TrendAI Vision One™

My main use case for TrendAI Vision One is catching threats across all XDR channels like email, endpoint, Windows server, and Linux server, collecting the alerts so that we can defend against attacks using these channels.

My main use case for TrendAI Vision One is the protection of server-side and email-side infrastructure, where we can use capabilities across all channels. We can prevent attacks and monitor endpoints, check reports, and review workbenches, alerts, and the MITRE attack framework.

Prevention of attacks is more important than just catching threats. The deep security module with IPS protects servers from zero-day vulnerabilities. All alerts and prevention-related information are available in the report.

TrendAI Vision One has different modules, such as the attack surface module, which enables me to see alerts from sites, networks, and email. I can manage my attack surface and understand how to protect internal data more easily with Trend Micro.

The best features TrendAI Vision One offers include strong endpoint protection, endpoint asset management, and the ability to monitor and respond to actions. It prevents issues from the email side and different channels, allows me to start antivirus protection, and makes managing endpoints, computers, and servers straightforward.

TrendAI Vision One positively impacts my organization by providing a budget-friendly solution for security products. Since I am paying for security licenses, I can be confident in my protection with Trend Micro's monthly payment options, including managed detection and response for more secure protection.

These features make my job easier because I can create my own directory structure, establish policies for different organizational units, and easily enable or disable different antivirus modules, such as scheduled scans or script protections, making management straightforward.

TrendAI Vision One can be improved in some areas. I wish the scan modules were better when it comes to patching and following critical zero-day threats. A different dashboard for security assessments would be beneficial and make the solution stronger.

TrendAI Vision One needs additional improvements, but it is already very useful due to the AI and Trend Micro combination.

I have been working with cybersecurity for five years.

TrendAI Vision One is very stable and easy to manage.

The scalability of TrendAI Vision One is good and can support thousands of clients or servers.

Customer support for TrendAI Vision One is very good, and we can reach the support portal and receive help easily.

I previously used different solutions such as Symantec and Kaspersky, but they were less complex and provided fewer security modules compared to Trend Micro.

I have not explicitly calculated the money saved, but it is clear that using one solution on one platform combines the capabilities of different email gateways and network NDRs into one, which offers perhaps two to three times the cost-benefit for overall savings.

My experience with pricing, setup cost, and licensing for TrendAI Vision One is that it is easy to manage, and we can take credits.

I evaluated other options such as CrowdStrike before choosing TrendAI Vision One.

My impressions of TrendAI Vision One's ability to provide centralized visibility and management across protection layers are positive, especially regarding XDR, Deep Discovery inspection, and email inspection.

TrendAI Vision One has helped consolidate my use of security vendors and reduced silos by providing email protection and MDR capabilities, making it very useful without the need to purchase numerous solutions.

It is important for my organization that TrendAI Vision One has AI built into its platform because it enhances our security capabilities significantly.

My organization uses TrendAI Vision One for consolidated security across hybrid environments, which has improved our ability to manage risk by offering solutions that protect both cloud and on-premises services.

TrendAI Vision One has helped reduce my time to detect and respond to threats, though I do not quantify the exact reduction.

My advice to others looking into TrendAI Vision One is that if it is important to manage email, attack surfaces, server-side IPS, and zero-day protection, it is the best choice with Trend Micro. I would rate this product an eight out of ten.

A common use case for TrendAI Vision One is ransomware detection and response, and we also use it for business email compromise. Our SOC team uses it for advanced threat hunting and insider threat detections.

Recently, my team used TrendAI Vision One for ransomware detection and response when a user executed a malicious attachment, leading to the detection of suspicious process executions. TrendAI Vision One helps us by correlating emails with endpoints, identifying host details, network activity, user device activity, and infected sources, allowing for quick resolution of threats in the organization.

We have also been using TrendAI Vision One for identifying suspicious or compromised emails and insider threat detections, which aids us in quickly identifying and investigating malicious emails.

TrendAI Vision One offers excellent extended detection and response capabilities through EDR and XDR solutions, as it is a complete package for organizational threat protection across email, endpoints, cloud networks, servers, and data centers. It helps us quickly identify attacks and provides deep insights into attacker movements as well as a centralized investigation workbench from a single dashboard.

Having everything in one dashboard allows our SOC team to quickly identify details across the network or organization level, such as the number of created tickets, false positives, true positives, actions taken, SLAs, threat metrics, and attack path details. It reduces alert fatigue for SOC analysts by providing a consolidated view of all details across the organization.

TrendAI Vision One has positively impacted our organization by identifying real-time threats and proactively isolating threats while alerting the SOC team for further investigations and remediation actions.

Since implementing TrendAI Vision One, it has reduced noise from false positive alerts by 80% and enabled the SOC team to focus on true positives, thus improving incident response and operational efficiency. TrendAI Vision One is highly reliable; it provides centralized visibility across protection layers and is stable and scalable, making it a suitable solution for organizations looking for thorough threat detection and response capabilities.

I believe that if the reporting features of TrendAI Vision One could be improved, it would help SOC analysts retrieve comprehensive reports detailing true positive incidents, top email threats, quarantined emails, and common malware, enhancing our analytics capabilities.

The TrendAI Vision One support system is not very good. They charge extra for premium support, while basic support does not adequately assist with investigations and troubleshooting. Improvements in this area are needed, and there should also be enhancements in third-party integrations to reduce alert noise and false positives.

TrendAI Vision One's governance and security capabilities are excellent, and while the security is always very good, they can still improve on compliance and regulations.

If they fix automated root cause analysis reports and AI-generated incident summaries, it can enhance capabilities further and reduce investigation times.

I have been using TrendAI Vision One for more than two years.

TrendAI Vision One is stable.

TrendAI Vision One is highly scalable as per our requirements, as user licenses can be improved if we have a greater number of users.

The customer support is not very good, and they need to improve their premium license support.

Previously we were using a different endpoint solution due to setup cost and support issues, so we switched to TrendAI Vision One for better SOC capabilities for threat detection.

My experience with pricing, setup cost, and licensing was very good. The top leadership is engaged in identifying pricing and licensing features, although licensing renewal is challenging and the setup cost can be high, but it remains manageable for quality solutions.

We evaluated other options such as FireEye Helix, Symantec, and Microsoft Sentinel during our assessment process.

My advice to others looking into using TrendAI Vision One is to definitely proceed with this solution as it is a complete package for SOC teams regarding threat identification and remediation, although there is room for improvement in support. This review has a rating of 9.

In terms of the VDR, we are doing the Sophos entire solutions. We are doing the firewall, as well as endpoint, as well as email security.

When it comes to SophosLabs Intelix or Sophos Cloud Optix, basically, we are working with Sophos XDR and MDR right now.

As a partner, we have so many clients who are serving the Extended Detection and Response, and some users are just selling the Sophos Managed Detection and Response services. Basically, it's XDR, it's a tool, and MDR is managed by the Sophos security team 24/7. So, we are selling the Sophos MDR.

On the firewall side, we are doing the Sophos firewall, SonicWall firewall, and FortiGate.

We are dealing with Trend Micro for EDR and XDR.

We have been doing this product for the last 10 years, actually. Ten plus years we have been doing this product—Sophos entire solution and Trend Micro entire solution. Trend Micro has so many products, including anti-APT and IDS, IPS device.

For TrendAI Vision One, I have many corporate users who are using it for their servers' security, as well as the IDS, IPS device and TippingPoint, SMS gateway, and so on.

TrendAI Vision One has core features, such as endpoint, email, identity, servers, cloud workloads, and networks. When we talk about endpoint security, it includes anti-malware, anti-ransomware, behavioral analysis, exploit protections, device control, application control, post firewall, and EDR capabilities for the threat investigation and response. These are the TrendAI Vision One features.

Regarding TrendAI CReM capabilities, the threat hunting includes searching across telemetry data, IOC sweeping, root cause analysis, and advanced investigation tools. When we talk about the CReM features, they provide visibility into endpoints, server, cloud workloads, and identities. They help to identify unknown or exposed assets in the environment, then asset discovery, vulnerability management, and attack surface management.

My impressions of TrendAI Vision One include risk prioritization analysis, security posture, and assessment. Right now, I am working with Sophos in Sophos XDR.

I just appreciate the Sophos server protection and its lockdown features. When I whitelisted some applications, other executable files or any files do not run in the environment. I compare Sophos EDR with Sophos XDR, Endpoint Detection and Response, and Extended Detection and Response. When we're going with Sophos XDR, they have email, identity, firewall, cloud, and any third-party integrations.

I am focusing on the Sophos product, but as per the client requirement, I recommend Sophos because the clients are using a parameter gateway with a Sophos firewall. I pitch Sophos because they enable Heartbeat security, so the firewall and endpoint communicate effectively. It's a good bundle when combining Sophos firewall with Sophos endpoint.

Some users using Sophos require on-premises solutions and do not move to the cloud. So many reasons exist for this, which is why we pitch server solutions. Trend Micro server protection is a really good product, but my query always relates to support; I cannot get immediate support from Trend Micro.

For TrendAI Vision One, I have many corporate users who are using it for their servers' security, as well as the IDS, IPS device and TippingPoint, SMS gateway, and so on.

TrendAI Vision One has core features, such as endpoint, email, identity, servers, cloud workloads, and networks. When we talk about endpoint security, it includes anti-malware, anti-ransomware, behavioral analysis, exploit protections, device control, application control, post firewall, and EDR capabilities for the threat investigation and response. These are the TrendAI Vision One features.

Regarding TrendAI CReM capabilities, the threat hunting includes searching across telemetry data, IOC sweeping, root cause analysis, and advanced investigation tools. When we talk about the CReM features, they provide visibility into endpoints, server, cloud workloads, and identities. They help to identify unknown or exposed assets in the environment, then asset discovery, vulnerability management, and attack surface management.

I appreciate the Sophos server protection and its lockdown features. When I whitelisted some applications, other executable files or any files do not run in the environment. I compare Sophos EDR with Sophos XDR, Endpoint Detection and Response, and Extended Detection and Response. When we're going with Sophos XDR, they have email, identity, firewall, cloud, and any third-party integrations.

I am focusing on the Sophos product, but as per the client requirement, I recommend Sophos because the clients are using a parameter gateway with a Sophos firewall. I pitch Sophos because they enable Heartbeat security, so the firewall and endpoint communicate effectively. It's a good bundle when combining Sophos firewall with Sophos endpoint.

From my perspective, the only disadvantage in TrendAI Vision One is the support size.

The support takes too much time. When I email, I have to collect logs and submit them to the engineer, then wait for their reply. It takes too much time. The product is really good, but the support is not good in my perspective since it takes too long to receive help, especially when all the devices are in production.

The price is high when compared to the features. After installing the product, support is always required. Whenever we deploy any product, we need support, especially if an issue arises, support is a must.

We face lots of challenges, but the product itself is good. The main issues arise from support.

Some users using Sophos require on-premises solutions and do not move to the cloud. So many reasons exist for this, which is why we pitch server solutions. Trend Micro server protection is a really good product, but my query always relates to support; I cannot get immediate support from Trend Micro.

Trend Micro is a really good product, but I face challenges when not getting proper support; hence I feel helpless at times. The product itself is really good; I have no doubts about that.

We have been doing this product for the last 10 years. Ten plus years we have been doing this product—Sophos entire solution and Trend Micro entire solution.

The support takes too much time. When I email, I have to collect logs and submit them to the engineer, then wait for their reply. It takes too much time. The product is really good, but the support is not good in my perspective since it takes too long to receive help, especially when all the devices are in production.

From my perspective, the only disadvantage in TrendAI Vision One is the support size. Sophos support is really good, but when I require immediate support from Trend Micro, it is a challenge.

TrendAI Vision One is easy; deployment is not a problem.

We are dealing with Trend Micro for EDR and XDR.

My impressions of TrendAI Vision One include risk prioritization analysis, security posture, and assessment. Right now, I am working with Sophos in Sophos XDR.

When we talk about the CReM features, they provide visibility into endpoints.

I would rate Trend Micro support a six to seven, possibly seven to eight.

The interface and everything are good; my only query is on the support, which is not good from my perspective.

Some limited corporate users and some government users choose Trend Micro instead of Sophos.

Trend Micro is a really good product, but I face challenges when not getting proper support; hence I feel helpless at times. The product itself is really good; I have no doubts about that.

I would rate this review an eight overall.