Focused on Effective, Real-World Security, Trellix Scores 100% in SE Labs Enterprise Endpoint Security Test

By Pavan Podila, Diwakar Dinkar and Joe Malenfant · August 1, 2024

Dedicated to Excellence

For nearly 30 years Trellix solutions have been protecting endpoints around the globe. While many organizations are recovering from an unprecedented outage caused by various IT software, we believe deeply in our mission to do no harm and be a partner in every way we can for our customers. We are committed to transparency with independent testing of our solutions so you can stay focused on business initiatives, not on managing our solutions or recovering from a breach.

As such Trellix has again scored 100% detection rate and zero false positives (FPs) on the most recent SE Labs Endpoint Security for Enterprise test. This result demonstrates our deep commitment to security efficacy and the operational efficiency of security, and why we are trusted by more than 40,000 companies around the world.

What is SE Labs testing?

Every 3rd party test is different, and SE Labs is no exception. In this particular round of testing, SE Labs used certain machine learning capabilities while crafting new threats and also downloaded threats that are latest from the internet, the goal being to simulate what attackers are doing today. They tested against the following categories:

• Targeted Attacks: Points can only be lost here based on a threat gaining access, taking action (ie: exfiltrating data), if it can escalate privileges, and post escalation actions.
• Legitimate Accuracy: This category indicates how accurately the products classify legitimate applications and URLs, and ultimately should not bother the user, whether marked safe or malicious.
• Protection Accuracy: Points are given based on if a product detected, blocked, remediated, or neutralized a threat. Points are deducted when a product continually blocks a persistent threat from achieving its aim while not removing it from the system, and if the system is compromised.

SE Labs conducted this test using a mixture of targeted attacks using well-established techniques and threats found live on the internet at the time of the test. They did not create unique threats specifically for their tests, and as such it is representative of what any organization could expect to face on a daily basis.

Results: 100% in all 3 categories

The results in the chart below are a testament to our dedication to protecting customers, regardless if their environment is hybrid, cloud, or on-prem. In terms of total accuracy, legitimate accuracy, and protection, we provided superior protection to others such as Broadcom Symantec Endpoint Security and Crowdstrike Falcon. The full results are available from SE Labs.

Not the first time

As mentioned, we have a history of participating in these independent 3rd party tests, and also a track record of providing best-in-class protection. In March we published the blog Trellix Endpoint Security Top Protection Recognized by AV-Test and AV-Comparatives. These tests underscore our protection efficacy while also highlighting very low false positives compared to other solutions on the market. That’s what happens when you have nearly 30 years’ experience protecting endpoints: we know a thing or two because we’ve seen a thing or two.

Behind the Scenes: Our Commitment to Quality

At this time, we’d be remiss not to address the global IT outage that was caused by an endpoint security solution. We build products that are effective so you can focus on business initiatives and not on recovering from a breach, products that are efficient with low false positives so you don’t have to waste time finding needles in the haystack. We strive to be transparent with our software releases and provide customers with tools to choose when and how they want to update their software.

• Enterprise IT teams often avoid full scale automatic updates to prevent potential disruptions, compatibility issues, and untested changes that could affect critical systems and workflows, allowing customers to mitigate update risks.
• Trellix never bypasses customer rollout policies.
• ePO (ePolicy Orchestrator) is a centralized security management platform that automates, enforces, and monitors security policies and endpoint software deployment across an enterprise's devices and systems.
• ePO enables conscious updates and we advise customers to test against their gold image before updating all nodes.

While Trellix also provides a single agent for endpoint protection, we keep security content updates (ie: the latest detection files) separate from product functionality to ensure everything is running smoothly in the background and not a long-term crisis waiting to happen that will pull you away from other commitments and opportunities.

Trellix has a history of participating regularly in these independent 3rd party tests with a track record of providing best-in-class protection and we continue to lead the way in the industry with these tests and results. Our mission is simple: provide efficient and effective solutions that protect our more than 40,000 customers around the world from threats. While scoring 100% on this test is great, it’s our customers' trust that we measure ourselves on by.

Want to see for yourself? Request a demo now, or if you just want to see the product for yourself, take a tour!