Comparisec
← EDR / XDRTrellix Endpoint Security
StrongAdequateStrongAdequate
4.1

Vendors › EDR / XDR › Trellix Endpoint Security

Trellix Endpoint Security logo

Trellix Endpoint Security

Trellix

Founded 2022·US·PE-backed
4.1

Combined score

G2
4.298
Gartner
4.176
⚠

Security incident on record - Formed 2022 from merger of McAfee Enterprise and FireEye; post-merger integration still consolidating.

▪ Editorial verdict

Trellix Endpoint Security carries the combined heritage of McAfee Enterprise and FireEye following their 2022 merger, with genuine strength in air-gapped and on-premises deployment that cloud-first vendors deprioritise entirely. FireEye's historical APT research depth adds relevance for government and defence buyers.

The honest reality is a company still mid-transition: integrating two large product lines takes years, not months, and there is no current Gartner Magic Quadrant position reflecting this. Cloud-native innovation pace trails the category leaders.

The verdict: right for regulated industries, government, and organisations with air-gapped deployment requirements. Cloud-first organisations should evaluate CrowdStrike or SentinelOne instead.

Last reviewed: September 2026

G2

4.298 reviews

Gartner

4.176 reviews

PeerSpot

7.745 reviews
Gartner MQ: Not in MQ

EDR / XDR assessment

PROTECTIONStrong
Endpoint detection
4 / 5
Extended XDR coverage
4 / 5
OPERATIONSAdequate
Automated response
3 / 5
Deployment & management
3 / 5
ANALYTICSStrong
Threat hunting UX
4 / 5
TRUST & ECOSYSTEMAdequate
Ecosystem integrations
3 / 5

Strongest: Endpoint detection

Watch out for: Ecosystem integrations

Strengths & limitations

Strengths

●Strong on-premises and air-gapped deployment support for regulated, government, and OT environments
●Inherits FireEye's historical threat research strength, particularly for APT detection
●Strong Australian government and public sector presence

Watch out for

●Post-merger integration between McAfee Enterprise and FireEye product lines is still consolidating
●Not positioned in any current Gartner Magic Quadrant
●Cloud-native detection innovation pace trails CrowdStrike or SentinelOne

Best for

Regulated industries, government, and organisations with air-gapped or on-premises deployment requirements.

Not suitable for: Cloud-first organisations wanting the fastest-moving detection innovation.

Compliance coverage

●Essential Eight
●AU Privacy Act
●SOC 2
●HIPAA
●NIST CSF
●PCI-DSS
●CMMC
●GDPR
●ISO 27001
●CIS Benchmarks
○NIS2
○DORA

Switching intelligence

Switching from

Common migration paths based on review data

  • Legacy McAfee Enterprise
  • Legacy FireEye

Also considering

Vendors typically shortlisted alongside

← Back to EDR / XDRCompare with other EDR / XDR vendors ➲

Quick facts

Pricing modelPer endpoint, annual
Pricing rangeQuote-based, enterprise
Free trialNo
Min seatsNo minimum
Deployment time2-4 weeks
Complexity3 / 5
Pricing transparency2 / 5
AU presenceYes
IRAP assessedNo
Open sourceProprietary

Deployment

ModelsOn-premises, Hybrid, SaaS
OS supportWindows, macOS, Linux
CloudAWS, Azure
Support24/7 Phone, Email, Dedicated CSM, Professional Services
Data residencyUS, EU, AU

Company

Trellix

Founded 2022 · 1000+ employees · PE-backed

HQ: US

Not publicly disclosed

Certifications

SOC 2 Type II, ISO 27001, Common Criteria

Integrations

Trellix XDR platformSplunkServiceNow