Trellix Reviews, Ratings & Features 2026 | Gartner Peer Insights

Security orchestration, automation and response (SOAR) solutions combine incident response, orchestration and automation, and threat intelligence (TI) management capabilities in a single platform. SOAR tools are also used to document and implement processes (aka playbooks, workflows and processes); support security incident management; and apply machine-based assistance to human security analysts and operators.
SOAR solutions must provide:
- Highly customizable workflow process management that enables repeatable automated tasks to be turned into playbooks that run in isolation or joined together into more sophisticated workflows.
- The ability to store (locally or in a third-party system) incident management data to support SecOps investigations.
- Manually instigated and automated triggers that augment human security analyst operators to carry out operational tasks consistently.
- A mechanism to collate and better operationalize the use of threat intelligence.
- Support for a broad range of existing security technologies that supports improved analyst efficiency and acts as an abstraction layer between the desired outcomes and the custom-made set of solutions in place in your environment.

Active

Find the top Security Orchestration, Automation and Response Solutions with Gartner. Compare and filter by verified product reviews and choose the software that’s right for your organization.

Security Orchestration, Automation and Response Solutions (Transitioning to Security Information and Event Management)

Security Orchestration, Automation and Response Solutions

Trellix ePolicy Orchestrator (ePO)

Trellix Insights

Trellix

Manager, Customer Service and Support

We have been using Trellix ePO in our security operations environment for centralized policy management, endpoint monitoring & agent deployment. The product has been helpful in managing large numbers of endpoints from a single console and gives decent visibility into system health, update status & communication issues. From day-to-day operations perspective, the solution is stable overall, but it does require continuous monitoring & maintenance to keep everything functioning smoothly in larger environments.

50M - 250M USD

250M - 500M USD

<50M USD

500M - 1B USD

1B - 3B USD

10B - 30B USD

30B + USD

3B - 10B USD

Gov't/PS/ED <5,000 Employees

CHIEF SECURITY ENGINEER

Very good reports and query capabilities, good management console. Different automation options. 

It Engineer

It provides strong centralized endpoint security management with reliable policy control and reporting.
While initial setup and administration can be complex, it is a stable and scalable solution for enterprise security operations.

Microsoft

Fortinet

Other...

Palo Alto Networks

Cisco Systems (Splunk)

ServiceNow

Google

OpenText

Rapid7

Dataminr (ThreatConnect)

Securonix

Exabeam

Cyware

Sumo Logic

Devo Technology

Swimlane

Logsign

Blumira

Threat Intelligence

SecureAge

Hackuity

Google (Mandiant)

ORNA

BullWall

Trellix operates as an international entity devoted to reshaping the cybersecurity landscape. The key business issue the company addresses revolves around the escalation of sophisticated threats challenging organizations today. To combat this, Trellix offers an open and native detection and response platform, building a secure and resilient operational structure. The company embraces machine learning and automation, drawing upon the proficiency of its security professionals and an expansive partner ecosystem to deliver technological advancements. The application of their expertise serves to benefit an extensive user base comprising numerous business and government organizations.

Trellix is a global company redefining the future of cybersecurity. The company‚Äôs open and native extended detection and response (XDR) platform helps organizations confronted by today‚Äôs most advanced threats gain confidence in the protection and resilience of their operations. Trellix‚Äôs security experts, along with an extensive partner ecosystem, accelerate technology innovation through machine learning and automation to empower over 40,000 business and government customers. More at https://trellix.com.

Trellix functions as an international entity, playing a significant role in shaping the future of cybersecurity. This enterprise offers an open and native extended detection and response (XDR) platform, aimed to provide support to organizations dealing with sophisticated threats, effectively bolstering their security and operational resilience. Trellix features a skilled team of security specialists and an extensive partner network, propelling technological advancement through machine learning and automation. The company serves a diverse clientele of 40,000, comprising both public and private sector entities.

Reviews

Ratings Overview

Overall experience with

Favorable Review

Powerful enterprise-Grade endpoint security management with strong control and scalability.

Critical Review

Comprehensive Reports and Automation Available Despite Challenging Initial Learning Curve

Likes and dislikes about

likes

dislikes