Trend Vision One Reviews

Name: Trend Vision One
Brand: Trend Micro
Rating: 4.3 (73 reviews)

Vendor: Trend Micro

4.3 out of 5

73 reviews
97% willing to recommend

177 followers

Start review

What is Trend Vision One?

Trend Vision One offers comprehensive protection for endpoints, networks, and email with centralized visibility. It is valued for its attack surface management, real-time threat detection, integrated management, ease of deployment, and user-friendly interface.

Get the Trend Vision One Buyer's Guide and find out what your peers are saying about Trend Vision One, CrowdStrike Falcon, Microsoft Defender for Endpoint and more!

Trend Vision One is the #2 ranked solution in top Attack Surface Management (ASM) solutions, #3 ranked solution in top Network Detection and Response (NDR) solutions, #3 ranked solution in top AI-Powered Cybersecurity Platforms solutions, #4 ranked solution in EDR tools, and #4 ranked solution in XDR Security products. PeerSpot users give Trend Vision One an average rating of 8.6 out of 10. Trend Vision One is most commonly compared to CrowdStrike Falcon: Trend Vision One vs CrowdStrike Falcon. Trend Vision One is popular among the large enterprise segment, accounting for 39% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 21% of all views.

Helped 856,278 peers since 2012

Featured Trend Vision One reviews

Dennis Niedling

Head of Managed Services & IT Security at B.O.C.

Since we started using Trend Vision One, we've been able to enhance our security posture significantly. Trend Vision One has improved significantly over time in providing centralized visibility and control. It started as a set of individual products, but now it feels like one integrated solution. This reduces the need for interfaces or multiple analysis tools. That's why we pursued the one-platform strategy. Trend Vision One has definitely helped consolidate our use of security vendors. We previously used standalone products for endpoint and email protection that weren't integrated. Now, we get the benefits of an integrated solution. I'd estimate we're 50–70% better in security now than we were two years ago. The Cyber Risk Exposure Management (CREM)feature is absolutely essential. Even though we're not critical infrastructure, the NIS2 directive gives us security guidelines. CREM helps us meet these requirements. It is very important to our organization that Trend Vision One integrates AI into the platform. Pattern recognition in forensic data is no longer manageable by humans due to the volume of events. Machine learning is essential to process these and filter what needs human attention. Trend Vision One has improved our organization significantly. Security tasks used to be manual. Now, technology prevents issues or supports staff in detecting them. This shift from manual to technical solutions greatly increased our security. Trend Vision One has reduced the time we spend detecting and responding to threats. I'd say we're 80% faster than before. The platform gives us consolidated data upfront, so we don't have to search for event clues manually. Trend Vision One has helped reduce false alarms. I'd estimate a 50–60% time saving. We have more alerts now than years ago, but also better systems to handle them, making the whole process more efficient. Trend Vision One has helped reduce our cyber risk overall. We now know where gaps are before they become problems, whereas in the past we had to guess. That's a massive improvement. When it comes to operations, the CREM solution helps us identify vulnerabilities in systems. If we patch them, they disappear from the reports—this gives us actionable insights, which is incredibly helpful. It took about half a year to realize the benefits of Trend Vision One after implementation.

Read full review

DavidBowman

Systems and Security Manager at a educational organization with 5,001-10,000 employees

They need to stop changing Vision One once a week. They're in a hurry to change things so badly and so fast that I can't find where stuff is half the time, which is a challenge sometimes. I've given one piece of feedback to their product guys. One thing that they're trying to make is a SIEM. It's a product where you input all the logs from your tools, and it creates additional insights into how things look. They've been kind of playing the "me too" game on that, even though that's not what I bought the product for. They have a new gateway where I can take my firewall of email logs and send it over there. In theory, it's supposed to do a more comprehensive evaluation of all my stuff to improve that risk index score. I'm not impressed with it, and I've told them as much. I feel if you're good at something, you should keep working on that and not try to be all the things to all the people. I bought a different email solution even though it would have been 10 times easier to just stay with their email solution because they aren't great at it. They are great at other things, but they're playing the "me too" game with some of their products. Their competitors do this, so they should be doing this, too. They need to pick a product and keep being good at that. If they're going to roll new things out, they should do it but do it right. They have a button to isolate an endpoint because it looks bad, but it doesn't usually work. I've had no chance to argue with the product guys to show them examples of how their button doesn't work. You think it does, but it doesn't work in a real environment. That can be a challenge sometimes. I can see in the data showing what is a false positive. But it doesn't save me time helping them figure out how to fix the problem in their engine. It can help me identify it as a false positive, but it doesn't apply that consistently. It will ignore the false positive for that device, but if they start detecting a false positive on Apple devices, I have eight thousand Apple devices and get 8,000 alerts. I can tell that specific false positive, but it doesn't learn from that particularly well. We use the executive dashboards, but I don't find them particularly useful. One is the ability to customize. That has gotten a little better, and it'll be better in the future. Most of what they have on there are data points that are generic and not particularly actionable. That's why it's called an executive dashboard. Executives want to see if we are secure, but it's hard for me to find out why our attack surface risk went down by x percentage. I don't know. It says that on the dashboard, but it doesn't give me specific details about why. I find it confuses my executives, and it's not useful for me because it doesn't give me things to work on. It will give me generic things on the executive dashboard like you have a thousand accounts with an old password. Those are big generic things, but I also can't tell it that our password policy is different from what your automatic detection model means, and I don't have a problem with that, so quit lowering my risk score. The risk score is useless. In theory, it's based on the random intelligence they're getting from their various customers. I'm in K-12 education, so they have a decent amount of K-12 customers, but it's a subset, and the baseline of what's common in K-12 education is not the same. There's not enough data to make that particularly clean or useful. Vision One is not custom, and that's part of my beef. That index score is based on whatever random report they're looking at from their data sources at any given moment in time. It's nice, but I'd rather have one that's based on your particular circumstances. Instead, it's saying that the number one attack threat surface for school districts is email phishing. It's too generic.

Read full review

Silvia Harder

Works at Optigrün international AG

In Germany, such a security solution is very important. Due to a change in the law, company management is now obligated to ensure that IT security is based on best practices. If they fail to do so or are unaware of their security status and neglect it, they are now personally liable with their private assets. I also need a tool that allows my management and board to monitor our security status. One of the reasons why we chose Trend Vision One was that it provides the option for the board to check the dashboards. This means that every morning while having coffee, they can see the security status of the company on their phones. They can also ask, "Hey, why is our security score high? Is our IT department not working properly? Or do we have a real problem that requires additional software or other measures?" Additionally, negotiations become easier for the IT department, for management, and for us. If security gaps arise, we can say, "Hey, we need software or an investment of a certain amount." We now have a solid foundation for our case. We use email security and endpoint protection. Endpoint protection is installed on every computer and server, with enhanced sensors on the servers. These security tools are crucial for us—without them, we would be blind in IT. They allow us to monitor the health of each system and user activity, including preventing access to inappropriate websites. We have a lot of remote work, and we used to struggle because we could not properly monitor devices outside our network or firewall. Now, we can control things like applications, websites, USB sticks, and external hard drives, which was previously impossible. A key feature of our endpoint protection is that if a computer reaches a certain security risk score, it is automatically blocked by the software. This means that if an attack occurs, the affected computer is isolated from the network, preventing further spread. Our biggest challenge is not direct hacking attacks—our company is not a high-priority target. Instead, phishing emails are the main issue. These emails attempt to trick employees into making fraudulent payments or providing access to our systems, allowing ransomware installation. Email security is our biggest focus area. It has significantly reduced email volume, which is crucial, especially for our security team, as they do not have time to review every message. IT also receives fewer inquiries about whether emails are legitimate. Additionally, phishing training has helped—our employees recognize phishing attempts better, and our click rate on phishing simulations has dropped to zero. Previously, conducting a phishing simulation would have cost €2,500 per test, but now, we can run one or two tests per month at no additional cost. This provides great value. It is important for us that Trend Vision One has AI built into its platform. It is essential for detecting abnormalities quickly. Humans may not notice certain threats, but AI can. However, AI is not perfect and sometimes lets suspicious emails through, which we then manually review in quarantine. AI is constantly learning, and the more it improves, the less manual intervention is needed, which is beneficial for us. We now have visibility. Previously, we were blind and could not assess our security status. Trend Vision One helped reduce our time to detect and respond to threats. Previously, we relied on reading security forums and websites to identify vulnerabilities. Now, we get real-time alerts and can take immediate action. Our speed has increased significantly. We can update and patch security threats daily, whereas before, it took weeks or even months. Trend Vision One has helped our organization reduce its cyber risk, especially through endpoint protection. For example, our field employees used to connect unknown external hard drives, which posed a risk. That is no longer possible, eliminating a major threat vector. Trend Vision One has helped consolidate our use of security vendors. Previously, we only had basic endpoint protection from another provider, which we replaced with Trend Vision. We now have more security software, not less, because our company has grown significantly—from a small business to a mid-sized enterprise. The IT department was lagging behind, and security was not a priority. Now, we manage everything with one provider, rather than multiple vendors.

Read full review

Trend Vision One mindshare

Product category:

As of June 2025, the mindshare of Trend Vision One in the Endpoint Detection and Response (EDR) category stands at 2.8%, down from 3.0% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Endpoint Detection and Response (EDR)

PeerResearch reports based on Trend Vision One reviews

Type	Title	Date
Category	Endpoint Detection and Response (EDR)	Jun 12, 2025	Download
Product	Reviews, tips, and advice from real users	Jun 12, 2025	Download
Comparison	Trend Vision One vs CrowdStrike Falcon	Jun 12, 2025	Download
Comparison	Trend Vision One vs SentinelOne Singularity Complete	Jun 12, 2025	Download
Comparison	Trend Vision One vs Microsoft Defender for Endpoint	Jun 12, 2025	Download

Title	Rating	Mindshare	Recommending
CrowdStrike Falcon	4.3	15.0%	96%	132 interviews Add to research
Microsoft Defender for Endpoint	4.1	10.6%	94%	197 interviews Add to research

Valuable Features

Trend Vision One's most valuable features include endpoint protection, centralized visibility, and effective threat detection across networks and layers. Users appreciate its comprehensive security capabilities, such as behavior analytics, workbench, attack surface management, and integration with third-party tools. It enhances efficiency by reducing detection and response times, offering a single console for management, and providing real-time monitoring. Its ability to process alerts, execute automatic responses, and provide detailed logs is highly regarded by organizations.

"Trend Vision One helps reduce my mean time to detect and respond to threats as without it, we would be scrambling and confused with not much information to go off of for threat hunting."
"While it's not an actual feature of the application, I appreciate the clinics and seminars that Trend provides, as I went to one last year that got me from zero to beginner, and I hope to advance to intermediate with another seminar series this year."
"Trend Vision One helped reduce the time to detect and respond to threats by 70% to 80%."

Room for Improvement

Trend Vision One needs improvement in reporting robustness, integration with third-party tools, user interface simplicity, and technical support. Users find the deployment process complex and desire more automation. They face challenges with false positives, alert visibility, and logging capabilities. The interface could be more user-friendly to simplify navigation. Enhanced documentation, expanded support for non-traditional devices, and improved integration with existing systems are also areas for enhancement.

"The experience of first using Trend Vision One is really difficult due to the steep learning curve."
"In terms of improving Trend Vision One, it might sound silly, yet it seems notoriously uncooperative with middle clicks and opening sections in new tabs. I'm a big tab browser, and it feels hitting a brick wall when I have to refresh in a new tab or make a copy of a tab to move forward."
"Vulnerability scanning could be improved. They need to see more CVEs and scan products for known vulnerabilities, allowing for better display and review of potentially exploitable servers by hackers or through configuration settings."

ROI

Trend Vision One offers a positive ROI by reducing labor and operational costs through automation and effective integration of platforms. Users experience significant time savings, enhanced security, and reduced malware incidents. The ability to mitigate issues before escalation has been invaluable, providing returns by saving resources and time. Even without exact calculations, users recognize its effectiveness in addressing suspicious activities and enhancing network protection, valuing its contribution to preventing potential damage.

Pricing

Enterprise buyers evaluating Trend Vision One find its pricing model generally competitive and reasonable compared to peers like CrowdStrike and Carbon Black. While some users consider it expensive, particularly for smaller organizations, the price aligns with the value and features provided. Trend Micro's recent shift to a credit-based system has received mixed feedback. The solution offers flexible pricing with options to enable specific features, making it suitable for organizations seeking customizable security solutions.

"When we have a good product such as Trend Vision One, the price is fine."
"Its price is very decent. It suits our requirements."
"It is very good. The flexibility to temporarily exceed license limits when setting up new devices is helpful, as it allows us to ensure security before purchasing additional licenses."

Popular Use Cases

Trend Vision One is utilized for endpoint detection, antivirus protection, ransomware defense, and incident response. It enhances security by integrating telemetry from various sources, providing centralized monitoring and orchestration across cloud and on-premises environments. Users leverage it for behavioral analysis, automated threat response, and comprehensive security management. It supports seamless integration with existing infrastructures, offering a unified dashboard for managing threats, ensuring endpoint security, and addressing potential vulnerabilities effectively.

Service and Support

Customers appreciate the technical support for Trend Vision One, citing responsive and knowledgeable teams. Some find response times swift, while others note delays. There is a mixed experience with escalation processes, with some users pleased and others suggesting improvements. Feedback highlights competent staff and effective problem-solving, despite occasional communication challenges. Users value Trend Micro's proactive development and feature incorporation based on customer feedback, and rate support between six and ten out of ten.

Deployment

Trend Vision One's initial setup is generally straightforward and user-friendly. Many found it simple to implement with minimal technical difficulties, often completed within a week. Some experienced complexities, especially with hybrid or large-scale deployments, needing multiple weeks and staff for setup. Migration to the cloud reduced complexity, though issues occurred if endpoints weren't updated. A few users noted a learning curve and required external support, but many were able to manage setup independently or with minimal assistance.

Scalability

Trend Vision One's scalability receives high praise, adapting easily to various organizational sizes and user counts. It seamlessly handles increases in users and endpoints, supported by cloud-based infrastructure. Users frequently mention its flexibility and straightforward expansion process. There are no significant challenges with scaling, and it integrates well with existing infrastructures. The capability to incorporate additional features and services ensures it can accommodate growing demands without performance issues, maintaining smooth operation and efficient resource management.

Stability

Trend Vision One is consistently reliable, with users citing no frequent glitches or crashes and minimal downtime. Stability is frequently rated highly, with many users giving it ratings between eight to ten. It integrates seamlessly with existing security measures and few report any significant issues. Any minor setbacks encountered, such as occasional errors with compatibility or lagging, are quickly managed. Its consistent performance and prompt support highlight its strong stability.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Trend Vision One Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Computer Software Company

21%

Educational Organization

13%

Manufacturing Company

Financial Services Firm

Comms Service Provider

Healthcare Company

Government

University

Insurance Company

Construction Company

Retailer

Real Estate/Law Firm

Non Profit

Legal Firm

Wholesaler/Distributor

Media Company

Energy/Utilities Company

Hospitality Company

Performing Arts

Engineering Company

Transportation Company

Outsourcing Company

Recruiting/Hr Firm

Recreational Facilities/Services Company

Pharma/Biotech Company

Compare Trend Vision One with alternative products

Learn more about Trend Vision One

Trend Vision One provides a sophisticated security platform combining endpoint, network, and email protection with features like virtual patching and advanced AI capabilities. Its centralized management and integration with platforms like Office 365 and Azure make it an attractive option for organizations needing streamlined workflows and efficient risk management. While it boasts robust integrations and ease of use, enhancements are needed in reporting, tool integration, and reducing false positives. Users call for better support infrastructure, faster response times, and improved threat intelligence capabilities. Despite some complexity, its AI and ML features significantly enhance threat detection and response.

What Features Define Trend Vision One?

Comprehensive Protection: Guard endpoints, networks, and emails against threats.
Centralized Visibility: Monitor systems with a unified view.
Advanced AI and ML: Improve threat detection and response capabilities.
Virtual Patching: Address vulnerabilities without immediate updates.
Integrated Management: Seamlessly manage across platforms.

What Benefits Should Users Look For?

Streamlined Workflows: Enhance operational efficiency.
Improved Threat Detection: Leverage AI for better response.
Ease of Deployment: Simplified initial setup and configuration.
Effective Risk Management: Benefit from centralized and integrated security tools.
Integration Capabilities: Flexibility to connect with different tools and platforms.

Trend Vision One is implemented in industries that require endpoint protection, ransomware defense, and incident response, being flexible for both on-premises and cloud environments. It is used to monitor servers, networks, and endpoints, providing features like email protection, behavioral detection, and threat visibility. Organizations benefit from AI and ML, improving their security posture and response capabilities.

Trend Vision One was previously known as Trend Micro XDR, Trend Micro XDR for Users, Trend Vision One - XDR for Networks.