TrustRadius: an HG Insights company

IBM Security QRadar EDR vs. Trellix Endpoint Security ENS

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    IBM Security QRadar EDR

    Score8 out of 10
    N/AIBM Security QRadar EDR (formerly ReaQta) combines automation and dashboards to minimize analyst workloads, detect anomalous endpoint behavior and remediate threats in near real time. With visibility across endpoints, it combines expected features, like MITRE ATT&CK mapping and attack visualizations, with dual-engine AI and automation. For teams that need extended support, managed detection and response (MDR) services offers 24/7 monitoring and response to help keep users…N/A

    Trellix Endpoint Security ENS

    Score8.3 out of 10
    N/ATrellix Endpoint Security (ENS) solutions apply proactive threat intelligence and defenses across the entire attack lifecycle to keep organizations safer and more resilient.N/A
    Pricing
    IBM Security QRadar EDRTrellix Endpoint Security ENS
    Editions & Modules
    No answers on this topic
    No answers on this topic
    Offerings
    Pricing Offerings
    IBM Security QRadar EDRTrellix Endpoint Security ENS
    Free Trial
    YesNo
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoNo
    Entry-level Setup FeeOptionalNo setup fee
    Additional Details——
    More Pricing Information
    Community Pulse
    IBM Security QRadar EDRTrellix Endpoint Security ENS
    Considered Both Products
    IBM
    No answer on this topic
    Trellix (Musarubra US LLC)
    No answer on this topic
    Key User Insights
    Would buy again
    100%
    Would buy again
    11 Answers
    80%
    Would buy again
    12 Answers
    Delivers good value for the price
    88%
    Delivers good value for the price
    7 Answers
    93%
    Delivers good value for the price
    13 Answers
    Happy with the feature set
    100%
    Happy with the feature set
    11 Answers
    80%
    Happy with the feature set
    12 Answers
    Lived up to sales and marketing promises
    88%
    Lived up to sales and marketing promises
    7 Answers
    100%
    Lived up to sales and marketing promises
    11 Answers
    Implementation went as expected
    100%
    Implementation went as expected
    9 Answers
    100%
    Implementation went as expected
    14 Answers
    Features
    IBM Security QRadar EDRTrellix Endpoint Security ENS
    Endpoint Security
    Comparison of Endpoint Security features of IBM Security QRadar EDR and Trellix Endpoint Security ENS
    Feature
    IBM Security QRadar EDR
    7.5
    10 Ratings
    13% below category average
    Trellix Endpoint Security ENS
    8.3
    15 Ratings
    3% below category average
    Anti-Exploit Technology7.39 Ratings8.013 Ratings
    Endpoint Detection and Response (EDR)7.410 Ratings8.014 Ratings
    Centralized Management7.410 Ratings9.015 Ratings
    Hybrid Deployment Support7.39 Ratings7.98 Ratings
    Infection Remediation7.310 Ratings8.014 Ratings
    Malware Detection8.110 Ratings9.015 Ratings
    Vulnerability Management00 Ratings8.012 Ratings
    Best Alternatives
    IBM Security QRadar EDRTrellix Endpoint Security ENS
    Small Businesses
    SentinelOne Singularity
    Score9 out of 10
    SentinelOne Singularity
    Score9 out of 10
    Medium-sized Companies
    BlackBerry Protect (CylancePROTECT)
    Score9.1 out of 10
    BlackBerry Protect (CylancePROTECT)
    Score9.1 out of 10
    Enterprises
    ESET PROTECT
    Score8.8 out of 10
    ESET PROTECT
    Score8.8 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    IBM Security QRadar EDRTrellix Endpoint Security ENS
    Likelihood to Recommend
    7.0
    (11 ratings)
    9.0
    (26 ratings)
    Usability
    -
    (0 ratings)
    8.0
    (1 ratings)
    Support Rating
    -
    (0 ratings)
    5.0
    (6 ratings)
    Ease of integration
    -
    (0 ratings)
    10.0
    (1 ratings)
    User Testimonials
    IBM Security QRadar EDRTrellix Endpoint Security ENS
    Likelihood to Recommend
    IBM
    IBM Security QRadaar EDR provides all the security features at one place with a reasonable price. Though for smaller organizations, the price may be quite high. Plus since it can detect threats and malwares in real time, every business should try them out.
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    It provides great web security and will protect your devices against viruses and malware when paired with other security software and hardware. For instance, we have multiple layers of security set up so if McAfee misses something then one of our other barriers will catch the infection or intrusion before it reaches the network. I would not suggest using this product as a standalone agent because I do not think it will be as effective when working by itself. The dashboard also makes it convenient to manage devices, policies, and settings from wherever you are so it's an ideal solution for any IT department to use. I would just suggest using something else as a backup so your network isn't left vulnerable.
    Incentivized
    Read full review
    Pros
    IBM
    • Detect known and unknown endpoint security threats
    • Remediate these threats near real time
    • Automation in threat detection
    • Threat attack attack visualization storyboards
    • Alert management authomation
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    • Provides high fidelity alerting.
    • Allows CSOC analysts to perform forensic triage and alert investigations through containment from a single pane of glass.
    • Provides alert telemetry across on-disk and in-memory attacks.
    • Supports many additional 'bolt-on' modules to provide additional alert context or capabilities.
    Incentivized
    Read full review
    Cons
    IBM
    • use AI to review previous false negatives that contributed wrongly in the AI suggestion on the follow alerts
    • easily run a script based on values from an hash, ips, path inside the boxes on the behavioral tree
    • apply the remediation to a range of endpoint instead to only the endpoint of the current alert
    • use ajax for example to update the alert page automatically while actions are happening
    • for api have profiles that allow only get actions, or just post on some actions
    • create users in bulk
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    • The amount of false detections especially the negative ones needed to be reduced.
    • It requires more optimization. It tends to make the PCs slower.
    • It almost doesn't have the ability to heal. This is very important as we need our sensitive data to be recoverable.
    • It doesn't have any free scanning functionality. Our users using personal machines cannot scan in case of an incident. This could be added like Malwarebytes.
    Incentivized
    Read full review
    Usability
    IBM
    No answers on this topic
    Trellix (Musarubra US LLC)
    So below is my breakdown, Pro's: Centralized Management, Comprehensive Protection and customization. Con's: Initial cost
    Incentivized
    Read full review
    Support Rating
    IBM
    No answers on this topic
    Trellix (Musarubra US LLC)
    The support of product was very good when we initially implemented the solution. We were getting fats replies and could see the customer approach. After a while the level of support was not following the SLA's and the replies were getting very confusing and late.
    Incentivized
    Read full review
    Alternatives Considered
    IBM
    Bitdefender GravityZone combines multiple security services into a single platform to reduce the cost of building a trusted environment for endpoints. bit the IBM provides a vast support and always there to guide when in need With the majority of our users working in hybrid mode we needed a strong security control that could provide top-class protection with the minimum amount of False Positives (and, of course, of True Positives).
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    Unlike Trellix Endpoint Security Symantec Endpoint provides less information about events on the user side. Trellix give an opportunity to see information about virus detection on a user machine as quick as it possible, so we were able to catch the signs of virus propagation early and prevent the spread of damage
    Incentivized
    Read full review
    Return on Investment
    IBM
    • NOCs and SOCs heavily use IBM Security QRadar EDR and IBM Security QRadar EDR reduced labor costs to identify endpoint security threats and the treat remediation
    • IBM Security QRadar EDR offers a consistent approach to endpoint threat identification and resolution, reduces enterprise security operations support costs
    • In general, IBM Security QRadar EDR enhances enterprise security posture
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    • From an auditing standpoint, we can show that our workstations/servers are protected.
    • Even though it cant identify more advanced/targeted malware, it is still good to identify the more obvious malware which occurs daily in my enterprise.
    • Since it can be easily deployed, the products can easily get deployed on all systems in the environment for optimal anti-malware protection.
    Incentivized
    Read full review
    ScreenShots

    IBM Security QRadar EDR Screenshots

    Screenshot of Behavioral tree: 
A behavioral tree provides full alert and attack visibility.Screenshot of Behavioral tree storyline: 
A visual storyline is automatically created as an attack unfolds, including mapping to MITRE ATT&CK, for full visibility.Screenshot of Cyber Assistant alerts: 
The Cyber Assistant, an AI-powered alert management system, can autonomously handle alerts, reducing analysts’ workloads.Screenshot of Cyber Assistant recommends:
The Cyber Assistant learns from analyst decisions, then retains the intellectual capital and learned behaviors to make recommendations and help reduce false positives.Screenshot of Custom detection strategies: 
Detection Strategy (DeStra) scripting allows users to build custom detection strategies — beyond preconfigured models — to address compliance or company-specific requirements without the need to reboot the endpoint.

    Trellix Endpoint Security ENS Screenshots

    Screenshot of The Monitoring workspace presents actionable endpoint threat detection without the noise.Screenshot of Automatically identify the key findings without requiring manual evaluation of each individual artifact.Screenshot of Visualization displays relationships and speeds analyst understanding.Screenshot of AI-guided investigations automatically provide answers to typical questions asked during a security incident and highlight the most relevant evidence.