

Trellix ESM and Netsurion compete in the cybersecurity space. Trellix ESM has an advantage in feature depth and ease of use, while Netsurion leads in pricing and customer support.
Features: Trellix ESM is known for its comprehensive threat detection, incident response, and real-time alerting system. It provides advanced customization options. Netsurion stands out for its managed detection and response capabilities, quick deployment, and user-friendly interface.
Room for Improvement: Trellix ESM users suggest better integration capabilities, a more intuitive reporting system, and streamlined complex features. Netsurion users desire improvements in scalability, advanced threat analytics, and enhanced performance for larger enterprises.
Ease of Deployment and Customer Service: Trellix ESM has an extensive deployment process suitable for larger organizations and satisfactory customer support, though better documentation is needed. Netsurion offers quick deployment and excellent customer service, ideal for smaller companies needing rapid setup.
Pricing and ROI: Trellix ESM has higher setup costs, but users find its extensive features provide substantial ROI for large enterprises. Netsurion is cost-effective, offering strong ROI for smaller businesses with limited budgets.
I would rate support for Trellix ESM 10 out of 10 because if we connect with the support in the UK, we get excellent support.
It's rare for me to need them unless it's an issue with licensing, and they are the best in that regard.
Scalability is quite easier with Trellix ESM, because all we need to do is add more receivers to it, so it can go to any point.
If there is any device which is not covered, there should not be any additional charges for writing the custom parsers on that.
The weakest point is it doesn't cover almost all the devices, so the customer has to be more dependent on the parsers to be written by the Professional Services team.
| Product | Market Share (%) |
|---|---|
| Trellix ESM | 1.2% |
| Netsurion | 0.5% |
| Other | 98.3% |


| Company Size | Count |
|---|---|
| Small Business | 10 |
| Midsize Enterprise | 7 |
| Large Enterprise | 7 |
| Company Size | Count |
|---|---|
| Small Business | 15 |
| Midsize Enterprise | 6 |
| Large Enterprise | 24 |
Netsurion offers robust SIEM capabilities enhanced by managed services, facilitating efficient threat identification and response with real-time alerts and comprehensive reporting.
Netsurion stands out for its integration of SIEM, IDS, and vulnerability management. Its real-time threat alerts and dashboards enhance user response capabilities. With centralized logging from Windows, Linux, Cisco devices, firewalls, and Active Directory, Netsurion enables effective compliance support for HIPAA and PCI standards. Managed Threat Protection with the embedded MITRE ATT&CK Framework enhances threat intelligence, while its evolving interface aims to improve user interactions. However, some users find deployment and searching challenging, pointing to areas for improvement.
What are Netsurion's key features?Netsurion is frequently implemented in industries requiring comprehensive security monitoring and compliance, such as healthcare and finance. It aids businesses in consolidating security efforts, offering insights into user activities and system changes, an asset for companies lacking substantial internal resources.
Make your organization more resilient and confident with Trellix Security Operations. Filter out the noise and cut complexity to deliver faster, more effective SecOps. Integrate your existing security tools and connect with over 650 Trellix solutions and third-party products.
We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.