Try our new research platform with insights from 80,000+ expert users

CrowdStrike Falcon vs Trellix Active Response comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Mar 9, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.5
CrowdStrike Falcon improves ROI by cutting costs and increasing productivity through efficient threat management and strong security measures.
Sentiment score
6.5
Trellix Active Response improved threat detection, reduced incident response times, increased efficiency, and enhanced productivity with an intuitive interface.
While we haven't yet quantified the financial benefits, we recognize that there has been a return on investment, particularly with operational efficiencies provided by the alerts.
 

Customer Service

Sentiment score
7.1
Customers generally praise CrowdStrike Falcon's responsive, knowledgeable support, despite occasional slow responses and limited expertise concerns.
Sentiment score
8.5
Trellix Active Response's technical support is praised, though customer interactions have decreased and users see room for improvement.
The CrowdStrike team is very efficient; I would rate them ten out of ten.
 

Scalability Issues

Sentiment score
7.9
CrowdStrike Falcon excels in scalable, seamless deployment across various organizations, with flexible licensing and minimal disruption during expansion.
Sentiment score
7.2
Trellix Active Response is scalable, integrates easily, handles large data seamlessly, and maintains performance and security with minimal latency.
It has adequate coverage and is easy to deploy.
When it comes to scalability, it is entirely based on premium models according to demand.
The scalability of Active Response is satisfactory.
 

Stability Issues

Sentiment score
8.2
CrowdStrike Falcon offers stable, reliable performance with minor update issues and high user satisfaction ratings for protection.
Sentiment score
8.3
Trellix Active Response is praised for reliability, efficient data handling, quick threat detection, adaptability, and stability with minimal downtime.
We are following N-1 versions across our environment, which is stable.
I have never seen instability in the CrowdStrike tool.
 

Room For Improvement

Users desire improved dashboard functionality, integration, machine learning, and interface enhancements with cost-effective options for better threat management.
Trellix Active Response requires enhanced resource management, advanced features like AI, better support, and optimization for improved performance.
Another concern is CrowdStrike's GUI. It changes annually, making it hard to work and find options.
Threat prevention should be their first priority.
Simplifying the querying process, such as using double quote queries or directly obtaining logs based on IP addresses or usernames, would be beneficial.
We would like Trellix to optimize the technology for these systems similarly to how it is deployed for normal endpoints.
 

Setup Cost

CrowdStrike Falcon is pricier than competitors but valued for strong security, flexible features, and excellent support.
It is expensive compared to SentinelOne, but as the market leader, it is worth it.
Based on our evaluations, Trellix Active Response's pricing was the most feasible from a cost perspective.
 

Valuable Features

CrowdStrike Falcon excels with real-time threat detection, cloud-native flexibility, and seamless integration, enhancing endpoint security and management.
Trellix Active Response is praised for robust threat detection, real-time incident response, easy integration, and comprehensive reporting features.
I can investigate by accessing the customer's host based on the RTR environment and utilize host search to know details for the past seven days, including logins, processes, file installations, malicious processes, and network connections.
Real-time response (RTR) is a feature of EDR.
CrowdStrike has improved our incident response capabilities.
They notify us immediately of any vulnerabilities on the endpoints, allowing us to deploy a response quickly.
 

Categories and Ranking

CrowdStrike Falcon
Ranking in Endpoint Detection and Response (EDR)
1st
Average Rating
8.6
Reviews Sentiment
7.4
Number of Reviews
126
Ranking in other categories
Security Information and Event Management (SIEM) (6th), Endpoint Protection Platform (EPP) (2nd), Identity Management (IM) (6th), Threat Intelligence Platforms (2nd), Active Directory Management (2nd), Extended Detection and Response (XDR) (1st), Attack Surface Management (ASM) (1st), Ransomware Protection (1st), Identity Threat Detection and Response (ITDR) (3rd), AI-Powered Cybersecurity Platforms (1st)
Trellix Active Response
Ranking in Endpoint Detection and Response (EDR)
49th
Average Rating
6.8
Reviews Sentiment
7.6
Number of Reviews
4
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of March 2025, in the Endpoint Detection and Response (EDR) category, the mindshare of CrowdStrike Falcon is 16.6%, up from 14.4% compared to the previous year. The mindshare of Trellix Active Response is 0.2%, down from 0.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Endpoint Detection and Response (EDR)
 

Featured Reviews

Chintan-Vyas - PeerSpot reviewer
Easy to set up with good behavior-based analysis but needs a single-click recovery option
Most organizations are currently looking for a scheduled scan to meet their compliance needs. Other players like Symantec and Trend Micro, FireEye, et cetera, are still providing the signature-based regular scheduled scans also, which is not available in CrowdStrike. That is one parameter that we feel should be there in CrowdStrike. CrowdStrike is only working on the dynamic or the files under execution. CrowdStrike is not scanning the static files. The product could be more accurate in terms of performance. We'd like to have a single-click recovery option. With some machines getting corrupted by malware, we need an easy way to start with a blank slate if things happen. That one feature should be there in the EDR.
ED
Operational efficiencies increase with immediate threat alerts for endpoints
We use Trellix Active Response primarily for our endpoints, including desktop computers. It monitors all the tools that our users use for their day-to-day work The alerts provided by Trellix Active Response are its most valuable feature. They notify us immediately of any vulnerabilities on the…
report
Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.
842,651 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Financial Services Firm
10%
Manufacturing Company
9%
Government
7%
Government
17%
Financial Services Firm
14%
Comms Service Provider
11%
University
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions that are very scalable, secure, and user-friendly. Cortex XDR by Palo Alto offers ...
How does Crowdstrike Falcon compare with Darktrace?
Both of these products perform similarly and have many outstanding attributes. CrowdStrike Falcon offers an amazing user interface that makes setup easy and seamless. CrowdStrike Falcon offers a cl...
How does Microsoft Defender for Endpoint compare with Crowdstrike Falcon?
The CrowdStrike solution delivers a lot of information about incidents. It has a very light sensor that will never push your machine hardware to "test", you don't have the usual "scan now" feature ...
What is your experience regarding pricing and costs for McAfee Active Response?
Based on our evaluations, Trellix Active Response's pricing was the most feasible from a cost perspective. I rate the pricing between a six and an eight. It is justified.
What needs improvement with McAfee Active Response?
The only area for improvement is regarding operational technology devices, specifically the engineering automation systems. We would like Trellix to optimize the technology for these systems simila...
What is your primary use case for McAfee Active Response?
We use Trellix Active Response primarily for our endpoints, including desktop computers. It monitors all the tools that our users use for their day-to-day work.
 

Also Known As

CrowdStrike Falcon, CrowdStrike Falcon XDR, CrowdStrike Falcon Threat Intelligence, CrowdStrike Identity Protection, CrowdStrike Falcon Surface
McAfee Active Response
 

Overview

 

Sample Customers

Information Not Available
Liquor Control Board of Ontario
Find out what your peers are saying about CrowdStrike Falcon vs. Trellix Active Response and other solutions. Updated: March 2025.
842,651 professionals have used our research since 2012.