TrendAI Vision One™ (PAYG)

TrendAI Vision One is used primarily in endpoint security, email security, mobile security, cyber risk exposure management, and XDR.

For mobile security, TrendAI Vision One is used for mobile threat detection as an MTD solution, and it allows enrollment of both BYOD devices and company-owned devices while providing protection for mobile devices. The solution supports Android, iOS, and similar platforms.

My main use case for TrendAI Vision One is endpoint security, and I am also familiar with mobile security. TrendAI Vision One functions as a full-fledged next-generational antivirus solution for users, and it prevents malware, viruses, and similar threats. The solution has many machine learning features as well.

The best feature in my experience with TrendAI Vision One is that when implementing endpoint security and email security for an organization, there is no need to use multiple consoles. With TrendAI Vision One, a single console provides access to all these solutions, making it a comprehensive platform that includes all of the solutions. This consolidated approach is the main usefulness for users.

TrendAI Vision One can integrate with third-party solutions as well. Regarding usability, I credit TrendAI Vision One since it uses a credit-based model. Additionally, the licensing for TrendAI Vision One is very flexible for users and organizations.

TrendAI Vision One is a full-fledged platform for combining multiple solutions, making it easy for administrators to navigate and configure the console. It provides comprehensive security for devices and users, and the flexible licensing is very useful for organizations.

Regarding the platform's ability to provide centralized visibility and management across protection layers, the centralized visibility is really helpful for administrators to configure settings without having to navigate multiple consoles. This streamlines issue resolution and ensures that protection is covered from multiple aspects within the same console.

TrendAI Vision One has helped consolidate the use of security vendors and reduced silos significantly.

TrendAI Vision One has recently added updates and new features, which can be a bit confusing. However, those features are helpful but not organized clearly. When an administrator logs into the console, it can be difficult to find some features because of the organization.

Regarding documentation improvements for TrendAI Vision One, it would be easier with the TrendAI companion. Most of the documentation and answers can be found, but it would be helpful if the company could provide more data sheets or whitepapers as well as configuration support.

Additional improvements needed for TrendAI Vision One include issues where the console sometimes indicates that services are not available. I believe these issues are being improved, but they do not constantly display as expected.

I have been using TrendAI Vision One for more than one and a half years.

TrendAI Vision One provides more security for users regarding detections and security incidents, such as warnings on unsecured websites and detecting viruses. The solution has really reduced the number of detections over time while providing full protection for users.

The top security challenge in the industry is user awareness since users are often unaware of the dangers posed by certain applications and websites. TrendAI Vision One helps address this issue by providing user awareness training, such as phishing campaigns that inform users to avoid threats.

My main advice for others considering TrendAI Vision One is that it provides both basic and advanced protection for every user, while the licensing is very flexible compared to other solutions. With TrendAI Vision One, most features are included in basic licensing, unlike other solutions that require payment for simple features.

TrendAI Vision One is a great solution for users requiring advanced protection. Over the past 20 years, it has provided as many features as possible for every user, so I can confidently recommend it for organizations. I would rate this solution an 8 out of 10.

The main use case for TrendAI Vision One in my organization is that we manage client assets such as endpoints, servers, and email.

TrendAI Vision One has positively impacted my organization. TrendAI Vision One has helped us reduce the time to detect and respond to threats, as with the correlation of events across various security layers, I benefit from a complete view of incidents from a single platform without the need to jump around.

The investigation and alert prioritization tools expedite analysis significantly, automating many detection and containment tasks even before the analyst reviews the event viewer.

I think there are quite a few things that could improve TrendAI Vision One. The console or the graphical interface of the console is a bit complex, with several sections for each module where information is spread out among them and some is repeated across sections. Console updates change the layout of sections and modules significantly, without any notice or alert informing me of these changes. The APIs section is also a bit confusing, as I understand there is a general API, but then each module has its own, and it is not very well explained when to use one or the other.

Vendor support can feel random; depending on who you get, resolving an incident can be easy or very difficult. Some support members do not have sufficient knowledge about the platform or the relevant concepts, and response times can be very variable—sometimes they can respond the next day or it can take a week. If it is a serious incident, you might be stuck for the entire week. Report generation is a bit basic; the reports are simple and I cannot customize them effectively. Licensing is also confusing because we seem to have the same license duplicated with similar functionality for different teams, which is not clearly reflected.

At the Endpoint Security level, the agents being used in TrendAI Vision One have several problems; we frequently encounter incidents where the agent consumes resources uncontrollably. Many servers or endpoints can manage this easily, but some have limited resources and processing power. It often interferes with the company's internal processes, creating delays, communication issues, and data loss, forcing us to disable modules on machines. Furthermore, support for different operating systems is limited; many clients use devices with older, unsupported operating systems, resulting in fewer modules being available.

At the Cloud level, I also experience several issues with Cloud Email Gateway Protection in TrendAI Vision One, such as problems with DKIM validation where the platform often fails to provide clear information on whether the cause is a poorly made signature or DNS resolution failures; sometimes the header indicates the absence of a DKIM signature when there actually is one. Additionally, the API for Cloud Email Gateway Protection has limitations, such as a 72-hour log retrieval limit that feels excessive. I also cannot filter mail traffic by user or specific address and must retrieve the entire domain's data. This means pulling in around 300,000 emails for a 24-hour period only to filter it myself, which consumes resources and time. Certain functions are available in the console but not through the API, which I find critical. Lastly, we have faced issues where emails that should bypass Inbound Protection based on our defined rules still get blocked, which does not make much sense.

I have been using TrendAI Vision One for one year and five months.

Overall, it has proven to be a pretty stable platform. The main services, dashboards, APIs, and security modules generally provide consistent availability and performance. Of course the are some occasional issues, specially during maintenance, service updates, or when processing a high volume of data, but these don't significantly affected the overall reliability of the platform in our experience.

It offers a very strong scalability, particularly for enterprise environments with a large number of users, endpoints, and security events. The platform also provides a centralized visibility of the security layers and products, which makes it really easy to manage a growin environment without increasing the operational complexity.

4

No

I didn't took part on that process

I didn't took part on that process

We have, but I can't share any data

I didn't took part on that process

I didn't took part on that process

The features of TrendAI Vision One are really useful and have improved my work. The main security challenges in my sector include managing diverse threats. I have covered everything I had to say and do not remember anything else important that I have left out. My review rating for TrendAI Vision One is 8.

TrendAI Vision One has helped my customers consolidate their use of security vendors and reduce silos. If you purchase multiple technologies or products provided by TrendAI, that unified visibility console gives you full visibility across all the products provided by TrendAI across the network. This facilitates management and policy deployment for customers.

My customers do not purchase TrendAI Vision One directly from TrendAI or from any third party. TrendAI is not considering selling directly to end users unless it is a big corporate arrangement or an OEM agreement. Usually, sales should occur through a reseller, then a distributor, or directly through a distributor to TrendAI.

User behavior analysis is the most important feature of TrendAI Vision One, in addition to the zero-day feature within that application. When customers upsell or add an XDR license, the product becomes a closed, solid endpoint protection solution that wins against the competition.

TrendAI Vision One has helped my customers consolidate their use of security vendors and reduce silos. If you purchase multiple technologies or products provided by TrendAI, that unified visibility console gives you full visibility across all the products provided by TrendAI across the network. This facilitates management and policy deployment for customers.

TrendAI Vision One should learn from its competitors that having everything managed in one single platform gives strength to the product itself. However, instead of focusing on easing access for administrators, they should pay more attention to development itself and staying up to date. There was an initiative in the early days called Zero-Day, which means that before a threat is announced, they would hire specialists who immediately learn about threats and push updates directly to the product.

Customers are protected even before the threat is announced. Currently, the Zero-Day initiative is not as active as it once was.

Additional features I expect from TrendAI Vision One in the future to make it more competitive could be more technical in nature. A product working on the kernel level of a PC, machine, or server consumes significantly more resources than other products that work on runtime memory. If an application is attached to the operating system of the machine itself, it consumes more resources from the PC or server than running that product on the memory level. Memory-level products read all running activities across the memory when the machine is on, and when they detect malicious activity, they cut or end the session, which is lighter on the operating system and does not consume many resources.

I have been working with TrendAI Vision One for around five years.

TrendAI Vision One's technical support is adequate because they recently implemented a good methodology of supporting their customers. They initiated a Major Service Center divided across the globe, with a dedicated support center for the Middle East, another for Europe, a third one in the American market, and a final one in Singapore dedicated to supporting Far East customers. This has enhanced their support.

What gives more strength to their products is that they enable business partners, distributors, resellers, and others with sufficient tools to identify problems and provide first and second level support themselves. When an engineering intervention is needed, the case can be escalated to their support team, which is more effective than the old model. They initiated this Major Service Center two or three years ago, which makes it easier for customers and enhances support.

My impressions of TrendAI's ability to provide centralized visibility and management across protection layers are positive. They had, in the early beginning, a unified management console called Apex One. The commercial name has changed over time, and it is now called Apex Central. TrendAI Vision One Apex Central gives full visibility across the customer network, including all solutions provided by TrendAI, with unified visibility, policy deployment, and plug-in extensibility.

TrendAI Vision One has helped my customers reduce their time to detect and respond to threats. There have been a few incidents where intruders could get into the network even while the product was deployed. TrendAI ranks third globally as an endpoint or EDR solution. There are pros and cons to the product. I would rate TrendAI Vision One between seven and eight out of ten.

My customers may use the Cyber Risk Exposure Management capabilities of TrendAI Vision One. However, I do not think they are using or activating that feature because it can conflict with other products. Most banking customers prefer not to activate EDR and endpoint protection from the same vendor, as a compromise could become a significant issue. Therefore, I did not use this feature.

My main use case for TrendAI Vision One is catching threats across all XDR channels like email, endpoint, Windows server, and Linux server, collecting the alerts so that we can defend against attacks using these channels.

My main use case for TrendAI Vision One is the protection of server-side and email-side infrastructure, where we can use capabilities across all channels. We can prevent attacks and monitor endpoints, check reports, and review workbenches, alerts, and the MITRE attack framework.

Prevention of attacks is more important than just catching threats. The deep security module with IPS protects servers from zero-day vulnerabilities. All alerts and prevention-related information are available in the report.

TrendAI Vision One has different modules, such as the attack surface module, which enables me to see alerts from sites, networks, and email. I can manage my attack surface and understand how to protect internal data more easily with Trend Micro.

The best features TrendAI Vision One offers include strong endpoint protection, endpoint asset management, and the ability to monitor and respond to actions. It prevents issues from the email side and different channels, allows me to start antivirus protection, and makes managing endpoints, computers, and servers straightforward.

TrendAI Vision One positively impacts my organization by providing a budget-friendly solution for security products. Since I am paying for security licenses, I can be confident in my protection with Trend Micro's monthly payment options, including managed detection and response for more secure protection.

These features make my job easier because I can create my own directory structure, establish policies for different organizational units, and easily enable or disable different antivirus modules, such as scheduled scans or script protections, making management straightforward.

TrendAI Vision One can be improved in some areas. I wish the scan modules were better when it comes to patching and following critical zero-day threats. A different dashboard for security assessments would be beneficial and make the solution stronger.

TrendAI Vision One needs additional improvements, but it is already very useful due to the AI and Trend Micro combination.

I have been working with cybersecurity for five years.

TrendAI Vision One is very stable and easy to manage.

The scalability of TrendAI Vision One is good and can support thousands of clients or servers.

Customer support for TrendAI Vision One is very good, and we can reach the support portal and receive help easily.

I previously used different solutions such as Symantec and Kaspersky, but they were less complex and provided fewer security modules compared to Trend Micro.

I have not explicitly calculated the money saved, but it is clear that using one solution on one platform combines the capabilities of different email gateways and network NDRs into one, which offers perhaps two to three times the cost-benefit for overall savings.

My experience with pricing, setup cost, and licensing for TrendAI Vision One is that it is easy to manage, and we can take credits.

I evaluated other options such as CrowdStrike before choosing TrendAI Vision One.

My impressions of TrendAI Vision One's ability to provide centralized visibility and management across protection layers are positive, especially regarding XDR, Deep Discovery inspection, and email inspection.

TrendAI Vision One has helped consolidate my use of security vendors and reduced silos by providing email protection and MDR capabilities, making it very useful without the need to purchase numerous solutions.

It is important for my organization that TrendAI Vision One has AI built into its platform because it enhances our security capabilities significantly.

My organization uses TrendAI Vision One for consolidated security across hybrid environments, which has improved our ability to manage risk by offering solutions that protect both cloud and on-premises services.

TrendAI Vision One has helped reduce my time to detect and respond to threats, though I do not quantify the exact reduction.

My advice to others looking into TrendAI Vision One is that if it is important to manage email, attack surfaces, server-side IPS, and zero-day protection, it is the best choice with Trend Micro. I would rate this product an eight out of ten.

A common use case for TrendAI Vision One is ransomware detection and response, and we also use it for business email compromise. Our SOC team uses it for advanced threat hunting and insider threat detections.

Recently, my team used TrendAI Vision One for ransomware detection and response when a user executed a malicious attachment, leading to the detection of suspicious process executions. TrendAI Vision One helps us by correlating emails with endpoints, identifying host details, network activity, user device activity, and infected sources, allowing for quick resolution of threats in the organization.

We have also been using TrendAI Vision One for identifying suspicious or compromised emails and insider threat detections, which aids us in quickly identifying and investigating malicious emails.

TrendAI Vision One offers excellent extended detection and response capabilities through EDR and XDR solutions, as it is a complete package for organizational threat protection across email, endpoints, cloud networks, servers, and data centers. It helps us quickly identify attacks and provides deep insights into attacker movements as well as a centralized investigation workbench from a single dashboard.

Having everything in one dashboard allows our SOC team to quickly identify details across the network or organization level, such as the number of created tickets, false positives, true positives, actions taken, SLAs, threat metrics, and attack path details. It reduces alert fatigue for SOC analysts by providing a consolidated view of all details across the organization.

TrendAI Vision One has positively impacted our organization by identifying real-time threats and proactively isolating threats while alerting the SOC team for further investigations and remediation actions.

Since implementing TrendAI Vision One, it has reduced noise from false positive alerts by 80% and enabled the SOC team to focus on true positives, thus improving incident response and operational efficiency. TrendAI Vision One is highly reliable; it provides centralized visibility across protection layers and is stable and scalable, making it a suitable solution for organizations looking for thorough threat detection and response capabilities.

I believe that if the reporting features of TrendAI Vision One could be improved, it would help SOC analysts retrieve comprehensive reports detailing true positive incidents, top email threats, quarantined emails, and common malware, enhancing our analytics capabilities.

The TrendAI Vision One support system is not very good. They charge extra for premium support, while basic support does not adequately assist with investigations and troubleshooting. Improvements in this area are needed, and there should also be enhancements in third-party integrations to reduce alert noise and false positives.

TrendAI Vision One's governance and security capabilities are excellent, and while the security is always very good, they can still improve on compliance and regulations.

If they fix automated root cause analysis reports and AI-generated incident summaries, it can enhance capabilities further and reduce investigation times.

I have been using TrendAI Vision One for more than two years.

TrendAI Vision One is stable.

TrendAI Vision One is highly scalable as per our requirements, as user licenses can be improved if we have a greater number of users.

The customer support is not very good, and they need to improve their premium license support.

Previously we were using a different endpoint solution due to setup cost and support issues, so we switched to TrendAI Vision One for better SOC capabilities for threat detection.

My experience with pricing, setup cost, and licensing was very good. The top leadership is engaged in identifying pricing and licensing features, although licensing renewal is challenging and the setup cost can be high, but it remains manageable for quality solutions.

We evaluated other options such as FireEye Helix, Symantec, and Microsoft Sentinel during our assessment process.

My advice to others looking into using TrendAI Vision One is to definitely proceed with this solution as it is a complete package for SOC teams regarding threat identification and remediation, although there is room for improvement in support. This review has a rating of 9.

In terms of the VDR, we are doing the Sophos entire solutions. We are doing the firewall, as well as endpoint, as well as email security.

When it comes to SophosLabs Intelix or Sophos Cloud Optix, basically, we are working with Sophos XDR and MDR right now.

As a partner, we have so many clients who are serving the Extended Detection and Response, and some users are just selling the Sophos Managed Detection and Response services. Basically, it's XDR, it's a tool, and MDR is managed by the Sophos security team 24/7. So, we are selling the Sophos MDR.

On the firewall side, we are doing the Sophos firewall, SonicWall firewall, and FortiGate.

We are dealing with Trend Micro for EDR and XDR.

We have been doing this product for the last 10 years, actually. Ten plus years we have been doing this product—Sophos entire solution and Trend Micro entire solution. Trend Micro has so many products, including anti-APT and IDS, IPS device.

For TrendAI Vision One, I have many corporate users who are using it for their servers' security, as well as the IDS, IPS device and TippingPoint, SMS gateway, and so on.

TrendAI Vision One has core features, such as endpoint, email, identity, servers, cloud workloads, and networks. When we talk about endpoint security, it includes anti-malware, anti-ransomware, behavioral analysis, exploit protections, device control, application control, post firewall, and EDR capabilities for the threat investigation and response. These are the TrendAI Vision One features.

Regarding TrendAI CReM capabilities, the threat hunting includes searching across telemetry data, IOC sweeping, root cause analysis, and advanced investigation tools. When we talk about the CReM features, they provide visibility into endpoints, server, cloud workloads, and identities. They help to identify unknown or exposed assets in the environment, then asset discovery, vulnerability management, and attack surface management.

My impressions of TrendAI Vision One include risk prioritization analysis, security posture, and assessment. Right now, I am working with Sophos in Sophos XDR.

I just appreciate the Sophos server protection and its lockdown features. When I whitelisted some applications, other executable files or any files do not run in the environment. I compare Sophos EDR with Sophos XDR, Endpoint Detection and Response, and Extended Detection and Response. When we're going with Sophos XDR, they have email, identity, firewall, cloud, and any third-party integrations.

I am focusing on the Sophos product, but as per the client requirement, I recommend Sophos because the clients are using a parameter gateway with a Sophos firewall. I pitch Sophos because they enable Heartbeat security, so the firewall and endpoint communicate effectively. It's a good bundle when combining Sophos firewall with Sophos endpoint.

Some users using Sophos require on-premises solutions and do not move to the cloud. So many reasons exist for this, which is why we pitch server solutions. Trend Micro server protection is a really good product, but my query always relates to support; I cannot get immediate support from Trend Micro.

For TrendAI Vision One, I have many corporate users who are using it for their servers' security, as well as the IDS, IPS device and TippingPoint, SMS gateway, and so on.

TrendAI Vision One has core features, such as endpoint, email, identity, servers, cloud workloads, and networks. When we talk about endpoint security, it includes anti-malware, anti-ransomware, behavioral analysis, exploit protections, device control, application control, post firewall, and EDR capabilities for the threat investigation and response. These are the TrendAI Vision One features.

Regarding TrendAI CReM capabilities, the threat hunting includes searching across telemetry data, IOC sweeping, root cause analysis, and advanced investigation tools. When we talk about the CReM features, they provide visibility into endpoints, server, cloud workloads, and identities. They help to identify unknown or exposed assets in the environment, then asset discovery, vulnerability management, and attack surface management.

I appreciate the Sophos server protection and its lockdown features. When I whitelisted some applications, other executable files or any files do not run in the environment. I compare Sophos EDR with Sophos XDR, Endpoint Detection and Response, and Extended Detection and Response. When we're going with Sophos XDR, they have email, identity, firewall, cloud, and any third-party integrations.

I am focusing on the Sophos product, but as per the client requirement, I recommend Sophos because the clients are using a parameter gateway with a Sophos firewall. I pitch Sophos because they enable Heartbeat security, so the firewall and endpoint communicate effectively. It's a good bundle when combining Sophos firewall with Sophos endpoint.

From my perspective, the only disadvantage in TrendAI Vision One is the support size.

The support takes too much time. When I email, I have to collect logs and submit them to the engineer, then wait for their reply. It takes too much time. The product is really good, but the support is not good in my perspective since it takes too long to receive help, especially when all the devices are in production.

The price is high when compared to the features. After installing the product, support is always required. Whenever we deploy any product, we need support, especially if an issue arises, support is a must.

We face lots of challenges, but the product itself is good. The main issues arise from support.

Some users using Sophos require on-premises solutions and do not move to the cloud. So many reasons exist for this, which is why we pitch server solutions. Trend Micro server protection is a really good product, but my query always relates to support; I cannot get immediate support from Trend Micro.

Trend Micro is a really good product, but I face challenges when not getting proper support; hence I feel helpless at times. The product itself is really good; I have no doubts about that.

We have been doing this product for the last 10 years. Ten plus years we have been doing this product—Sophos entire solution and Trend Micro entire solution.

The support takes too much time. When I email, I have to collect logs and submit them to the engineer, then wait for their reply. It takes too much time. The product is really good, but the support is not good in my perspective since it takes too long to receive help, especially when all the devices are in production.

From my perspective, the only disadvantage in TrendAI Vision One is the support size. Sophos support is really good, but when I require immediate support from Trend Micro, it is a challenge.

TrendAI Vision One is easy; deployment is not a problem.

We are dealing with Trend Micro for EDR and XDR.

My impressions of TrendAI Vision One include risk prioritization analysis, security posture, and assessment. Right now, I am working with Sophos in Sophos XDR.

When we talk about the CReM features, they provide visibility into endpoints.

I would rate Trend Micro support a six to seven, possibly seven to eight.

The interface and everything are good; my only query is on the support, which is not good from my perspective.

Some limited corporate users and some government users choose Trend Micro instead of Sophos.

Trend Micro is a really good product, but I face challenges when not getting proper support; hence I feel helpless at times. The product itself is really good; I have no doubts about that.

I would rate this review an eight overall.

I use TrendAI Vision One for endpoint devices mostly, including antivirus, EDR, and XDR capabilities.

TrendAI Vision One solved a problem for me when there is a vulnerability in some endpoint device. I use it for email security as well, as it stops phishing attacks and similar threats.

Regarding my main use case for TrendAI Vision One, brand incident response serves as a central platform for day-to-day security operations.

I find particularly valuable features include centralized visibility, attack correlation, automated response, and reporting.

I mostly rely on endpoint vendors because they are the most valuable for me and help clients protect their environments. Incident correlation and XDR investigation, along with centralized security visibility, are also great. Threat intelligence and risk analysis are important features as well.

The network device functionality seems very interesting to me, as it allows me to see all the traffic in the environment. I must test it to understand how it works.

On the endpoint devices, I see the benefits because they are the only antivirus that stopped crypto-virus on my environment. I trust this solution fully. I think it offers faster threat detection and response than other platforms, and I have more efficient incident investigation as a result.

TrendAI Vision One provides a strong approach to governance and security by focusing on control, the use of AI, data protection, and responsible threat analysis. The AI capabilities help security teams analyze large amounts of security data. Overall, I think it is a solid solution.

The credits system is a little bit confusing to use. Licensing and feature management could be improved.

There are too many things in the console, and I wish it would be more streamlined. I want a more intuitive and user-friendly console.

I think the console could be more user-friendly and the credits system is confusing. Overall, I think it is great and has great transparency, but more customization options would be beneficial.

I have been working with Trend Micro for about ten years.

I purchased TrendAI Vision One with a partner called Exclusive Networks.

The implementation partner is just the seller to me for licenses.

I have been working with TrendAI Vision One for about two years. Before this, I was working with Worry-Free Business Security Services. My overall review rating for TrendAI Vision One is eight out of ten.

My main use case for TrendAI Vision One is that I mostly rely on the Workbench section and working through alerts, viewing events. I also use XDR Data Explorer extensively, as well as the Response Management section.

For example, we had a client who ran a script for the activation of Windows operating system and Office tools, but that script is somewhat illegal and sourced from GitHub. I received an alert that a script running from GitHub had been downloaded, so I opened my alert from the Workbench section and viewed the event. I saw the host name and searched the host name through the XDR Data Explorer to see how the user managed to access that GitHub repository. I discovered that it was actually a user execution, so the user genuinely performed that action. I made a response and also sent an email to my client explaining what happened.

I use TrendAI Vision One extensively for response management in that way and for scanning the hosts for malware.

In my opinion, one of the best features of TrendAI Vision One is the fact that you can intuitively see what is happening on one host without getting a lot of noise in the way.

There is not a specific function, but there is an option in XDR Data Explorer to investigate a certain host, so you can focus on one host and not query the whole environment.

I have noticed that our triage with TrendAI Vision One is better, faster, and more concise.

TrendAI Vision One helped us with its visualization. For example, when I view the event, there is a Process Timeline Tree, and I can see what happened. I can quickly see what assets are being affected by something.

Regarding TrendAI Vision One's AI capabilities, I think its security aspect is strong because it gives you a good picture of how our sensors are deployed, the agents deployed, their versions, and if their versions are updated or not.

I have used TrendAI Vision One's AI capabilities from time to time, and it is very good at explaining its events in a way that if I am not sure what happened in an event or alert, it can concisely tell me what is going on. I think it is pretty trustworthy since it is not jumping to conclusions.

TrendAI Vision One can definitely do better in the XDR Data Explorer part, where it could expand its query language to allow for summarizations or some kind of table view, not just simple operators like AND, OR, IS, and IS NOT. It could definitely improve by creating some sort of visualizations.

When investigating a host, it might be better if the table shown is more readable or if the table would be exportable. When I investigate a host and it gives me a table, I could export the table and look at it through Excel.

I have been working in my current field for about eight months.

TrendAI Vision One has been mostly reliable; it did have some downtimes, but they were temporary and short. They were not long-lasting, so I can say confidently that it has been pretty reliable.

TrendAI Vision One's scalability handles growth and new clients well.

Fewer employees are needed, but I do not have any other relevant metrics.

We have not previously used different solutions for this client, so this is our first solution, and we are quite happy with it.

I do not know which cloud provider is used; I was not on the engineering side when it was deployed, so I am not sure.

The engineering team evaluated other options, but I do not know which ones.

TrendAI Vision One helped us reduce cyber risk through its metrics and telemetry; it showed us what kind of data we are dealing with when our clients are in question. We can focus on what matters and implement new filtering and rules to reduce the noise and focus on what is really important.

TrendAI Vision One has helped reduce our time to detect and respond to threats by approximately 50%. It reduced the time to detect and respond because it has a really good way of showing what happened. The user interface is readable, and you get a lot of information just from the alert itself, so you do not need to do a lot of digging because the alerts are very detailed.

I did not know about the pricing, setup cost, and licensing because I was not employed at the time when TrendAI Vision One was deployed and during the beginning of its use.

The engineering team evaluated other options, but I do not know which ones.

Since I am not an engineer, I am not sure what kind of aspects someone would need to look for if they want to buy TrendAI Vision One, but I can say that I am happy using it as a SOC analyst.

From an analyst perspective, TrendAI Vision One is useful for looking into alerts and incidents and exploring various data. I would say it is readable and easy to use, and also very intuitive. I would rate this product an 8.