Trellix Endpoint Security
Enterprise endpoint protection from Trellix (formerly McAfee Enterprise): antivirus, firewall, device control and EDR in one agent, quote-based.
Our take: Trellix ENS fits organizations that already run large, policy-driven estates, especially where on-premises or disconnected networks rule out cloud-only tools.
Trellix Endpoint Security (ENS) is an enterprise endpoint protection agent that combines next-gen antivirus, a host firewall, web control and device control, managed from ePolicy Orchestrator on-premises or as SaaS. It is built for IT and security teams running large or regulated fleets. Trellix does not publish prices; Essentials, Core and Enterprise bundles are sold by quote.
On 19 January 2022 private-equity firm STG launched Trellix by combining McAfee Enterprise and FireEye, two security businesses it bought in 2021.
STG had bought McAfee's enterprise business in July 2021; McAfee kept its consumer antivirus business. Trellix Endpoint Security continues the McAfee Enterprise endpoint line.
A solid choice for large, regulated estates; overkill for a small office.
Our score
Reviewed by the Conversion Gems editorial team. Hover a facet to focus it; click to pin.Tap a facet to focus it.
Community ratings
Shown for context only. Our score is independent.
4.2 / 5 aggregate · across 1 source
Third-party ratings shown verbatim; aggregate weighted by review volume.
What it is, and why we rate it
One line each. Open a row for detail.
Our takeTrellix ENS fits organizations that already run large, policy-driven estates, especially where on-premises or disconnected networks rule out cloud-only tools.
Best / not good for
- Large organizations with many endpoints
- Government and regulated industries
- Air-gapped or on-premises networks
- Small businesses without IT staff
- Teams wanting self-serve sign-up and published prices
Friction report
Trade-offs to know before signing up.
- Time to valueWeeks: sales quote, agent rollout and ePO policy setup; Trellix sells deployment and configuration services.
- Scale breakpointNeeding full EDR with forensics means moving to the Enterprise bundle.
- Walled gardenMedium: the Trellix API is a paid add-on and policies live in ePO.
What each Trellix endpoint bundle includes
| Capability | Essentials | Core | Enterprise |
|---|---|---|---|
| ePO (on-prem, IaaS or SaaS) | Yes | Yes | Yes |
| Next-gen antivirus, host firewall, web and device control | Yes | Yes | Yes |
| Adaptive Threat Protection | Yes | Yes | Yes |
| Trellix Insights and Threat Intelligence Exchange | No | Yes | Yes |
| Application Control for PCs | No | Yes | Yes |
| EDR | No | Critical assets (5%) | Full EDR + Forensics |
| Price | Quote | Quote | Quote |
From Trellix's endpoint security platform page (copy captured 22 September 2026), checked 4 October 2026. Compliance reporting, mobile threat defense, encryption, DLP and the Trellix API are optional add-ons.
Frequently Asked Questions
Is Trellix the same as McAfee?
How much does Trellix Endpoint Security cost?
What is Trellix Endpoint Security?
How do I disable or remove Trellix Endpoint Security?
What is the difference between Essentials, Core and Enterprise?
Trellix Endpoint Security alternatives
Other endpoint security tools to compare:
Conversion Gems independently reviews every tool.
