The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

How the Scorecard works

Prev Next

The Trellix ESM Scorecard shows which assets (endpoints) meet your organization's configuration requirements (benchmarks).

GUID-A9802FEC-7501-4E08-B2D4-A6EB7478019B-low.png

  1. Configure ePO - On-prem with Trellix Policy Auditor to audit your system assets (endpoints).

  2. Benchmarks contain rules that determine whether assets meet required configurations. Trellix Policy Auditor defines which benchmarks and frequency to use to audit assets.

    Trellix Policy Auditor feeds audit results to ePO - On-prem.

  3. The Trellix Enterprise Security Manager - Event Receiver pulls audit results from ePO - On-prem.

  4. The Trellix Enterprise Security Manager - Event Receiver shares audit data with Trellix ESM.

  5. The Trellix ESM Scorecard shows:

    • Executive summaries of your organization's assets (endpoints) and benchmark results

    • Scorecard data filtered by specific assets or benchmark result data

    • Percentage of benchmarks that assets passed

    • Statistics for the average benchmark score

    • How many assets the score represents

    • Trends over time

      Note

      Trend lines appear only if at least two data points exist, which is about two weeks of data.

    • How assets and benchmarks are bound