The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

How the Scorecard works

Prev Next

The Trellix ESM Scorecard shows which assets (endpoints) meet your organization's configuration requirements (benchmarks).

GUID-A9802FEC-7501-4E08-B2D4-A6EB7478019B-low.png

  1. Configure ePO - On-prem with Trellix Policy Auditor to audit your system assets (endpoints).

  2. Benchmarks contain rules that determine whether assets meet required configurations. Trellix Policy Auditor defines which benchmarks and frequency to use to audit assets.

    Trellix Policy Auditor feeds audit results to ePO - On-prem.

  3. The Trellix Enterprise Security Manager - Event Receiver pulls audit results from ePO - On-prem.

  4. The Trellix Enterprise Security Manager - Event Receiver shares audit data with Trellix ESM.

  5. The Trellix ESM Scorecard shows:

    • Executive summaries of your organization's assets (endpoints) and benchmark results

    • Scorecard data filtered by specific assets or benchmark result data

    • Percentage of benchmarks that assets passed

    • Statistics for the average benchmark score

    • How many assets the score represents

    • Trends over time

      Note

      Trend lines appear only if at least two data points exist, which is about two weeks of data.

    • How assets and benchmarks are bound