TrendAI Vision One™

Trend Vision One  serves as my use case starting simply with its sensor agent as a basic Endpoint Detection and Response solution. After that, we started using its endpoint protection, and now we are integrated with its NDR solution, which is Network Detection and Response . We are moving forward towards its complete suite.

The best features of Trend Vision One  that I prefer most are two main ones. One of them is its Attack Surface Discovery, which gives us the overall security posture of our network. The second is its Observed Attack Techniques section, which is mapped on MITRE ATT&CK and gives us an overall view of what is happening in our system and provides us with automatic detections based on the telemetry data.

One area that has room for improvement is the interface of Trend Vision One, which is very slow due to its data center being based in America. If the data center were in a nearby location, its response would be very quick. I think just the interface because everything else we can find in Trend Vision One such as endpoint protection, D-SIM security, DLP  solution, and FIM , so there is nothing left behind.

I have been using Trend Vision One for almost two years.

I would rate the stability of Trend Vision One as nine because in the last two years, we have never had downtime except for one recent incident when Azure  cloud was down, which was from Azure 's side, not from Trend Micro. Overall, we have not received any downtime from Trend Micro's end.

Trend Vision One is very scalable. We can integrate different solutions with it and perform some type of automation with this solution, so it is very scalable. I would rate it nine.

I would rate the technical support that Trend Micro provides as seven point five. It depends on the functionality we are using. In most cases, the support quickly resolves the issue, and in some cases, they take some time.

The deployment of Trend Vision One is very handy. There are not any complex issues I faced during the deployment, and it is a very quick deployment. The different guides they provide during deployment and for other configurations help us a lot in the overall deployment of the solution. The deployment process took approximately one point five to two months overall. We are working on an enterprise solution, so for each step, we have to do some testing on the configuration and then we do a full deployment. We are still testing its new features and enhancing it, so it is an ongoing process for us.

We are using the sensors of Trend Vision One to cover almost seven thousand endpoints. It is covering our enterprise endpoints, and it is very critical to get overall telemetry data from all of the endpoints. It gives us better visibility into what is actually happening on these systems.

The top security challenges I faced in my industry before using Trend Vision One were about getting the whole telemetry data, meaning what is actually happening on the system. SIEM  solutions only get limited logs, and secondly, we could not calculate our attack surface, which means what is our proper security posture and where we are standing according to our security level.

My impressions of Trend Vision One's ability to provide centralized visibility and management across protection layers is that it provides overall very good visibility in the network. It gets integrated with other security solutions, and we can centrally manage it. It can be integrated with our Active Directory, our firewalls, and security solutions for automatic IOCs blocking. In that respect, it is very much better.

Regarding the Cyber Risk Exposure Management , it helps my organization identify blind spots by calculating based on the vulnerabilities identified on our endpoints, the configuration settings on different endpoints, and on the Active Directory level, the number of alerts we are getting from different points. By calculating all of these, it gives us an overall percentage. Based on that, we assess how we are actually standing in terms of our security posture.

The solution has helped consolidate the use of security vendors because we are also using its MDR service for critical and high-level alerts, and it is cloud-based, so we do not usually need any type of vendor support to solve daily issues. If we get anyone, we can directly open a case with Trend Vision One, and the issue can be solved within one or two days.

Almost fifty people use the solution. They are all in Pakistan and working on-site.

The Service Gateway Management machine we use in our network requires maintenance on a monthly basis or every one to two months when we get a new update from them. To manage the different types of functionalities it provides, its license is credit-based, so we have to carefully use all of the functionalities provided by Trend Vision One. So it requires some type of maintenance as well.

Maintaining Trend Vision One is very easy and very handy.

I do not know the exact pricing of Trend Vision One, but the type of structure licenses they provide is very useful for us. We purchase overall credits and can use these credits according to our needs. So the structure of licensing is very much better than other vendors.

I chose Trend Vision One here in Pakistan because we have their principal support here in Pakistan, and we can directly connect with them and reach out to them. So the main purpose of purchasing Trend Vision One was its principal support.

Trend Vision One has reduced our time to detect and respond to threats almost sixty-five to seventy percent. We get alerts in real-time on the Observed Attack Techniques section, and for the higher critical alerts, our MDR service from Trend Micro sends us an email alert within approximately thirty minutes, and they also give us a call reminder to respond to that alert. Then it depends on us how we respond to that alert with different teams and come to the solution.

I cannot quantify by how much Trend Vision One has reduced our false positives, as we get false positive alerts on a daily basis. But in the high and critical section, we only get the most relevant alerts. In the medium and low sections, there are very false positive alerts and we are working with Trend Micro and our vendor to reduce these observed attack techniques.

I would recommend Trend Vision One because it provides many services in a single console, such as Attack Surface Discovery, awareness session, vulnerability, attack simulation, DLP , and many other EDR services, NDR services, and email security gateway. I would recommend this suite as one console can be used for many solutions.

It is very important for us that Trend Vision One has AI built into the platform as we are doing a proof of concept for its new technology, which is called ZTSA. The industry is evolving with respect to artificial intelligence, and we have to secure that area from both data leakage and data protection. So it is very important, and we are doing a proof of concept of ZTSA, which is its new feature of Trend Vision One.

I rate this review nine overall.

My use case for Trend Vision One  is deploying it for an entity within a company. I deployed Trend Vision One  to protect all kinds of endpoints, including mobiles, machines, mailboxes, and servers.

The best features of Trend Vision One that I appreciate include its centralized nature, the Copilot AI agent, its simplicity of use, and the quality of their API.

Trend Vision One has helped reduce my time to detect and time to respond to threats by approximately 10%.

To improve Trend Vision One to a perfect score, I believe better pricing and more support would be ideal.

I have been using Trend Vision One for one year.

I would rate the stability of Trend Vision One highly, as there were no bugs. I would give it a 10.

Regarding scalability, Trend Vision One is scalable. I would give it an eight.

I rate the technical support an eight.

The coverage for my organization's network is critical. When we have questions, we return to them. When we need something, we return to them, and they were always available.

The risk reduced by switching to Trend Vision One is similar to other EDR or XDR  solutions. It can detect malicious operations and threats, but the exact percentage is difficult to quantify. For the company I was deploying it for, we detected many threats. I would rate the risk reduction as a 10 because the company in question did not have an XDR  or EDR solution in place before.

The deployment of Trend Vision One is easy; it is just an executable.

It takes almost one day for Trend Vision One to appear in the console.

In my organization, we had four specialists working with Trend Vision One: myself and three security engineers. I was the project manager.

I can estimate the ROI seen from Trend Vision One to be approximately 15%.

When it comes to pricing, I find Trend Vision One not expensive compared to other products.

I compare Trend Vision One with other solutions and vendors on the market, and we can see that it is well-placed in Gartner, so it is one of the best products.

Trend Vision One helps with centralized visibility and protection across multiple layers.

The visibility and protection provided by Trend Vision One allow us to see all the assets in one console, which is beneficial. We can also see all the features in one console, which is equally advantageous.

I did not use the cyber risk exposure management capabilities with Trend Vision One, nor did my clients use that for identifying blind spots.

The top security challenges in the industry include handling the decommissioning of old products, specifically a Microsoft product. Additionally, not all features are centralized in one console, which is not ideal for the correlation of investigations.

Trend Vision One is deployed as a cloud solution and a SaaS solution.

I used Trend Vision One sensors.

I would recommend Trend Vision One to other users because it is easy to use and easy to deploy, as these are the most important factors. The importance of having AI built into Trend Vision One is significant; I use the AI aspects. When I want to look for a feature, I go to AI. When I want to create, for example, an IOC, I go to AI, and it assists with this.