Try our new research platform with insights from 80,000+ expert users

Netwrix Auditor vs Trellix ESM comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 18, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Netwrix Auditor
Ranking in Security Information and Event Management (SIEM)
28th
Average Rating
9.2
Reviews Sentiment
7.2
Number of Reviews
8
Ranking in other categories
GRC (11th), Identity and Access Management as a Service (IDaaS) (IAMaaS) (15th), Active Directory Management (3rd)
Trellix ESM
Ranking in Security Information and Event Management (SIEM)
27th
Average Rating
7.4
Reviews Sentiment
7.0
Number of Reviews
38
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of February 2026, in the Security Information and Event Management (SIEM) category, the mindshare of Netwrix Auditor is 0.7%, up from 0.2% compared to the previous year. The mindshare of Trellix ESM is 1.2%, up from 0.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Information and Event Management (SIEM) Market Share Distribution
ProductMarket Share (%)
Trellix ESM1.2%
Netwrix Auditor0.7%
Other98.1%
Security Information and Event Management (SIEM)
 

Featured Reviews

RishiPandit - PeerSpot reviewer
Lead - Technical Services at Impetus
Optimizing time and effort through comprehensive auditing features
Netwrix Auditor doesn't have many competitors at the level in which it is placed. All other companies provide auditing solutions but not up to the feature list; it is very broad and robust. The best features include flexibility to interact directly with MS-SQL. Real-time alerts help identify potential security threats. The ability to streamline audits with insights into configuration states is helpful, as the access reviews and audit reports are really insightful. This is a good tool. The search functionality is available, but comparative to other vendors, this is a bit slower. Reports are effective; the compliance reports and all the reports are very insightful. That is good.
MD
Senior Vice President IT at AS IT Consulting Pvt. Ltd.
Offers comprehensive report generation while maintaining ease of integration
We need to improve Trellix ESM by making sure that most of the logging devices available in the global market should be covered, and if there is any device which is not covered, there should not be any additional charges for writing the custom parsers on that. We can add some new features regarding AI in the future for Trellix ESM, but the maturity will take a longer time. There are many false positives that happen in an environment during the first couple of months, or around six months, so the system analyst is not able to identify whether the event which has occurred is a true positive or a false positive.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I have found user behavior analysis and the ability to run risk assessments important features. Additionally, the interface and online documentation are very good."
"What I find the most valuable about Netwrix Auditor is the way it shows risk. The reports are very clear."
"I am impressed with the tool's reporting feature and notifications."
"It maintains audit logs for the duration of time that you wish, as long as you have the storage capacity to do so."
"Netwrix Auditor doesn't have many competitors at the level in which it is placed; all other companies provide auditing solutions but not up to the feature list—it is very broad and robust."
"The most valuable feature is the real-time monitoring."
"The most valuable features of Netwrix Auditor are its affordability compared to similar products and its comprehensive monitoring of admin activities."
"Netwrix provides features that no other solution on the market does."
"The most valuable feature in ESM is its search and reporting feature. It's really nice."
"I rate the tool's deployment an eight out of ten. The deployment is completed in two days."
"The support I have received from the vendor has been great."
"The most valuable feature is for the security operation center because it provides visibility of all traffic within the company infrastructure."
"It is easy to use and deploy. It comes with user-friendly manuals."
"The most valuable feature of Trellix ESM, for detecting, is that it detects malware and viruses, such as a particular virus that was critical in Kenya; we used ESM to detect and block that particular virus completely."
"It blocks the things which are not to be allowed. It has an adaptive mode where it learns for itself."
"It is easy to use."
 

Cons

"When there are issues I would like remediation to be in one place."
"If you buy direct, there is a minimum of 150 licenses that must be procured. The price point and barrier of entry is a little bit higher than it would be if you purchased the solution from an authorized reseller partner, rather than buying it and managing yourself."
"In the UI, we have to adjust and resize our console many times, and sometimes it appears, sometimes you have to close and open it, and sometimes it does not give a scroll bar to navigate."
"An improvement would be if there was an another way to manage the logs besides email because it's not so practical."
"I expect usability features to become more refined over time. I'm interested to see how it evolves and continues to improve."
"The Linux compatibility of this solution could be improved."
"The solution lacks self-service on password reset. It also needs to improve its scalability."
"There is room for improvement with the introduction of AI functionality."
"The product is mature and needs little improvement, but we could enhance the customized dashboarding based on use cases."
"We need to improve Trellix ESM by making sure that most of the logging devices available in the global market should be covered, and if there is any device which is not covered, there should not be any additional charges for writing the custom parsers on that."
"The solution needs to improve case management. The UI is confusing."
"We acquired the IBM product because McAfee is slightly confusing to use, and it's broader."
"Customized reports and alerting functionality could be included in the dashboard."
"The product’s alert response feature needs improvement. It could be more flexible and secure."
"The user interface could be more user-friendly."
"I would like to see improvements to the user interface."
 

Pricing and Cost Advice

"There is a license for this solution and we are on an annual license. The price is reasonable."
"The tool's price is fair."
"This solution is reasonably priced. I would rate it a nine out of ten."
"We renew our license annually."
"The cost is dependent on the customer's environment and requirements."
"We pay for our licensing fees on a yearly basis, and there are no costs in addition to the standard licensing fees."
"When compared to IBM Security QRadar and other similar platforms, the pricing of McAfee ESM is reasonable and comparatively less expensive."
"It is an inexpensive product. We purchase its yearly license."
"You should buy the distributed option instead of the all-in-one for environments with more than 1000 end points."
"The cost is all included. The finance department handles the financial part, and we mostly don't get involved in it."
"McAfee is the right choice for a low-budget solution."
report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
881,733 professionals have used our research since 2012.
 

Comparison Review

VS
Manager, Enterprise Risk Consulting at a tech company with 1,001-5,000 employees
Feb 26, 2015
HP ArcSight vs. IBM QRadar vs. ​McAfee Nitro vs. Splunk vs. RSA Security vs. LogRhythm
We at Infosecnirvana.com have done several posts on SIEM. After the Dummies Guide on SIEM, we are following it up with a SIEM Product Comparison – 101 deck. So, here it is for your viewing pleasure. Let me know what you think by posting your comments below. The key products compared here are…
 

Top Industries

By visitors reading reviews
Financial Services Firm
14%
Government
9%
Manufacturing Company
7%
Computer Software Company
6%
Comms Service Provider
16%
Financial Services Firm
9%
Manufacturing Company
8%
Construction Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business3
Midsize Enterprise1
Large Enterprise4
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise6
Large Enterprise24
 

Questions from the Community

What do you like most about Netwrix Auditor?
The most valuable features of Netwrix Auditor are its affordability compared to similar products and its comprehensive monitoring of admin activities.
What is your experience regarding pricing and costs for Netwrix Auditor?
I don't know about the pricing of this, but it is good at this price point because our organization has purchased it, which means it was in budget. We usually do not buy expensive solutions, so the...
What needs improvement with Netwrix Auditor?
The areas of improvement include the front end, as the UI should be more intuitive and there should be fewer bugs. In the UI, we have to adjust and resize our console many times, and sometimes it a...
What is your experience regarding pricing and costs for McAfee ESM?
When discussing Trellix ESM pricing and licensing, if you consider some premium product, the pricing also has to be premium, however, enterprise customers who look for a premium product, alongside ...
What needs improvement with McAfee ESM?
Areas of Trellix ESM that could be improved or enhanced include checking on the clients who are still on-prem, especially banks, as most are not moving everything to the cloud due to confidentialit...
What is your primary use case for McAfee ESM?
My customer's usual use case for Trellix ESM involves one client, as most of the users have moved to ESM. Nowadays, they don't use IPS only, since McAfee IPS is standalone; they incorporate firewal...
 

Also Known As

No data available
McAfee ESM, NitroSecurity, McAfee Enterprise Security Manager
 

Overview

 

Sample Customers

AT&T, SanDisk, Siemens, Verizon, Electrolux, Allianz, Societe Generale
San Francisco Police Credit Union, Wªstenrot Gruppe, Volusion, California Department of Corrections & Rehabilitation, Government of New Brunswick, State of Colorado, Macquarie Telecom, Texas Tech University Health Sciences Center, Cologne Bonn Airport
Find out what your peers are saying about Netwrix Auditor vs. Trellix ESM and other solutions. Updated: February 2026.
881,733 professionals have used our research since 2012.