DeepArmor vs Trellix Endpoint Security Platform comparison

Why PeerSpot?

SparkCognition and Trellix are both solutions in the Endpoint Protection Platform (EPP) category. SparkCognition is ranked #57, while Trellix is ranked #6 with an average rating of 8.0. SparkCognition holds a 0.4% mindshare in EPP, compared to Trellix’s 3.3% mindshare. Additionally, 88% of Trellix users are willing to recommend the solution.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Mar 22, 2026

Trellix Endpoint Security Platform and DeepArmor are two cybersecurity products with unique feature sets, competing to enhance security measures. While Trellix has strengths in deployment ease and integration abilities, DeepArmor leads with advanced AI-driven threat detection.

Features: Trellix Endpoint Security Platform offers robust integration, customizable security settings, and caters to complex enterprise needs. DeepArmor focuses on real-time threat detection, lightweight design, and cutting-edge AI capabilities.

Ease of Deployment and Customer Service: Trellix is recognized for streamlined deployment and responsive customer service, providing comprehensive implementation support. DeepArmor emphasizes minimal setup due to its cloud-based infrastructure with seamless cloud integration.

Pricing and ROI: Trellix requires a substantial initial setup cost, offering long-term value through extensive features. DeepArmor features lower upfront costs with efficient AI-driven threat management for quick ROI, appealing to cost-conscious organizations.

To learn more, read our detailed Endpoint Protection Platform (EPP) Report (Updated: October 2026).

Buyer's Guide

Endpoint Protection Platform (EPP)

October 2026

Download the complete report

Helped 917,403 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Mindshare comparison

As of October 2026, in the Endpoint Protection Platform (EPP) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.8%, up from 3.7% compared to the previous year. The mindshare of DeepArmor is 0.4%, up from 0.1% compared to the previous year. The mindshare of Trellix Endpoint Security Platform is 3.3%, down from 3.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Protection Platform (EPP) Mindshare Distribution
Product	Mindshare (%)
Cortex XDR by Palo Alto Networks	3.8%
Trellix Endpoint Security Platform	3.3%
DeepArmor	0.4%
Other	92.5%

Endpoint Protection Platform (EPP)

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

Muhammad Fahad

Manager Tech. & Support (Information Technology) at Texitech

Security needs improvement and email scanning features are not included

The email scanning feature is not available in DeepArmor. We cannot use this for email scanning. There are many options that are not available in DeepArmor. We cannot use separate applications for different internet applications or for different internet scanning. This is why we cannot use it. I would like to see additional features such as email scanning, which should be included, or malware detections, and other cybersecurity features should be included. It could also be more secure.

Read full review

AmitKumar22

Product Manager at Frontier Business systems

Strong endpoint protection has simplified compliance and reduced effort for large user environments

One of the best features of Trellix Endpoint Security Platform is its endpoint security, and I have been using it for the last four and a half to five years, so I can say this is one of the best EDR endpoint security solutions I have ever seen. The features that make Trellix Endpoint Security Platform stand out for me are ease of use and analytics, which I really appreciate the most. Trellix Endpoint Security Platform positively impacts my organization, ensuring we are compliant with SOC 2, HIPAA, and all other compliance requirements, so there are no issues with that.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"If you are looking to deploy a security solution as a whole, this is a good option."

"Its interface and pricing are most valuable, and it is better than other vendors in terms of security."

"We've had a significant increase in blocking with a decrease in false positives, because it's looking at how the files work, not just a list of files that it's been told to look for."

"Palo Alto is one of the tech vendors that always provides top-of-the-line products."

"Stability is one of the features we like the most."

"Cortex XDR by Palo Alto Networks has accelerated the response time for my security team, so we have been able to resolve issues faster than usual."

"The level of security I get for my endpoints and servers is extremely valuable."

"Cortex is the best solution for avoiding security breaches, malware attacks, and other kinds of security issues."

More Cortex XDR by Palo Alto Networks pros

"It is easy to install."

"The exploit guard and malware protection features are very useful. The logon tracker feature is also very useful. They have also given new modules such as logout backup, process backup. We ordered these modules from the FireEye market place, and we have installed these modules. We are currently exploring these features."

"The technical support services are good."

"The primary reason the solution is good is because of its ease-of-use."

"The initial setup of Trellix Endpoint Security was straightforward."

"McAfee Endpoint Protection is a good product that's easy to administer and provides endpoint protection for desktops, laptops, and servers, including anti-virus, anti-malware, anti-spam, DLP, and encryption."

"It's easy to use."

"My experience with McAfee is very good. They give excellent support, they are proactive to solve issues, and willing to integrate their products."

"It's good that it periodically scans all my drives. I can stay up to date with the status of my drivers and update them if needed."

More Trellix Endpoint Security Platform pros

Cons

"It tends to do 99.9% of things. The only thing I'd like is single sign-on authentication into their cloud platform so that my users can be properly authenticated against it."

"The solution lags to the real-time scenarios here and there."

"The GUI could be improved. It's a little bit cumbersome. It could be more user-friendly."

"I am facing issues with customer support for Cortex XDR by Palo Alto Networks, so I am not satisfied with customer support."

"In the next release, I would like to see more UI improvements. Their UI is a bit basic. When we are speaking about Palo Alto Networks they are the big company, so they can improve the UI a little bit. The UI, the reports, the log system can all be improved."

"I feel that it should not be a licensed activity because a feature should allow us to see applications running on end devices."

"While using Cortex, I noticed some aspects that could be improved, such as increasing the synchronization speed between XDR and Xnor."

"The downsides of Cortex XDR by Palo Alto Networks are that in many incidents, when I enter the causality chain, there are numerous logs."

More Cortex XDR by Palo Alto Networks cons

"The email scanning feature is not available in DeepArmor. We cannot use this for email scanning."

"Upgrading to new versions isn't easy and it can take a long time. Also, other solutions' tamper protection features are better than FireEye's. Clients should have access to our local information, but they shouldn't change settings on the system itself."

"What needs improvement in Trellix Endpoint Security is the reduction of resource consumption by the scanning feature. There should be daily signature updates for protection."

"The detection and response capabilities need to be improved."

"The product’s on-premise version is costly in terms of extra charges for SQL database and Windows server licenses."

"The customization capabilities of the solution are an area where it lacks, so it would be great if our company could customize the solution to meet the demands of our customers."

"The polices and rules take time if you don’t know the product."

"If you have another endpoint product running on the same machine, you have to fine tune functions from FireEye to avoid performance and user experience issues."

"AV management based on manual scan Manual scan feature is not easily done A long way of setting hostname set, and Scheduling over policy which is time taking and I don't feel comfortable."

More Trellix Endpoint Security Platform cons

Pricing and Cost Advice

"This is an expensive solution."

"It has a higher cost than other solutions, like CrowdStrike or Microsoft’s EDR tools, but it reduces the cost of our operations because it’s a new generation antivirus tool."

"It is cost-effective compared to similar solutions. It fits for the small businesses through to the big businesses."

"The pricing is okay, although direct support can be expensive."

"The price of the product is not very economical."

"Cortex XDR by Palo Alto Networks is quite an expensive solution."

"I am using the Community edition."

"The solution has one subscription for endpoint protection and one subscription for detection and response. The two licenses combined give you the BRO version."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"There are licensing fees."

"The product is expensive."

"The pricing is more or less the same as the other tools in the market."

"McAfee's prices are flexible and can be quite competitive, although there are other solutions that are even more so."

"The product pricing is high."

"MVISION is intended as an enterprise product and it is priced like one. This solution is within the price range of competitors at the enterprise level."

"The pricing is reasonable."

"I think Trellix is more on the higher side of the market, just on a general scale, but I also think it depends on what particular package you choose."

"Pricing is fair."

More Trellix Endpoint Security Platform pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.

See recommendations

917,403 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Comms Service Provider

13%

Outsourcing Company

12%

Construction Company

10%

Manufacturing Company

10%

No data available

Outsourcing Company

14%

Financial Services Firm

10%

Manufacturing Company

10%

Construction Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	48
Midsize Enterprise	21
Large Enterprise	56

No data available

By reviewers
Company Size	Count
Small Business	68
Midsize Enterprise	39
Large Enterprise	67

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

See all answers

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

See all answers

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

See all answers

Ask a question

Earn 20 points

How does McAfee Endpoint Security compare with MVISION?

The flexible manageability of McAfee Endpoint Security is one of our favorite aspects of this solution. You can deplo...

See all answers

How does Crowdstrike Falcon compare with FireEye Endpoint Security?

The Crowdstrike Falcon program has a simple to use user interface, making it both an easy to use as well as an effec...

See all answers

What is your experience regarding pricing and costs for McAfee Endpoint Security?

I don't have visibility on pricing because it is negotiated by a different team, as I look after the technical side.

See all answers

Comparisons

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Compared 15% of the time

SentinelOne Singularity Endpoint vs Cortex XDR by Palo Alto Networks

Compared 5% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Symantec Endpoint Security vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

TrendAI Vision One vs Cortex XDR by Palo Alto Networks

Compared 2% of the time

More Cortex XDR by Palo Alto Networks Competitors

Microsoft Defender for Endpoint vs DeepArmor

Compared 22% of the time

CrowdStrike Falcon vs DeepArmor

Compared 17% of the time

ESET Endpoint Protection Platform vs DeepArmor

Compared 16% of the time

Morphisec vs DeepArmor

Compared 6% of the time

Nyotron PARANOID vs DeepArmor

Compared 6% of the time

More DeepArmor Competitors

SentinelOne Singularity Endpoint vs Trellix Endpoint Security Platform

Compared 6% of the time

CrowdStrike Falcon vs Trellix Endpoint Security Platform

Compared 5% of the time

Symantec Endpoint Security vs Trellix Endpoint Security Platform

Compared 4% of the time

Microsoft Defender for Endpoint vs Trellix Endpoint Security Platform

Compared 3% of the time

Tanium vs Trellix Endpoint Security Platform

Compared 3% of the time

More Trellix Endpoint Security Platform Competitors

Product Reports

Buyer's Guide

Cortex XDR by Palo Alto Networks

October 2026

Download Cortex XDR by Palo Alto Networks product report

Buyer's Guide

Endpoint Protection Platform (EPP)

October 2026

Download DeepArmor product report

Buyer's Guide

Trellix Endpoint Security Platform

September 2026

Trellix Endpoint Security Platform report

Download Trellix Endpoint Security Platform product report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

No data available

McAfee Endpoint Security, McAfee Endpoint Protection, Intel Security Total Protection for Endpoint, McAfee Complete Endpoint Protection, Trellix Endpoint Security (ENS)

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

DeepArmor offers advanced cybersecurity solutions, specifically designed for businesses that require intelligent threat protection. Utilizing cutting-edge technology, it caters to both endpoint protection and network defense.

DeepArmor leverages machine learning and artificial intelligence to provide proactive security measures. These technologies enable accurate threat detection and swift action, minimizing risk and improving overall security posture. DeepArmor is suitable for enterprises seeking comprehensive defense against evolving cyber threats.

What are the notable features of DeepArmor?

Machine Learning: Enhances threat detection accuracy by learning from previous data.
AI-Powered Defense: Automates responses to emerging threats, reducing response times.
Behavioral Analysis: Identifies suspicious activities by analyzing user patterns.
Cloud-Based Management: Facilitates remote management and monitoring.

What benefits should users expect from DeepArmor?

Enhanced Security: Robust protection against sophisticated cyber attacks.
Cost Efficiency: Reduces potential losses from data breaches with preemptive measures.
Scalability: Easily adapts to growing business needs.
Operational Efficiency: Streamlines security processes through automation.

DeepArmor implementation is evident in industries like finance and healthcare, where data protection is paramount. In finance, it safeguards sensitive financial information, while in healthcare, it ensures compliance with protection regulations by securing patient records. The application of AI and machine learning across these fields strengthens defensive capabilities, aligning with industry-specific needs.

SparkCognition

Trellix Endpoint Security Platform offers essential features like centralized management, threat prevention, and encryption, facilitating seamless scaling and integration with other systems while prioritizing user security.

This comprehensive platform focuses on endpoint protection, antivirus capabilities, and malware defense. It enhances cybersecurity with data loss prevention, advanced threat detection, and AI-driven features for reliable protection without impacting performance. Central management and advanced reporting streamline integration and ease of use. Flexible policy deployment through the management console and its robust security measures, such as DLP and device control, further increase protection. Challenges include high CPU and memory usage affecting performance, a complex interface, and lengthy deployment. Third-party integration and Windows Hello support need improvement. Additional concerns involve improved threat detection and faster technical support responses.

What are the key features of Trellix Endpoint Security Platform?

Centralized Management: Allows seamless integration and scaling with consistent control across environments.
Threat Prevention: Provides comprehensive antivirus and malware protection to secure systems.
Encryption: Ensures data security with robust encryption techniques.
Advanced Reporting: Facilitates detailed insights and analysis for better decision-making.
AI-Driven Detection: Offers reliable threat detection without impacting system performance.

What benefits should users look for in reviews?

Comprehensive Protection: Offers extensive security measures for protecting digital environments.
Ease of Integration: Simplifies the process of incorporating into current systems and processes.
Flexible Policy Deployment: Supports adaptable policy management to meet diverse requirements.
Scalability: Enables growth while maintaining efficiency and security.
Robust Security Features: Provides advanced security measures like DLP and device control.

Trellix Endpoint Security Platform is widely implemented in industries such as banking and government for securing mobile and desktop devices. Its capabilities cover network security, device control, and remote access protection, catering to diverse environments by offering robust cybersecurity management against advanced threats.

Trellix

Sample Customers

CBI Health Group, University Honda, VakifBank

AV-Comparatives

inHouseIT, Seagate Technology

Buyer's Guide

Endpoint Protection Platform (EPP)

October 2026

Download Free Report

Find out what your peers are saying about CrowdStrike, Microsoft, SentinelOne and others in Endpoint Protection Platform (EPP). Updated: October 2026.

DOWNLOAD NOW

917,403 professionals have used our research since 2012.

See our list of best Endpoint Protection Platform (EPP) vendors.

We monitor all Endpoint Protection Platform (EPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.