Try our new research platform with insights from 80,000+ expert users
reviewer2787369 - PeerSpot reviewer
Security Engineer at a consultancy with 11-50 employees
Real User
Top 20
Dec 15, 2025
Consolidated security tools into one console and manage endpoints, servers, and emails efficiently
Pros and Cons
  • "Trend Vision One has helped me to consolidate my use of security vendors quite a lot."
  • "Sometimes the CPU utilization is so high that the computer crashes or lags behind."

What is our primary use case?

I have experience with Trend Vision One, specifically using endpoint security, email security, and all of the modules that are used most commonly.

We mostly install Trend Vision One endpoint security in all client organizations, configure everything covering endpoints, servers, emails, and then work on the alerts for them as the need arises.

We are using the sensors that are included in Trend Vision One.

What is most valuable?

Trend Vision One has helped me to consolidate my use of security vendors quite a lot. Many of my clients were using different brands of antivirus for the server security and endpoint security, and another product for email security. Because of Trend Vision One, they were able to combine all of them in the same console. This reduced a lot of siloed tools.

I am quite impressed by the speed with which the server policy gets deployed. While the endpoint policy takes about 15 minutes to get assigned to the system, server policy is quite quick in that regard.

The coverage of these sensors is quite vast. When compared to other antiviruses, we found that Trend Vision One does cover quite a lot of ground.

What needs improvement?

The endpoint security policy for standard endpoints with Trend Vision One takes a lot of time. It would be beneficial if there were DLP features in it, as many customers require that. While Trend Vision One's full suite is quite impressive, customers have to find another product for DLP and file monitoring. Trend Vision One does have a not fully-fledged DLP in the endpoint security part, and it sometimes hangs up the PC when we apply it.

The alerts could be better because when an alert comes for an email that has been compromised and found on the dark web, we cannot quite find where it got compromised from.

The network part is something that needs to be worked on because most of the time we have to look at the firewall to get the full scenario or coverage.

What do I think about the stability of the solution?

We have found a lot of performance issues with Trend Vision One agents. They are not lightweight. The first time I used Trend Vision One, the agent was 500 MB. Now that I am using them, the initial size is 800 MB. Sometimes the CPU utilization is so high that the computer crashes or lags behind. This is a really big concern for everyone using Trend Vision One.

Buyer's Guide
Trend Vision One
December 2025
Learn what your peers think about Trend Vision One. Get advice and tips from experienced pros sharing their opinions. Updated: December 2025.
879,425 professionals have used our research since 2012.

What do I think about the scalability of the solution?

Trend Vision One is quite a good tool because there are not any issues in scalability. We can easily add more licenses to it and increase our organization security. Scalability-wise, it is good.

How are customer service and support?

I have contacted the technical support or customer support of Trend Vision One quite a lot.

The engineers are quite helpful when they respond, but I have found that sometimes the assigned engineer responds to the first query a bit too late. I can see in the portal that the engineer has been assigned to my case, but we have to prompt them to give us a reply because nobody is answering. We have to call Trend Vision One support sometimes. Once we start the case, the responses are quite helpful, though we have had to escalate some of the cases quite a lot when customers need it.

How would you rate customer service and support?

Which solution did I use previously and why did I switch?

I have not basically used any alternatives to Trend Vision One. I have tried CrowdStrike and Symantec. Symantec is so far out of Trend Vision One's reach and CrowdStrike, I have not used it much, but it is a bit harder to configure than Trend Vision One. I find Trend Vision One's UI much easier.

How was the initial setup?

The initial deployment of Trend Vision One is quite easy since it is basically a cloud-based app, and you just have to deploy the agent.

What about the implementation team?

If integrating AD with Trend Vision One, I am sure only one person would be needed. If you have to deploy and install the agents directly into the systems, at least four to five people are needed if the size of the organization is for 1,000 to 2,000 employees.

What was our ROI?

It would take one or two months to deploy Trend Vision One for a client, but mostly because sometimes things get delayed on the client side.

What's my experience with pricing, setup cost, and licensing?

No maintenance is required on our side for Trend Vision One.

Which other solutions did I evaluate?

I am not into sales, but we have lost a few customers because of the pricing of Trend Vision One. They seem to gravitate to Symantec and others because their pricing range is quite less than Trend Vision One, and we have lost them because of that.

What other advice do I have?

My review rating for Trend Vision One is 9 out of 10.

Which deployment model are you using for this solution?

Public Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Other
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
Last updated: Dec 15, 2025
Flag as inappropriate
PeerSpot user
reviewer2706279 - PeerSpot reviewer
Beheerder ICT-Services at a government with 201-500 employees
Real User
Top 20
May 17, 2025
Centralized visibility improves threat detection and response
Pros and Cons
  • "I like how easy it is, and there is a single pane of glass. We have one console for everything."
  • "Trend Vision One helped reduce the time to detect and respond to threats by 70% to 80%."
  • "Vulnerability scanning could be improved. They need to see more CVEs and scan products for known vulnerabilities, allowing for better display and review of potentially exploitable servers by hackers or through configuration settings."
  • "Vulnerability scanning could be improved. They need to see more CVEs and scan products for known vulnerabilities, allowing for better display and review of potentially exploitable servers by hackers or through configuration settings."

What is our primary use case?

Our use case for Trend Vision One is for our security platform. We use it for antivirus, XDR, and network telemetry purposes.

How has it helped my organization?

Trend Vision One helped us to consolidate our use of security vendors and reduce silos. We had three or four consoles from different products, and we consolidated them into one console with this product. 

Trend Vision One helped reduce the time to detect and respond to threats by 70% to 80%.

Trend Vision One has helped us reduce noise from false positives.

We have been using cyber risk exposure management for 2 months since upgrading in April. It helps us identify blind spots by providing more visibility and insights into our environment, making it a valuable feature. 

We use the network sensor, and its coverage is critical. With SIEM, we gain substantial insights into our environment, and having a complete 360 view is necessary in today's security world. It reduces the risk by 50%.

Having AI built into the Trend Vision One platform is important for our organization. It reduces many manual steps, resulting in more and quicker detections and advanced automation for remediation, improving efficiency by 60% to 70%. The solution aims to reduce risks and enhance detection.

What is most valuable?

I like how easy it is, and there is a single pane of glass. We have one console for everything. 

Trend Vision One provides centralized visibility and management across protection layers. It has the functionality of different products and management of a single pane of glass. We have one console for everything. As a security engineer, it's easier to check the alerts and find everything. It consolidates a lot of consoles into one, and that's what we like most about it.

What needs improvement?

Vulnerability scanning could be improved. They need to see more CVEs and scan products for known vulnerabilities, allowing for better display and review of potentially exploitable servers by hackers or through configuration settings.

For how long have I used the solution?

We have been using Trend Vision One for approximately 18 months.

What do I think about the stability of the solution?

We haven't experienced any stability issues. It has proven to be stable.

What do I think about the scalability of the solution?

The scalability of Trend Vision One is good.

How are customer service and support?

I have contacted technical support from Trend Micro. The quality and speed of support are good.

How would you rate customer service and support?

Positive

How was the initial setup?

It was easy. It took us one day to fully deploy Trend Vision One.

Some maintenance is required for updating agents on the servers.

What about the implementation team?

The deployment involved just one person working with the vendor in one day.

What was our ROI?

Trend Vision One has reduced risks by 50%. We have reduced the response time by approximately 70%-80%.

What's my experience with pricing, setup cost, and licensing?

When we have a good product such as Trend Vision One, the price is fine.

Which other solutions did I evaluate?

We have used Trend Micro products for many years, and we upgraded to Trend Vision One. We didn't test any alternatives, staying with what we've used for years.

What other advice do I have?

I would rate Trend Vision One an eight out of ten.

Disclosure: PeerSpot contacted the reviewer to collect the review and to validate authenticity. The reviewer was referred by the vendor, but the review is not subject to editing or approval by the vendor.
Last updated: May 17, 2025
Flag as inappropriate
PeerSpot user
Buyer's Guide
Trend Vision One
December 2025
Learn what your peers think about Trend Vision One. Get advice and tips from experienced pros sharing their opinions. Updated: December 2025.
879,425 professionals have used our research since 2012.
MalayKumar Das - PeerSpot reviewer
SOC Consultant SOC Consultant at a tech vendor with 10,001+ employees
Consultant
Top 20
Dec 15, 2025
Centralized threat hunting has improved endpoint visibility and allows silent remote remediation
Pros and Cons
  • "Trend Vision One allows mitigation of threats without interrupting branch users' regular work, which is its unique selling point."
  • "The area for improvement is to provide more clarity on the query part, including examples for creating reference sets and documenting capabilities thoroughly so future users can benefit without needing to experiment."

What is our primary use case?

Trend Vision One use cases are mostly related to endpoints, such as detecting registry modifications or new software being added, as well as monitoring for malicious activities including PowerShell scripts, double extension files, ransomware, and crypto miners. Since I work for the financial sector, it is crucial to ensure there are no remote software programs running, especially regarding banking security.

What is most valuable?

Trend Vision One has two types of alerts that help reduce the time to detect and respond to threats. The first is based on alerts and workbench ID, while the second is host-based detections, allowing me to see all different threats on particular endpoints over a selected time frame. I can check for various endpoints affected by different alerts and customize this for specific time frames. Monitoring critical assets, threat hunting, and running queries are feasible tasks, providing a comprehensive overview of endpoint security and the ability to remove malicious files quickly.

One of the best features of Trend Vision One is its ability to let me remediate endpoints without disturbing branch users, as long as the endpoint is online and connected. I can delete files or take control through the console by informing the bank's security team to get approval. Another great feature is viewing alerts, segregating them by type and host, which makes it easier to fine-tune security and monitor critical resources. Additionally, the ability to create reference sets for known malicious hashes enhances detection capabilities across endpoints.

Trend Vision One saves resources and time. It provides better visibility of endpoints compared to other security management tools, which makes it invaluable. For smaller organizations that may not afford multiple tools, an XDR solution can handle their security needs effectively.

Trend Vision One allows mitigation of threats without interrupting branch users' regular work, which is its unique selling point.

What needs improvement?

The area for improvement is to provide more clarity on the query part, including examples for creating reference sets and documenting capabilities thoroughly so future users can benefit without needing to experiment.

Documenting the capabilities of endpoint consoles would also be beneficial for new users understanding what can be done effectively.

For how long have I used the solution?

I initially used the first EDR approximately two years ago, and now I have been using Trend Vision One for eight to nine months.

What do I think about the stability of the solution?

The stability of Trend Vision One is good; I would rate it an eight.

What do I think about the scalability of the solution?

I would rate the scalability at eight and a half.

How are customer service and support?

I have not worked with technical support yet, so I cannot rate it.

How would you rate customer service and support?

Neutral

Which solution did I use previously and why did I switch?

I have not worked with other solutions yet, so I can only speak to my experience with Trend Vision One XDR, which I find to be good for handling threats across endpoints.

How was the initial setup?

I am not aware of the deployment process since I have not been involved with it.

What about the implementation team?

Only a few of us are using the solution currently—my manager and I. Due to my background in threat hunting, I have admin access to monitor various alerts and create reference sets for potential threats effectively.

Only three or four users have access to Trend Vision One, including my manager and me from the vendor side, and two from the bank end.

I am a vendor hired for SOC security and threat hunting, working for IBM clients.

What was our ROI?

I cannot estimate the return on investment accurately, as I do not have insight into the financials. However, I can say that the tool is good, particularly the basic subscription which provides me with necessary tools and knowledge to protect security.

What's my experience with pricing, setup cost, and licensing?

I do not have any information regarding the pricing, so I cannot comment on that.

Which other solutions did I evaluate?

Every organization typically installs antivirus agents on their endpoints and servers.

What other advice do I have?

My false positives have decreased, but reducing them requires thorough investigation. For example, each endpoint has its own scanning device, such as Windows Defender.

Apex Central is attempting to stop the services of Windows Defender, leading to alerts when malicious behavior is detected. Through thorough investigation, I have identified that while Apex Central might not directly stop processes, it does so using CMDlets. Hence, I decided to whitelist that.

Trend Vision One reduces endpoint risk by approximately 60 to 70 percent; the remaining 30 percent can be due to other factors such as phishing and web interactions.

For small organizations, implementing Trend Vision One is a wise choice because it delivers great visibility and clarity on endpoint threats, enabling effective monitoring and quarantining regardless of the environment.

Trend Vision One sensors are being used on the endpoints.

I do not know if Cyber Risk Exposure Management comes under the basic subscription, as I mostly focus on threat hunting and do not recall using it.

If the suggested improvements are implemented, it will be even more flexible and feasible.

I give this review an overall rating of 9 out of 10, and I definitely recommend Trend Vision One to other users because it provides solid security for endpoint protection.

Which deployment model are you using for this solution?

On-premises

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

IBM
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Last updated: Dec 15, 2025
Flag as inappropriate
PeerSpot user
reviewer1072692 - PeerSpot reviewer
Head of IT at a financial services firm with 11-50 employees
Real User
Top 5Leaderboard
Nov 3, 2025
Provides centralized visibility and improves threat response across hybrid environments
Pros and Cons
  • "The comprehensive overview of the security status is the most valuable feature of Trend Vision One, and its ability to provide centralized visibility and management is quite good because all the relevant data are present, providing everything needed."
  • "Some improvements could be made, but all the possibilities of the platform are not being fully utilized, so some features that could be discussed may not have been explored yet, though they may already be available."

What is our primary use case?

Trend Vision One sensors are used at the endpoint to gather information from endpoints, which has proven to be very useful. The coverage provided by Trend Vision One is critical for our organization's network because it's a comprehensive way to get all the relevant data from the endpoints regarding antivirus security and similar security settings.

Some basic features of the Cyber Risk Exposure Management capabilities in Trend Vision One are being used. Plans exist to expand the usage, but currently the overview of the cyber risk settings is checked, though it hasn't been used much in the last few months.

Trend Vision One has helped consolidate the use of security vendors and reduce silos, but other vendors have not been replaced. Trend Vision One alone is sufficient for current needs, so other vendors for such solutions do not need to be used, at least not for now.

Trend Vision One is used for consolidated security across hybrid environments.

What is most valuable?

The comprehensive overview of the security status is the most valuable feature of Trend Vision One. Trend Vision One platform's ability to provide centralized visibility and management is quite good because all the relevant data are present, providing everything needed. The interface is quite simple to use and all the relevant data can be seen there.

Trend Vision One has helped reduce the time to detect and respond to threats because information is gathered more quickly and all the relevant points are visible. If there's any problem, it can be seen much easier and quicker.

Trend Vision One has also helped reduce cyber risks because it decreases cyber risks as there is more control over the environment.

What needs improvement?

There are currently no particular suggestions on how Trend Vision One can be improved because improvements have been seen in nearly every version, and satisfaction with what can be seen and used is high.

Additional features are not desired to be seen in the next release of Trend Vision One because not all the features that are available now are being used. For current needs, everything is already there. Perhaps in the future something else will be needed, but everything that is currently needed is already included.

Trend Vision One has improved its integration with other products, with other vendors, or with mobile device management. The mobile device management solution has improved over the years and was pretty basic when it started, but now it has much more options. Some improvements could be made, but all the possibilities of the platform are not being fully utilized, so some features that could be discussed may not have been explored yet, though they may already be available.

For how long have I used the solution?

Trend Vision One has been used for a couple of years.

What do I think about the scalability of the solution?

There have been no problems with scaling Trend Vision One. The organization is not large, so there were no problems in scaling. Trend Vision One appears to be tailored for much bigger organizations, so no scaling problems were encountered.

How are customer service and support?

There has not been much contact with technical support, though some checks and presentations were conducted, which were quite good. The response was very quick and all the information needed was received, resulting in high satisfaction.

Technical support would be rated nine out of ten. Regarding local technical support, it is also quite good through the partner network and directly. If something is escalated directly to Trend Micro, responses are received. There is high satisfaction with the current support level.

How would you rate customer service and support?

Positive

How was the initial setup?

The initial setup of Trend Vision One was seamless because it was a migration from an on-premises Trend Micro service to a cloud-based one, so there were no particular problems.

What about the implementation team?

External partners were used for the implementation of Trend Vision One, though the process was overseen. There was a transfer of knowledge during the implementation.

What was our ROI?

Return on investment from Trend Vision One has not been calculated in the traditional sense, but price-wise, it's a better solution than some others that have been looked at or researched. Trend Vision One is quite convenient for the organization.

Which other solutions did I evaluate?

Before Trend Vision One, a broader marketplace was evaluated. A granular possibility to purchase only needed options without purchasing unnecessary components was not observed in other solutions. The licensing model of Trend Vision One is the best among other solutions that have been seen.

What other advice do I have?

For integrations with third-party solutions, integration was done for log management. Logs are downloaded or shipped from Trend Micro solutions to internal log management solutions, and there were no particular problems in integrations. Many other integrations specifically with Trend Micro were not conducted.

Trend Vision One is considered the best option on the market at the moment for this organization. Trend Vision One appears to be quite popular in the region, with many companies using it, both bigger and smaller organizations. A community provides information and support, making Trend Vision One popular in the area.

Trend Vision One has been using AI technologies already for some time, which shows awareness of the landscape. It is believed that Trend Vision One will tailor the solution accordingly, as AI is already being used in some solutions within the platform, indicating good direction for the product.

Trend Vision One provides learning courses, and events from partners sometimes offer opportunities to gather new information on the products. Additionally, a community is available, creating a good landscape for learning and support in the region.

The partnership program is not well known because collaboration is through partners, but it is believed that partner satisfaction is high.

Trend Vision One received an overall rating of eight out of ten.

Which deployment model are you using for this solution?

Public Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Other
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Last updated: Nov 3, 2025
Flag as inappropriate
PeerSpot user
Nauman Ahmed Shakeel - PeerSpot reviewer
Sr. System Engineer at a healthcare company with 5,001-10,000 employees
Real User
Top 10
Dec 9, 2025
Integrated threat monitoring has strengthened risk visibility and improved vulnerability response
Pros and Cons
  • "Trend Vision One is very effective and very market competitive, which is why we are using it."
  • "Trend Vision One needs to work on its logging system as the logging systems are very complex, and they need to reform their logs in a more informative way."

What is our primary use case?

My use case is to monitor my entire infrastructure, investigate the latest vulnerabilities, identify loopholes, and monitor live threat detections to mitigate these threats.

What is most valuable?

Trend Vision One's best features are the ESRM and its email gateways, along with its playbooks, which are useful for testing any threat or vulnerability.

It helps in identifying blind spots by providing comprehensive knowledge about risk assessment and a method to compare our organization with others, allowing us to understand our current stage in cybersecurity.

What needs improvement?

Trend Vision One needs to work on its logging system as the logging systems are very complex, and they need to reform their logs in a more informative way.

For how long have I used the solution?

I have been using Trend Vision One for the last three years.

What do I think about the stability of the solution?

I would rate the stability an eight.

What do I think about the scalability of the solution?

I would rate the scalability a nine.

How are customer service and support?

Their response rate is approximately 80 to 90%, and they mitigate the issue.

I would rate the technical support a nine.

How would you rate customer service and support?

Positive

Which solution did I use previously and why did I switch?

I compare Trend Vision One with Trellix and Kaspersky, and compared to both of these, Trend Vision One is very useful with one-window operation and is a market-gaining product.

How was the initial setup?

The deployment is easy and very moderate, taking approximately one month.

What about the implementation team?

It was a partner purchase.

What was our ROI?

The ROI is positive, and I see a reduction of 100%.

What's my experience with pricing, setup cost, and licensing?

Trend Vision One is not so expensive; it is very moderate.

Which other solutions did I evaluate?

Trend Vision One is very effective and very market competitive, which is why we are using it.

What other advice do I have?

I will definitely recommend this product because of its deep knowledge and deep features, such as ESRM, playbooks, and other email gateways.

We have approximately 50 users.

I do use Trend Vision One sensors, and they totally cover our network as we are using network sensors and service gateways to scan the whole network and gather information about our loopholes, mitigations, and vulnerabilities with respect to the latest CVEs.

I give this product a rating of 9.

Which deployment model are you using for this solution?

Public Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Other
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Last updated: Dec 9, 2025
Flag as inappropriate
PeerSpot user
reviewer2751279 - PeerSpot reviewer
Sr. Manager, IT Security at a healthcare company with 1,001-5,000 employees
Real User
Top 20
Aug 20, 2025
Exceptional customer service streamlines onboarding and improves AWS security integration
Pros and Cons
  • "The best features Trend Vision One offers are the dashboard, reporting, and the customer service experience, specifically the customer service experience."

    What is our primary use case?

    My main use case for Trend Vision One is XDR security in our AWS environment for our EC2 instances, and I'm hoping to accomplish effective security measures with it.

    What is most valuable?

    The best features Trend Vision One offers are the dashboard, reporting, and the customer service experience, specifically the customer service experience.

    What makes the customer service experience stand out is that the onboarding process was exceptionally smooth. John, our account manager, was able to coordinate us with a technical resource to help with a white-glove onboarding process to ensure that our migration from Trend Micro Cloud One to Vision One was smooth and successful.

    Trend Vision One has impacted my organization positively, and it's our XDR solution, so it works as intended.

    Having Trend Vision One as my XDR solution has helped my team significantly. The Sentinel integration is a huge help for allowing us to detect and respond to events in our AWS environment.

    What needs improvement?

    I cannot think of anything that Trend Vision One can be improved.

    For how long have I used the solution?

    I have been using Trend Vision One for about a week.

    What do I think about the stability of the solution?

    Trend Vision One is stable. I have experienced minimal issues with reliability or downtime.

    What do I think about the scalability of the solution?

    Trend Vision One's scalability is excellent. It can handle my organization's growth and changing needs.

    How are customer service and support?

    The customer support is exceptional. Working with their technical resource, Victor, was fantastic, and I am very happy with the customer service that we experienced from both Victor and John.

    I would rate the customer support exceptionally high on a scale of one to ten.

    How would you rate customer service and support?

    Which solution did I use previously and why did I switch?

    I did not previously use a different solution before Trend Vision One.

    What was our ROI?

    I have seen a return on investment. I have been a Trend Micro customer for years and I continue to see value in their platform and have used it at several jobs.

    What's my experience with pricing, setup cost, and licensing?

    My experience with pricing, setup cost, and licensing was very easy. Our enterprise account manager, John, made all of that very easy, as he was able to send me the private offer, walk us through accepting it inside of the AWS Marketplace, and helped us cancel our existing subscription.

    Which other solutions did I evaluate?

    Before choosing Trend Vision One, I evaluated other options. I considered Microsoft Sentinel and Microsoft Defender.

    What other advice do I have?

    The advice I would give to others looking into using Trend Vision One is to try it.

    I rate Trend Vision One an 8 out of 10.

    Which deployment model are you using for this solution?

    Public Cloud

    If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

    Amazon Web Services (AWS)
    Disclosure: My company does not have a business relationship with this vendor other than being a customer.
    Last updated: Aug 20, 2025
    Flag as inappropriate
    PeerSpot user
    reviewer2754906 - PeerSpot reviewer
    Manager of Cyber Security at a university with 1,001-5,000 employees
    Real User
    Top 20
    Sep 6, 2025
    We've ease of configuration and customization and improvement in threat response
    Pros and Cons
    • "The ease of configuration, customization, and organization are what I appreciate the most about Trend Vision One."
    • "It is a bit slow to implement kernel support on the Linux side. When doing patching and upgrades on our Linux servers, we often find that the Trend agent doesn't support the kernel version."

    What is our primary use case?

    We use Trend Vision One for our endpoint protection in our data center, mostly focused around our server assets, and we do anti-malware, intrusion prevention, as well as firewall, host-based firewall capabilities.

    What is most valuable?

    The ease of configuration, customization, and organization are what I appreciate the most about Trend Vision One

    What needs improvement?

    It is a bit slow to implement kernel support on the Linux side. When doing patching and upgrades on our Linux servers, we often find that the Trend agent doesn't support the kernel version. It's usually not far behind, but we often are in a position where we may not be properly protected for a period.

    For how long have I used the solution?

    We started using Trend Deep Security, which was the product prior to Trend Vision One, seven or eight years ago, and then we transitioned to Trend Vision One two years ago. While we have been using Trend Vision One proper for two years, we had essentially the same product in an on-prem version for seven or eight years.

    What do I think about the stability of the solution?

    We've had performance issues with the agents of Trend Vision One at odd times, but I wouldn't say it's been a widespread issue or a common issue. Once in a while, there have been things that we've attributed to Trend.

    What do I think about the scalability of the solution?

    The scalability of Trend Vision One seems infinite. We're not a huge organization, so we haven't really run into any limitations, but it appears it can scale to accommodate and serve any of our purposes.

    How are customer service and support?

    The quality of support for Trend Vision One is generally very good. If we have any issues with support, we can leverage our sales engineer for support or escalation. I really haven't had any concerns. I have contacted the technical support or customer support via phone number or ticket.

    How would you rate customer service and support?

    Positive

    Which solution did I use previously and why did I switch?

    We have used Microsoft Defender, Sophos, as well as McAfee as alternatives to Trend Vision One. I prefer Trend Vision One more compared to those alternatives.

    How was the initial setup?

    We transitioned from our on-premises Deep Security deployment to Vision One, and the process was relatively smooth. However, we encountered a few challenges related to legacy configurations and ensuring proper connectivity to our server assets. With an on-premises software application, we didn’t have to worry about internet accessibility for some of our server nodes. Consequently, we faced issues getting non-internet-connected server endpoints to communicate with the cloud. Luckily, there is a solution for that, but it took some time to get everything functioning properly.

    Trend Vision One is a large product suite. There are many features that we don't have fully deployed, but the amount of time it took for us to go from on-prem to the cloud for similar services without onboarding anything new that Trend Vision One offered was two months for 400 assets, server nodes.

    What was our ROI?

    It has reduced our time to detect and respond to threats, but I don’t have a way to quantify that.

    What's my experience with pricing, setup cost, and licensing?

    I know the pricing for Trend Vision One. It's been a while, but it doesn't seem bad. They made some changes to their pricing in the past. It used to be a per-server node pricing structure, but now they do it by credits. I would say it's improved because we can, for the same investment, shift and adjust which capabilities we're leveraging within the platform. It's not super expensive. It's definitely an increased cost over leveraging Microsoft Defender, which we already have the licensing and capability for. We chose to spend money on this as opposed to leveraging a product that we already had, but the cost is fair.

    What other advice do I have?

    The sensors we're using include the anti-malware products, and we have the EDR sensors deployed on our server endpoints. They have network sensors and other features, but we're not leveraging any of those.

    We started onboarding some of our services in the last three or four months to Trend Vision One to gain more visibility, so it's early in that adoption. We haven't taken any action based on alerts or notifications from Trend Vision One, as we're still in the early stages of getting our third-party services set up and monitored.

    Trend Vision One hasn't helped us consolidate use of security vendors. This product is solely used for one purpose. We're not leveraging Trend Vision One for other areas within IT or at our company, so we haven't reduced silos. We had an opportunity to go with Defender, which would have reduced the number of products we use, but instead we decided to keep using Trend because we did appreciate it. I'm not sure if Trend Vision One has helped me to reduce the noise from false positives.

    I would rate Trend Vision One a nine out of ten.

    Disclosure: PeerSpot contacted the reviewer to collect the review and to validate authenticity. The reviewer was referred by the vendor, but the review is not subject to editing or approval by the vendor.
    Last updated: Sep 6, 2025
    Flag as inappropriate
    PeerSpot user
    reviewer2735652 - PeerSpot reviewer
    Associate Specialist Infrastructure and Support at a security firm with 501-1,000 employees
    Real User
    Top 20
    Jul 15, 2025
    Helps secure endpoints and quickly respond to incidents
    Pros and Cons
    • "Trend Vision One has improved the way our organization functions by acting as both a monitoring tool and an antivirus, giving us insight on potential threats and enhancing our response time to security incidents."
    • "Our developers were understandably frustrated that they couldn’t debug code for a month and a half, which impacted our project timelines."

    What is our primary use case?

    Our use cases for Trend Vision One are monitoring and alerts.

    How has it helped my organization?

    The biggest challenges we wanted to address with Trend Vision One were securing endpoints and enabling us to quickly respond to incidents or threats. This is the main goal for using this solution.

    Trend Vision One has improved the way our organization functions by acting as both a monitoring tool and an antivirus, giving us insight on potential threats and enhancing our response time to security incidents. It is hard to measure the time savings but we save a significant amount of time in responding to potential threats. For example, we don't expect employees to respond to emails, chat, or calls outside of working hours. Trend Vision One has a feature where we can block all access to the laptop or endpoints. It allows us to take immediate action without waiting for the user to respond.

    In terms of reducing noise from false positives, unfortunately, some behaviors can be mistaken for bad behaviors, but that isn't the fault of the software itself. It largely depends on how the developers of other applications implement their software and how it is run. We encountered an issue with another software called Rapid7, which periodically runs a command on MacBooks or Apple operating systems. This command, which is quite lengthy, searches for any unsecured credentials or API keys related to GitHub on the laptop. The way the application triggers is significant: it runs under root privileges, executing that command in the terminal for the user. Trend Vision One picks this up as a suspicious command, interpreting it as an attempt to find unsecured credentials. Despite having whitelisted the entire command in Rapid7, Trend Vision One still flagged it. We went back and forth on this issue, but ultimately we decided that it wasn't worth further troubleshooting to silence this alert due to the potential for actual malicious use of such commands. While we could whitelist it, we did not want to risk it being exploited maliciously. In the end, we chose to ignore the alert. They helped us reduce some other noise, but there was some noise that we weren't able to reduce.

    Vision One AI has been very useful. All IT people stay up to date with security risks, exposures, alerts, or attacks. Vision One AI helps us explain or understand the alerts and what actions are recommended.

    What is most valuable?

    The workbench alerts are something we find very useful, as they help us stay informed about various activities. Not all alerts are positive, but they provide valuable insights into the detection methods and help us understand how certain issues arise. For example, if someone attempts to run a piece of software that encrypts a file, one of our tools, which is used for evidence gathering in surveillance systems, may encrypt the file too quickly. As a result, Trend Vision One may trigger an alert. Although this is a false positive, it still gives us insight into the behavior involved. This allows us to investigate the alert further and provide feedback to the user or development team, letting them know that similar triggers are likely to occur with other security systems or software.

    Other useful features include intrusion and mailbox alerts, suspicious unauthorized access, tracing logs, website clicks, and email filtering for bad attachments.

    What needs improvement?

    The improvement I have been asking for is an easier way to create MDR requests. Not all alerts that come through Trend Vision One receive an investigation, and we would like the ability to easily request an investigation on lower-scored alerts without logging into the support portal to create a ticket.

    I would like to see Trend Vision One and OfficeScan consolidated into one platform. Currently, it is the same space but two different layers. It would be nice to have both combined instead of having two clients.

    There is room for improvement when it comes to support.

    For how long have I used the solution?

    I've been working with Trend Vision One for three years.

    What do I think about the stability of the solution?

    Trend Vision One is stable enough. We don't see many performance impacts on our endpoints, except for when our weekly scheduled scans happen. Our developers express that it limits how freely they can develop, but I personally appreciate the insight it gives us and the actions that allow us to take on our devices.

    How are customer service and support?

    I would rate their support a six out of ten. We encountered an issue with one of our tools—specifically, Visual Studio. One of our developers faced difficulties debugging code because Trend Vision One was blocking the debugging application or causing it to crash. This problem stemmed from a Windows update, and it took us a month and a half to identify the root cause. After we opened a ticket either at the end of March or early April, we waited several more weeks for a solution. Although the Windows update occurred back in February, we didn’t receive the fix until the end of May. The interaction between Windows and the application played a significant role in the issue, as the debugging application starts the code and injects itself into the running application, which Trend Micro flagged as problematic after the latest Windows update. Fortunately, this issue has now been resolved, but it was indeed a painful experience. Our developers were understandably frustrated that they couldn’t debug code for a month and a half, which impacted our project timelines.

    How would you rate customer service and support?

    Neutral

    Which solution did I use previously and why did I switch?

    The company previously had SentinelOne before my time, and I can say that SentinelOne was not effective. 

    We currently use Rapid7 as our Managed Detection and Response (MDR) service. In my experience, both Rapid7 and Trend Vision One serve similar purposes, but they have distinct differences. There are times when Rapid7 provides us with more detailed information, while at other times, Trend Vision One offers greater insights. This is partly because Trend Vision One collects more data from the devices, allowing it to better identify the root causes of alerts compared to Rapid7. 

    Additionally, I find that the MDR team at Trend is generally more responsive than that of Rapid7. However, there are some disadvantages as well. For instance, we haven't yet set up cloud monitoring capabilities with Trend Vision One. Rapid7 currently handles our cloud infrastructure monitoring and manages services like Office and Okta. While Rapid7 is equipped to monitor these services, Trend Vision One is not yet at that level. We are exploring ways to enhance its capabilities, and if it can provide the same level of service as Rapid7, we might consider discontinuing our use of Rapid7 altogether.

    How was the initial setup?

    We use the SaaS solution. I was not involved in the initial setup and deployment process, which occurred prior to my time here, but I have readjusted some policies.

    Previously, it was difficult to understand some alerts. However, as time goes by, we differentiate better between them, and the AI feature is an extremely good tool that explains things that are gibberish to the regular user. The learning curve is quite steep.

    What was our ROI?

    It has helped us understand some of the alerts that we did not comprehend.

    What other advice do I have?

    It is an all-around solution that includes various modules for comprehensive security monitoring and alerting. This solution is particularly effective when integrated with other hardware or on-premises solutions, such as Deep Discovery Inspector, which monitors your network.

    The interface is adequate, but it is constantly changing. New features are being added, and items are being rearranged almost daily. We might have missed some announcements regarding these frequent updates. As it is an evolving solution, such changes are to be expected. However, there are still features that are buried within menus, which previously required extensive searching to locate. For instance, until last year, isolating endpoints was only possible through the search function. Now, they have added a feature within the endpoint inventory that allows you to select devices and isolate them immediately, rather than having to jump through multiple hoops to access that option.

    The application has also become slightly more responsive. Regarding its functionality, the insights it provides are quite useful. The application displays various actions, and you can drill down into alerts to view the execution path associated with them. For example, if an application triggers an alert, you can right-click on that alert and select "Check Execution Profile." This feature shows you where the process started, what actions it took, and where it ended. This improvement is beneficial for understanding how tasks are executed.

    I would rate Trend Vision One an eight out of ten.

    Disclosure: PeerSpot contacted the reviewer to collect the review and to validate authenticity. The reviewer was referred by the vendor, but the review is not subject to editing or approval by the vendor.
    Last updated: Jul 15, 2025
    Flag as inappropriate
    PeerSpot user
    Buyer's Guide
    Download our free Trend Vision One Report and get advice and tips from experienced pros sharing their opinions.
    Updated: December 2025
    Buyer's Guide
    Download our free Trend Vision One Report and get advice and tips from experienced pros sharing their opinions.