Trellix EDRF

Trellix Endpoint Detection and Response with Forensics (EDRF) collects and analyses endpoint telemetry and forensic data, maps alerts to the MITRE ATT&CK framework and helps security analysts investigate and respond to threats. It is offered as SaaS. It runs on Linux, macOS and Windows. It is recorded as supporting behavioral detection. It is aimed at Enterprise buyers. Trellix EDRF is sold on a quoted basis rather than at a published price.

Current Version

50.2.1.64

Product Page

trellix.com/products/edrf

Market

Enterprise

Licence

Paid

Price

Quote

Record Created

2026-08-20

Last Updated

2026-10-10

Trellix is what happened when two well-known security companies were bought by the same investor and merged. Symphony Technology Group acquired McAfee's enterprise business in 2021 and FireEye's products business the same year, combined them, and launched the result as Trellix in 2022. Neither original name survives on the products. What it sells is enterprise detection and response: Trellix Endpoint Security, which descends from both McAfee's endpoint agent and FireEye's HX agent, with Trellix EDR above it and Trellix Helix as the security operations platform, alongside network, email and data protection lines. Its cloud security products were separated into Skyhigh Security, which is listed separately in this index. Two things follow for a reader here. Long runs of laboratory results under the McAfee or FireEye name belong to products now sold by Trellix, and McAfee — the consumer company — is unrelated to it despite the shared history and name. Vendor page →

Website

trellix.com

Country

🇺🇸United States

Headquarters

🇺🇸San Jose, United States

Year Established

2022

Customers

40K organisations

Users

200M devices protected

Revenue

$940.0M (2020)