No more typing reviews! Try our Samantha, our new voice AI agent.
reviewer2787369 - PeerSpot reviewer
Security Engineer at a consultancy with 11-50 employees
Real User
Top 20
Dec 15, 2025
Consolidated security tools into one console and manage endpoints, servers, and emails efficiently
Pros and Cons
  • "TrendAI Vision One has helped me to consolidate my use of security vendors quite a lot."
  • "Sometimes the CPU utilization is so high that the computer crashes or lags behind."

What is our primary use case?

I have experience with TrendAI Vision One, specifically using endpoint security, email security, and all of the modules that are used most commonly.

We mostly install TrendAI Vision One endpoint security in all client organizations, configure everything covering endpoints, servers, emails, and then work on the alerts for them as the need arises.

We are using the sensors that are included in TrendAI Vision One.

What is most valuable?

TrendAI Vision One has helped me to consolidate my use of security vendors quite a lot. Many of my clients were using different brands of antivirus for the server security and endpoint security, and another product for email security. Because of TrendAI Vision One, they were able to combine all of them in the same console. This reduced a lot of siloed tools.

I am quite impressed by the speed with which the server policy gets deployed. While the endpoint policy takes about 15 minutes to get assigned to the system, server policy is quite quick in that regard.

The coverage of these sensors is quite vast. When compared to other antiviruses, we found that TrendAI Vision One does cover quite a lot of ground.

What needs improvement?

The endpoint security policy for standard endpoints with TrendAI Vision One takes a lot of time. It would be beneficial if there were DLP features in it, as many customers require that. While TrendAI Vision One's full suite is quite impressive, customers have to find another product for DLP and file monitoring. TrendAI Vision One does have a not fully-fledged DLP in the endpoint security part, and it sometimes hangs up the PC when we apply it.

The alerts could be better because when an alert comes for an email that has been compromised and found on the dark web, we cannot quite find where it got compromised from.

The network part is something that needs to be worked on because most of the time we have to look at the firewall to get the full scenario or coverage.

What do I think about the stability of the solution?

We have found a lot of performance issues with TrendAI Vision One agents. They are not lightweight. The first time I used TrendAI Vision One, the agent was 500 MB. Now that I am using them, the initial size is 800 MB. Sometimes the CPU utilization is so high that the computer crashes or lags behind. This is a really big concern for everyone using TrendAI Vision One.

Buyer's Guide
TrendAI Vision One
October 2026
Learn what your peers think about TrendAI Vision One. Get advice and tips from experienced pros sharing their opinions. Updated: October 2026.
920,336 professionals have used our research since 2012.

What do I think about the scalability of the solution?

TrendAI Vision One is quite a good tool because there are not any issues in scalability. We can easily add more licenses to it and increase our organization security. Scalability-wise, it is good.

How are customer service and support?

I have contacted the technical support or customer support of TrendAI Vision One quite a lot.

The engineers are quite helpful when they respond, but I have found that sometimes the assigned engineer responds to the first query a bit too late. I can see in the portal that the engineer has been assigned to my case, but we have to prompt them to give us a reply because nobody is answering. We have to call TrendAI Vision One support sometimes. Once we start the case, the responses are quite helpful, though we have had to escalate some of the cases quite a lot when customers need it.

Which solution did I use previously and why did I switch?

I have not basically used any alternatives to TrendAI Vision One. I have tried CrowdStrike and Symantec. Symantec is so far out of TrendAI Vision One's reach and CrowdStrike, I have not used it much, but it is a bit harder to configure than TrendAI Vision One. I find TrendAI Vision One's UI much easier.

How was the initial setup?

The initial deployment of TrendAI Vision One is quite easy since it is basically a cloud-based app, and you just have to deploy the agent.

What about the implementation team?

If integrating AD with TrendAI Vision One, I am sure only one person would be needed. If you have to deploy and install the agents directly into the systems, at least four to five people are needed if the size of the organization is for 1,000 to 2,000 employees.

What was our ROI?

It would take one or two months to deploy TrendAI Vision One for a client, but mostly because sometimes things get delayed on the client side.

What's my experience with pricing, setup cost, and licensing?

No maintenance is required on our side for TrendAI Vision One.

Which other solutions did I evaluate?

I am not into sales, but we have lost a few customers because of the pricing of TrendAI Vision One. They seem to gravitate to Symantec and others because their pricing range is quite less than TrendAI Vision One, and we have lost them because of that.

What other advice do I have?

My review rating for TrendAI Vision One is 9 out of 10.

Which deployment model are you using for this solution?

Public Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
PeerSpot user
reviewer2813907 - PeerSpot reviewer
Managed Detection And Response Delivery Analyst at a tech vendor with 10,001+ employees
Real User
Top 5
Apr 3, 2026
Incident analysis has become faster and clearer but event interfaces still need improvement
Pros and Cons
  • "The solution saves time approximately by 80 to 90 percent; it is very simple."
  • "The scalability of TrendAI Vision One would be around a six; it is appropriate for smaller companies, but for bigger ones such as Nike, I would say it would not fit as well."

What is our primary use case?

TrendAI Vision One is used for XDR.

What is most valuable?

TrendAI Vision One is more limited, but the strong part is its minimalist design, allowing you to know the most important information about the incident. This is the strong point.

TrendAI Vision One helps consolidate security software across hybrid environments, and I think it is useful, especially when integrated with another tool for some clients. It is so useful to get a first analysis or to get some CUs with TrendAI Vision One, so it helps.

The solution saves time approximately by 80 to 90 percent; it is very simple.

What needs improvement?

To provide centralized visibility and management across various protection layers could be better. I would add different interfaces as I really appreciate how CrowdStrike manages the datasets. An interface where you can select the different events that happened in the incident would be beneficial because in TrendAI Vision One the information is very basic; you get all the information raw in a column, which I would improve by adding an advanced search feature similar to CrowdStrike where events can be filtered. This would make the analysis better for the client who is receiving the information.

TrendAI Vision One has room for improvement regarding different interfaces, specifically similar to the Event Simple part of CrowdStrike where you can identify what happened. It would be helpful to have an integrated identity module, because sometimes I want to see who executed an incident, such as a PowerShell command, to know if it was an admin or the local user of the machine. If I cannot see that, I do not know anything. Integrating the identity module would be beneficial.

For how long have I used the solution?

I have been working with TrendAI Vision One for one year and a half.

What do I think about the stability of the solution?

I rate the stability of TrendAI Vision One as a ten because I did not have any problems with it.

What do I think about the scalability of the solution?

The scalability of TrendAI Vision One would be around a six; it is appropriate for smaller companies, but for bigger ones such as Nike, I would say it would not fit as well.

What was our ROI?

Using TrendAI Vision One has reduced the time to detect and respond by approximately 20 percent up to 80 percent; the strong point is that it is simple, making it fast and easy to learn.

What other advice do I have?

When an incident appears in TrendAI Vision One, I open it and on the first page, you get to see the timeline of where all the different assets appear, including the host and other information. It is helpful because you get directly all the information by taking a look at the host involved. For example, if it is a server and you see SSH commands, it may fit with your conclusion. After that, I open the XDR part where you see in raw form all the different information. Finally, I can use the XDR view where you can filter using their raw SQL language to filter all the different incidents, for example, by endpoint GUID, something I usually use.

The risk reduction from using TrendAI Vision One depends on various factors. If I only get to use TrendAI Vision One and not any other tools, I think it would be approximately 80 percent, because if you have normal incidents, it is helpful, making it easier for the team of the final client to read the information. However, for real incidents requiring forensics, if you have to activate forensics, I think you would have difficulties, so I would say around 80 percent.

The importance of AI built into TrendAI Vision One is relatively recent for me; it is helpful to have a direct verdict, but I prefer to make my manual verdict. I would say it is important at a level of five for me, but for some inexperienced analysts, it might be at a level of five or seven because they will rely on that.

TrendAI Vision One is more simple compared to other solutions, but it could be useful for controlled cases if you have a small enterprise where the same software is used, making it interesting for situations where you are familiar with specific CUs. In my opinion, it would be more interesting than Cortex for smaller incidents, while I would prefer Cortex for larger cases than false positives which will be better managed by TrendAI Vision One.

My clients may be less than average because TrendAI Vision One is not that widely used. I think it is getting used less, but perhaps with the AI update it will be used more. I would estimate around 5 to 10 clients, approximately half of my client base.

Learning TrendAI Vision One can take anywhere from two weeks to one month.

In my opinion, TrendAI Vision One gets the information easily, but it does not really help reduce false positives by itself; you have to do the final work. I would say it helps with false positives around 80 percent because in TrendAI Vision One, you can see the verdict, plus AI is assisting with it.

I would recommend TrendAI Vision One, telling potential users that it is very easy to use, but it would be useful to learn how to use SQL for deeper analysis of different modules, which is important. Knowing how to use the different modules that your client has integrated will make a significant difference.

Which deployment model are you using for this solution?

On-premises

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Other
Disclosure: My company has a business relationship with this vendor other than being a customer. partner
Last updated: Apr 3, 2026
Flag as inappropriate
PeerSpot user
Buyer's Guide
TrendAI Vision One
October 2026
Learn what your peers think about TrendAI Vision One. Get advice and tips from experienced pros sharing their opinions. Updated: October 2026.
920,336 professionals have used our research since 2012.
Soufiane Hammoutou - PeerSpot reviewer
Consultant at HAUTS-DE-SEINE HABITAT
Consultant
Top 20
Jan 14, 2026
Centralized protection has improved threat response and simplified endpoint security management
Pros and Cons
  • "TrendAI Vision One helps with centralized visibility and protection across multiple layers."
  • "To improve TrendAI Vision One to a perfect score, I believe better pricing and more support would be ideal."

What is our primary use case?

My use case for TrendAI Vision One is deploying it for an entity within a company. I deployed TrendAI Vision One to protect all kinds of endpoints, including mobiles, machines, mailboxes, and servers.

What is most valuable?

The best features of TrendAI Vision One that I appreciate include its centralized nature, the Copilot AI agent, its simplicity of use, and the quality of their API.

TrendAI Vision One has helped reduce my time to detect and time to respond to threats by approximately 10%.

What needs improvement?

To improve TrendAI Vision One to a perfect score, I believe better pricing and more support would be ideal.

For how long have I used the solution?

I have been using TrendAI Vision One for one year.

What do I think about the stability of the solution?

I would rate the stability of TrendAI Vision One highly, as there were no bugs. I would give it a 10.

What do I think about the scalability of the solution?

Regarding scalability, TrendAI Vision One is scalable. I would give it an eight.

How are customer service and support?

I rate the technical support an eight.

The coverage for my organization's network is critical. When we have questions, we return to them. When we need something, we return to them, and they were always available.

How would you rate customer service and support?

Positive

Which solution did I use previously and why did I switch?

The risk reduced by switching to TrendAI Vision One is similar to other EDR or XDR solutions. It can detect malicious operations and threats, but the exact percentage is difficult to quantify. For the company I was deploying it for, we detected many threats. I would rate the risk reduction as a 10 because the company in question did not have an XDR or EDR solution in place before.

How was the initial setup?

The deployment of TrendAI Vision One is easy; it is just an executable.

It takes almost one day for TrendAI Vision One to appear in the console.

What about the implementation team?

In my organization, we had four specialists working with TrendAI Vision One: myself and three security engineers. I was the project manager.

What was our ROI?

I can estimate the ROI seen from TrendAI Vision One to be approximately 15%.

What's my experience with pricing, setup cost, and licensing?

When it comes to pricing, I find TrendAI Vision One not expensive compared to other products.

Which other solutions did I evaluate?

I compare TrendAI Vision One with other solutions and vendors on the market, and we can see that it is well-placed in Gartner, so it is one of the best products.

What other advice do I have?

TrendAI Vision One helps with centralized visibility and protection across multiple layers.

The visibility and protection provided by TrendAI Vision One allow us to see all the assets in one console, which is beneficial. We can also see all the features in one console, which is equally advantageous.

I did not use the cyber risk exposure management capabilities with TrendAI Vision One, nor did my clients use that for identifying blind spots.

The top security challenges in the industry include handling the decommissioning of old products, specifically a Microsoft product. Additionally, not all features are centralized in one console, which is not ideal for the correlation of investigations.

TrendAI Vision One is deployed as a cloud solution and a SaaS solution.

I used TrendAI Vision One sensors.

I would recommend TrendAI Vision One to other users because it is easy to use and easy to deploy, as these are the most important factors. The importance of having AI built into TrendAI Vision One is significant; I use the AI aspects. When I want to look for a feature, I go to AI. When I want to create, for example, an IOC, I go to AI, and it assists with this.

Which deployment model are you using for this solution?

Public Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Disclosure: My company has a business relationship with this vendor other than being a customer. partner
PeerSpot user
reviewer2858205 - PeerSpot reviewer
Senior Presales Consultant - Security Solutions at a engineering company with 10,001+ employees
Reseller
Top 20
Jun 24, 2026
Unified security platform has strengthened hybrid protection and improved threat detection speed
Pros and Cons
  • "Overall, it is a complete platform that is very much in demand."
  • "Regarding the cyber risk exposure management capabilities, we did try to sell it, but there are too many competitors, and frankly speaking, there are other products better in the market."

What is our primary use case?

I am using it as a reseller. I use its platform for consolidated security across hybrid environments, and it is absolutely possible to manage your cloud and on-prem workloads and secure them. That is something which is also one of the main features.

What is most valuable?

The most valuable features I find in TrendAI Vision One are the XDR part, which is something that is very much in use, and the cloud solution for server protection, which is also very much in use. They also integrated email security into it, so that integration is very helpful. Overall, it is a complete platform that is very much in demand.

TrendAI Vision One has absolutely helped my customers consolidate their use of security vendors and reduce silos. As I mentioned, it is a complete platform, allowing you to replace many other technologies with a single platform of TrendAI Vision One.

TrendAI Vision One has definitely helped my customers reduce the time to detect and respond to threats, and this is one of the key features of the solution's detection capability.

Whether it has helped my customers reduce noise from false positives depends upon the configuration. With the passage of time and experience with the solution, it takes time to mature. Once you deploy it, it gets better over two to three months, and the noise gets reduced. That is a normal roadmap when deploying such a solution.

Overall, it has certainly helped them reduce cyber risk in my customers' companies.

The fact that TrendAI Vision One has AI built into its platform is one of the key features; it is super important these days. Without it, I think it will be difficult.

When it comes to functionalities and AI capabilities, I am absolutely satisfied with TrendAI Vision One.

What needs improvement?

There could be improvements in TrendAI Vision One, especially when comparing it with other products in the industry. It competes very solidly, but I would say the cost perspective poses a challenge we normally face. If they can become more competitive cost-wise, that might help both customers and resellers.

For how long have I used the solution?

I have been dealing with TrendAI Vision One for almost two years.

How are customer service and support?

I would rate TrendAI technical support as very decent, with the exception of one or two issues. We never received any major complaints, so I think it is very decent.

How was the initial setup?

The initial setup for TrendAI Vision One is not that difficult. You just need to set up the tenant, and after the tenant is set up, you roll out the agents, which need to coordinate with the centralized server. You just need to ensure that the centralized server is reachable to the tenant, so you can set it up easily within one week.

Which other solutions did I evaluate?

I usually recommend multiple other solutions, such as SentinelOne, which is comparatively cheaper, and then we have Kaspersky. I think Microsoft is also expensive, so these two products compete very well when it comes to cost.

What other advice do I have?

Regarding the cyber risk exposure management capabilities, we did try to sell it, but there are too many competitors, and frankly speaking, there are other products better in the market. However, if the customer is going for an entire package and this comes at a lower cost, then it is being sold.

My impressions of TrendAI Vision One's ability to provide centralized visibility and management across protection layers is that it is very strong and an amazing product. From the centralized management perspective and also from detection and threat hunting, it is something which is very strong.

It is difficult to say how much time it has reduced approximately, but the detection capability itself proves to be very useful for my customers. I never see any complaints about not being able to detect any threats with the help of the platform. It is something that is easy to manage, easy to deploy, easy to use, helping in threat hunting and analysis quickly. Overall, I would say it is a great product.

When it comes to performance, I do agree that TrendAI Vision One is indeed the best option on the market.

I rate TrendAI Vision One overall at 9.5.

I do not have any additional features on top of my head that I would like to see in the future. I think it is reasonable at the moment with all the features required to compete with other industry leaders.

Which deployment model are you using for this solution?

Hybrid Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Other
Disclosure: My company has a business relationship with this vendor other than being a customer. Reseller
Last updated: Jun 24, 2026
Flag as inappropriate
PeerSpot user
Igor Levicnik - PeerSpot reviewer
Head of Information Security at ILTEH
Real User
Top 10
Jul 31, 2026
Centralized visibility and AI-driven threat correlation have improved daily incident response
Pros and Cons
  • "On the endpoint devices, I see the benefits because they are the only antivirus that stopped crypto-virus on my environment."
  • "The credits system is a little bit confusing to use. Licensing and feature management could be improved."

What is our primary use case?

I use TrendAI Vision One for endpoint devices mostly, including antivirus, EDR, and XDR capabilities.

TrendAI Vision One solved a problem for me when there is a vulnerability in some endpoint device. I use it for email security as well, as it stops phishing attacks and similar threats.

Regarding my main use case for TrendAI Vision One, brand incident response serves as a central platform for day-to-day security operations.

What is most valuable?

I find particularly valuable features include centralized visibility, attack correlation, automated response, and reporting.

I mostly rely on endpoint vendors because they are the most valuable for me and help clients protect their environments. Incident correlation and XDR investigation, along with centralized security visibility, are also great. Threat intelligence and risk analysis are important features as well.

The network device functionality seems very interesting to me, as it allows me to see all the traffic in the environment. I must test it to understand how it works.

On the endpoint devices, I see the benefits because they are the only antivirus that stopped crypto-virus on my environment. I trust this solution fully. I think it offers faster threat detection and response than other platforms, and I have more efficient incident investigation as a result.

TrendAI Vision One provides a strong approach to governance and security by focusing on control, the use of AI, data protection, and responsible threat analysis. The AI capabilities help security teams analyze large amounts of security data. Overall, I think it is a solid solution.

What needs improvement?

The credits system is a little bit confusing to use. Licensing and feature management could be improved.

There are too many things in the console, and I wish it would be more streamlined. I want a more intuitive and user-friendly console.

I think the console could be more user-friendly and the credits system is confusing. Overall, I think it is great and has great transparency, but more customization options would be beneficial.

For how long have I used the solution?

I have been working with Trend Micro for about ten years.

How are customer service and support?

I purchased TrendAI Vision One with a partner called Exclusive Networks.

What about the implementation team?

The implementation partner is just the seller to me for licenses.

What other advice do I have?

I have been working with TrendAI Vision One for about two years. Before this, I was working with Worry-Free Business Security Services. My overall review rating for TrendAI Vision One is eight out of ten.

Which deployment model are you using for this solution?

Public Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Other
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Last updated: Jul 31, 2026
Flag as inappropriate
PeerSpot user
Monish Kumar V - PeerSpot reviewer
Senior Associate Cyber Security Defense at kyndryl
Real User
Top 20
Feb 12, 2026
Improved incident investigations have reduced analyst effort with enriched high-fidelity alerts
Pros and Cons
  • "Since the alerts are high fidelity and TrendAI Vision One requires less overall from the security analyst perspective, it reduces cyber risk effectively."
  • "Compared to CrowdStrike sensor, TrendAI Vision One consumes more compute power."

What is our primary use case?

We use TrendAI Vision One for endpoint security.

For example, we use XSIAM, which is Palo Alto's XDR plus SIEM solution. When we get an incident, we need to do some hunting in that system. It takes approximately 45 minutes. However, with TrendAI Vision One, because most of the information is already enriched, we get only high fidelity incidents. This saves us around 25% of time compared to other solutions.

TrendAI Vision One mostly delivers high-fidelity incidents. We receive nearly 60% of incidents as true positives, with the remaining 40% being false positives. Comparatively, with XSIAM we have around 40% true positives and 60% false positives.

We are an MSSP with nearly 60 people working in SCI, which is Shared Commercial Infrastructure. We have approximately 60 people dedicated to TrendAI Vision One.

What is most valuable?

One feature I appreciate about TrendAI Vision One is that compared to other solutions, the alerts we receive are already enriched. We use it in a shared commercial infrastructure which was inherited from IBM. During investigation, it is much easier to work with TrendAI Vision One compared to other solutions.

What needs improvement?

Compared to CrowdStrike sensor, TrendAI Vision One consumes more compute power. CrowdStrike is more optimized than this solution.

TrendAI Vision One is a niche product because XSIAM is a combination of SIEM plus XDR, while this is an XDR solution. If I need to do deep hunting, for example, we had an incident in Microsoft Defender yesterday which required advanced hunting capabilities. This is not possible in TrendAI Vision One, which I see as a drawback. TrendAI Vision One is a very good product, but it has a specific use case. If you want less customization, you can use TrendAI Vision One. If you need more customization, you need to use a SIEM plus XDR solution. Nowadays, they are integrating SIEM with XDR solutions. For example, we have XSIAM and Microsoft Defender is going to integrate SIEM as well going forward. In that case, TrendAI Vision One is a niche product. As a product with its specific use case, it is good.

Specifically regarding sensors, they consume comparatively more compute capacity, so we need to plan our workloads accordingly. Additionally, the user interface could be improved. When I investigate one alert, all the indicators appear jumbled together in one area. If they improve the user interface, it would be better.

For how long have I used the solution?

We have been using TrendAI Vision One for the last one and a half years.

How are customer service and support?

I would rate the technical support an eight.

How would you rate customer service and support?

Positive

What other advice do I have?

Since the alerts are high fidelity and TrendAI Vision One requires less overall from the security analyst perspective, it reduces cyber risk effectively. Regarding downtime compared to XSIAM, I would rate this a nine because its downtime is considerably less. In terms of scalability, it is pretty scalable, though somewhat complex, so I would rate it an eight point five. I would recommend TrendAI Vision One if the organization is less mature in terms of SOC. However, if you want to do advanced SOC hunting, this is not the right product in my opinion. The overall review rating for this product is eight point five.

Which deployment model are you using for this solution?

On-premises

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

IBM
Disclosure: My company has a business relationship with this vendor other than being a customer. MSP
Last updated: Feb 12, 2026
Flag as inappropriate
PeerSpot user
MalayKumar Das - PeerSpot reviewer
SOC Consultant SOC Consultant at IBM
Real User
Top 20
Dec 15, 2025
Centralized threat hunting has improved endpoint visibility and allows silent remote remediation
Pros and Cons
  • "TrendAI Vision One allows mitigation of threats without interrupting branch users' regular work, which is its unique selling point."
  • "The area for improvement is to provide more clarity on the query part, including examples for creating reference sets and documenting capabilities thoroughly so future users can benefit without needing to experiment."

What is our primary use case?

TrendAI Vision One use cases are mostly related to endpoints, such as detecting registry modifications or new software being added, as well as monitoring for malicious activities including PowerShell scripts, double extension files, ransomware, and crypto miners. Since I work for the financial sector, it is crucial to ensure there are no remote software programs running, especially regarding banking security.

What is most valuable?

TrendAI Vision One has two types of alerts that help reduce the time to detect and respond to threats. The first is based on alerts and workbench ID, while the second is host-based detections, allowing me to see all different threats on particular endpoints over a selected time frame. I can check for various endpoints affected by different alerts and customize this for specific time frames. Monitoring critical assets, threat hunting, and running queries are feasible tasks, providing a comprehensive overview of endpoint security and the ability to remove malicious files quickly.

One of the best features of TrendAI Vision One is its ability to let me remediate endpoints without disturbing branch users, as long as the endpoint is online and connected. I can delete files or take control through the console by informing the bank's security team to get approval. Another great feature is viewing alerts, segregating them by type and host, which makes it easier to fine-tune security and monitor critical resources. Additionally, the ability to create reference sets for known malicious hashes enhances detection capabilities across endpoints.

TrendAI Vision One saves resources and time. It provides better visibility of endpoints compared to other security management tools, which makes it invaluable. For smaller organizations that may not afford multiple tools, an XDR solution can handle their security needs effectively.

TrendAI Vision One allows mitigation of threats without interrupting branch users' regular work, which is its unique selling point.

What needs improvement?

The area for improvement is to provide more clarity on the query part, including examples for creating reference sets and documenting capabilities thoroughly so future users can benefit without needing to experiment.

Documenting the capabilities of endpoint consoles would also be beneficial for new users understanding what can be done effectively.

For how long have I used the solution?

I initially used the first EDR approximately two years ago, and now I have been using TrendAI Vision One for eight to nine months.

What do I think about the stability of the solution?

The stability of TrendAI Vision One is good; I would rate it an eight.

What do I think about the scalability of the solution?

I would rate the scalability at eight and a half.

How are customer service and support?

I have not worked with technical support yet, so I cannot rate it.

How would you rate customer service and support?

Neutral

Which solution did I use previously and why did I switch?

I have not worked with other solutions yet, so I can only speak to my experience with TrendAI Vision One XDR, which I find to be good for handling threats across endpoints.

How was the initial setup?

I am not aware of the deployment process since I have not been involved with it.

What about the implementation team?

Only a few of us are using the solution currently—my manager and I. Due to my background in threat hunting, I have admin access to monitor various alerts and create reference sets for potential threats effectively.

Only three or four users have access to TrendAI Vision One, including my manager and me from the vendor side, and two from the bank end.

I am a vendor hired for SOC security and threat hunting, working for IBM clients.

What was our ROI?

I cannot estimate the return on investment accurately, as I do not have insight into the financials. However, I can say that the tool is good, particularly the basic subscription which provides me with necessary tools and knowledge to protect security.

What's my experience with pricing, setup cost, and licensing?

I do not have any information regarding the pricing, so I cannot comment on that.

Which other solutions did I evaluate?

Every organization typically installs antivirus agents on their endpoints and servers.

What other advice do I have?

My false positives have decreased, but reducing them requires thorough investigation. For example, each endpoint has its own scanning device, such as Windows Defender.

Apex Central is attempting to stop the services of Windows Defender, leading to alerts when malicious behavior is detected. Through thorough investigation, I have identified that while Apex Central might not directly stop processes, it does so using CMDlets. Hence, I decided to whitelist that.

TrendAI Vision One reduces endpoint risk by approximately 60 to 70 percent; the remaining 30 percent can be due to other factors such as phishing and web interactions.

For small organizations, implementing TrendAI Vision One is a wise choice because it delivers great visibility and clarity on endpoint threats, enabling effective monitoring and quarantining regardless of the environment.

TrendAI Vision One sensors are being used on the endpoints.

I do not know if Cyber Risk Exposure Management comes under the basic subscription, as I mostly focus on threat hunting and do not recall using it.

If the suggested improvements are implemented, it will be even more flexible and feasible.

I give this review an overall rating of 9 out of 10, and I definitely recommend TrendAI Vision One to other users because it provides solid security for endpoint protection.

Which deployment model are you using for this solution?

On-premises

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

IBM
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
Owner at Darcom
Real User
Top 5
Aug 1, 2026
XDR dashboard has unified threat response and has reduced false-positive noise across endpoints
Pros and Cons
  • "The product is very helpful for responding to threats and helps reduce time to detect and time to respond to threats significantly."
  • "TrendAI Vision One is not a cheap system and is very expensive when considering value for money and return on investment."

What is our primary use case?

TrendAI Vision One, the XDR platform, includes endpoint protection, EDR, mail protection as a mail gateway, mail access, and access integration with API for Office 365 and Google Workspace. The endpoint protection and mail protection features work seamlessly, and integration with cloud solutions is very simple.

The solution provides endpoint protection, identity protection, mail protection, and XDR workbench solution with automatic playbooks all in one dashboard. TrendAI Vision One has been a historic solution from my previous work, which is the reason I chose it. It is one piece of the solution focused on XDR with an EDR agent and sensor agent. Sensor agents provide information about the endpoint, which demonstrates how critical this coverage is for my company network.

What is most valuable?

The product is very helpful for responding to threats and helps reduce time to detect and time to respond to threats significantly. It helps reduce noise from false positives, although you need to work with the system continuously to manage exclusions and manage the suspicion object list. There are false positives in mail, but under these managed conditions, the noise is reduced by approximately forty percent of the time.

Even though it is expensive, it helps consolidate the use of security vendors and reduce silos. TrendAI Vision One provides one dashboard that can be used for many things, and it is also a network monitoring solution.

What needs improvement?

The agent for endpoints is very large and not easy to install, which is a significant disadvantage of the product. It is not one agent; you need to install two agents, and sometimes you have connectivity problems when installing and connecting to the XDR server, which presents a challenge during the installation process.

TrendAI Vision One is not a cheap system and is very expensive when considering value for money and return on investment. It is possible to track any ROI with TrendAI Vision One. The two main problems are that the endpoint agent is very large and the price is very expensive. Apart from these problems, everything else functions well.

For how long have I used the solution?

I started using TrendAI Vision One five or six years ago.

What do I think about the stability of the solution?

I would rate the stability of the product as seven out of ten, where ten points represents very stable. I think the agent is very heavy, which is why I rate it seven.

What do I think about the scalability of the solution?

TrendAI Vision One is not optimized for scalability, where ten points represents very easy to scale up, and this is not my use case. I never had a chance to scale it.

How are customer service and support?

I am very happy with the customer support and customer service from TrendAI. I work closely with the Israel team, and it is very helpful. I would rate support as ten out of ten points.

Which solution did I use previously and why did I switch?

I have not worked closely with any similar products to TrendAI Vision One. I have the most experience with TrendAI, and with other products, not as much.

What was our ROI?

TrendAI Vision One is not a cheap system and is very expensive when considering value for money and return on investment. It is possible to track any ROI with TrendAI Vision One.

What other advice do I have?

TrendAI Vision One is an established solution and not new. The TrendAI Vision One XDR solution has a new name, but I continue to work with it. I have not been using the Cyber Risk Exposure Management, CREM capability.

AWS and GCP are the cloud providers I am using. I was working with TrendAI Vision One sensors.

I do not know how much risk was reduced by switching to TrendAI Vision One platform. I know they have an AI model, but I do not use it currently because I do not need it.

My overall review rating for this product is eight out of ten.

Which deployment model are you using for this solution?

On-premises

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Amazon Web Services (AWS)
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
Last updated: Aug 1, 2026
Flag as inappropriate
PeerSpot user
reviewer1072692 - PeerSpot reviewer
Head of IT at a financial services firm with 11-50 employees
Real User
Top 20
Nov 3, 2025
Provides centralized visibility and improves threat response across hybrid environments
Pros and Cons
  • "The comprehensive overview of the security status is the most valuable feature of TrendAI Vision One, and its ability to provide centralized visibility and management is quite good because all the relevant data are present, providing everything needed."
  • "Some improvements could be made, but all the possibilities of the platform are not being fully utilized, so some features that could be discussed may not have been explored yet, though they may already be available."

What is our primary use case?

TrendAI Vision One sensors are used at the endpoint to gather information from endpoints, which has proven to be very useful. The coverage provided by TrendAI Vision One is critical for our organization's network because it's a comprehensive way to get all the relevant data from the endpoints regarding antivirus security and similar security settings.

Some basic features of the Cyber Risk Exposure Management capabilities in TrendAI Vision One are being used. Plans exist to expand the usage, but currently the overview of the cyber risk settings is checked, though it hasn't been used much in the last few months.

TrendAI Vision One has helped consolidate the use of security vendors and reduce silos, but other vendors have not been replaced. TrendAI Vision One alone is sufficient for current needs, so other vendors for such solutions do not need to be used, at least not for now.

TrendAI Vision One is used for consolidated security across hybrid environments.

What is most valuable?

The comprehensive overview of the security status is the most valuable feature of TrendAI Vision One. TrendAI Vision One platform's ability to provide centralized visibility and management is quite good because all the relevant data are present, providing everything needed. The interface is quite simple to use and all the relevant data can be seen there.

TrendAI Vision One has helped reduce the time to detect and respond to threats because information is gathered more quickly and all the relevant points are visible. If there's any problem, it can be seen much easier and quicker.

TrendAI Vision One has also helped reduce cyber risks because it decreases cyber risks as there is more control over the environment.

What needs improvement?

There are currently no particular suggestions on how TrendAI Vision One can be improved because improvements have been seen in nearly every version, and satisfaction with what can be seen and used is high.

Additional features are not desired to be seen in the next release of TrendAI Vision One because not all the features that are available now are being used. For current needs, everything is already there. Perhaps in the future something else will be needed, but everything that is currently needed is already included.

TrendAI Vision One has improved its integration with other products, with other vendors, or with mobile device management. The mobile device management solution has improved over the years and was pretty basic when it started, but now it has much more options. Some improvements could be made, but all the possibilities of the platform are not being fully utilized, so some features that could be discussed may not have been explored yet, though they may already be available.

For how long have I used the solution?

TrendAI Vision One has been used for a couple of years.

What do I think about the scalability of the solution?

There have been no problems with scaling TrendAI Vision One. The organization is not large, so there were no problems in scaling. TrendAI Vision One appears to be tailored for much bigger organizations, so no scaling problems were encountered.

How are customer service and support?

There has not been much contact with technical support, though some checks and presentations were conducted, which were quite good. The response was very quick and all the information needed was received, resulting in high satisfaction.

Technical support would be rated nine out of ten. Regarding local technical support, it is also quite good through the partner network and directly. If something is escalated directly to Trend Micro, responses are received. There is high satisfaction with the current support level.

How would you rate customer service and support?

Positive

How was the initial setup?

The initial setup of TrendAI Vision One was seamless because it was a migration from an on-premises Trend Micro service to a cloud-based one, so there were no particular problems.

What about the implementation team?

External partners were used for the implementation of TrendAI Vision One, though the process was overseen. There was a transfer of knowledge during the implementation.

What was our ROI?

Return on investment from TrendAI Vision One has not been calculated in the traditional sense, but price-wise, it's a better solution than some others that have been looked at or researched. TrendAI Vision One is quite convenient for the organization.

Which other solutions did I evaluate?

Before TrendAI Vision One, a broader marketplace was evaluated. A granular possibility to purchase only needed options without purchasing unnecessary components was not observed in other solutions. The licensing model of TrendAI Vision One is the best among other solutions that have been seen.

What other advice do I have?

For integrations with third-party solutions, integration was done for log management. Logs are downloaded or shipped from Trend Micro solutions to internal log management solutions, and there were no particular problems in integrations. Many other integrations specifically with Trend Micro were not conducted.

TrendAI Vision One is considered the best option on the market at the moment for this organization. TrendAI Vision One appears to be quite popular in the region, with many companies using it, both bigger and smaller organizations. A community provides information and support, making TrendAI Vision One popular in the area.

TrendAI Vision One has been using AI technologies already for some time, which shows awareness of the landscape. It is believed that TrendAI Vision One will tailor the solution accordingly, as AI is already being used in some solutions within the platform, indicating good direction for the product.

TrendAI Vision One provides learning courses, and events from partners sometimes offer opportunities to gather new information on the products. Additionally, a community is available, creating a good landscape for learning and support in the region.

The partnership program is not well known because collaboration is through partners, but it is believed that partner satisfaction is high.

TrendAI Vision One received an overall rating of eight out of ten.

Which deployment model are you using for this solution?

Public Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Other
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
Server Adminstrator at Centre for Industry-Academia Collaboration
Real User
Top 20
Jun 4, 2026
Advanced threat detection has improved reporting and response for our distributed endpoints
Pros and Cons
  • "TrendAI Vision One is great and is very helpful for our organization, and if you use the full features, then definitely it is a very powerful system."
  • "I find TrendAI Vision One not scalable; it is not easy to scale it up or out."

What is our primary use case?

I am currently using TrendAI Vision One and a center, but I find TrendAI Vision One to be working; however, the option is not there right now.

Using TrendAI Vision One is beneficial for us, beneficial for our organization, and for your administrator as well, because it is easy to use and maintain the clients.

For my environment, we are using TrendAI Vision One for some attacking and some system tampering, so we are seeing the report and working on that.

I am using TrendAI Vision One sensors in India and Chhattisgarh, which is one state there.

We have right now 600 licenses for TrendAI Vision One, but we are using almost 520 approximately.

TrendAI Vision One coverage is completely critical for our organization's network, and it is actually beneficial for us.

What is most valuable?

The best features in TrendAI Vision One that I prefer include its AI function, reporting, and the way it collects all clients' data and shows attacks; so it is prompting in that way, which is very useful.

When I am using TrendAI Vision One, it is very useful for me and my organization; the report is there, a smart wall is there, customization is possible, and it shows many attacks—first it generates a report and blocks everything, so it is very nice.

TrendAI Vision One helps me consolidate my use of security vendors, and many options are there for consolidation, plus customization is possible, so you can put all the options that your organization requires under a single umbrella, which is a nice feature.

TrendAI Vision One helps me reduce the time to detect and respond to threats, and the response time is very good; if any issue arises then, definitely the prompt response is there.

What needs improvement?

I used TrendAI Vision One in the past before six months, but right now it is not opening and gives some error, so I am not using it in that way.

Actually, mostly we are not using TrendAI Vision One regularly.

There is an AI function in TrendAI Vision One, but I want some smart wall and categorization; if a categorization option is available, then customization can be done, which I hope is available for your clients in the future.

We are facing some issues regarding TrendAI Vision One since we are not using any centralized system, such as AD and no LDAP system is there, so all my clients are in a workgroup. This sometimes makes it difficult to make changes or perform updates, such as removing the AV and reinstalling it, but it is working very fine and is definitely nice.

I think TrendAI Vision One has not helped me reduce the noise from false positives.

I find TrendAI Vision One not scalable; it is not easy to scale it up or out.

For how long have I used the solution?

I worked with TrendAI Vision One for the last one year.

What do I think about the stability of the solution?

I have had no crashes, downtimes, or performance issues with TrendAI Vision One.

Since I have redundancy servers, there has not been any downtime required.

What do I think about the scalability of the solution?

I find TrendAI Vision One not scalable; it is not easy to scale it up or out.

How are customer service and support?

Regarding tech support, there is no issue; I have not escalated any questions to the technical support.

I rate the tech support as very nice; there is also good response.

Which solution did I use previously and why did I switch?

Before TrendAI Vision One, we were using Symantec antivirus.

How was the initial setup?

The initial setup of TrendAI Vision One is easy; it is not difficult.

What about the implementation team?

TrendAI Vision One deployment is in-house.

What was our ROI?

TrendAI Vision One is great and is very helpful for our organization, and if you use the full features, then definitely it is a very powerful system.

What other advice do I have?

I am not using TrendAI Vision One's Cyber Risk Exposure Management capabilities.

My impressions of TrendAI Vision One's ability to provide centralized visibility and management across protection layers are that it is a very nice product with very nice features. The reports are sent to my email even when I am not logged into TrendAI Vision One, so I always see the report, and if there is any hurdle or issue, then we are using it and working on that one.

We are using the on-premises deployment for TrendAI Vision One, and we are not using the cloud.

TrendAI Vision One's main benefits include its response to cyber attacks, new viruses, vulnerabilities, ransomware prevention, and data loss protection, which are all very nice.

I give this review an overall rating of 9.

Which deployment model are you using for this solution?

On-premises

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Other
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Last updated: Jun 4, 2026
Flag as inappropriate
PeerSpot user
Buyer's Guide
Download our free TrendAI Vision One Report and get advice and tips from experienced pros sharing their opinions.
Updated: October 2026
Buyer's Guide
Download our free TrendAI Vision One Report and get advice and tips from experienced pros sharing their opinions.