firm

10%

Comms Service Provider

12%

Hospitality Company

10%

Construction Company

Performing Arts

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	45
Midsize Enterprise	20
Large Enterprise	48

By reviewers
Company Size	Count
Small Business	67
Midsize Enterprise	37
Large Enterprise	62

By reviewers
Company Size	Count
Small Business	14
Midsize Enterprise	2
Large Enterprise	4

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

See all answers

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

See all answers

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

See all answers

How does McAfee Endpoint Security compare with MVISION?

The flexible manageability of McAfee Endpoint Security is one of our favorite aspects of this solution. You can deplo...

See all answers

How does Crowdstrike Falcon compare with FireEye Endpoint Security?

The Crowdstrike Falcon program has a simple to use user interface, making it both an easy to use as well as an effec...

See all answers

What is your experience regarding pricing and costs for McAfee Endpoint Security?

I don't have visibility on pricing because it is negotiated by a different team, as I look after the technical side.

See all answers

What is your experience regarding pricing and costs for ZoneAlarm?

ZoneAlarm has an acceptable price. Not much detail can be provided as I am not the one to judge the price.

See all answers

What needs improvement with ZoneAlarm?

Check Point support needs improvement. Currently rated at 9 out of 10, more support is required. There are some conce...

See all answers

What is your primary use case for ZoneAlarm?

I work with vendors such as F5 and deal with F5 as a reseller. I work with F5 BIG-IP regarding F5 Shape Security. BIG...

See all answers

Comparisons

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Compared 8% of the time

SentinelOne Singularity Endpoint vs Cortex XDR by Palo Alto Networks

Compared 5% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

TrendAI Vision One – Endpoint Security vs Cortex XDR by Palo Alto Networks

Compared 2% of the time

More Cortex XDR by Palo Alto Networks Competitors

CrowdStrike Falcon vs Trellix Endpoint Security Platform

Compared 5% of the time

Microsoft Defender for Endpoint vs Trellix Endpoint Security Platform

Compared 5% of the time

SentinelOne Singularity Endpoint vs Trellix Endpoint Security Platform

Compared 4% of the time

Symantec Endpoint Security vs Trellix Endpoint Security Platform

Compared 3% of the time

Trellix Endpoint Detection and Response (EDR) vs Trellix Endpoint Security Platform

Compared 3% of the time

More Trellix Endpoint Security Platform Competitors

Microsoft Defender for Endpoint vs ZoneAlarm

Compared 28% of the time

Check Point Harmony Endpoint vs ZoneAlarm

Compared 9% of the time

Avast One vs ZoneAlarm

Compared 5% of the time

Bitdefender Security for AWS vs ZoneAlarm

Compared 5% of the time

RestoreX360 vs ZoneAlarm

Compared 5% of the time

More ZoneAlarm Competitors

Product Reports

Buyer's Guide

Cortex XDR by Palo Alto Networks

April 2026

Download Cortex XDR by Palo Alto Networks product report

Buyer's Guide

Trellix Endpoint Security Platform

April 2026

Trellix Endpoint Security Platform report

Download Trellix Endpoint Security Platform product report

Buyer's Guide

ZoneAlarm

April 2026

Download ZoneAlarm product report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

McAfee Endpoint Security, McAfee Endpoint Protection, Intel Security Total Protection for Endpoint, McAfee Complete Endpoint Protection, Trellix Endpoint Security (ENS)

No data available

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

Trellix Endpoint Security Platform offers essential features like centralized management, threat prevention, and encryption, facilitating seamless scaling and integration with other systems while prioritizing user security.

This comprehensive platform focuses on endpoint protection, antivirus capabilities, and malware defense. It enhances cybersecurity with data loss prevention, advanced threat detection, and AI-driven features for reliable protection without impacting performance. Central management and advanced reporting streamline integration and ease of use. Flexible policy deployment through the management console and its robust security measures, such as DLP and device control, further increase protection. Challenges include high CPU and memory usage affecting performance, a complex interface, and lengthy deployment. Third-party integration and Windows Hello support need improvement. Additional concerns involve improved threat detection and faster technical support responses.

What are the key features of Trellix Endpoint Security Platform?

Centralized Management: Allows seamless integration and scaling with consistent control across environments.
Threat Prevention: Provides comprehensive antivirus and malware protection to secure systems.
Encryption: Ensures data security with robust encryption techniques.
Advanced Reporting: Facilitates detailed insights and analysis for better decision-making.
AI-Driven Detection: Offers reliable threat detection without impacting system performance.

What benefits should users look for in reviews?

Comprehensive Protection: Offers extensive security measures for protecting digital environments.
Ease of Integration: Simplifies the process of incorporating into current systems and processes.
Flexible Policy Deployment: Supports adaptable policy management to meet diverse requirements.
Scalability: Enables growth while maintaining efficiency and security.
Robust Security Features: Provides advanced security measures like DLP and device control.

Trellix Endpoint Security Platform is widely implemented in industries such as banking and government for securing mobile and desktop devices. Its capabilities cover network security, device control, and remote access protection, catering to diverse environments by offering robust cybersecurity management against advanced threats.

Trellix

ZoneAlarm protects you by preventing hackers from remotely accessing and controlling your device, and lets you know which apps have excessive permissions so you can decide whether they threaten your privacy.

Check Point Software Technologies

Sample Customers

CBI Health Group, University Honda, VakifBank

inHouseIT, Seagate Technology

Terma, Optix, Samsung Research Amercia, SF Police Credit Union, Independence Care System, Mattias Thomsen, Carmel Partners, Desert Research Institute, CRIF, FXCM Inc, US State Agency

Buyer's Guide

Endpoint Protection Platform (EPP)

April 2026

Download Free Report

Find out what your peers are saying about CrowdStrike, Microsoft, SentinelOne and others in Endpoint Protection Platform (EPP). Updated: April 2026.

DOWNLOAD NOW

890,071 professionals have used our research since 2012.

We monitor all Endpoint Protection Platform (EPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.