We started with the antivirus solution, Trend Vision One Endpoint Security, after switching from Sophos. Initially, our focus was antivirus, but later we expanded to include multiple Trend Vision One products: XDR for Networks, Managed SOC, and Cloud Endpoint Security.

Our deployment covers endpoints, network sensors, and integrations with Active Directory and Microsoft. We use virtual sensors for full network visibility and maintain a hybrid environment with both private and Azure cloud infrastructure.

Our customers are mainly in the public sector—municipalities, cities, healthcare, and retirement homes—so ransomware is a major concern. Trend Vision One provides tools to fend off attacks and allows us to use virtual patching to quickly close vulnerabilities without waiting for traditional patches.

Trend Vision One has significantly enhanced our visibility into vulnerabilities and security incidents. Unlike Sophos, which only offered basic antivirus protection, Trend Vision One provides comprehensive insight into user behavior, dark web login monitoring, and open vulnerabilities.

We can now see everything from a single platform, which simplifies security operations and reduces complexity. It also allows for real-time risk management linked to live data, enabling continuous improvement rather than periodic reviews.

The Swiss Trend Vision One team supported us closely in refining our cybersecurity processes, leading to substantial overall progress and reduced cyber risk across the organization.

The rollout was quick thanks to the cloud-based infrastructure of Trend Vision One Complete, which eliminated the need for additional hardware. The central visibility of the platform is particularly valuable: users can log in and immediately identify areas of high risk. The unified dashboard highlights vulnerable areas at a glance, streamlining remediation.

Attack Surface Risk Management (ASRM) is also a key feature, helping prioritize assets based on criticality and data sensitivity. For instance, devices holding high-value data receive more attention in risk scoring.

The platform's ability to provide insights across multiple protection layers helps us address vulnerabilities quickly and efficiently. The system's simplicity and consolidated data have also made managing risks far more effective than before.

The main area of improvement lies in the Workbench interface. When investigating alerts, users often have to navigate through multiple windows and tabs to gather all relevant information. Consolidating case details into a single, more intuitive view would streamline investigations and save time. Otherwise, the solution's functionality is well-balanced.

We've had the solution for a little more than two years.

The solution's stability is excellent. We have not experienced any issues or downtime since implementation.

Scalability has been strong. We began with server deployments and are now rolling out to 2,200 client devices. The process has been seamless, requiring minimal additional configuration.

We have had an excellent experience with Trend Vision One's customer and technical support. The Swiss Trend Vision One team provides consistent, personalized assistance, with dedicated contacts who understand our setup well.

They have been very responsive, and we even have an ongoing relationship with them beyond technical support. Overall, I would rate the service a nine out of ten for professionalism, consistency, and expertise.

Positive

Our previous solution was Sophos Endpoint Protection, which reached end-of-life. We evaluated multiple vendors, including Sophos's new offerings, but Trend Vision One stood out due to its platform capabilities, the SOC integration potential, and especially the excellent support from the Swiss Trend Vision One team.

The switch was smooth, and Trend Vision One's modern detection capabilities and compatibility with both legacy and modern systems were major advantages over Sophos's on-premises, outdated setup.

There were no major deployment issues. The initial rollout was phased, starting with servers before moving to clients. Trend Vision One Switzerland supported the implementation directly, ensuring smooth execution.

The initial setup was straightforward. We rolled out the solution to around 1,000 on-premises data center servers over two to three months. The process was divided into test, review, and full rollout phases, which helped minimize issues. The overall setup was simple and efficient, especially for the scale of deployment.

Implementation was handled internally by two people: myself and one team member. We managed all phases from planning and clarification to deployment.

Trend Vision One Switzerland provided close technical guidance during the process, and later, the service provider Pingas in Germany assisted with SOC integration. Our ongoing maintenance involves eight people from our team, although the Trend Vision One solution itself requires little upkeep.

Return on investment was not a primary goal. We offer managed services to our clients, with antivirus protection included as part of the package rather than a separate revenue stream. The investment was made to ensure robust cybersecurity and operational reliability. However, we plan to expand some of these services to external customers to achieve a return in the future.

We have an Enterprise Agreement with Trend Vision One, a six-year strategic partnership covering a defined consumption volume. Pricing is considered fair for the range of functions included. It's neither excessively high nor low, and overall, it aligns well with the value provided.

We evaluated multiple alternatives, including Sophos's updated solutions, but Trend Vision One prevailed due to its modular service structure, modern platform design, and strong support from the Swiss Trend Vision One team.

I would recommend others to evaluate this solution, especially with the support of a trusted partner during the introduction phase. Having expert guidance early on helps with configuration and understanding the platform's capabilities. Trend Vision One also consolidates vendor management effectively, reducing the need for multiple partners.

I would rate Trend Vision One a nine out of ten.

We operate as an MSP. Most of my clients are financial institutions, such as one of the largest banks in Pakistan. We primarily serve enterprise-level financial institutions and banks. 

The best features in Trend Vision One are the workbench and the XDR feature for the playbooks. We continue to use these two features extensively. 

We also have our own product called SIRP, which is a SOAR platform, and we integrate it with Trend Vision One for automations, alert information, auto enrichment, and IOC enrichment. 

We appreciate that Trend Vision One provides a good API with actions for our SIRP operations. 

While we did not calculate specific MTTR and MTTD metrics, it has significantly reduced suspicious alerts and benign alerts compared to what we previously experienced.

Trend Vision One provides its own MDR services for detection capabilities, similar to CrowdStrike. Their team collaborates effectively with us on response and detection. The solution doesn't require frequent maintenance, and services are not regularly interrupted.

Areas that need improvement in Trend Vision One include the AI-based mechanism, AI-based detections, and AI-based autonomous detections, which are currently lacking. Additionally, they need to add more integrations to their playbooks. They should lower the cost for integrations as they charge for each individual integration. Trend Vision One does not initially disclose to customers that they need to purchase additional licenses and pay more for integrations. They need to modify their licensing mechanism and improve their AI-based detections.

We have been using Trend Vision One for approximately six to seven years. We provide services to different customers on various security controls and security products.

Trend Vision One demonstrates strong stability, warranting a rating of seven out of ten.

Trend Vision One is scalable. For DMG area operations, they have their own dedicated product available.

I cannot provide detailed feedback about Trend Vision One support as we haven't needed to utilize it extensively. The configuration process is straightforward enough that we rarely require support assistance.

Positive

Most of the enterprise-level clients use CrowdStrike or Cylance. Trend Vision One or Trend Vision One Apex Central is used by most smaller banks, while bigger banks predominantly use CrowdStrike and Cylance.

In Pakistan and the MENA region, clients prefer on-premises deployment unless cloud services are available. When cloud hosting is located in the US or other countries, Saudi and UAE clients typically opt for on-premises deployment.

Vision One is very easy to deploy. We don't have to do much of anything on that. We just have to deploy the agent, and we have to configure the policy. It's not very complicated.

Regarding pricing, Trend Vision One offers very competitive rates compared to CrowdStrike and Cylance. Customers who cannot afford CrowdStrike's pricing can easily opt for Trend Vision One.

We are not a partner with Trend Micro; we only provide deployment services. Trend Vision One can generate false positives; however, this depends on the whitelisting configuration, particularly in the application control area and IOC whitelisting. The detection mechanism is good, though CrowdStrike performs better in detections and reducing false positives due to its behavioral-based analysis and AI-based features. In comparison with other vendors, CrowdStrike ranks first, followed by Cylance, then Trend Vision One. Cylance and Trend Vision One can work together effectively.

I would primarily recommend CrowdStrike, and then Trend Vision One for customers with budget constraints. CrowdStrike's recent launch of a new AI model and features such as the MDC module for comprehensive log collection provide superior visibility and control compared to Trend Vision One.

The overall rating for Trend Vision One is seven out of ten.

We use Trend Vision One for our endpoint protection in our data center, mostly focused around our server assets, and we do anti-malware, intrusion prevention, as well as firewall, host-based firewall capabilities.

The ease of configuration, customization, and organization are what I appreciate the most about Trend Vision One. 

It is a bit slow to implement kernel support on the Linux side. When doing patching and upgrades on our Linux servers, we often find that the Trend agent doesn't support the kernel version. It's usually not far behind, but we often are in a position where we may not be properly protected for a period.

We started using Trend Deep Security, which was the product prior to Trend Vision One, seven or eight years ago, and then we transitioned to Trend Vision One two years ago. While we have been using Trend Vision One proper for two years, we had essentially the same product in an on-prem version for seven or eight years.

We've had performance issues with the agents of Trend Vision One at odd times, but I wouldn't say it's been a widespread issue or a common issue. Once in a while, there have been things that we've attributed to Trend.

The scalability of Trend Vision One seems infinite. We're not a huge organization, so we haven't really run into any limitations, but it appears it can scale to accommodate and serve any of our purposes.

The quality of support for Trend Vision One is generally very good. If we have any issues with support, we can leverage our sales engineer for support or escalation. I really haven't had any concerns. I have contacted the technical support or customer support via phone number or ticket.

Positive

We have used Microsoft Defender, Sophos, as well as McAfee as alternatives to Trend Vision One. I prefer Trend Vision One more compared to those alternatives.

We transitioned from our on-premises Deep Security deployment to Vision One, and the process was relatively smooth. However, we encountered a few challenges related to legacy configurations and ensuring proper connectivity to our server assets. With an on-premises software application, we didn’t have to worry about internet accessibility for some of our server nodes. Consequently, we faced issues getting non-internet-connected server endpoints to communicate with the cloud. Luckily, there is a solution for that, but it took some time to get everything functioning properly.

Trend Vision One is a large product suite. There are many features that we don't have fully deployed, but the amount of time it took for us to go from on-prem to the cloud for similar services without onboarding anything new that Trend Vision One offered was two months for 400 assets, server nodes.

It has reduced our time to detect and respond to threats, but I don’t have a way to quantify that.

I know the pricing for Trend Vision One. It's been a while, but it doesn't seem bad. They made some changes to their pricing in the past. It used to be a per-server node pricing structure, but now they do it by credits. I would say it's improved because we can, for the same investment, shift and adjust which capabilities we're leveraging within the platform. It's not super expensive. It's definitely an increased cost over leveraging Microsoft Defender, which we already have the licensing and capability for. We chose to spend money on this as opposed to leveraging a product that we already had, but the cost is fair.

The sensors we're using include the anti-malware products, and we have the EDR sensors deployed on our server endpoints. They have network sensors and other features, but we're not leveraging any of those.

We started onboarding some of our services in the last three or four months to Trend Vision One to gain more visibility, so it's early in that adoption. We haven't taken any action based on alerts or notifications from Trend Vision One, as we're still in the early stages of getting our third-party services set up and monitored.

Trend Vision One hasn't helped us consolidate use of security vendors. This product is solely used for one purpose. We're not leveraging Trend Vision One for other areas within IT or at our company, so we haven't reduced silos. We had an opportunity to go with Defender, which would have reduced the number of products we use, but instead we decided to keep using Trend because we did appreciate it. I'm not sure if Trend Vision One has helped me to reduce the noise from false positives.

I would rate Trend Vision One a nine out of ten.

Our main goal with Trend Vision One is to ensure comprehensive security coverage for all our devices and clients worldwide. We're concerned with far more than just traditional antivirus protection. With this solution, I can now see in detail which software updates have already been installed and which security vulnerabilities still exist. The comprehensive reporting and intelligent protective measures give me significantly more control than before. We can now cover all servers uniformly and completely, which is something that wasn’t possible with our previous solution at this level of quality.

The dashboard is the heart of Trend Vision One for me. What I particularly appreciate is the flexibility: each colleague can create their own dashboard, and I still maintain an overview of the big picture. This granular way of working while maintaining a holistic view motivates me to engage with the tool.

The cloud-based architecture offers considerable advantages over local, individual solutions. Previously, I had to manage patching across various Trend Micro systems manually - now, that’s centrally handled. However, I need to be cautious that updates aren't rolled out too quickly, which could impact notebooks or servers.

The global overview has definitely helped me a lot. The only drawback is the usual subscription model - unfortunately, prices tend to move upward.

Since I've been working with Trend Micro for over 20 years, we’ve been able to consolidate our security landscape and source everything from one vendor, rather than juggling multiple providers.

Trend Vision One gives us better visibility to detect and respond to threats because we can now see more than ever before. We've always made every effort to receive notifications quickly so we could act immediately. Now, I have a much clearer, centralized platform where I can manage all incidents in a structured way.

Interestingly, Trend Vision One shows us more error messages than before, not because more problems are occurring, but because I can now see them for the first time and address them systematically.

Trend Vision One helps us reduce our overall cyber risk. I've always had good experiences with Trend Micro. It gives me the confidence to recognize well-protected areas and uncover vulnerabilities that need attention. Even though I've achieved a good security level, I can't afford to relax. For security audits, the solution helps us demonstrate compliance with certain standards.

Regarding AI integration, I can't make a final judgment yet. AI has both advantages and disadvantages, and attackers are increasingly using it too. However, I believe that AI will become indispensable in security platforms.

The expansion of Phish Insight would be desirable, especially for employee training. Also, in the MDM area for mobile devices, not all functions are available that I know from on-premise or other cloud variants. There's still development potential there.

We began implementing the current Trend Vision One solution in June 2024. However, Trend Micro has been our vendor for about ten years.

I'm very satisfied with the stability. I haven't experienced any direct outages so far. Occasionally, there were connection problems with individual clients, but those were exceptions.

I think Trend Vision One offers very good scalability.

I would rate the service and technical support for Trend Vision One at nine to ten points. Of course, it depends on the specific situation, but overall, I'm very satisfied.

Positive

We didn't switch from another solution but rather implemented Trend Vision One as an evolution of our existing Trend Micro infrastructure. I had explored Microsoft solutions in recent years and attended related training, but ultimately, we stayed with Trend Micro.

The initial setup has a certain complexity that varies by area. Some areas are relatively easy to configure; others definitely require expertise and practice. Without professional support, the start would have been difficult.

We had two German partners on board for several weeks and months. In short, intensive sessions of two to four hours, they developed a structured onboarding process with us. After about three two-hour sessions, we could work independently with the product.

Our implementation strategy for Trend Vision One was three-tiered: First, we migrated from our on-premise Apex One solution to Trend Vision One in the cloud. In the second step, we migrated the servers, and finally we checked all sensors.

We worked with a Trend Micro partner for onboarding. With Trend Micro's recommendation, we also purchased the licenses through them. The partner guided us during the sessions, then we carried out the actual integration and migration ourselves.

For implementation, we needed two to three employees. A colleague and I carried the main responsibility, my colleague handled the cloud migration, agents, and clients. I brought in two additional colleagues for servers and local infrastructure, particularly for Mac systems.

From mid-June to mid-September, an average of two to three people were involved in the project.

I can't definitively evaluate the return on investment yet, since we've only been working productively for a few months. We had a very good onboarding process and worked intensively on it, but for a solid ROI evaluation, it's still too early. I plan to have meaningful numbers by year-end, particularly through patch management and sensor detections.

As usual, we work with twelve-month or multi-year licenses on a subscription basis. The subscription model is ideal for the vendor and predictable for us, but still quite expensive.

I would like more flexibility - for example, the ability to purchase individual modules separately.

For others evaluating Trend Vision One, I recommend checking whether the vendor is a pure security specialist or also active in other, non-security-related areas. That can be an important decision factor.

Overall, I rate the solution 9 out of 10 points.

Foreign Language: (German)

Weltweiter Schutz der gesamten IT-Infrastruktur mit nur einer zentralen Plattform

Was ist unser primärer Anwendungsfall?

Unser Hauptziel mit Trend Vision One ist es, eine lückenlose Sicherheitsabdeckung für alle unsere Geräte und Clients weltweit zu gewährleisten. Dabei geht es uns um weit mehr als nur klassischen Antivirenschutz. Mit der Lösung kann ich nun detailliert einsehen, welche Software-Updates bereits installiert sind und welche Sicherheitslücken noch bestehen. Das umfassende Reporting und die intelligenten Schutzmaßnahmen geben mir deutlich mehr Kontrolle als früher. Wir können jetzt alle Server einheitlich und vollständig abdecken, was mit unserer vorherigen Lösung nicht in dieser Qualität möglich war.

Was ist am wertvollsten?

Das Dashboard ist für mich das Herzstück von Trend Vision One. Was ich besonders schätze, ist die Flexibilität: Jeder Kollege kann sich sein eigenes Dashboard erstellen, und trotzdem behalte ich den Überblick über das große Ganze. Diese granulare Arbeitsweise bei gleichzeitigem Gesamtüberblick motiviert mich mit dem Tool zu arbeiten.

Die Cloud-basierte Architektur bringt mir erhebliche Vorteile gegenüber lokalen Einzellösungen. Früher musste ich mich um das individuelle Patching verschiedener Trend Micro Systeme kümmern, das ist jetzt zentral verwaltet. Allerdings muss ich aufpassen, dass Updates nicht zu schnell ausgerollt werden und dabei Notebooks oder Server beeinträchtigen.

Der globale Überblick hat mir definitiv sehr geholfen. Einziger Nachteil ist das übliche Abonnementmodell, die Preise entwickeln sich leider nur in eine Richtung und das ist nach oben.

Da ich bereits seit über 20 Jahren mit Trend Micro arbeite, konnten wir unsere Sicherheitslandschaft gut konsolidieren und alles aus einer Hand beziehen, anstatt verschiedene Anbieter zu jonglieren.

Trend Vision One verschafft uns deutlich bessere Sichtbarkeit, um Bedrohungen zu erkennen und darauf zu reagieren, weil wir jetzt noch mehr sehen können als zuvor. Wir haben immer alles darangesetzt, Informationen sehr schnell über Benachrichtigungen zu erhalten, damit wir sofort daran arbeiten können. Aber jetzt habe ich eine wesentlich klarere, zentrale Plattform, auf der ich alle Vorfälle strukturiert bearbeiten kann.

Interessant ist, dass Vision One uns mehr Fehlermeldungen anzeigt als früher, nicht weil mehr Probleme auftreten, sondern weil ich sie jetzt überhaupt erst sehen und systematisch abarbeiten kann.

Trend Vision One hilft uns, unser gesamtes Cyber-Risiko zu reduzieren. Ich habe immer gute Erfahrungen mit Trend Micro gemacht. Es gibt mir das Sicherheitsgefühl, gut geschützte Bereiche zu erkennen, aber auch Schwachstellen aufzudecken, an denen wir arbeiten müssen. Auch wenn ich bereits ein gutes Sicherheitsniveau erreicht habe, darf ich mich nicht darauf ausruhen. Bei Sicherheits-Audits hilft uns die Lösung definitiv, bestimmte Standards nachzuweisen.

Zur KI-Integration kann ich noch nicht abschließend urteilen. KI hat Vor- und Nachteile, und auch Angreifer nutzen sie zunehmend. Ich gehe aber davon aus, dass KI in Sicherheitsplattformen unverzichtbar werden wird.

Was muss verbessert werden?

Der Ausbau von Phish Insight wäre wünschenswert, besonders für Mitarbeiterschulungen. Auch im MDM-Bereich für mobile Geräte sind nicht alle Funktionen verfügbar, die ich von On-Premise oder anderen Cloud-Varianten kenne. Da ist noch Entwicklungspotential vorhanden.

Wie lange nutze ich die Lösung schon?

Wir haben im Juni 2024 mit der Implementierung der aktuellen Vision One Lösung begonnen. Trend Micro als Anbieter begleitet uns aber bereits seit etwa zehn Jahren.

Was halte ich von der Stabilität der Lösung?

Ich bin mit der Stabilität sehr zufrieden. Direkte Ausfälle hatte ich bisher keine. Gelegentlich gab es Verbindungsprobleme bei einzelnen Clients, aber das waren eher Ausnahmen.

Was halte ich von der Skalierbarkeit der Lösung?

Ich denke, Trend Vision One bietet eine sehr gute Skalierbarkeit.

Wie sind Kundenservice und Support?

Ich würde den Service und technischen Support für Trend Vision One mit neun bis zehn Punkten bewerten. Es hängt natürlich immer von der konkreten Situation ab, aber grundsätzlich bin ich sehr zufrieden.

Welche Lösung habe ich zuvor verwendet und warum habe ich gewechselt?

Wir haben nicht von einer anderen Lösung gewechselt, sondern Vision One als Weiterentwicklung unserer bestehenden Trend Micro Infrastruktur implementiert. Ich hatte mir in den letzten Jahren zwar Microsoft-Lösungen angeschaut und entsprechende Schulungen besucht, aber letztendlich sind wir bei Trend Micro geblieben.

Wie war das initiale Setup?

Die Ersteinrichtung hat eine gewisse Komplexität, die je nach Bereich variiert. Einige Bereiche sind relativ einfach zu konfigurieren, andere erfordern definitiv Fachwissen und Übung. Ohne professionelle Unterstützung wäre der Start schwierig gewesen.

Wir hatten zwei deutsche Partner über mehrere Wochen und Monate im Boot. In kurzen, intensiven Sitzungen von zwei bis vier Stunden entwickelten sie mit uns einen strukturierten Onboarding-Prozess. Nach etwa drei zweistündigen Sitzungen konnten wir eigenständig mit dem Produkt arbeiten.

Unsere Implementierungsstrategie für Trend Vision One war dreistufig: Zunächst migrierten wir von unserer On-Premise Apex One Lösung zu Vision One in der Cloud. Im zweiten Schritt haben wir die Server migriert, und abschließend überprüften wir alle Sensoren.

Wie war das Implementierungsteam?

Wir arbeiteten mit einem Trend Micro Partner für das Onboarding zusammen. Auf Empfehlung von Trend Micro kauften wir auch die Lizenzen dort. Der Partner leitete uns während der Sitzungen an, die eigentliche Integration und Migration führten wir dann selbst durch.

Für die Implementierung benötigten wir zwei bis drei Mitarbeiter. Ein Kollege und ich trugen die Hauptverantwortung, wobei sich mein Kollege um den Cloud-Umzug, Agents und Clients kümmerte. Ich zog zwei weitere Kollegen für Server und lokale Infrastruktur, insbesondere für Mac-Systeme, hinzu.

Von Mitte Juni bis Mitte September waren durchschnittlich zwei bis drei Personen gleichzeitig am Projekt beteiligt.

Wie war unser ROI?

Den Return on Investment kann ich noch nicht definitiv bewerten, da wir erst seit wenigen Monaten produktiv arbeiten. Wir hatten einen sehr guten Onboarding-Prozess und haben intensiv daran gearbeitet, aber für eine fundierte ROI-Bewertung ist es derzeit noch zu früh. Ich plane, bis Jahresende aussagekräftige Zahlen zu haben, insbesondere durch das Patch-Management und die Sensor-Erkennungen.

Wie sind meine Erfahrungen mit Preisgestaltung, Einrichtungskosten und Lizenzierung?

Wie üblich arbeiten wir mit zwölfmonatigen oder mehrjährigen Lizenzen auf Abonnementbasis. Das Abonnementmodell ist für den Anbieter ideal und für uns kalkulierbar, auch wenn nicht ganz günstig.

Ich würde mir mehr Flexibilität wünschen – zum Beispiel die Möglichkeit, einzelne Module separat zu erwerben.

Welche weiteren Ratschläge habe ich?

Anderen, die Trend Vision One evaluieren, empfehle ich zu prüfen, ob der Anbieter ein reiner Sicherheitsspezialist ist oder ob er auch in anderen, sicherheitsfremden Bereichen tätig ist. Das kann ein wichtiger Entscheidungsfaktor sein.

Insgesamt bewerte ich die Lösung mit 9 von 10 Punkten.

My main use case for Trend Vision One is XDR security in our AWS environment for our EC2 instances, and I'm hoping to accomplish effective security measures with it.

The best features Trend Vision One offers are the dashboard, reporting, and the customer service experience, specifically the customer service experience.

What makes the customer service experience stand out is that the onboarding process was exceptionally smooth. John, our account manager, was able to coordinate us with a technical resource to help with a white-glove onboarding process to ensure that our migration from Trend Micro Cloud One to Vision One was smooth and successful.

Trend Vision One has impacted my organization positively, and it's our XDR solution, so it works as intended.

Having Trend Vision One as my XDR solution has helped my team significantly. The Sentinel integration is a huge help for allowing us to detect and respond to events in our AWS environment.

I cannot think of anything that Trend Vision One can be improved.

I have been using Trend Vision One for about a week.

Trend Vision One is stable. I have experienced minimal issues with reliability or downtime.

Trend Vision One's scalability is excellent. It can handle my organization's growth and changing needs.

The customer support is exceptional. Working with their technical resource, Victor, was fantastic, and I am very happy with the customer service that we experienced from both Victor and John.

I would rate the customer support exceptionally high on a scale of one to ten.

I did not previously use a different solution before Trend Vision One.

I have seen a return on investment. I have been a Trend Micro customer for years and I continue to see value in their platform and have used it at several jobs.

My experience with pricing, setup cost, and licensing was very easy. Our enterprise account manager, John, made all of that very easy, as he was able to send me the private offer, walk us through accepting it inside of the AWS Marketplace, and helped us cancel our existing subscription.

Before choosing Trend Vision One, I evaluated other options. I considered Microsoft Sentinel and Microsoft Defender.

The advice I would give to others looking into using Trend Vision One is to try it.

I rate Trend Vision One an 8 out of 10.

We use Trend Vision One as our primary security solution on all endpoints, servers, and clients in our environment. Through third-party integrations, we’ve also connected solutions from other vendors (including VMware and Fortinet).

Trend Vision One has increased our endpoint visibility and reduced attack vectors. We can now identify and respond to vulnerabilities and threats faster. This has reduced our response time by an estimated 25–30%. Vision One provides notifications about specific risks and helps us understand where the general risks lie, enabling proactive mitigation.

With other vendors, we’ve had to manually check for vulnerabilities in products and assess whether those vulnerabilities were relevant. Now, Vision One handles much of that process. It provides detailed information for each user and endpoint about existing risks and how to mitigate them.

I often compare patching vulnerabilities in Cyber Risk Exposure Management (CREM) to playing a game — the goal is to collect as few points as possible. The lower our score, the more secure our environment is. And like in real life, there are ups and downs because new risks arise daily. Vision One is an important tool for communicating risk assessments to management while also helping operational staff understand what risks mean and how to reduce them.

The feature I find most valuable in Vision One is CREM. CREM helps our company identify blind spots. It provides detailed information about the actions and improvements we should take to secure our environment, and gives concrete recommendations about how to resolve vulnerabilities.

As part of our Service One Complete service agreement, we have bi-weekly meetings with a Technical Account Manager (TAM) who advises us on improving security settings and informs us — even between meetings — about new attack scenarios and how to counter them.

It’s hard to pinpoint areas where Vision One could be improved or where additional features are needed. I’ve been working with the solution for three years, and Trend Micro is constantly developing. Sometimes, it’s hard to keep track of all the updates and added features.

I feel that Trend Micro is now better at identifying my needs than I am at recognizing them myself.

Vision One has been in use at the company for three years.

The stability is excellent. In my opinion, performance and availability are both very good.

The scalability of the solution is very good. We have not encountered any limitations as our environment has grown.

I would rate customer service extremely positively. Support responds quickly, and together we’ve been able to solve all challenges in our day-to-day operations. On a scale from 1 to 10, I would rate customer service and technical support a 9 — there should always be room for improvement.

Before Trend Vision One, we used a solution from Kaspersky. The switch was prompted by the German BSI’s security warning regarding Kaspersky's antivirus products.

I was heavily involved in the rollout and deployment of the solution. Implementation was relatively quick and smooth. We used a deployment script distributed to endpoints through our software distribution system.

Our rollout strategy started with a small number of endpoints being configured with antivirus and policies. After reviewing and refining the policies, Vision One was rolled out in phases to the remaining endpoints.

We needed only one staff member for the implementation of Trend Vision One, and that was me.

The investment in Trend Micro Vision One has paid off, although ROI is difficult to calculate. A security solution is like a good insurance policy — ideally, you never need to use it. We haven’t had any incidents so far, and hope it stays that way.

I’ve noticed that the continuous visibility of potential risks has made our environment more secure and has enabled colleagues to respond faster, saving valuable working time.

Before we decided on Vision One, we also evaluated solutions from other vendors, including Microsoft and Fortinet. The differences between the products were not significant — they were more in the details. But since we had already been a Trend partner for 15 years (12 of them inactive), we ultimately decided to return to Trend Micro.

Three years ago, we followed a different concept: two independent security solutions with separate management and reporting. Migrating to Vision One and consolidating everything into one interface gave us a 365° view of our IT infrastructure.

Central visibility of endpoints and vulnerabilities, as well asunified management, brought a new level of focus to IT security and boosted employee awareness.

If you're evaluating Trend Micro, don’t limit yourself to antivirus functionalities. Consider other features as well — especially the Managed Services, (strong technical support), and Cyber Risk Exposure Management capabilities, which I find highly valuable.

Create a centralized view of your IT infrastructure.

Define which features are important or necessary for you.

Get a comprehensive overview when evaluating different security vendors in terms of features and costs — so you’re not comparing apples to oranges.

Foreign Language: (German)

Ermöglicht Teams, Cyberrisiken schnell zu erkennen und zu managen – durch detaillierte Einblicke und kontinuierliche Unterstützung

Was ist unser primärer Anwendungsfall?

Trend Vision One kommt als primäre Sicherheitslösung auf allen Endpunkten (Server und Clients) in unserer Umgebung zum Einsatz. Darüber hinaus sind über die Third-Party Integration auch die von uns eingesetzten Lösungen weiterer Hersteller (u. a. VMware, Fortinet) eingebunden.

Wie hat es meiner Organisation geholfen?

Trend Vision One hat uns geholfen, die Sichtbarkeit der Endpunkte zu erhöhen und den Angriffsvektor zu verringern. Wir können schneller Schwachstellen/Bedrohungen identifizieren und darauf reagieren. Dadurch konnte unsere Reaktionszeit um schätzungsweise fünfundzwanzig bis dreißig Prozent gesenkt werden. Mit Vision One wird man über konkrete Risiken benachrichtigt und lernt, wo die Risiken im Allgemeinen liegen. So kann man aktiv daran arbeiten, diese zu beheben.

Früher mussten wir aus eigener Initiative heraus überprüfen, welche Schwachstellen bei bestimmten Herstellern bestehen und einschätzen, ob diese Schwachstellen für uns relevant sind. Das wird jetzt bereits zu einem großen Teil von Vision One erledigt. Herunter gebrochen bis auf jeden einzelnen Benutzer und Endpunkt wird dediziert angegeben, welche Risiken bestehen und wie diese verringert werden können.

Ich vergleiche die Behebung von Schwachstellen im Cyber Risk Exposure Management (CREM) mit einem umgekehrten Spiel. Es geht darum, so wenige Punkte wie möglich zu sammeln. Je niedriger unser Score ist, desto sicherer ist die Umgebung. Und wie im echten Leben gibt es Höhen und Tiefen, weil es täglich neue Risiken gibt.

Letztendlich ist Vision One ein wichtiges Tool, um einerseits eine allgemeine Risikobewertung für Führungskräfte/ Manager durchzuführen, und andererseits für operative Mitarbeiter, um zu wissen, was dieses Risiko tatsächlich beinhaltet und wie es sich reduzieren lässt.

Was ist am wertvollsten?

Die Funktion, die ich in Trend Vision One besonders wertvoll finde, ist Cyber Risk Exposure Management (CREM). CREM hilft unserem Unternehmen, blinde Flecken zu identifizieren. Diese wichtige Funktion zeigt sehr detailliert und umfassend auf, wo Handlungsbedarf oder Verbesserungspotenzial besteht. Gleichzeitig bietet es den Kollegen konkrete Handlungsempfehlungen, wie Schwachstellen geschlossen werden können.

Ein Bestandteil unseres Service One Complete Service-Vertrages sind zwei wöchentliche Meetings mit einem TAM (Technical Account Manager), der uns berät, wo Verbesserungspotenzial bei den Sicherheitseinstellungen besteht und uns regelmäßig – auch zwischen den Meetings – informiert, wenn es neue Angriffsszenarien gibt und wie diesen entgegengewirkt werden kann.

Was muss verbessert werden?

Bereiche, in denen Vision One verbessert werden könnte oder wo zusätzliche Funktionen erforderlich sind, sind schwer zu bestimmen. Ich arbeite jetzt seit drei Jahren mit der Lösung und Trend Micro arbeitet ständig an deren Weiterentwicklung. Stellenweise ist man gar nicht in der Lage, alle Änderungen zu erfassen oder welche zusätzlichen Funktionen eingebunden werden.

Ich glaube, Trend Micro ist derzeit schneller dabei, meine Bedürfnisse zu identifizieren, als ich sie überhaupt selbst erkenne.

Wie lange verwende ich die Lösung bereits?

Vision One ist seit drei Jahren im Unternehmen im Einsatz.

Was denke ich über die Stabilität der Lösung?

Die Stabilität der Lösung ist sehr gut. Meiner Meinung nach sind Leistung und Verfügbarkeit sehr gut.

Was denke ich über die Skalierbarkeit der Lösung?

Die Skalierbarkeit der Lösung ist sehr gut. Wir sind bisher auf keine Einschränkungen beim Wachstum unserer Umgebung gestoßen.

Wie sind Kundendienst und Support?

Ich würde die Erreichbarkeit und Kompetenz von Service und Support von Trend Micro als sehr hoch bewerten, ich bin sehr zufrieden. Antworten und Lösungen kommen prompt, das Personal ist professionell und auf einem sehr hohen Kommunikationsniveau.

Wie würden Sie Kundendienst und Support bewerten?

Äußerst positiv. Kundendienst und Support reagieren zeitnah. Gemeinsam konnten bisher alle Herausforderungen unseres Tagesgeschäftes gelöst werden.Auf einer Skala von eins bis zehn würde ich den Kundendienst und den technischen Support für Trend Vision One mit einer Neun bewerten. Es muss ja noch Luft nach oben bleiben.

Welche Lösung habe ich vorher verwendet und warum bin ich gewechselt?

Vor Trendmicro Vision One war die Lösung von Kaspersky im Einsatz. Der Auslöser für den Wechsel war die vom BSI ausgesprochene Sicherheitswarnung vor den Virenschutzprodukten des Herstellers.

Wie war die anfängliche Einrichtung?

An der Einführung und Bereitstellung der Lösung war ich maßgeblich beteiligt. Die Implementierung erfolgte relativ schnell und problemlos mit einem Deployment-Skript, welches über das Software-Verteilungssystem auf die Endpunkte gebracht wurde.

Unsere Implementierungsstrategie sah vor, dass zunächst eine kleine Anzahl von Endpunkten mit Virenschutz und Richtlinien versorgt wurde. Dann wurden die Richtlinien noch einmal überprüft und verfeinert. Abschließend wurde Vision One in mehreren Etappen auf die restlichen Endpunkte ausgerollt.

Wie war unser ROI?

Die Investition in Trend Micro Vision One hat sich rentiert, aber der ROI ist schwer zu berechnen. Eine Sicherheitslösung ist wie eine gute Versicherung, die man hoffentlich nicht braucht. Wir hatten bisher keine Vorfälle und hoffen natürlich, dass wir auch in Zukunft keine haben werden.

Ich stelle fest, dass unsere Umgebung durch die permanente Sichtbarkeit von potentiellen Risiken sicherer geworden ist und dass die Kollegen schneller auf diese reagieren können. Das spart vor allem Arbeitszeit.

Welche anderen Lösungen habe ich evaluiert?

Bevor wir uns für Vision One entschieden haben, haben wir auch die Lösungen anderer Hersteller evaluiert, unter anderem die von Microsoft und Fortinet. Die Unterschiede bei den jeweiligen Produkten waren nicht so gravierend, sie lagen mehr im Detail. Aber da wir auch schon seit fünfzehn Jahren Trend Micro Partner sind (zwölf Jahre davon ruhend), sind wir schließlich wieder zu Trend Micro zurückgekehrt.

Welche anderen Ratschläge habe ich?

Wir hatten vor drei Jahren ein Konzept, das einen anderen Ansatz verfolgte. Zwei voneinander unabhängige Sicherheitslösungen, mit jeweils eigenem Management und Reporting. Die Migration zu Vision One mit der Konsolidierung in eine Oberfläche hat zu einer 365°-Sicht auf die IT-Infrastruktur geführt.

Die zentrale Sichtbarkeit von Endpunkten und Schwachstellen und das Management über alle Ebenen hinweg hat noch einmal einen ganz anderen Fokus auf das Thema IT-Sicherheit gelegt und das Bewusstsein der Mitarbeiter für dieses Thema gestärkt.

Wenn Sie Trend Micro evaluieren, beschränken Sie sich bitte nicht nur auf den reinen Virenschutz, sondern beziehen Sie auch die anderen Funktionen in die Betrachtung ein. Insbesondere die Managed Services, der Technical Account Manager und die Cyber Risk Exposure Management Funktionen haben für mich einen hohen Mehrwert.

Schaffen Sie eine zentralisierte Sicht auf Ihre IT-Infrastruktur.

Definieren Sie im Vorfeld, welche Funktionen für Sie wichtig sind bzw. Sie benötigen.

Verschaffen Sie sich einen umfassenden Überblick bei der Evaluierung verschiedener Sicherheitsanbieter hinsichtlich Funktionen und Kosten, damit Sie nicht Äpfel mit Birnen vergleichen.

Welches Bereitstellungsmodell verwenden Sie für diese Lösung?

Private Cloud

Falls öffentliche Cloud, private Cloud oder Hybrid-Cloud, welchen Cloud-Anbieter verwenden Sie?

Verschiedene.

I use Trend Vision One for Total XDR and endpoint protection as an all-in-one security solution.

One of the best decisions we made was choosing Trend Vision One. It has transformed our entire security and cybersecurity landscape, providing a one-stop solution to manage everything efficiently and effectively.

One of the most valuable features is Cyber Risk Exposure Management.

There is room for improvement in leveraging AI technology to protect against emerging AI-based threats.

I have been using the solution for two years.

We previously used an outdated and inefficient Trend Micro system, which caused high security risks.

This is not a competitive price — the costs are on the higher side. However, I don’t regret it, as it can help save significantly in other areas. The only disappointing aspect is that every time new features are adopted, additional credits are required, which could push the budget over. This practice should really be reconsidered by Trend.

I also evaluated CrowdStrike as an alternate solution.

Trend Vision One is a five-star product.

Our use cases for Trend Vision One are monitoring and alerts.

The biggest challenges we wanted to address with Trend Vision One were securing endpoints and enabling us to quickly respond to incidents or threats. This is the main goal for using this solution.

Trend Vision One has improved the way our organization functions by acting as both a monitoring tool and an antivirus, giving us insight on potential threats and enhancing our response time to security incidents. It is hard to measure the time savings but we save a significant amount of time in responding to potential threats. For example, we don't expect employees to respond to emails, chat, or calls outside of working hours. Trend Vision One has a feature where we can block all access to the laptop or endpoints. It allows us to take immediate action without waiting for the user to respond.

In terms of reducing noise from false positives, unfortunately, some behaviors can be mistaken for bad behaviors, but that isn't the fault of the software itself. It largely depends on how the developers of other applications implement their software and how it is run. We encountered an issue with another software called Rapid7, which periodically runs a command on MacBooks or Apple operating systems. This command, which is quite lengthy, searches for any unsecured credentials or API keys related to GitHub on the laptop. The way the application triggers is significant: it runs under root privileges, executing that command in the terminal for the user. Trend Vision One picks this up as a suspicious command, interpreting it as an attempt to find unsecured credentials. Despite having whitelisted the entire command in Rapid7, Trend Vision One still flagged it. We went back and forth on this issue, but ultimately we decided that it wasn't worth further troubleshooting to silence this alert due to the potential for actual malicious use of such commands. While we could whitelist it, we did not want to risk it being exploited maliciously. In the end, we chose to ignore the alert. They helped us reduce some other noise, but there was some noise that we weren't able to reduce.

Vision One AI has been very useful. All IT people stay up to date with security risks, exposures, alerts, or attacks. Vision One AI helps us explain or understand the alerts and what actions are recommended.

The workbench alerts are something we find very useful, as they help us stay informed about various activities. Not all alerts are positive, but they provide valuable insights into the detection methods and help us understand how certain issues arise. For example, if someone attempts to run a piece of software that encrypts a file, one of our tools, which is used for evidence gathering in surveillance systems, may encrypt the file too quickly. As a result, Trend Vision One may trigger an alert. Although this is a false positive, it still gives us insight into the behavior involved. This allows us to investigate the alert further and provide feedback to the user or development team, letting them know that similar triggers are likely to occur with other security systems or software.

Other useful features include intrusion and mailbox alerts, suspicious unauthorized access, tracing logs, website clicks, and email filtering for bad attachments.

The improvement I have been asking for is an easier way to create MDR requests. Not all alerts that come through Trend Vision One receive an investigation, and we would like the ability to easily request an investigation on lower-scored alerts without logging into the support portal to create a ticket.

I would like to see Trend Vision One and OfficeScan consolidated into one platform. Currently, it is the same space but two different layers. It would be nice to have both combined instead of having two clients.

There is room for improvement when it comes to support.

I've been working with Trend Vision One for three years.

Trend Vision One is stable enough. We don't see many performance impacts on our endpoints, except for when our weekly scheduled scans happen. Our developers express that it limits how freely they can develop, but I personally appreciate the insight it gives us and the actions that allow us to take on our devices.

I would rate their support a six out of ten. We encountered an issue with one of our tools—specifically, Visual Studio. One of our developers faced difficulties debugging code because Trend Vision One was blocking the debugging application or causing it to crash. This problem stemmed from a Windows update, and it took us a month and a half to identify the root cause. After we opened a ticket either at the end of March or early April, we waited several more weeks for a solution. Although the Windows update occurred back in February, we didn’t receive the fix until the end of May. The interaction between Windows and the application played a significant role in the issue, as the debugging application starts the code and injects itself into the running application, which Trend Micro flagged as problematic after the latest Windows update. Fortunately, this issue has now been resolved, but it was indeed a painful experience. Our developers were understandably frustrated that they couldn’t debug code for a month and a half, which impacted our project timelines.

Neutral

The company previously had SentinelOne before my time, and I can say that SentinelOne was not effective. 

We currently use Rapid7 as our Managed Detection and Response (MDR) service. In my experience, both Rapid7 and Trend Vision One serve similar purposes, but they have distinct differences. There are times when Rapid7 provides us with more detailed information, while at other times, Trend Vision One offers greater insights. This is partly because Trend Vision One collects more data from the devices, allowing it to better identify the root causes of alerts compared to Rapid7. 

Additionally, I find that the MDR team at Trend is generally more responsive than that of Rapid7. However, there are some disadvantages as well. For instance, we haven't yet set up cloud monitoring capabilities with Trend Vision One. Rapid7 currently handles our cloud infrastructure monitoring and manages services like Office and Okta. While Rapid7 is equipped to monitor these services, Trend Vision One is not yet at that level. We are exploring ways to enhance its capabilities, and if it can provide the same level of service as Rapid7, we might consider discontinuing our use of Rapid7 altogether.

We use the SaaS solution. I was not involved in the initial setup and deployment process, which occurred prior to my time here, but I have readjusted some policies.

Previously, it was difficult to understand some alerts. However, as time goes by, we differentiate better between them, and the AI feature is an extremely good tool that explains things that are gibberish to the regular user. The learning curve is quite steep.

It has helped us understand some of the alerts that we did not comprehend.

It is an all-around solution that includes various modules for comprehensive security monitoring and alerting. This solution is particularly effective when integrated with other hardware or on-premises solutions, such as Deep Discovery Inspector, which monitors your network.

The interface is adequate, but it is constantly changing. New features are being added, and items are being rearranged almost daily. We might have missed some announcements regarding these frequent updates. As it is an evolving solution, such changes are to be expected. However, there are still features that are buried within menus, which previously required extensive searching to locate. For instance, until last year, isolating endpoints was only possible through the search function. Now, they have added a feature within the endpoint inventory that allows you to select devices and isolate them immediately, rather than having to jump through multiple hoops to access that option.

The application has also become slightly more responsive. Regarding its functionality, the insights it provides are quite useful. The application displays various actions, and you can drill down into alerts to view the execution path associated with them. For example, if an application triggers an alert, you can right-click on that alert and select "Check Execution Profile." This feature shows you where the process started, what actions it took, and where it ended. This improvement is beneficial for understanding how tasks are executed.

I would rate Trend Vision One an eight out of ten.

My use case for the solution is primarily for EDR purposes, but we are also starting to use the CREM.  This technology allows us to see our endpoints within seconds to ensure they are NIST 800-83 compliant.  This technology is critical in today's world as there are many customers requiring this now.  

We have used advanced threat intelligence, and we continue to do so. There is a way to run a threat query to find where a certain item is located. For example, Quick Assist from Microsoft was used a while back to gain access to our environment, and we didn't know it at the time. Of course, we've since locked that down. Now, we can also use that query we created to monitor if someone tries to use it again. I recently saw an attempt to use it, but they couldn't succeed because we have it blocked. It's really good to know these things, and without the available technology, we wouldn’t be able to do this.

Trend Vision One's automation capabilities have helped, for example, with atypical travel. We have a playbook set up. When Trend Vision One finds someone signed on in the United States and then catches them signed on in Africa, it will immediately run a playbook. This will disable that profile and prohibit that person from logging in. That is huge when you consider the possibilities of what could happen if we didn’t have that feature.

Our response time is greatly enhanced because of all the features that Trend Vision One offers. It simplifies things and makes it clear what’s going on inside our environment. With just a click of a button, we can get the information we need. We can mitigate issues very quickly using Trend Vision One. We can isolate endpoints, effectively removing them from the network while still accessing them through the Trend Vision One console. Additionally, we can run malware scans instantly on computers, and there are so many features available that it can be hard to keep track of them sometimes. Overall, Trend Vision One has really helped a lot. When it comes to time savings, I would estimate that our response time has improved by at least 40%.

Using this solution has benefited our business greatly. It keeps me informed of everything happening in our environment. We have site admins at every location with specific admin authority to do certain things. Trend Vision One monitors that, allowing me to validate actions taken by admins. Trend Vision One caught various incidents, and it gives me a clear understanding of our environment and its activities, with quick searches and deeper capabilities.

With Trend Vision One, my favorite feature is the app they provide. You can turn on different features and notifications. The other night I was sitting at supper when the app went off, and I got an alert that was very strange. It turned out to be an event, and we got our cyber team together to mitigate the issue with Trend's IR Teams help, preventing any major problems. That app is a lifesaver.

The dashboard provides extensive information. It gives detailed information regarding endpoints and servers, tracking everything. You can search for things and run threat analysis. There are many features within there, and it's difficult to pinpoint one because all the features work very effectively together.

The centralized management feature contributes to faster decision-making within our security operations, greatly enhancing our response time. With all the features that Trend Vision One offers, it simplifies things. It clarifies what's going on inside your environment; with a click of a button, you can see what's happening and mitigate very fast.

In Trend Vision One, there is always room for improvement. The console is well done, but there might be a bit of improvement needed with the app's capabilities. I know they are constantly working on it, and they have regular Webinars "What's New In Trend Vision One" to share updates and enhancements that are taking place.  

Trend also allows its VIP customers to pretest new features or products and enables us to give feedback on those we test.  This is an incredible benefit to Trend's VIP program.  I do not know of any other product like Trend Micro.

I've been using this solution for quite a while. It was about eight years ago when our company had Trend implemented at every location. We have eleven locations overall. In my opinion, it wasn't managed properly; the situation was quite poor. There were many updates that were needed. I approached management and expressed my desire to take over the project. I said, "I want this. I will do it, fix it, and make it work." Management agreed and gave me the responsibility.

What I did next was take all the servers, fix and upgrade them, and prepare them for migration to one on-site server. After that, we decided to move to the cloud. I gathered everything together and worked with Trend to get all of our endpoints and servers transitioned to the cloud. It's been an ongoing process with Trend, as there is always something that needs to be done.

I rate the stability of Trend Vision One as a ten out of ten.

I would rate the scalability of Trend Vision One as nine out of ten.

It is really good. They even have a feedback system to report suggestions or problems, which are addressed promptly. We also benefit from 24/7 monitoring, and we have direct contacts for technical issues and ongoing weekly support calls.

I would rate them a nine out of ten. There's always room for improvement. Five years ago, I would rate it as a five, but support has significantly improved in availability, responsiveness, and keeping me updated.

We purchased the software through CDW, which used to be called Sirius. That's how we acquired it. I have several contacts at Trend that I can reach out to directly, as I have been working with them for about eight years. They have helped me implement the software directly. I worked with Trend through the entire process. They have a learning platform with videos that break down each product. They show you step-by-step how to implement or use each solution. Trend Micro Service One, monitors our corporation, 24/7/365 support service. We can contact a representative, and they’ll get back to us if we encounter any problems or technical issues in our environment. They’ll even join us on a conference call to help. We also have a weekly call with them, where we can ask questions, and they guide us to the right resources and documentation. It’s really an incredible support package.

It wasn’t complicated to deploy. Now they offer a product called Server and Workload Protection, which is tailored specifically for servers. We're in the process of upgrading our servers to use this product. It’s more focused on server-specific security and functionality. When I used it about five years ago, the process was quite complex. I had problems and issues. Over the years, we moved away from the product — about four years ago — and we’re only now starting to return to it. The changes made in those four years are incredible. It’s like night and day. What used to take me days to deploy to one server now takes about half an hour. Trend is constantly updating, enhancing, and improving how things are done. It’s a continually evolving package. They’re even integrating AI capabilities now, which will greatly enhance what Trend products can do.

The capability of Trend Vision One to be deployed both on-premises and in the cloud has been extremely beneficial to my organization in terms of flexibility and scalability. Being in the cloud eliminates the need for on-prem servers. With several divisions, managing all of those on-prem servers was a nightmare. It was not an option, so I migrated to the cloud, which is a one-stop shop. We have our entire corporation in the cloud, making it easy to see everything without logging onto multiple servers; this saves a lot of time.

The solution itself does require some maintenance. The updates are automatic, so we don't need to manually check. However, some endpoints have to be maintained more carefully, ensuring they are fully updated because missing MS updates can prevent Trend Vision One from working correctly. It's good practice to keep everything up to date, which is crucial for managing over 1,000 endpoints and 200 servers. Trend Vision One allows us to see all software on a person's computer, even outdated web browsers, and it flags potential threats, which is an incredible feature.

In my organization, approximately three people work with Trend Vision One.

In terms of return on investment, I've seen a 100% return. It has paid for itself. Our company went through a ransomware event, and if Trend Vision One's IR Team had not stopped it, that could've closed the company's doors.

Trend Vision One is definitely cost-efficient compared to other solutions. I have seen others that are double or triple the price. I'm surprised Trend Vision One hasn't raised their prices, considering everything offered. Depending on the features selected, cost varies, but overall, endpoint and server security is very reasonable.

Comparing Trend Vision One to other solutions, I've seen other vendors with complicated software requiring extensive training to understand. If software is that hard to learn, I don't find it to be a viable solution. Learning takes weeks or months, potentially creating holes in security instead of securing it.

I would absolutely recommend Trend Vision One to other users because it's cost-efficient and it just works. It tells you what you need to do, alerts you of threats, and informs you about software needing updates. They have an IR team that is exceptional and works on the mitigation and remediation until all issues have been resolved!  Over time, it becomes easier to understand, especially moving from on-prem to cloud deployment; there's no comparison. 

I would rate the solution overall as a ten out of ten.