TrendAI Vision One™ (PAYG)

Most customers want their security posture to come under one umbrella, and that's why TrendAI Vision One comes into the picture with a broader spectrum of solutions. TrendAI is one of the top leaders in the market for this reason.

One of my customers wanted a solution for email security and endpoint detection and response. Previously, he was using multiple OEMs for the same solutions. After I introduced TrendAI Vision One to them, they can manage their endpoint DLP, EDR, and email security under one umbrella.

I am using TrendAI Vision One on endpoint devices because we need to secure endpoints, which are very vulnerable since users don't know much about cybersecurity. We have to protect end users from these vulnerabilities.

I have noticed the IT team has less to worry about after implementing TrendAI Vision One because they are not managing multiple tools. They are using TrendAI Vision One, and it has a broader spectrum with all the solutions I have discussed coming under one umbrella, so they don't need to use multiple dashboards.

TrendAI Vision One has a broader spectrum as a security vector and gives a much broader view of security posture. It has XDR capabilities that provide a broader spectrum for firewalls, endpoints, and logs.

The main challenge was the multiple solutions the customer was using previously. They had a very large portfolio of dashboards to monitor, and TrendAI Vision One provides a solution that comes under a single umbrella. They can now manage their devices from a single dashboard.

After implementing TrendAI Vision One, my customer is very satisfied because it provides a broader spectrum. Attacks are stopped in the initial stage, and it is securing around 80% of their attacks.

They have reduced alert fatigue by 40%.

The time saved from false positives was around 40% to 50%.

TrendAI Vision One does not have a standalone EDR, but it gives XDR capabilities within their EDR. That is why I think it's a good solution.

The XDR capabilities stand out for my customers as they can integrate their endpoint detection and response with their firewalls, SIEM tools, log management tools, and multiple other solutions. This provides a broader spectrum of their cybersecurity.

TrendAI Vision One is doing very well with AI capabilities and came with AI much earlier than their competitors. Many OEMs are still working on their AI implementations, while TrendAI Vision One has already launched their AI.

It gives all the solutions under one umbrella, which makes it a good solution.

TrendAI Vision One is a very good product, but it could be a lighter agent so the machines it is installed on experience less impact.

The services can be improved and the agent is very heavy on machines, so it could be lighter. The governance and security are good, but they can be improved because many competitors in the market provide much more governance and security options.

I am a vendor that provides solutions to different companies. I do not personally use TrendAI Vision One, but I provide solutions with TrendAI Vision One to other customers.

The only issue I have faced, and my customers have faced, is with TrendAI's service quality. In India, the services are a bit slow and could be improved because customer service is very important.

TrendAI Vision One is a SaaS-based service deployed on the cloud. Customers have deployed it on their endpoint devices and can manage it through the cloud.

TrendAI Vision One provides their own cloud-based services because it is a SaaS-based service. Customers do not have to provide a server for the agent. It runs on their laptops and can be managed through TrendAI Vision One cloud.

I give TrendAI Vision One an eight out of ten.

I would tell others that they should try TrendAI Vision One. Complete a demo and you will notice the change they are making. The AI vector is very good, and the security they are providing is very strong.

In my daily work as an L1, we use TrendAI Vision One primarily as an XDR platform for cross-layer threat detection and response. It acts as our unified console for monitoring endpoint activity alongside our SentinelOne EDR and feeding into our SIEM tools. The biggest use case for us over the past three months has been correlated detection across multiple vectors. Instead of treating isolated alerts independently, TrendAI Vision One correlates telemetry to give us a clear view of attack behavior and potential compromise paths. When a high-severity alert triggers, I can quickly inspect the execution chain and identify affected assets and initiate immediate actions directly from the platform.

On a day-to-day basis, my routine with TrendAI Vision One starts by checking the Workbench tab to review the prioritized and correlated alerts that came in during the shift. Instead of digging through thousands of raw alerts, I look at their pre-filtered groupings, and I spend my time triaging the execution chain, checking file hashes, and reviewing the process trees to see what actually happened. If something looks malicious, I can quickly pull up the endpoint telemetry and see the user and host impact and take immediate containment action, such as isolating the machine or killing a rogue process, right from the console before documenting the incident.

In our organization, we deploy TrendAI Vision One across our entire hybrid enterprise infrastructure. We have it active across all key endpoints, server workloads, and critical network segments to ensure cross-layer visibility. It integrates alongside our existing security stacks, streaming data into our SIEM platform such as Splunk and FortiSIEM, and pairing with SentinelOne on the endpoint. This deployment setup allows us to monitor our internal infrastructure and client-side infrastructure, as well as remote user endpoints from a single central console, ensuring that any threats spreading across different parts of the organization are correlated into one unified alert stream.

Based on client requirements, we deploy TrendAI Vision One sensors on endpoints, servers, and also on network devices such as firewalls and web application firewalls. The deployment is totally dependent on the client's requirement, what assets they have, and what they want to integrate in our services.

From a metrics perspective, the positive impact over the last three months has been huge for our shift efficiency. The biggest change is in our Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR). Before, piecing together raw logs from different sources to validate an alert took significant time. With TrendAI Vision One automatically correlating telemetry into a single Workbench incident, our triage time for correlated alerts has dropped by almost 40 to 50 percent. Another key metric is alert noise reduction. Instead of dealing with hundreds of individual, low-confidence alerts triggering separately, the platform consolidates them into actionable attack stories that mean far less alert fatigue for us, initial triage, and much faster containment action when a genuine incident occurs.

In terms of security challenges, in the managed security and enterprise IT sector, the top security challenge we face daily is alert fatigue driven by multi-vector attack complexity. Today's threats do not hit a single layer. An attacker might enter via phishing mail, run an obfuscated script on an endpoint, and attempt lateral movement toward cloud or server infrastructure.

TrendAI Vision One fixes this through cross-layer XDR correlation. Instead of throwing 50 separate low-level alerts at us for one incident, TrendAI Vision One automatically correlates telemetry across email, endpoint, server, and even network layers into a single Workbench incident. Its Attack Story Visualization maps out the full attack tree, showing exact processes, parent-child relationships, command-line execution, and network connections. It also has automated and rapid response capabilities that enable immediate and high-confidence containment directly from an incident view, such as network isolation or process termination, which drastically cut down our overall Mean Time to Detect and Mean Time to Respond.

In terms of cyber risk, TrendAI Vision One reduced our cyber risk in three main capabilities. Early threat detection and correlation continuously monitors multi-layer telemetry across endpoint, network, and email, allowing TrendAI Vision One to catch threats at the initial access phase such as phishing and suspicious script execution, before they can escalate into a full-scale breach or ransomware event. Attack surface and risk exposure management proactively identifies vulnerabilities, unpatched systems, risky user behavior, and misconfigurations. Instead of just reacting to active alerts, we get visibility into exposed assets, so we can patch or harden them before attackers exploit them.

Though I do not have an accurate estimation, I can provide the following reductions: 40 to 50% reduction in Mean Time to Respond, with our average response time for high-confidence incidents dropped from over 45 minutes down to under 20 minutes because our Workbench automatically builds an execution tree, eliminating manual log hunting. We achieved a 35% reduction in alert fatigue by consolidating hundreds of isolated low-priority alerts across email and endpoint vectors into a prioritized single incident Workbench story. False positives and alert noise dropped by over 60%, and containment time decreased by over 60% as well. Using direct response actions such as one-click host isolation or automated playbook containment, we reduced initial asset containment time from 15 to 20 minutes down to under five minutes, significantly cutting down the risk of lateral movement. It saved about 20 to 30 minutes on average.

Mean Time to Detect and Mean Time to Respond are the two most critical operational metrics we track with TrendAI Vision One. Mean Time to Detect measures how quickly we identify a security threat from the moment it enters the environment. With TrendAI Vision One's automatic correlation, our Mean Time to Detect has dropped significantly because the platform instantly flags multi-vector telemetry without us needing to wait for raw logs to be manually passed or indexed across multiple tools. Mean Time to Respond measures how fast our L1 team can triage, validate, and contain a detected threat. TrendAI Vision One reduced our Mean Time to Respond by about 40 to 50% because the Workbench maps out the entire execution chain into a single attack story.

TrendAI Vision One reduces our Mean Time to Detect and Mean Time to Respond because it detects almost instantly through automatically connecting signals across endpoints and other devices and networks. This reduced our team workload and helped us to focus more on critical threats.

TrendAI Vision One helped our organization to manage its security structure by giving cyber risk environment or cyber risk capability insights. One thing I learned about TrendAI Vision One is its phishing simulation capability, which allows us to conduct phishing simulations in our internal corporate environment.

In terms of features, there are many features in TrendAI Vision One. The absolute best feature is the Workbench and its attack story capability. In a busy SOC, alert fatigue is real, but TrendAI Vision One automatically groups related or lower-level alerts into a single incident and maps out the whole timeline. It tells the story of how an attack happened from start to finish, showing the connection from initial entry to process execution. In terms of workflow value, this saves me hours of manual correlation. Instead of jumping between different tools or hunting through raw logs to connect the dots, I just open the Workbench, read the alert story or attack story, and instantly understand the entire scope. It turns a complex investigation into a clear, step-by-step path, which makes my triage much faster and lets me take confident containment action right away.

From an automation perspective, TrendAI Vision One's playbook execution and automated response features are really valuable for our L1 team. In our workflow, when the platform detects a high-confidence malicious behavior, such as a known ransomware payload or clear malicious process execution, it can automatically trigger a containment action. For example, it can automatically isolate the host from the network, terminate the malicious process, or block a malicious IP across the enterprise. This automation takes a massive load off our shoulders during a high-volume shift. It handles the immediate, time-sensitive containment automatically, which gives us time to review the attack story, do the root cause analysis, and then coordinate with our SOAR tool or escalate if needed.

Regarding AI capabilities, TrendAI Vision One's AI features, specifically around Companion AI and predictive risk insights, bring real value, but also come with key considerations for government and strict security compliance environments. Generative AI and Workbench Summarize allow the AI Companion to help by summarizing complex execution chains into plain English for an L1 analyst. It quickly explains what a malicious script did or translates complex telemetry into an actionable summary. This speeds up triage during high-volume shifts. Overall, the AI capabilities act as an effective assistant for analysts, making threat hunting and containment faster while maintaining strict enterprise security controls.

When it comes to the accuracy side, the AI in TrendAI Vision One, especially the Companion AI and the automated correlation engine, is very reliable for daily SOC workflows. The best positive is the low false positive rate on high-severity correlation because the AI builds its execution scripts directly from verified multi-layer telemetry, such as endpoint logs combined with email or network data. The attack paths it maps out in the Workbench are highly accurate. When it generates an AI summary or highlights an execution chain, it accurately reflects the actual sequence of events, which prevents us from chasing false positives.

From a central live visibility perspective, TrendAI Vision One acts as a true single pane of glass for our SOC. In a multi-layer security stack where we run SentinelOne, FortiSIEM, Splunk, and CrowdStrike tools, having a central insight across different security layers is vital, and TrendAI Vision One achieves this through two main capabilities.

The first is cross-layer telemetry aggregation. It pulls in signals from multiple vectors, including endpoint, server workloads, network traffic, and email, into one unified console as a unified platform. As an L1 analyst, I do not have to jump between three or four different portals to piece together an incident. The second is unified security control and visibility. It visualizes how a threat crosses security boundaries. For example, if a suspicious file enters via email, drops onto an endpoint, and attempts outbound network communication, TrendAI Vision One connects the dots across email, endpoint, and network security into a single execution graph.

TrendAI Vision One's AI capability is very important for those new to this domain. Some alerts or incidents are new for analysts or our team, so the AI capability between features helps us to understand what happened or what the story is behind the incident.

In terms of improvement, there are a few areas. The first could be reducing console complexity because TrendAI Vision One has so many features and tabs integrated into it. Navigating between different modules can feel overwhelming, especially when you need to quickly locate custom policy settings or historical threat intelligence logs. Second, while the correlation rules work well out of the box, fine-tuning or customizing alert correlation rules can have a bit of a learning curve for L1 analysts. Lastly, search speeds when querying large volumes of historical raw telemetry across multi-tier environments can occasionally lag compared to dedicated SIEM queries. A slightly more streamlined UI and quicker raw search capability would make an already great tool even better.

I have been using TrendAI Vision One for almost three months.

TrendAI Vision One has been very solid in our SOC operations. Since it is hosted on an AWS infrastructure platform, uptime is exceptionally high, and we have not experienced console downtime or outages during critical shifts, ensuring continuous 24/7 visibility. The endpoint sensors run quietly in the background with minimal CPU and RAM footprints. We rarely see system slowdowns or performance complaints from our end users across both Windows server and endpoint machines. Overall, it is a highly stable enterprise-grade platform that our L1 team can count on for real-time monitoring and immediate containment without worrying about infrastructure hiccups.

TrendAI Vision One customer support and technical escalation model has been reliable and responsive whenever our SOC team needed assistance. Technical support tickets raised through the portal are acknowledged quickly. For critical or high-severity issues such as agent conflicts or console configuration bugs, their support engineering team responds within specific SLA windows. Overall, TrendAI Vision One provides strong, enterprise-ready technical support.

We did not use any other solution. This is the first time we used TrendAI Vision One as an XDR tool.

In terms of return on investment, it saved time. As I mentioned before, it is a SaaS platform with AWS infrastructure, so it reduces our reliance on heavy on-premises hardware and database storage for log correlation. It also reduces our manpower requirements.

However, I can speak to how the setup process and usability look from an operational standpoint. TrendAI Vision One uses a flexible credit-based licensing model on Vision One credits. This allows the organization to allocate and adjust licenses as needed across different security layers, whether that is endpoints, server workloads, cloud infrastructure, or email sensors, without being locked into a rigid structure. It is cost-efficient because as a SaaS platform hosted on AWS, it eliminates the need to buy, host, and maintain heavy on-premises hardware or database storage for log correlation, keeping secondary infrastructure costs low.

In terms of setup and deployment experience, deploying the TrendAI Vision One agent is very straightforward via their central management console. In a hybrid environment like ours, pushed deployments across remote and on-premises endpoints take minimal effort. Connecting third-party tools such as streaming alerts into our other SIEM tools is done using pre-built API and connectors, which drastically reduce initial deployment setup time compared to legacy SIEM ingestion setups.

For daily L1 operations, it is extremely intuitive, and the Workbench and Attack Story views do the heavy lifting by visually laying out process trees, which means new analysts can pick up incident triage quickly. While basic triage is very easy, navigating through deeper nested tabs or customizing advanced correlation rules has a slightly steeper learning curve at first. Overall, for day-to-day threat detection and quick containment, it simplifies our workflow efficiently.

There are many other products available in the market, and we compared TrendAI Vision One to other major EDR or XDR platforms in our SOC environment. One of them is CrowdStrike Falcon. CrowdStrike Falcon is renowned for a lightweight agent, threat intelligence, and swift endpoint query speeds. In terms of TrendAI Vision One's credit-based licensing model, which offers more flexibility to shift security allocations across email, server, and endpoint sensors as operational needs evolve, whereas CrowdStrike licensing can become modular and costly as you add separate feature models.

In summary, if you are looking for purely endpoint isolated detection and agent anomaly, CrowdStrike is an industry benchmark. However, for a unified XDR platform that seamlessly ties together email, endpoint, and network telemetry into an intuitive attack story, TrendAI Vision One gives L1 analysts the best overall multi-layer context for fast triage.

I would give an overall score of 8.5 out of 10. I chose 8.5 as an exceptional XDR tool for a SOC L1 analyst because of its automatic threat correlation and how easily it maps out the alert story in the Workbench view. That alone reduces so much alert fatigue and cuts down our triage time significantly. The only reason I am keeping it at an 8.5 instead of 10 is because the console UI can be a bit overwhelming with so many nested tabs, and running deep historical queries on raw data can occasionally feel a little slower compared to dedicated SIEM. However, for detection, visualization, and rapid response, it is a solid, powerful platform.

We use AWS cloud provider as a part of the TrendAI Vision One SaaS platform infrastructure. For our SOC team, using their AWS-hosted cloud model is ideal because we do not have to worry about managing backend service and servers, storage sizing for telemetry, or maintaining infrastructure updates. Everything scales automatically, and the console availability is super reliable, which lets us focus purely on threat monitoring and incident response.

If I were giving advice to another SOC team or industry professionals, I would say not to treat it as just an endpoint tool. The true power of TrendAI Vision One lies in its cross-layered XDR correlation. To see its effect in the capability of XDR, make sure you connect email, network, cloud, and other identity sensors early on. Tying these vectors together is what unlocks the Workbench's full capability to automatically reconstruct complete attack chains. TrendAI Vision One is not just another filtering console; it is an efficient multiplier for your SOC. If you set up multi-integrations properly and empower your L1 team to use the Workbench and quick response controls, you can drastically cut down alert fatigue and respond to threats in minutes rather than hours.

The main use case for TrendAI Vision One is to centralize cyber risk exposure management, threat detection, and automate response across multiple IT environments. TrendAI Vision One can be used in automation, ZTNA, SIEM, and XDR, which are the key use cases.

I use TrendAI Vision One in the XDR and agentic SIEM in which we correlate telemetry across endpoints and cloud networks and various email portals to identify and layer into a single console. This allows us to speed up correlation as early as possible for proactive threat hunting if any suspicious activity is found in our environment. We accomplish this with an automated ticketing process using PowerShell scripts.

Integrating TrendAI Vision One with a third-party SIEM tool like Microsoft Sentinel involves generating one API key and configuring data forwarding either through the native API integration or cloud storage. We are doing this on the same platform, triggering alerts and observing attacks and techniques. Based on that, we can work on these aspects or directly through syslog or CEF forwarding to the service gateway, which is how we are working.

We are using cyber risk exposure management capabilities to identify loopholes and vulnerabilities in multiple environments including assets and VMs. After identifying vulnerabilities, we address the issues through updates or by providing proper classification or justification. Regarding governance, we ensure that every onboarded asset meets proper criteria to avoid future problems.

Sensors are deployed across the organization both physically and digitally and feed data into XDR. We have achieved coverage around 80% using TrendAI Vision One by deploying sensors across endpoints, cloud, networks, email, and collaboration environments.

As of now, we are not using TrendAI Vision One for consolidated security across hybrid environments.

TrendAI Vision One shifts the organization from a reactive detect and respond mindset to a proactive prevention model, continuously scanning the entire enterprise ecosystem, including internal and external assets, cloud workloads, and SaaS applications. The platform proactively identifies security issues including identity security posture management and identity threat detection and response, flagging weak security accounts.

TrendAI Vision One assists analysts in identifying true positives by scanning before any alerts trigger, enabling proactive identification of issues to mitigate potential incidents.

The risk has been significantly reduced, though I cannot provide precise metrics. I would say approximately 50 to 60% risk has been covered due to its proactive threat hunting that searches for suspicious activities and prevents unauthorized access, roughly translating to a 70% risk mitigation in our metrics.

TrendAI Vision One has reduced the time to detect and respond to threats because it triggers a single alert correlating all necessary information, clarifying each detail related to assets and actions.

TrendAI Vision One has helped us reduce false positives significantly. Previously, we received about 100 alerts a day, and now, after using TrendAI Vision One, we are down to around 25 to 30 alerts, saving approximately six hours of analyst work daily across three shifts.

TrendAI Vision One has helped consolidate security vendors and significantly reduce operational silos by providing a unified single pane of glass that covers endpoints, identities, email, and network security while cross-layering XDR correlations to automatically ingest and correlate rich telemetry across all security layers in near real time.

The best feature TrendAI Vision One offers is the native full-stack XDR correlating engine combined with the agentic SIEM architecture. While many platforms merely dump unorganized logs into a central dashboard, TrendAI Vision One utilizes cross-layer telemetry alongside its generative AI assistant to automatically turn thousands of scattered security alerts into a single high-fidelity chronological timeline. This automatically correlates multiple alerts across endpoints and email inboxes, triggering an alert for all these things, radically reducing noise and consolidating hundreds of low-severity alerts into a single workbench alert. This eases the work of analysts and helps them analyze and remediate issues easily. TrendAI Vision One also proactively maps out security risks before attacks happen, feeding proactive vulnerabilities and active threats into the same dashboard.

SIEM teams face alert fatigue and high ingestion costs. Instead of overwhelming the SIEM with thousands of raw logs and fragmented events that teams must manually write and correlate, TrendAI Vision One drastically reduces the SIEM ingestion cost, eliminates complex rule writing, allows us to find patient zero and the impacted assets quickly, and fastens the mean time to respond (MTTR).

The main features that stand out for my team in SOC relate to MTTR. Instead of chasing false positives or digging through raw logs, we can open the SIEM ticket and see the entire scope of the attack via workbench summary and immediately trigger containment actions such as isolating the host or resetting the user's credential. This helps us bifurcate and sort everything into a single dashboard and provide everything in one consolidated view.

TrendAI Vision One translates technical threat data into clear measurable risk metrics that align with normal regulatory frameworks such as HIPAA, GDPR, and ISO 27001, while also automating compliance frameworks and continuously auditing to prepare audit-ready reports. It helps explain cybersecurity technology to non-technical board members and transforms network flows into single intuitive corporate risk scores based on business impact.

The accuracy and reliability of TrendAI Vision One heavily depends on the native cross-layer XDR engine, which is a newer generative AI engine that delivers high reliability for security alerts, vulnerability scoring, and attack path calculations. With the added advantage of global threat intelligence, the output is highly accurate and reliable, serving as an advisory tool where analysts must verify AI-generated summaries and recommendations before executing major network actions.

TrendAI Vision One uses AI and machine learning to shift operations and works to spot hidden anomalies and predict attacks before they happen. This approach ensures the Zero Trust architecture continuously verifies every user's device and network request rather than trusting internal nodes by default, sharply reducing unauthorized access risks. It also aids cloud-native firewalls and monitoring of physical, IoT, and supply chain vetting, which is the importance of the AI component.

TrendAI Vision One facilitates obtaining all data and every aspect through a unified tool, which correlates XDR, SIEM, and DLP parts, allowing quick issue resolution.

It is important for our organization that TrendAI Vision One has AI built into its platform. This allows the tool to operate faster than humans, helping us identify and resolve issues more quickly while still valuing human intervention.

Based on real-world deployments and industry reviews, TrendAI Vision One is highly capable but has some distinct areas for improvement. The platform has a complex interface and steep learning curve since users frequently report that the dashboard and console layout feel cluttered and overwhelming. We also need to address tuning complexity and initial alert noise within the workbench. Additionally, the pricing model and local resource consumption during scans for endpoints running on legacy hardware need improvement, as the Trend agent can sometimes cause noticeable CPU and memory spikes due to full scans in the backend.

Regarding the DLP part related to Microsoft Purview, the native DLP module with TrendAI Vision One is relatively light. Given the highly complex data compliance and structural classification requirements, there should be deeper data tagging capabilities and granular content inspections within the core vision platform to make it easier for analysts to identify and fix issues.

I have been using TrendAI Vision One for almost one and a half years.

TrendAI Vision One is stable.

I rate the scalability of TrendAI Vision One a ten out of ten because it is very helpful for users.

Customer support is quite good. Whenever I reach out, a ticket is raised and responses are received within 24 to 48 hours regarding the actions taken and the person working on that ticket.

I would rate customer support around eight.

We previously used CrowdStrike; however, we switched to TrendAI Vision One because it provides multiple capabilities such as DLP, SIEM, and EDR, which CrowdStrike does not offer.

I have not seen a return on investment through relevant metrics yet, but users find it relevant in our organization. As of now, I have not seen any major return on investment regarding this aspect.

Regarding the pricing, setup cost, and licensing experience, the pricing is a bit high, but it is easy to set up and migrate. While the pricing is higher than normal tools, the accuracy and capabilities provided justify the expense.

TrendAI Vision One was our first priority.

Overall, I rate TrendAI Vision One as a nine.

I choose nine due to some of the improvements I have mentioned earlier. If the DLP part, the consumption part, and pricing model are fixed, then it would be a perfect ten, which explains my rating.

In our organization, TrendAI Vision One is hosted on the public cloud, using a hybrid architecture to monitor and secure infrastructure wherever it resides. The main console, or brain, is integrated with the AI companion used in the SIEM to correlate SIEM engines and analytics for identifying root causes and resolving major threats promptly.

We use Azure and Microsoft Sentinel for our hybrid setup.

My advice for those looking to use TrendAI Vision One is to utilize this tool as soon as possible because it combines multiple capabilities such as XDR and AI to help organizations grow, providing users with proper exposure to how things work and correlate.

My main use case for TrendAI Vision One is endpoint security. I'm using TrendAI Vision One to enhance security across our company endpoints. It is very useful for application blocking for necessary users, and I am using it to stop malware, viruses, and similar threats.

Regarding how I use TrendAI Vision One day-to-day, I find that TrendAI Vision One is a cloud-hosted solution that really helps us improve security in our organization and is helpful to prevent malware and viruses.

I am using TrendAI Vision One sensors at the endpoints. This coverage is critical for our organization's network because it covers our entire endpoints and provides full security.

TrendAI Vision One has positively impacted our organization by improving security and reducing the hazard of needing to switch between consoles since it has one single platform embedded with every solution.

Since using TrendAI Vision One, I have seen user awareness improvement, and users are aware of this, leading to a reduction in malware and viruses since the endpoint agent installation. The time saved for administrators is significant because I have one single console to manage all of the email security, endpoint security, and cloud app security, as opposed to needing many consoles, which takes a lot of time.

I believe the top security challenge in my industry is a lack of user awareness, as users are not aware that these are viruses or malware. With TrendAI Vision One, I have user awareness training, and I can simulate user awareness campaigns, which helps address this issue and has really reduced the number of challenges.

TrendAI Vision One has helped consolidate my use of security vendors and reduced silos. TrendAI Vision One has helped reduce my time to detect and respond to threats, and with the automated tasks and brilliant detections, it has significantly reduced my overall endpoint security time.

The best features TrendAI Vision One offers are that with most of the other solutions out there for endpoint security, I have to purchase an additional license for additional features, but with TrendAI Vision One, it's embedded into one single platform and it's not going to cost so much with the licensing for the features. Those licenses include every feature in that.

The specific features I find myself using most often include automated security playbooks for preventing malware and viruses, which I use after detection.

In addition to the features, I would like to add that TrendAI Vision One also has endpoint security, email security, Zero Trust security access, mobile security, and cloud app security, all embedded into one single platform that is really useful for organizations to enhance their security.

Regarding TrendAI Vision One's AI capabilities, I believe it protects users' data using PCI DSS, according to their website, and it heavily uses AI to automate tasks, which is really helpful for us. When it comes to security, I can trust it because of the TrendAI global market.

In terms of accuracy and reliability of output, I am using TrendAI Companion in TrendAI Vision One console, which is really helpful for configuring XDR components and so on, but sometimes it can be not really accurate, while most of the time it is accurate. It is very important for our organization that TrendAI Vision One has AI built into its platform, as I am using TrendAI Companion to manage XDR features and to write XDR playbooks.

Regarding improvements for TrendAI Vision One, I sometimes wish the features that I didn't purchase could be hidden since most of the features can be seen within the console, making it confusing for users who haven't purchased those licenses.

I would add that when adding new features to TrendAI Vision One, if they can inform us or add them accordingly, it will be easier because new features are added frequently, which can be really confusing for us.

I chose eight out of ten for TrendAI Vision One because, as I mentioned earlier, new features are added here and there, which can be confusing, and it's also confusing to see the features that I have not purchased, which is why I gave it that score.

I think I could probably add a hardware inventory for endpoint security, and most of the time, this is okay.

I have been using TrendAI Vision One for one and a half years.

TrendAI Vision One is stable.

TrendAI Vision One provides great security for every endpoint, network, email, and so on, with a high detection rate.

Customer support for TrendAI Vision One is excellent, and they provide active support for all my tickets. I would rate the customer support a nine out of ten.

I did not use a different solution before TrendAI Vision One.

I have seen a return on investment, as it provides really automated tasks for end users and management with flexible credit usage.

The pricing for TrendAI Vision One is really flexible.

Before choosing TrendAI Vision One, I evaluated other options such as CrowdStrike, SentinelOne, and others.

TrendAI Vision One is deployed in my organization as a SaaS solution. It is hosted in TrendAI Vision One cloud solutions, which I believe involve AWS and Azure, but I don't exactly know the answer because the cloud-hosted databases are managed by TrendAI Vision One, and I don't have access to that. I did not purchase TrendAI Vision One through the AWS Marketplace, as I mentioned earlier, I have no knowledge about the cloud-hosted database because the cloud service is provided directly from TrendAI Vision One without my access.

My advice to others looking into using TrendAI Vision One is that if you are looking for a solution that has more features, this is the solution for you, because TrendAI Vision One has many solutions embedded into one. If you want one single platform for many solutions, this is it. I would rate TrendAI Vision One an eight out of ten.

My main use case for TrendAI Vision One is for incident triage and response management.

A specific example of how I use it for incident triage and response management is the elimination of collateral display and low log management from emails. This is how it helped.

The automated remediation triggers automated commitment actions, isolating infection of the endpoint. This is beneficial and helps significantly.

The best features TrendAI Vision One offers include the powerful threat hunting and AI security capabilities, among the top features mentioned. The AI security analysis allows input of plain language requests for effective endpoint command analysis. Threat hunting assists in identifying alerts. Additionally, real-time inspection of LLM interactions helps secure operations within private and public environments. The centralized Vision One console hosted in a cloud-native environment also contributes greatly by ensuring robust security coverage.

TrendAI Vision One can improve in control responsiveness, particularly in navigating through heavy analytics interfaces like workbench, where execution graphs can experience noticeable latency. This occurs during multi-complex layers correlation and high volume of queries load. Secondly, I suggest improving license and credit allocation transparency.

A deep ecosystem integration with deeper non-Trend native telemetry ingestion would help significantly.

I have used TrendAI Vision One for almost two years.

TrendAI Vision One is stable.

TrendAI Vision One's scalability is quite good; it benefits from cloud-native elasticity, which I use most often. The centralized Vision One console runs in the cloud-native environment, hosted on a public backbone like AWS and Azure. It is very easy for me to automatically scale based on log flow.

The customer support has been acceptable.

I previously used a different solution, Sophos, but it was too costly and very limited compared to TrendAI Vision One.

I have seen a return on investment financially, with up to a 79% reduction in security costs and a 70% faster incident investigation and response time.

My experience with pricing, setup cost, and licensing has been quite acceptable, especially with the flexibility of having a credit-based licensing architecture by using TrendFlex.

Before choosing TrendAI Vision One, I did not evaluate other options.

My advice to others looking into using TrendAI Vision One is to utilize the powered API connectors, link your SaaS with Office 365 and endpoint security, and evaluate it thoroughly before proceeding. I would rate this product a 10.

My main use case for TrendAI Vision One is endpoint security, server security, or network security.

For endpoint server security, we have been using it as an essential endpoint security module where we deploy an agent on the client machines and maintain or monitor application control, firewall, anti-malware, spam, web reputation, spam reputation, and other similar capabilities, which is the same for servers including intrusion prevention and detection and response.

Furthermore, for the servers, we use it on-prem and on-cloud, specifically on-prem deep security, which we can migrate and integrate to TrendAI Vision One cloud.

In my experience, one of the best features of TrendAI Vision One is the XDR capability, which involves a centralized console collecting logs from multiple sources, correlating them, and telling us a story.

TrendAI Vision One positively impacts my organization because it is the tool we utilize more than any other cybersecurity-providing tool, as it has a very user-friendly console that I can easily explain to clients, allowing them to understand and carry forward investigations.

For specific outcomes or metrics showcasing how TrendAI Vision One has benefited my organization, it includes playbooks that run on the workbench's correlations, correlating all log sets, pinpointing exact alerts so that the SOC team cannot waste more time and can simply investigate and address them.

An area for improvement for TrendAI Vision One that I notice is on the support side; if any support issues arise or bugs I report can be remediated or addressed more promptly.

Additionally, regarding needed improvements, I pointed out to Trend Micro an issue related to email security, where an inbound protection policy I created, aimed at handling email attachments above a certain size, resulted in all emails being quarantined, and I reported that TrendAI Vision One lacked the capability to adequately manage this.

I have been using TrendAI Vision One for more than five years.

TrendAI Vision One is stable in my experience, but some clients using data centers hosted in the Gulf region, mainly Dubai, face downtime issues.

In terms of scalability, it performs well for endpoints, servers, email, network level, and sandboxing.

I would rate customer support as average, about four out of five. On a scale of one to ten, I would rate customer support an eight.

I have not switched from a different solution since my company provides multiple solutions as per client needs, leveraging various security vendors while finding TrendAI Vision One's features user-friendly and easy to understand.

My advice to others looking into using TrendAI Vision One is that it is very user-friendly and easy to deploy, requiring some firewall rules, and you can deploy an agent to easily access control and investigate.

We are using TrendAI Vision One sensors on endpoints and at the network level as well.

This coverage is critical for my organization's network because the sensors collect XDR telemetry and forward it to the main console, TrendAI Vision One.

I have seen a return on investment, as I can affirm that employees save time dealing with complexities from other products due to TrendAI Vision One's ability to address many issues at the investigation, deployment, and analysis levels.

Regarding my experience with pricing, setup cost, and licensing, I am uncertain about the exact price but note that TrendAI Vision One has shifted to a credit-based license model allowing flexible use across solutions.

Before choosing TrendAI Vision One, we evaluated other options including Kaspersky for endpoint security and FortiGate EDR.

The governance and security of TrendAI Vision One's AI capabilities are actually good; I notice it provides alerts regarding exposure management and threats, along with compliance scores, overall scores, and risk scores to help mitigate and address concerns.

In our industry, the top security challenges include securing endpoints against ransomware and malware attacks, which TrendAI Vision One covers well, along with email security.

My impressions of TrendAI Vision One's ability to provide centralized visibility and management across protection layers are very good, as it collects data from all products and resources, correlating it to tell a cohesive story.

TrendAI Vision One helps consolidate our use of security vendors and reduces silos, covering key areas such as endpoint encryption, compliance, and vulnerabilities, which I validate and remediate.

The importance of TrendAI Vision One having AI built into its platform is high, as it helps explain alerts, attack phases, and process chains with ease. I would rate this review as eight out of ten.

TrendAI Vision One is used primarily in endpoint security, email security, mobile security, cyber risk exposure management, and XDR.

For mobile security, TrendAI Vision One is used for mobile threat detection as an MTD solution, and it allows enrollment of both BYOD devices and company-owned devices while providing protection for mobile devices. The solution supports Android, iOS, and similar platforms.

My main use case for TrendAI Vision One is endpoint security, and I am also familiar with mobile security. TrendAI Vision One functions as a full-fledged next-generational antivirus solution for users, and it prevents malware, viruses, and similar threats. The solution has many machine learning features as well.

The best feature in my experience with TrendAI Vision One is that when implementing endpoint security and email security for an organization, there is no need to use multiple consoles. With TrendAI Vision One, a single console provides access to all these solutions, making it a comprehensive platform that includes all of the solutions. This consolidated approach is the main usefulness for users.

TrendAI Vision One can integrate with third-party solutions as well. Regarding usability, I credit TrendAI Vision One since it uses a credit-based model. Additionally, the licensing for TrendAI Vision One is very flexible for users and organizations.

TrendAI Vision One is a full-fledged platform for combining multiple solutions, making it easy for administrators to navigate and configure the console. It provides comprehensive security for devices and users, and the flexible licensing is very useful for organizations.

Regarding the platform's ability to provide centralized visibility and management across protection layers, the centralized visibility is really helpful for administrators to configure settings without having to navigate multiple consoles. This streamlines issue resolution and ensures that protection is covered from multiple aspects within the same console.

TrendAI Vision One has helped consolidate the use of security vendors and reduced silos significantly.

TrendAI Vision One has recently added updates and new features, which can be a bit confusing. However, those features are helpful but not organized clearly. When an administrator logs into the console, it can be difficult to find some features because of the organization.

Regarding documentation improvements for TrendAI Vision One, it would be easier with the TrendAI companion. Most of the documentation and answers can be found, but it would be helpful if the company could provide more data sheets or whitepapers as well as configuration support.

Additional improvements needed for TrendAI Vision One include issues where the console sometimes indicates that services are not available. I believe these issues are being improved, but they do not constantly display as expected.

I have been using TrendAI Vision One for more than one and a half years.

TrendAI Vision One provides more security for users regarding detections and security incidents, such as warnings on unsecured websites and detecting viruses. The solution has really reduced the number of detections over time while providing full protection for users.

The top security challenge in the industry is user awareness since users are often unaware of the dangers posed by certain applications and websites. TrendAI Vision One helps address this issue by providing user awareness training, such as phishing campaigns that inform users to avoid threats.

My main advice for others considering TrendAI Vision One is that it provides both basic and advanced protection for every user, while the licensing is very flexible compared to other solutions. With TrendAI Vision One, most features are included in basic licensing, unlike other solutions that require payment for simple features.

TrendAI Vision One is a great solution for users requiring advanced protection. Over the past 20 years, it has provided as many features as possible for every user, so I can confidently recommend it for organizations. I would rate this solution an 8 out of 10.