CyberIndexBeta

Product

Trellix Endpoint Security (HX) is an endpoint detection and response solution that delivers multi-layered protection through a single agent and collects forensic data from endpoints on demand, for enterprise security teams. Trellix Endpoint Security (HX) Agent covers Linux, macOS and Windows. Among the capabilities recorded for it are behavioral detection and malware detection. The stated market is Enterprise. Trellix Endpoint Security (HX) Agent is sold on a quoted basis rather than at a published price.

Current Version
36.30.0
Market
Enterprise
Licence
Paid
Price
Quote
Record Created
2026-08-20
Last Updated
2026-10-10

Vendor

Trellix is what happened when two well-known security companies were bought by the same investor and merged. Symphony Technology Group acquired McAfee's enterprise business in 2021 and FireEye's products business the same year, combined them, and launched the result as Trellix in 2022. Neither original name survives on the products. What it sells is enterprise detection and response: Trellix Endpoint Security, which descends from both McAfee's endpoint agent and FireEye's HX agent, with Trellix EDR above it and Trellix Helix as the security operations platform, alongside network, email and data protection lines. Its cloud security products were separated into Skyhigh Security, which is listed separately in this index. Two things follow for a reader here. Long runs of laboratory results under the McAfee or FireEye name belong to products now sold by Trellix, and McAfee — the consumer company — is unrelated to it despite the shared history and name. Vendor page →

Country
United States
Headquarters
San Jose, United States
Year Established
2022
Customers
40K organisations
Users
200M devices protected
Revenue
$940.0M (2020)

Platforms

Linuxnative
macOSnative
Windowsnative

Target Market

Enterprise primary

Capabilities

Malware Detectionkeynative
Ransomware ProtectionkeyNot known
Behavioral Detectionkeynative
Web ProtectionkeyNot known
Email ProtectionNot known
Host FirewallNot known
Sandbox AnalysisNot known
Cloud-Assisted ScanningNot known
Heuristic DetectionNot known
Device ControlNot known
Vulnerability ShieldingNot known
Central Management ConsoleNot known

10 of 12 not yet known — not recorded, which is not the same as not supported.

Pricing

PlanLicencePriced perBilledPrice
SummaryPrice on requestnot statedno recurring chargeQuote

Versions

  • 36.30.0Windows
  • 36.20.0macOS
  • 34.28.0Linux

The newest release each source names per platform, not every release the vendor has shipped. A release date is shown only where one is recorded.

Independent Tests

Not tested This product does not appear in any test run CSI holds. That is not a low score.

Certifications

OESIS Framework SupportSupported1 activeSupported
OPSWAT Certified Security ApplicationGold1 activeGold

Change History

This record was created 2026-08-20. Everything below is what has changed since.

  • 2026-10-02Certification addedCertified: Common Criteriaevidence
  • 2026-09-30Product updatedNo longer sold to: Consumerevidence
  • 2026-09-30Product updatedSold to: Enterpriseevidence
  • 2026-09-23Certification addedCertified: OPSWAT Certified Security Application (Gold)evidence
  • 2026-09-23New versionNew version: 36.20.0 (macOS)evidence
  • 2026-09-23New versionNew version: 34.28.0 (Linux)evidence
  • 2026-09-23Platform addedRuns on Linuxevidence
  • 2026-09-23Platform addedRuns on macOSevidence
  • 2026-09-22Product updatedListed in Enterprise Antimalwareevidence
  • 2026-09-22Product updatedListed in Home Antimalwareevidence
  • 2026-09-20Pricing plan addedPrice: price on requestevidence
  • 2026-09-09New versionNew version: 36.30.0 (Windows)evidence
  • 2026-08-20Certification addedCertified: OESIS Framework Support (Supported)evidence
  • 2026-08-20Capability addedBehavioral Detection: built inevidence
  • 2026-08-20Capability addedMalware Detection: built inevidence
  • 2026-08-20Pricing plan addedPrice: paidevidence
  • 2026-08-20Product updatedAlso sold to: Enterpriseevidence
  • 2026-08-20Product updatedAlso sold to: Consumerevidence
  • 2026-08-20New versionNew version: 36.30.0evidence
  • 2026-08-20Platform addedRuns on Windowsevidence
  • 2026-08-20Product createdNew product listedevidence

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.