TrustRadius: an HG Insights company

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    Splunk SOAR

    Score9.1 out of 10
    N/ASplunk now offers a security orchestration, automation, and response (SOAR) platform via its acquisition of Phantom. Splunk Security Orchestration and Automation (Splunk SOAR) provides playbook automation and is available as a standalone solution.N/A

    Trellix Endpoint Security ENS

    Score8.3 out of 10
    N/ATrellix Endpoint Security (ENS) solutions apply proactive threat intelligence and defenses across the entire attack lifecycle to keep organizations safer and more resilient.N/A
    Pricing
    Splunk SOARTrellix Endpoint Security ENS
    Editions & Modules
    No answers on this topic
    No answers on this topic
    Offerings
    Pricing Offerings
    Splunk SOARTrellix Endpoint Security ENS
    Free Trial
    NoNo
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoNo
    Entry-level Setup FeeNo setup feeNo setup fee
    Additional Details——
    More Pricing Information
    Community Pulse
    Splunk SOARTrellix Endpoint Security ENS
    Considered Both Products
    Cisco
    No answer on this topic
    Trellix (Musarubra US LLC)
    No answer on this topic
    Key User Insights
    Would buy again
    100%
    Would buy again
    41 Answers
    80%
    Would buy again
    12 Answers
    Delivers good value for the price
    100%
    Delivers good value for the price
    34 Answers
    93%
    Delivers good value for the price
    13 Answers
    Happy with the feature set
    100%
    Happy with the feature set
    41 Answers
    80%
    Happy with the feature set
    12 Answers
    Lived up to sales and marketing promises
    90%
    Lived up to sales and marketing promises
    26 Answers
    100%
    Lived up to sales and marketing promises
    11 Answers
    Implementation went as expected
    97%
    Implementation went as expected
    37 Answers
    100%
    Implementation went as expected
    14 Answers
    Features
    Splunk SOARTrellix Endpoint Security ENS
    Endpoint Security
    Comparison of Endpoint Security features of Splunk SOAR and Trellix Endpoint Security ENS
    Feature
    Splunk SOAR
    -
    Ratings
    Trellix Endpoint Security ENS
    8.3
    15 Ratings
    3% below category average
    Anti-Exploit Technology00 Ratings8.013 Ratings
    Endpoint Detection and Response (EDR)00 Ratings8.014 Ratings
    Centralized Management00 Ratings9.015 Ratings
    Hybrid Deployment Support00 Ratings7.98 Ratings
    Infection Remediation00 Ratings8.014 Ratings
    Vulnerability Management00 Ratings8.012 Ratings
    Malware Detection00 Ratings9.015 Ratings
    Best Alternatives
    Splunk SOARTrellix Endpoint Security ENS
    Small Businesses
    No answers on this topic
    SentinelOne Singularity
    Score9 out of 10
    Medium-sized Companies
    No answers on this topic
    BlackBerry Protect (CylancePROTECT)
    Score9.1 out of 10
    Enterprises
    Palo Alto Networks Cortex XSOAR
    Score1.1 out of 10
    ESET PROTECT
    Score8.8 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    Splunk SOARTrellix Endpoint Security ENS
    Likelihood to Recommend
    8.1
    (40 ratings)
    9.0
    (26 ratings)
    Likelihood to Renew
    7.5
    (3 ratings)
    -
    (0 ratings)
    Usability
    8.2
    (1 ratings)
    8.0
    (1 ratings)
    Performance
    8.2
    (40 ratings)
    -
    (0 ratings)
    Support Rating
    8.2
    (1 ratings)
    5.0
    (6 ratings)
    Online Training
    8.2
    (1 ratings)
    -
    (0 ratings)
    Implementation Rating
    8.2
    (1 ratings)
    -
    (0 ratings)
    Configurability
    8.2
    (1 ratings)
    -
    (0 ratings)
    Ease of integration
    -
    (0 ratings)
    10.0
    (1 ratings)
    Product Scalability
    8.2
    (1 ratings)
    -
    (0 ratings)
    User Testimonials
    Splunk SOARTrellix Endpoint Security ENS
    Likelihood to Recommend
    Cisco
    Our company has very complex and dynamic security operations because of the large number of security tools and systems that we need to manage and coordinate. Moreover, it helps us to meet many regulatory and compliance requirements because it helps us to automate and document our security operations. We also use it to streamline our security operations and improve our response to potential threats.
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    It provides great web security and will protect your devices against viruses and malware when paired with other security software and hardware. For instance, we have multiple layers of security set up so if McAfee misses something then one of our other barriers will catch the infection or intrusion before it reaches the network. I would not suggest using this product as a standalone agent because I do not think it will be as effective when working by itself. The dashboard also makes it convenient to manage devices, policies, and settings from wherever you are so it's an ideal solution for any IT department to use. I would just suggest using something else as a backup so your network isn't left vulnerable.
    Incentivized
    Read full review
    Pros
    Cisco
    • Its security orchestration and integration capability that supports multiple tools.
    • Easy coding that automates our security actions.
    • Enables us to easily collaborate and respond to security issues faster.
    • Splunk SOAR is a flexible product that is easy to deploy.
    • Efficient tracking and monitoring capability.
    • Excellent real-time reporting functionality.
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    • Provides high fidelity alerting.
    • Allows CSOC analysts to perform forensic triage and alert investigations through containment from a single pane of glass.
    • Provides alert telemetry across on-disk and in-memory attacks.
    • Supports many additional 'bolt-on' modules to provide additional alert context or capabilities.
    Incentivized
    Read full review
    Cons
    Cisco
    • A lack of instruction It can be difficult to contact the support staff. Limited experience from current users.
    • It takes some effort to set up and learn new technology at first. More assistance is required from the support staff. The product's price needs to go down.
    • Cost of the larger version.
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    • The amount of false detections especially the negative ones needed to be reduced.
    • It requires more optimization. It tends to make the PCs slower.
    • It almost doesn't have the ability to heal. This is very important as we need our sensitive data to be recoverable.
    • It doesn't have any free scanning functionality. Our users using personal machines cannot scan in case of an incident. This could be added like Malwarebytes.
    Incentivized
    Read full review
    Likelihood to Renew
    Cisco
    As we already have a lot of clients being catered with Splunk SOAR and because Splunk SOAR is robust and efficient, we are already using it, and we have understood the product to a certain extent, I feel we are personally more enticed to use and scale it to a lot of business.
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    No answers on this topic
    Usability
    Cisco
    Building playbooks through the visual editor is fine for basic tasks, but once you start chaining complex logic or integrating 3rd party APIs you hit a wall that requires deep scripting knowledge.
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    So below is my breakdown, Pro's: Centralized Management, Comprehensive Protection and customization. Con's: Initial cost
    Incentivized
    Read full review
    Performance
    Cisco
    We are able to automate almost every one of our use cases, even our threat-hunting, and threat intel procedures. We have 20+ playbooks and cover almost everything, even searching logs into Splunk, looking into TIP and external systems, enrichment, and collecting evidence for analysts; it can perform concurrent playbooks running.
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    No answers on this topic
    Support Rating
    Cisco
    Splunk Support is always great! In addition the Community is very efficient and active.
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    The support of product was very good when we initially implemented the solution. We were getting fats replies and could see the customer approach. After a while the level of support was not following the SLA's and the replies were getting very confusing and late.
    Incentivized
    Read full review
    In-Person Training
    Cisco
    I never followed an in-person training, I gave my evaluation based on the online training
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    No answers on this topic
    Online Training
    Cisco
    I followed training for Phantom admins and it opened a world for me
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    No answers on this topic
    Implementation Rating
    Cisco
    I already said that the main key insight is the knowledge of Phantom, so a detailed training for all the people involeved.
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    No answers on this topic
    Alternatives Considered
    Cisco
    Splunk Phantom integrates well with Splunk ES and has many integrations. One thing that I liked about XSOAR as compared to Phantom is that it has an "app-store" where you can download not only app integrations (similar to Phantom) but Playbooks and dashboards as well.
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    Unlike Trellix Endpoint Security Symantec Endpoint provides less information about events on the user side. Trellix give an opportunity to see information about virus detection on a user machine as quick as it possible, so we were able to catch the signs of virus propagation early and prevent the spread of damage
    Incentivized
    Read full review
    Scalability
    Cisco
    me and the customers I encountered found it flexible and scalable
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    No answers on this topic
    Return on Investment
    Cisco
    • The playbooks are valuable. They are the core component. Being able to implement and build a code process to work through and scale out what we want to do is valuable
    • Before its use, analyzing each email would take at least 15 to 20 minutes, with some complex cases taking up to 30 minutes...With the automation provided by Splunk Phantom, we could significantly reduce the amount of time and human effort required to complete this task
    Incentivized
    Read full review
    Trellix (Musarubra US LLC)
    • From an auditing standpoint, we can show that our workstations/servers are protected.
    • Even though it cant identify more advanced/targeted malware, it is still good to identify the more obvious malware which occurs daily in my enterprise.
    • Since it can be easily deployed, the products can easily get deployed on all systems in the environment for optimal anti-malware protection.
    Incentivized
    Read full review
    ScreenShots

    Trellix Endpoint Security ENS Screenshots

    Screenshot of The Monitoring workspace presents actionable endpoint threat detection without the noise.Screenshot of Automatically identify the key findings without requiring manual evaluation of each individual artifact.Screenshot of Visualization displays relationships and speeds analyst understanding.Screenshot of AI-guided investigations automatically provide answers to typical questions asked during a security incident and highlight the most relevant evidence.