TrendAI  Vision One™ logo

    TrendAI Vision One™

    Stop threats before they strike with TrendAI Vision One™ - the AI-powered enterprise cybersecurity platform built to predict, prevent, and respond to threats across AWS, hybrid, and multi-cloud environments. Gain unified visibility, streamline cloud risk management, accelerate cloud investigations, and empower your security teams with proactive, layered protection that works at cloud speed. Proactive security starts here.

    Ratings and reviews

    4.6
    359 ratings
    2 star
    1 star
    78%
    21%
    1%
    0%
    0%
    28 AWS reviews
    |
    331 external reviews
    External reviews are from G2  and PeerSpot .

    Filters

    Review type

    AWS Marketplace reviews
    External reviews
    Reviews (359)
    RahulYadav1

    Centralized AI-driven threat detection has reduced alert fatigue and speeds incident response

    Reviewed on Oct 23, 2026
    Review provided by PeerSpot

    What is our primary use case?

    The main use case for TrendAI Vision One is to centralize cyber risk exposure management, threat detection, and automate response across multiple IT environments. TrendAI Vision One can be used in automation, ZTNA, SIEM, and XDR, which are the key use cases.

    I use TrendAI Vision One in the XDR and agentic SIEM in which we correlate telemetry across endpoints and cloud networks and various email portals to identify and layer into a single console. This allows us to speed up correlation as early as possible for proactive threat hunting if any suspicious activity is found in our environment. We accomplish this with an automated ticketing process using PowerShell scripts.

    Integrating TrendAI Vision One with a third-party SIEM tool like Microsoft Sentinel involves generating one API key and configuring data forwarding either through the native API integration or cloud storage. We are doing this on the same platform, triggering alerts and observing attacks and techniques. Based on that, we can work on these aspects or directly through syslog or CEF forwarding to the service gateway, which is how we are working.

    We are using cyber risk exposure management capabilities to identify loopholes and vulnerabilities in multiple environments including assets and VMs. After identifying vulnerabilities, we address the issues through updates or by providing proper classification or justification. Regarding governance, we ensure that every onboarded asset meets proper criteria to avoid future problems.

    Sensors are deployed across the organization both physically and digitally and feed data into XDR. We have achieved coverage around 80% using TrendAI Vision One by deploying sensors across endpoints, cloud, networks, email, and collaboration environments.

    As of now, we are not using TrendAI Vision One for consolidated security across hybrid environments.

    How has it helped my organization?

    TrendAI Vision One shifts the organization from a reactive detect and respond mindset to a proactive prevention model, continuously scanning the entire enterprise ecosystem, including internal and external assets, cloud workloads, and SaaS applications. The platform proactively identifies security issues including identity security posture management and identity threat detection and response, flagging weak security accounts.

    TrendAI Vision One assists analysts in identifying true positives by scanning before any alerts trigger, enabling proactive identification of issues to mitigate potential incidents.

    The risk has been significantly reduced, though I cannot provide precise metrics. I would say approximately 50 to 60% risk has been covered due to its proactive threat hunting that searches for suspicious activities and prevents unauthorized access, roughly translating to a 70% risk mitigation in our metrics.

    TrendAI Vision One has reduced the time to detect and respond to threats because it triggers a single alert correlating all necessary information, clarifying each detail related to assets and actions.

    TrendAI Vision One has helped us reduce false positives significantly. Previously, we received about 100 alerts a day, and now, after using TrendAI Vision One, we are down to around 25 to 30 alerts, saving approximately six hours of analyst work daily across three shifts.

    TrendAI Vision One has helped consolidate security vendors and significantly reduce operational silos by providing a unified single pane of glass that covers endpoints, identities, email, and network security while cross-layering XDR correlations to automatically ingest and correlate rich telemetry across all security layers in near real time.

    What is most valuable?

    The best feature TrendAI Vision One offers is the native full-stack XDR correlating engine combined with the agentic SIEM architecture. While many platforms merely dump unorganized logs into a central dashboard, TrendAI Vision One utilizes cross-layer telemetry alongside its generative AI assistant to automatically turn thousands of scattered security alerts into a single high-fidelity chronological timeline. This automatically correlates multiple alerts across endpoints and email inboxes, triggering an alert for all these things, radically reducing noise and consolidating hundreds of low-severity alerts into a single workbench alert. This eases the work of analysts and helps them analyze and remediate issues easily. TrendAI Vision One also proactively maps out security risks before attacks happen, feeding proactive vulnerabilities and active threats into the same dashboard.

    SIEM teams face alert fatigue and high ingestion costs. Instead of overwhelming the SIEM with thousands of raw logs and fragmented events that teams must manually write and correlate, TrendAI Vision One drastically reduces the SIEM ingestion cost, eliminates complex rule writing, allows us to find patient zero and the impacted assets quickly, and fastens the mean time to respond (MTTR).

    The main features that stand out for my team in SOC relate to MTTR. Instead of chasing false positives or digging through raw logs, we can open the SIEM ticket and see the entire scope of the attack via workbench summary and immediately trigger containment actions such as isolating the host or resetting the user's credential. This helps us bifurcate and sort everything into a single dashboard and provide everything in one consolidated view.

    TrendAI Vision One translates technical threat data into clear measurable risk metrics that align with normal regulatory frameworks such as HIPAA, GDPR, and ISO 27001, while also automating compliance frameworks and continuously auditing to prepare audit-ready reports. It helps explain cybersecurity technology to non-technical board members and transforms network flows into single intuitive corporate risk scores based on business impact.

    The accuracy and reliability of TrendAI Vision One heavily depends on the native cross-layer XDR engine, which is a newer generative AI engine that delivers high reliability for security alerts, vulnerability scoring, and attack path calculations. With the added advantage of global threat intelligence, the output is highly accurate and reliable, serving as an advisory tool where analysts must verify AI-generated summaries and recommendations before executing major network actions.

    TrendAI Vision One uses AI and machine learning to shift operations and works to spot hidden anomalies and predict attacks before they happen. This approach ensures the Zero Trust architecture continuously verifies every user's device and network request rather than trusting internal nodes by default, sharply reducing unauthorized access risks. It also aids cloud-native firewalls and monitoring of physical, IoT, and supply chain vetting, which is the importance of the AI component.

    TrendAI Vision One facilitates obtaining all data and every aspect through a unified tool, which correlates XDR, SIEM, and DLP parts, allowing quick issue resolution.

    It is important for our organization that TrendAI Vision One has AI built into its platform. This allows the tool to operate faster than humans, helping us identify and resolve issues more quickly while still valuing human intervention.

    What needs improvement?

    Based on real-world deployments and industry reviews, TrendAI Vision One is highly capable but has some distinct areas for improvement. The platform has a complex interface and steep learning curve since users frequently report that the dashboard and console layout feel cluttered and overwhelming. We also need to address tuning complexity and initial alert noise within the workbench. Additionally, the pricing model and local resource consumption during scans for endpoints running on legacy hardware need improvement, as the Trend agent can sometimes cause noticeable CPU and memory spikes due to full scans in the backend.

    Regarding the DLP part related to Microsoft Purview, the native DLP module with TrendAI Vision One is relatively light. Given the highly complex data compliance and structural classification requirements, there should be deeper data tagging capabilities and granular content inspections within the core vision platform to make it easier for analysts to identify and fix issues.

    For how long have I used the solution?

    I have been using TrendAI Vision One for almost one and a half years.

    What do I think about the stability of the solution?

    TrendAI Vision One is stable.

    What do I think about the scalability of the solution?

    I rate the scalability of TrendAI Vision One a ten out of ten because it is very helpful for users.

    How are customer service and support?

    Customer support is quite good. Whenever I reach out, a ticket is raised and responses are received within 24 to 48 hours regarding the actions taken and the person working on that ticket.

    I would rate customer support around eight.

    Which solution did I use previously and why did I switch?

    We previously used CrowdStrike; however, we switched to TrendAI Vision One because it provides multiple capabilities such as DLP, SIEM, and EDR, which CrowdStrike does not offer.

    What was our ROI?

    I have not seen a return on investment through relevant metrics yet, but users find it relevant in our organization. As of now, I have not seen any major return on investment regarding this aspect.

    What's my experience with pricing, setup cost, and licensing?

    Regarding the pricing, setup cost, and licensing experience, the pricing is a bit high, but it is easy to set up and migrate. While the pricing is higher than normal tools, the accuracy and capabilities provided justify the expense.

    Which other solutions did I evaluate?

    TrendAI Vision One was our first priority.

    What other advice do I have?

    Overall, I rate TrendAI Vision One as a nine.

    I choose nine due to some of the improvements I have mentioned earlier. If the DLP part, the consumption part, and pricing model are fixed, then it would be a perfect ten, which explains my rating.

    In our organization, TrendAI Vision One is hosted on the public cloud, using a hybrid architecture to monitor and secure infrastructure wherever it resides. The main console, or brain, is integrated with the AI companion used in the SIEM to correlate SIEM engines and analytics for identifying root causes and resolving major threats promptly.

    We use Azure and Microsoft Sentinel for our hybrid setup.

    My advice for those looking to use TrendAI Vision One is to utilize this tool as soon as possible because it combines multiple capabilities such as XDR and AI to help organizations grow, providing users with proper exposure to how things work and correlate.

    reviewer2847057

    Unified security platform has reduced endpoint threats and simplified daily threat response

    Reviewed on Oct 06, 2026
    Review from a verified AWS customer

    What is our primary use case?

    My main use case for TrendAI Vision One is endpoint security. I'm using TrendAI Vision One to enhance security across our company endpoints. It is very useful for application blocking for necessary users, and I am using it to stop malware, viruses, and similar threats.

    Regarding how I use TrendAI Vision One day-to-day, I find that TrendAI Vision One is a cloud-hosted solution that really helps us improve security in our organization and is helpful to prevent malware and viruses.

    I am using TrendAI Vision One sensors at the endpoints. This coverage is critical for our organization's network because it covers our entire endpoints and provides full security.

    How has it helped my organization?

    TrendAI Vision One has positively impacted our organization by improving security and reducing the hazard of needing to switch between consoles since it has one single platform embedded with every solution.

    Since using TrendAI Vision One, I have seen user awareness improvement, and users are aware of this, leading to a reduction in malware and viruses since the endpoint agent installation. The time saved for administrators is significant because I have one single console to manage all of the email security, endpoint security, and cloud app security, as opposed to needing many consoles, which takes a lot of time.

    I believe the top security challenge in my industry is a lack of user awareness, as users are not aware that these are viruses or malware. With TrendAI Vision One, I have user awareness training, and I can simulate user awareness campaigns, which helps address this issue and has really reduced the number of challenges.

    TrendAI Vision One has helped consolidate my use of security vendors and reduced silos. TrendAI Vision One has helped reduce my time to detect and respond to threats, and with the automated tasks and brilliant detections, it has significantly reduced my overall endpoint security time.

    What is most valuable?

    The best features TrendAI Vision One offers are that with most of the other solutions out there for endpoint security, I have to purchase an additional license for additional features, but with TrendAI Vision One, it's embedded into one single platform and it's not going to cost so much with the licensing for the features. Those licenses include every feature in that.

    The specific features I find myself using most often include automated security playbooks for preventing malware and viruses, which I use after detection.

    In addition to the features, I would like to add that TrendAI Vision One also has endpoint security, email security, Zero Trust security access, mobile security, and cloud app security, all embedded into one single platform that is really useful for organizations to enhance their security.

    Regarding TrendAI Vision One's AI capabilities, I believe it protects users' data using PCI DSS, according to their website, and it heavily uses AI to automate tasks, which is really helpful for us. When it comes to security, I can trust it because of the TrendAI global market.

    In terms of accuracy and reliability of output, I am using TrendAI Companion in TrendAI Vision One console, which is really helpful for configuring XDR components and so on, but sometimes it can be not really accurate, while most of the time it is accurate. It is very important for our organization that TrendAI Vision One has AI built into its platform, as I am using TrendAI Companion to manage XDR features and to write XDR playbooks.

    What needs improvement?

    Regarding improvements for TrendAI Vision One, I sometimes wish the features that I didn't purchase could be hidden since most of the features can be seen within the console, making it confusing for users who haven't purchased those licenses.

    I would add that when adding new features to TrendAI Vision One, if they can inform us or add them accordingly, it will be easier because new features are added frequently, which can be really confusing for us.

    I chose eight out of ten for TrendAI Vision One because, as I mentioned earlier, new features are added here and there, which can be confusing, and it's also confusing to see the features that I have not purchased, which is why I gave it that score.

    I think I could probably add a hardware inventory for endpoint security, and most of the time, this is okay.

    For how long have I used the solution?

    I have been using TrendAI Vision One for one and a half years.

    What do I think about the stability of the solution?

    TrendAI Vision One is stable.

    What do I think about the scalability of the solution?

    TrendAI Vision One provides great security for every endpoint, network, email, and so on, with a high detection rate.

    How are customer service and support?

    Customer support for TrendAI Vision One is excellent, and they provide active support for all my tickets. I would rate the customer support a nine out of ten.

    Which solution did I use previously and why did I switch?

    I did not use a different solution before TrendAI Vision One.

    What was our ROI?

    I have seen a return on investment, as it provides really automated tasks for end users and management with flexible credit usage.

    What's my experience with pricing, setup cost, and licensing?

    The pricing for TrendAI Vision One is really flexible.

    Which other solutions did I evaluate?

    Before choosing TrendAI Vision One, I evaluated other options such as CrowdStrike, SentinelOne, and others.

    What other advice do I have?

    TrendAI Vision One is deployed in my organization as a SaaS solution. It is hosted in TrendAI Vision One cloud solutions, which I believe involve AWS and Azure, but I don't exactly know the answer because the cloud-hosted databases are managed by TrendAI Vision One, and I don't have access to that. I did not purchase TrendAI Vision One through the AWS Marketplace, as I mentioned earlier, I have no knowledge about the cloud-hosted database because the cloud service is provided directly from TrendAI Vision One without my access.

    My advice to others looking into using TrendAI Vision One is that if you are looking for a solution that has more features, this is the solution for you, because TrendAI Vision One has many solutions embedded into one. If you want one single platform for many solutions, this is it. I would rate TrendAI Vision One an eight out of ten.

    Andrés Infante

    Unified threat visibility has reduced email attacks and improved cyber risk governance

    Reviewed on Sep 28, 2026
    Review from a verified AWS customer

    What is our primary use case?

    TrendAI Vision One unifies the assets and knowledge in cyber risk about all assets in the company, and assesses both the bad and good value of these assets.

    In my daily work, I administrate or support one client specifically in Colombia, managing an area in service security, and I help this area by supporting email and ensuring Zero Trust Secure Access.

    TrendAI Vision One is a very useful tool for unifying the various applications that a company might have.

    We use TrendAI Vision One sensors in two deployments, one in emails and the other in specific servers.

    The top security challenge in my industry is related to spam or email Business Email Compromise (BEC), and TrendAI Vision One addresses this effectively.

    How has it helped my organization?

    TrendAI Vision One helps us detect and reduce the number of spam and phishing attacks.

    Last month, we processed 2,000 spam emails, and we successfully reduced this number to just two.

    TrendAI Vision One has helped consolidate our use of security vendors and reduce silos because we now have a connecting report for Indicators of Compromise (IOC) and can integrate this information into one Security Information and Event Management (SIEM) to send data to a firewall.

    TrendAI Vision One has helped us reduce the time to detect and respond to threats; we can find an attack that previously took one week in a maximum of four hours because the console can identify the specific origin of the attack.

    What is most valuable?

    TrendAI Vision One offers a user-friendly and easy-to-understand platform.

    You can add a SIEM, create a playbook, and implement automatic responses for different attacks with TrendAI Vision One, which is notably easy when you want to conduct threat hunting. The console is easy to use and very good overall.

    Regarding TrendAI Vision One's artificial intelligence capabilities, it provides good governance because it includes metrics related to IST two and ANS, which are beneficial for governance.

    The accuracy of TrendAI Vision One is very precise, though it can still change depending on how we configure the console.

    This coverage is very critical for our organization's network because the sensor is special; when other products or applications do not provide good results or information, this product or sensor gives us another perspective to detect attacks.

    TrendAI Vision One's ability to provide centralized visibility and management across all protection layers is very helpful because I can see how it complements email with one attack, one endpoint, one sensor, and one specific asset in the company.

    I use the Cyber Risk Exposure Management (CREM) capabilities and I update this information every month to inform my client and provide them with the score, which allows us to identify vulnerabilities, configurations, and workbench items.

    What needs improvement?

    TrendAI Vision One can improve, especially when I send a support ticket, as sometimes the support response is not satisfactory.

    TrendAI Vision One can improve in customization options and provide us with customizable reporting.

    For how long have I used the solution?

    I started to use TrendAI Vision One four years ago, and I began using one console called Deep Security, which is about endpoint protection. Three years ago, I started to use TrendAI Vision One and learned to use all the applications in this console.

    What do I think about the stability of the solution?

    Years ago, some applications were not stable, but at this moment, TrendAI Vision One is very stable across all its applications.

    What do I think about the scalability of the solution?

    We have good scalability with TrendAI Vision One and can consider other solutions for integration as it is very good and requires more compatibility with the console.

    How are customer service and support?

    The customer support for TrendAI Vision One is good, very nice, and the response is fast due to the quality of the specialists.

    Which solution did I use previously and why did I switch?

    I have never used another solution; I have heard of Cortex XDR from Palo Alto, but I have never managed it.

    What was our ROI?

    While TrendAI Vision One cannot replace employees since it is necessary for them to know how to manage and understand this information, the return metrics for us are in the reduced response times to attacks.

    What's my experience with pricing, setup cost, and licensing?

    I find the pricing very reasonable because our clients purchase credits that last for two years, allowing them to use and deplete these credits every month until the two years are complete.

    Which other solutions did I evaluate?

    I evaluated other options such as Microsoft and Falcon, but I did not choose these alternatives because they do not integrate all the capabilities that the console offers.

    What other advice do I have?

    TrendAI Vision One is deployed in our organization as a hybrid model since it is a Software as a Service (SaaS) service in the cloud, but some servers are on-premise because we need to use Zero Trust to connect the services for our clients.

    I would advise others looking into using TrendAI Vision One to give this console a try. I chose the rating of nine for TrendAI Vision One because it is my main platform to administrate, and I appreciate it very much as I have learned about all the applications in this console, which has been very easy for me.

    Which deployment model are you using for this solution?

    Hybrid Cloud

    If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

    Amazon Web Services (AWS)
    Mayankt Tripathi

    Centralized visibility has streamlined threat investigations and improves daily security monitoring

    Reviewed on Sep 25, 2026
    Review provided by PeerSpot

    What is our primary use case?

    My main use case of TrendAI Vision One is security monitoring and threat detection. On a day-to-day basis, I use it to monitor endpoint and server activity, investigate security alerts, and understand suspicious behavior. I also find the XDR capabilities useful because they correlate events from different security layers, giving the SOC team better context during incident investigation and response.

    TrendAI Vision One's XDR capabilities help by correlating endpoint, email, and network events into a single incident view. For example, when a user received a suspicious email and their endpoint subsequently showed unusual activity, we could connect those events instead of investigating them separately. This gave the SOC better context around the timeline, reducing manual investigation and helping us determine the appropriate response more quickly.

    What is most valuable?

    TrendAI Vision One has helped improve our overall security visibility and made incident investigations more structured. The centralized view of security events gives the team better context and reduces the need to manually correlate information from different tools. We have also seen improvements in handling repetitive alerts through automation. Overall, it has helped the SOC team handle incidents more effectively and streamline day-to-day security operations.

    What needs improvement?

    One area I would like to see improved is the overall user experience and customization options, usually for dashboards and reporting and integrations. Some configurations can also require additional effort when working with a complex enterprise environment. I would also like more flexibility around automation and investigation workflows. Improvement in these areas could make the platform easier to tailor to different SOC teams and operational requirements.

    I think the documentation could be more detailed for advanced configuration and integration, particularly for a larger enterprise environment. More practical examples and troubleshooting guides would make implementation easier for security teams. On the support side, faster resolution for complex technical issues would be helpful. As the environment scales, continued improvements in performance, reporting, and integration flexibility would also add value.

    For how long have I used the solution?

    I have been using TrendAI Vision One for around six months.

    What do I think about the stability of the solution?

    Overall, TrendAI Vision One has been stable in our experience. We have not faced any major reliability issues during normal security monitoring and investigation activities. Performance has generally been consistent, although any enterprise security platform's resource requirements can become more noticeable as the number of protected endpoints and servers increases. Proper sizing and capacity planning are therefore important for maintaining smooth performance at scale.

    What do I think about the scalability of the solution?

    TrendAI Vision One has scaled well with our environment so far. As we have increased the number of protected endpoints and servers, it has continued to provide centralized monitoring and security visibility without major operational issues. The main consideration is proper capacity planning and infrastructure sizing as the environment grows. Overall, it provides a practical foundation for expanding endpoint and server coverage in a timely manner.

    How are customer service and support?

    We have had to contact support for configuration and troubleshooting-related questions. Overall, the support experience has been positive, especially when dealing with product-specific technical issues. The support team was helpful in understanding the problem and providing guidance, although the response times can vary depending on the complexity and priority of the issue. More detailed self-service documentation would also make solving common issues faster.

    Which solution did I use previously and why did I switch?

    We previously used separate security solutions for endpoint protection and monitoring, which meant analysts had to work across multiple consoles during investigations. We moved toward TrendAI Vision One mainly to consolidate visibility and reduce those silos. Having XDR capabilities and centralized incident context in one platform made it easier to correlate events, investigate threats, and streamline the overall security operational workflows.

    How was the initial setup?

    Our experience with pricing and licensing has been reasonable overall, although the total cost depends on the number of endpoints, servers, and security capabilities required. The initial setup also requires some planning, particularly when integrating it with an existing enterprise environment. I would recommend clearly mapping the required modules and expecting deployment scale beforehand to avoid unexpected licensing or infrastructure costs.

    What was our ROI?

    We have seen a practical return on investment, mainly through analyst time saved rather than direct headcount reduction. Centralized visibility and XDR correlation reduce the time spent collecting and correlating information across different tools. Automation also helps with repetitive investigation and response tasks. Although we cannot calculate an exact monetary saving, the reduction in manual effort and faster incident handling have provided clear operational value.

    Which other solutions did I evaluate?

    We have evaluated a few established endpoint and XDR solutions before choosing TrendAI Vision One. The comparison mainly focused on detection capabilities, XDR correlation, endpoint and server coverage, integration with our existing environment, ease of investigation, and overall licensing. TrendAI Vision One stood out because it provided broader centralized visibility and allowed us to bring multiple security capabilities within a single platform.

    What other advice do I have?

    TrendAI Vision One is useful when you need centralized visibility across a diverse environment. It helps reduce the need to switch between multiple security consoles and gives the team more context during investigations. I also find the automated response and risk visibility capabilities useful for prioritizing incidents and reducing repetitive manual work from the SOC team.

    The biggest improvement has been reducing the time spent switching between different security consoles during investigations. With correlated events and a centralized incident view, analysts can understand the timeline and context faster. Automated response and playbooks also help with repetitive tasks. Overall, it has made our investigation process more streamlined and helped the team respond to relevant alerts more efficiently.

    The features that stand out most to me are the XDR correlation, centralized incident visibility, and endpoint protection. XDR helps connect activity across endpoints, email, networks, and other security layers, which makes the investigation easier. I also find the workbench useful for getting a consolidated view of incidents, while the automated response and playbook capabilities can help reduce repetitive manual tasks for the SOC team.

    One of the main challenges is dealing with phishing, malware, and endpoint compromise while managing increasingly sophisticated attacks and a larger number of security events. TrendAI Vision One helps by providing centralized visibility across endpoints and servers, correlating related security events, and supporting faster investigations. Detection and response capabilities help the SOC prioritize higher-risk incidents and reduce manual investigation effort.

    I would rate this review a ten out of ten.

    Which deployment model are you using for this solution?

    On-premises

    If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

    Amazon Web Services (AWS)
    Dev Ramtoolah

    Automated remediation has transformed incident triage and now streamlines threat hunting

    Reviewed on Sep 25, 2026
    Review provided by PeerSpot

    What is our primary use case?

    My main use case for TrendAI Vision One is for incident triage and response management.

    A specific example of how I use it for incident triage and response management is the elimination of collateral display and low log management from emails. This is how it helped.

    The automated remediation triggers automated commitment actions, isolating infection of the endpoint. This is beneficial and helps significantly.

    What is most valuable?

    The best features TrendAI Vision One offers include the powerful threat hunting and AI security capabilities, among the top features mentioned. The AI security analysis allows input of plain language requests for effective endpoint command analysis. Threat hunting assists in identifying alerts. Additionally, real-time inspection of LLM interactions helps secure operations within private and public environments. The centralized Vision One console hosted in a cloud-native environment also contributes greatly by ensuring robust security coverage.

    What needs improvement?

    TrendAI Vision One can improve in control responsiveness, particularly in navigating through heavy analytics interfaces like workbench, where execution graphs can experience noticeable latency. This occurs during multi-complex layers correlation and high volume of queries load. Secondly, I suggest improving license and credit allocation transparency.

    A deep ecosystem integration with deeper non-Trend native telemetry ingestion would help significantly.

    For how long have I used the solution?

    I have used TrendAI Vision One for almost two years.

    What do I think about the stability of the solution?

    TrendAI Vision One is stable.

    What do I think about the scalability of the solution?

    TrendAI Vision One's scalability is quite good; it benefits from cloud-native elasticity, which I use most often. The centralized Vision One console runs in the cloud-native environment, hosted on a public backbone like AWS and Azure. It is very easy for me to automatically scale based on log flow.

    How are customer service and support?

    The customer support has been acceptable.

    Which solution did I use previously and why did I switch?

    I previously used a different solution, Sophos, but it was too costly and very limited compared to TrendAI Vision One.

    What was our ROI?

    I have seen a return on investment financially, with up to a 79% reduction in security costs and a 70% faster incident investigation and response time.

    What's my experience with pricing, setup cost, and licensing?

    My experience with pricing, setup cost, and licensing has been quite acceptable, especially with the flexibility of having a credit-based licensing architecture by using TrendFlex.

    Which other solutions did I evaluate?

    Before choosing TrendAI Vision One, I did not evaluate other options.

    What other advice do I have?

    My advice to others looking into using TrendAI Vision One is to utilize the powered API connectors, link your SaaS with Office 365 and endpoint security, and evaluate it thoroughly before proceeding. I would rate this product a 10.

    AbdulAbdul

    Centralized XDR has improved investigations and now simplifies endpoint and email threat response

    Reviewed on Sep 25, 2026
    Review provided by PeerSpot

    What is our primary use case?

    My main use case for TrendAI Vision One is endpoint security, server security, or network security.

    For endpoint server security, we have been using it as an essential endpoint security module where we deploy an agent on the client machines and maintain or monitor application control, firewall, anti-malware, spam, web reputation, spam reputation, and other similar capabilities, which is the same for servers including intrusion prevention and detection and response.

    Furthermore, for the servers, we use it on-prem and on-cloud, specifically on-prem deep security, which we can migrate and integrate to TrendAI Vision One cloud.

    What is most valuable?

    In my experience, one of the best features of TrendAI Vision One is the XDR capability, which involves a centralized console collecting logs from multiple sources, correlating them, and telling us a story.

    TrendAI Vision One positively impacts my organization because it is the tool we utilize more than any other cybersecurity-providing tool, as it has a very user-friendly console that I can easily explain to clients, allowing them to understand and carry forward investigations.

    For specific outcomes or metrics showcasing how TrendAI Vision One has benefited my organization, it includes playbooks that run on the workbench's correlations, correlating all log sets, pinpointing exact alerts so that the SOC team cannot waste more time and can simply investigate and address them.

    What needs improvement?

    An area for improvement for TrendAI Vision One that I notice is on the support side; if any support issues arise or bugs I report can be remediated or addressed more promptly.

    Additionally, regarding needed improvements, I pointed out to Trend Micro an issue related to email security, where an inbound protection policy I created, aimed at handling email attachments above a certain size, resulted in all emails being quarantined, and I reported that TrendAI Vision One lacked the capability to adequately manage this.

    For how long have I used the solution?

    I have been using TrendAI Vision One for more than five years.

    What do I think about the stability of the solution?

    TrendAI Vision One is stable in my experience, but some clients using data centers hosted in the Gulf region, mainly Dubai, face downtime issues.

    What do I think about the scalability of the solution?

    In terms of scalability, it performs well for endpoints, servers, email, network level, and sandboxing.

    How are customer service and support?

    I would rate customer support as average, about four out of five. On a scale of one to ten, I would rate customer support an eight.

    Which solution did I use previously and why did I switch?

    I have not switched from a different solution since my company provides multiple solutions as per client needs, leveraging various security vendors while finding TrendAI Vision One's features user-friendly and easy to understand.

    How was the initial setup?

    My advice to others looking into using TrendAI Vision One is that it is very user-friendly and easy to deploy, requiring some firewall rules, and you can deploy an agent to easily access control and investigate.

    What about the implementation team?

    We are using TrendAI Vision One sensors on endpoints and at the network level as well.

    This coverage is critical for my organization's network because the sensors collect XDR telemetry and forward it to the main console, TrendAI Vision One.

    What was our ROI?

    I have seen a return on investment, as I can affirm that employees save time dealing with complexities from other products due to TrendAI Vision One's ability to address many issues at the investigation, deployment, and analysis levels.

    What's my experience with pricing, setup cost, and licensing?

    Regarding my experience with pricing, setup cost, and licensing, I am uncertain about the exact price but note that TrendAI Vision One has shifted to a credit-based license model allowing flexible use across solutions.

    Which other solutions did I evaluate?

    Before choosing TrendAI Vision One, we evaluated other options including Kaspersky for endpoint security and FortiGate EDR.

    What other advice do I have?

    The governance and security of TrendAI Vision One's AI capabilities are actually good; I notice it provides alerts regarding exposure management and threats, along with compliance scores, overall scores, and risk scores to help mitigate and address concerns.

    In our industry, the top security challenges include securing endpoints against ransomware and malware attacks, which TrendAI Vision One covers well, along with email security.

    My impressions of TrendAI Vision One's ability to provide centralized visibility and management across protection layers are very good, as it collects data from all products and resources, correlating it to tell a cohesive story.

    TrendAI Vision One helps consolidate our use of security vendors and reduces silos, covering key areas such as endpoint encryption, compliance, and vulnerabilities, which I validate and remediate.

    The importance of TrendAI Vision One having AI built into its platform is high, as it helps explain alerts, attack phases, and process chains with ease. I would rate this review as eight out of ten.

    Lahiru Somasiri

    Unified security platform has reduced risk exposure and simplified threat detection and response

    Reviewed on Sep 24, 2026
    Review from a verified AWS customer

    What is our primary use case?

    TrendAI Vision One provides multiple security solutions including email security, endpoint security, XDR, and identity security, as well as cyber risk exposure management.

    For a Sri Lanka organization requesting a tender related to endpoint detection and response (EDR) solutions for their workstations and servers, I proposed TrendAI Vision One Standard Endpoint Protection.

    I also use TrendAI Vision One email security for customer requirements, such as securing their email traffic from attackers, and I have proposed an email security solution as well.

    What is most valuable?

    The best feature that is trending is cyber risk exposure management, which can be used to identify the risk score of the whole organization's security threat landscape.

    In customer environments where separate solutions exist to secure the environment, I integrate those third-party solutions with TrendAI Vision One, which analyzes the whole logs and shows a detailed view of the risk related to misconfigurations, vulnerabilities, and incidents captured from those third-party logs.

    When a customer comes with security solutions for their security landscape, including endpoint security, email security, and network security, I can propose a single solution to cater to all those requirements.

    The single solution approach allows me to avoid a siloed architecture. When I log into the solutions, I can use a single dashboard to navigate all security solutions, including endpoint security, email security, and cyber risk exposure management. Customers can identify their organization's risk and minimize that risk by following the remediation actions shown in TrendAI Vision One platform.

    What needs improvement?

    When it comes to challenges, I am using the Singapore region tenant, and I suggest adding more regions that come with the solution in the future.

    Regarding improvements, I believe they need to develop some dashboards with correlations; that would be better.

    For how long have I used the solution?

    I have been using TrendAI Vision One for nearly three-plus years.

    What do I think about the stability of the solution?

    TrendAI Vision One is stable.

    What do I think about the scalability of the solution?

    TrendAI Vision One now uses credits to manage the licensing part, so if I have free credits, I can utilize them for additional security requirements in TrendAI Vision One.

    How are customer service and support?

    Customer support is reliable. I have access to a support portal where I can raise support tickets according to severity levels, which are responded to quickly based on that severity.

    Which solution did I use previously and why did I switch?

    I started with TrendAI Vision One solution and have exclusively used that.

    What was our ROI?

    After deploying our solutions for customers, I find that there is no need for multiple admins to configure and monitor, as everything works independently from the configuration policies.

    Which other solutions did I evaluate?

    In the market, there are solutions such as Microsoft clouds or SentinelOne. As we are distributors for Trend Micro, I considered Trend Micro for our company domain.

    What other advice do I have?

    They are looking for new solutions with AI involvement while improving their policy levels and dashboards. They are also integrating their AI Chat companion into TrendAI Vision One console.

    Coverage is very critical for my organization's network because the threat landscape is increasing today, and attackers are using new techniques to compromise organizations. This is very critical for security solutions, and TrendAI provides security solutions to minimize the threat landscape.

    When it comes to remote code executions, I can use endpoint detection and response solutions. For spam and phishing mails, I can utilize TrendAI Vision One email security solution.

    These solutions are fully cloud-based, allowing access to the console from anywhere in the world using secure communications through the HTTPS protocol. If deployed as on-premise, I can use secure web gateways to communicate with that cloud console.

    TrendAI Vision One helps consolidate my use of security vendors and reduces silos since it provides multiple security solutions through one single dashboard, including email security, endpoint security, network security, and identity security.

    In today's threat landscape, it is important that TrendAI Vision One has AI built into its platform because I cannot rely solely on signatures, especially with attacks such as fileless attacks. I need AI and ML techniques to identify the behavior of these attacks.

    I use TrendAI Vision One in my hybrid environments to address security requirements, including Azure VMs where I have deployed TrendAI Vision One Server security agents, as well as on-premise deployments such as fingerprint and file servers to secure critical assets.

    TrendAI Vision One helps reduce my time to detect and respond to threats significantly due to its massive threat intelligence and the Zero-Day Initiatives team focusing on zero-day attacks and providing the best possible mitigation actions.

    When it comes to attacks, the solution carries out response actions quickly. I have not heard of any breaches from TrendAI Vision One platform.

    After analyzing logs from third-party solutions, TrendAI Vision One maps the risks and provides mitigation actions to reduce those risks. By following those steps, I can minimize risks.

    I use the cyber risk exposure management capabilities, which show me, for instance, what vulnerable software is installed on endpoints, helping me to identify versions, vulnerabilities, and risk scores. From there, I can determine necessary actions such as patching or protecting with endpoint security solutions.

    I rate this product nine out of ten based on my overall experience.

    Which deployment model are you using for this solution?

    Hybrid Cloud

    If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

    Amazon Web Services (AWS)
    reviewer2649927

    Unified security console has simplified endpoint protection and improved user awareness

    Reviewed on Sep 23, 2026
    Review provided by PeerSpot

    What is our primary use case?

    TrendAI Vision One is used primarily in endpoint security, email security, mobile security, cyber risk exposure management, and XDR.

    For mobile security, TrendAI Vision One is used for mobile threat detection as an MTD solution, and it allows enrollment of both BYOD devices and company-owned devices while providing protection for mobile devices. The solution supports Android, iOS, and similar platforms.

    My main use case for TrendAI Vision One is endpoint security, and I am also familiar with mobile security. TrendAI Vision One functions as a full-fledged next-generational antivirus solution for users, and it prevents malware, viruses, and similar threats. The solution has many machine learning features as well.

    What is most valuable?

    The best feature in my experience with TrendAI Vision One is that when implementing endpoint security and email security for an organization, there is no need to use multiple consoles. With TrendAI Vision One, a single console provides access to all these solutions, making it a comprehensive platform that includes all of the solutions. This consolidated approach is the main usefulness for users.

    TrendAI Vision One can integrate with third-party solutions as well. Regarding usability, I credit TrendAI Vision One since it uses a credit-based model. Additionally, the licensing for TrendAI Vision One is very flexible for users and organizations.

    TrendAI Vision One is a full-fledged platform for combining multiple solutions, making it easy for administrators to navigate and configure the console. It provides comprehensive security for devices and users, and the flexible licensing is very useful for organizations.

    Regarding the platform's ability to provide centralized visibility and management across protection layers, the centralized visibility is really helpful for administrators to configure settings without having to navigate multiple consoles. This streamlines issue resolution and ensures that protection is covered from multiple aspects within the same console.

    TrendAI Vision One has helped consolidate the use of security vendors and reduced silos significantly.

    What needs improvement?

    TrendAI Vision One has recently added updates and new features, which can be a bit confusing. However, those features are helpful but not organized clearly. When an administrator logs into the console, it can be difficult to find some features because of the organization.

    Regarding documentation improvements for TrendAI Vision One, it would be easier with the TrendAI companion. Most of the documentation and answers can be found, but it would be helpful if the company could provide more data sheets or whitepapers as well as configuration support.

    Additional improvements needed for TrendAI Vision One include issues where the console sometimes indicates that services are not available. I believe these issues are being improved, but they do not constantly display as expected.

    For how long have I used the solution?

    I have been using TrendAI Vision One for more than one and a half years.

    What other advice do I have?

    TrendAI Vision One provides more security for users regarding detections and security incidents, such as warnings on unsecured websites and detecting viruses. The solution has really reduced the number of detections over time while providing full protection for users.

    The top security challenge in the industry is user awareness since users are often unaware of the dangers posed by certain applications and websites. TrendAI Vision One helps address this issue by providing user awareness training, such as phishing campaigns that inform users to avoid threats.

    My main advice for others considering TrendAI Vision One is that it provides both basic and advanced protection for every user, while the licensing is very flexible compared to other solutions. With TrendAI Vision One, most features are included in basic licensing, unlike other solutions that require payment for simple features.

    TrendAI Vision One is a great solution for users requiring advanced protection. Over the past 20 years, it has provided as many features as possible for every user, so I can confidently recommend it for organizations. I would rate this solution an 8 out of 10.

    YFT

    Centralized threat visibility has improved response times and simplifies incident investigations

    Reviewed on Sep 23, 2026
    Review provided by PeerSpot

    What is our primary use case?

    The main use case for TrendAI Vision One in my organization is that we manage client assets such as endpoints, servers, and email.

    What is most valuable?

    TrendAI Vision One has positively impacted my organization. TrendAI Vision One has helped us reduce the time to detect and respond to threats, as with the correlation of events across various security layers, I benefit from a complete view of incidents from a single platform without the need to jump around.

    The investigation and alert prioritization tools expedite analysis significantly, automating many detection and containment tasks even before the analyst reviews the event viewer.

    What needs improvement?

    I think there are quite a few things that could improve TrendAI Vision One. The console or the graphical interface of the console is a bit complex, with several sections for each module where information is spread out among them and some is repeated across sections. Console updates change the layout of sections and modules significantly, without any notice or alert informing me of these changes. The APIs section is also a bit confusing, as I understand there is a general API, but then each module has its own, and it is not very well explained when to use one or the other.

    Vendor support can feel random; depending on who you get, resolving an incident can be easy or very difficult. Some support members do not have sufficient knowledge about the platform or the relevant concepts, and response times can be very variable—sometimes they can respond the next day or it can take a week. If it is a serious incident, you might be stuck for the entire week. Report generation is a bit basic; the reports are simple and I cannot customize them effectively. Licensing is also confusing because we seem to have the same license duplicated with similar functionality for different teams, which is not clearly reflected.

    At the Endpoint Security level, the agents being used in TrendAI Vision One have several problems; we frequently encounter incidents where the agent consumes resources uncontrollably. Many servers or endpoints can manage this easily, but some have limited resources and processing power. It often interferes with the company's internal processes, creating delays, communication issues, and data loss, forcing us to disable modules on machines. Furthermore, support for different operating systems is limited; many clients use devices with older, unsupported operating systems, resulting in fewer modules being available.

    At the Cloud level, I also experience several issues with Cloud Email Gateway Protection in TrendAI Vision One, such as problems with DKIM validation where the platform often fails to provide clear information on whether the cause is a poorly made signature or DNS resolution failures; sometimes the header indicates the absence of a DKIM signature when there actually is one. Additionally, the API for Cloud Email Gateway Protection has limitations, such as a 72-hour log retrieval limit that feels excessive. I also cannot filter mail traffic by user or specific address and must retrieve the entire domain's data. This means pulling in around 300,000 emails for a 24-hour period only to filter it myself, which consumes resources and time. Certain functions are available in the console but not through the API, which I find critical. Lastly, we have faced issues where emails that should bypass Inbound Protection based on our defined rules still get blocked, which does not make much sense.

    For how long have I used the solution?

    I have been using TrendAI Vision One for one year and five months.

    What do I think about the stability of the solution?

    Overall, it has proven to be a pretty stable platform. The main services, dashboards, APIs, and security modules generally provide consistent availability and performance. Of course the are some occasional issues, specially during maintenance, service updates, or when processing a high volume of data, but these don't significantly affected the overall reliability of the platform in our experience.

    What do I think about the scalability of the solution?

    It offers a very strong scalability, particularly for enterprise environments with a large number of users, endpoints, and security events. The platform also provides a centralized visibility of the security layers and products, which makes it really easy to manage a growin environment without increasing the operational complexity.

    How are customer service and support?

    4

    Which solution did I use previously and why did I switch?

    No

    How was the initial setup?

    I didn't took part on that process

    What about the implementation team?

    I didn't took part on that process

    What was our ROI?

    We have, but I can't share any data

    What's my experience with pricing, setup cost, and licensing?

    I didn't took part on that process

    Which other solutions did I evaluate?

    I didn't took part on that process

    What other advice do I have?

    The features of TrendAI Vision One are really useful and have improved my work. The main security challenges in my sector include managing diverse threats. I have covered everything I had to say and do not remember anything else important that I have left out. My review rating for TrendAI Vision One is 8.

    AhmedEl-Tayeb

    Centralized security visibility has improved threat response while kernel-level impact needs work

    Reviewed on Sep 08, 2026
    Review provided by PeerSpot

    What is our primary use case?

    TrendAI Vision One has helped my customers consolidate their use of security vendors and reduce silos. If you purchase multiple technologies or products provided by TrendAI, that unified visibility console gives you full visibility across all the products provided by TrendAI across the network. This facilitates management and policy deployment for customers.

    My customers do not purchase TrendAI Vision One directly from TrendAI or from any third party. TrendAI is not considering selling directly to end users unless it is a big corporate arrangement or an OEM agreement. Usually, sales should occur through a reseller, then a distributor, or directly through a distributor to TrendAI.

    What is most valuable?

    User behavior analysis is the most important feature of TrendAI Vision One, in addition to the zero-day feature within that application. When customers upsell or add an XDR license, the product becomes a closed, solid endpoint protection solution that wins against the competition.

    TrendAI Vision One has helped my customers consolidate their use of security vendors and reduce silos. If you purchase multiple technologies or products provided by TrendAI, that unified visibility console gives you full visibility across all the products provided by TrendAI across the network. This facilitates management and policy deployment for customers.

    What needs improvement?

    TrendAI Vision One should learn from its competitors that having everything managed in one single platform gives strength to the product itself. However, instead of focusing on easing access for administrators, they should pay more attention to development itself and staying up to date. There was an initiative in the early days called Zero-Day, which means that before a threat is announced, they would hire specialists who immediately learn about threats and push updates directly to the product.

    Customers are protected even before the threat is announced. Currently, the Zero-Day initiative is not as active as it once was.

    Additional features I expect from TrendAI Vision One in the future to make it more competitive could be more technical in nature. A product working on the kernel level of a PC, machine, or server consumes significantly more resources than other products that work on runtime memory. If an application is attached to the operating system of the machine itself, it consumes more resources from the PC or server than running that product on the memory level. Memory-level products read all running activities across the memory when the machine is on, and when they detect malicious activity, they cut or end the session, which is lighter on the operating system and does not consume many resources.

    For how long have I used the solution?

    I have been working with TrendAI Vision One for around five years.

    How are customer service and support?

    TrendAI Vision One's technical support is adequate because they recently implemented a good methodology of supporting their customers. They initiated a Major Service Center divided across the globe, with a dedicated support center for the Middle East, another for Europe, a third one in the American market, and a final one in Singapore dedicated to supporting Far East customers. This has enhanced their support.

    What gives more strength to their products is that they enable business partners, distributors, resellers, and others with sufficient tools to identify problems and provide first and second level support themselves. When an engineering intervention is needed, the case can be escalated to their support team, which is more effective than the old model. They initiated this Major Service Center two or three years ago, which makes it easier for customers and enhances support.

    What other advice do I have?

    My impressions of TrendAI's ability to provide centralized visibility and management across protection layers are positive. They had, in the early beginning, a unified management console called Apex One. The commercial name has changed over time, and it is now called Apex Central. TrendAI Vision One Apex Central gives full visibility across the customer network, including all solutions provided by TrendAI, with unified visibility, policy deployment, and plug-in extensibility.

    TrendAI Vision One has helped my customers reduce their time to detect and respond to threats. There have been a few incidents where intruders could get into the network even while the product was deployed. TrendAI ranks third globally as an endpoint or EDR solution. There are pros and cons to the product. I would rate TrendAI Vision One between seven and eight out of ten.

    My customers may use the Cyber Risk Exposure Management capabilities of TrendAI Vision One. However, I do not think they are using or activating that feature because it can conflict with other products. Most banking customers prefer not to activate EDR and endpoint protection from the same vendor, as a compromise could become a significant issue. Therefore, I did not use this feature.