No more typing reviews! Try our Samantha, our new voice AI agent.
Works at Optigrün international AG
User
Top 10
Mar 3, 2025
Provides solid security, centralized visibility, and flexible licensing
Pros and Cons
  • "The dashboard is valuable. It provides a comprehensive view of our security status and allows us to compare ourselves with other companies using Trend Vision."
  • "Our speed has increased significantly."
  • "Improving the user interface would be helpful—it can be confusing, especially if you do not use it daily."

What is our primary use case?

We have been in contact with Trend Micro for a very long time. We have a Domino server, which is the alternative to an Exchange server, and we have implemented their virus scanner there. Because of that, we decided to stick with the company and integrate Email Gateway Protection as well. It is important for us because we host our own mail server, and we receive a huge amount of spam. The goal was to reduce that. So far, we have reduced our email traffic by almost 50%—thanks to email filtering. This means our employees do not have to handle those emails anymore.

We receive around 1,000,000 emails per year and 500,000 of those are junk. That was a key factor in saving work time. Every email that lands in an inbox has to be handled—either deleted or responded to. We tested this with different employees and found that deciding whether an email is relevant or junk takes about 10 to 15 seconds per email. With 500,000 unnecessary emails, you can imagine how much time we are saving company-wide.

Another major reason we implemented this solution is phishing emails. This is a huge issue. Trend Micro offers phishing awareness training, but ideally, these phishing emails should not even reach our company, as they are highly dangerous. So far, Trend Micro has filtered out around 3,700 phishing emails for us.

There is another extremely dangerous issue—malicious software hidden in attachments. If an employee clicks on such an attachment, files could get encrypted. In the past year, Trend Micro has intercepted 60 such cases, meaning 60 incidents where our files did not get encrypted.

This is why we use this solution. Of course, there are other providers, but we find Trend Vision One's interface very user-friendly. We also have a dashboard where we can track everything and pull these statistics.

How has it helped my organization?

In Germany, such a security solution is very important. Due to a change in the law, company management is now obligated to ensure that IT security is based on best practices. If they fail to do so or are unaware of their security status and neglect it, they are now personally liable with their private assets. I also need a tool that allows my management and board to monitor our security status. One of the reasons why we chose Trend Vision One was that it provides the option for the board to check the dashboards. This means that every morning while having coffee, they can see the security status of the company on their phones. They can also ask, "Hey, why is our security score high? Is our IT department not working properly? Or do we have a real problem that requires additional software or other measures?" Additionally, negotiations become easier for the IT department, for management, and for us. If security gaps arise, we can say, "Hey, we need software or an investment of a certain amount." We now have a solid foundation for our case.

We use email security and endpoint protection. Endpoint protection is installed on every computer and server, with enhanced sensors on the servers. These security tools are crucial for us—without them, we would be blind in IT. They allow us to monitor the health of each system and user activity, including preventing access to inappropriate websites.

We have a lot of remote work, and we used to struggle because we could not properly monitor devices outside our network or firewall. Now, we can control things like applications, websites, USB sticks, and external hard drives, which was previously impossible. A key feature of our endpoint protection is that if a computer reaches a certain security risk score, it is automatically blocked by the software. This means that if an attack occurs, the affected computer is isolated from the network, preventing further spread.

Our biggest challenge is not direct hacking attacks—our company is not a high-priority target. Instead, phishing emails are the main issue. These emails attempt to trick employees into making fraudulent payments or providing access to our systems, allowing ransomware installation. Email security is our biggest focus area.

It has significantly reduced email volume, which is crucial, especially for our security team, as they do not have time to review every message. IT also receives fewer inquiries about whether emails are legitimate. Additionally, phishing training has helped—our employees recognize phishing attempts better, and our click rate on phishing simulations has dropped to zero. Previously, conducting a phishing simulation would have cost €2,500 per test, but now, we can run one or two tests per month at no additional cost. This provides great value.

It is important for us that Trend Vision One has AI built into its platform. It is essential for detecting abnormalities quickly. Humans may not notice certain threats, but AI can. However, AI is not perfect and sometimes lets suspicious emails through, which we then manually review in quarantine. AI is constantly learning, and the more it improves, the less manual intervention is needed, which is beneficial for us.

We now have visibility. Previously, we were blind and could not assess our security status.

Trend Vision One helped reduce our time to detect and respond to threats. Previously, we relied on reading security forums and websites to identify vulnerabilities. Now, we get real-time alerts and can take immediate action.

Our speed has increased significantly. We can update and patch security threats daily, whereas before, it took weeks or even months.

Trend Vision One has helped our organization reduce its cyber risk, especially through endpoint protection. For example, our field employees used to connect unknown external hard drives, which posed a risk. That is no longer possible, eliminating a major threat vector.

Trend Vision One has helped consolidate our use of security vendors. Previously, we only had basic endpoint protection from another provider, which we replaced with Trend Vision. We now have more security software, not less, because our company has grown significantly—from a small business to a mid-sized enterprise. The IT department was lagging behind, and security was not a priority. Now, we manage everything with one provider, rather than multiple vendors.

What is most valuable?

The dashboard is valuable. It provides a comprehensive view of our security status and allows us to compare ourselves with other companies using Trend Vision. We can immediately see if we need to take action when updates are released with high CVE scores, without having to check multiple websites. This saves time and enables faster decision-making.

The platform provides not only visibility but also intervention capabilities, such as blocking threats. We are operating at a high level in this regard. I would rate Trend’s Vision One platform very high in providing centralized visibility and management across protection layers.

What needs improvement?

Improving the user interface would be helpful—it can be confusing, especially if you do not use it daily.

We do not see a need for additional features. The tool has so many capabilities that it can be overwhelming at first, which is why we implemented it step by step to avoid overwhelming our administrators.

Buyer's Guide
TrendAI Vision One
October 2026
Learn what your peers think about TrendAI Vision One. Get advice and tips from experienced pros sharing their opinions. Updated: October 2026.
920,336 professionals have used our research since 2012.

For how long have I used the solution?

We started with the Email Gateway Protection solution in December.

What do I think about the stability of the solution?

Its stability is very good. We have not had any failures so far.

What do I think about the scalability of the solution?

Its scalability is very good as we can work with it flexibly.

We have an environment with 160 users and about 15 servers, all virtualized and running entirely on-premise.

How are customer service and support?

It is very good. If we have a problem, we call Mr. Weckwert or send him an email and receive a response.

Which solution did I use previously and why did I switch?

We used SonicWall’s endpoint protection before, but it had issues. For example, the endpoint protection conflicted with VPN installations, requiring us to uninstall security features before updating VPN settings—an unacceptable security risk. With Trend Vision, we feel much better protected.

SonicWall is just a basic antivirus tool, whereas Trend Vision One provides more advanced features like software firewalls and the ability to block specific applications and websites, such as preventing employees from using Telegram or WhatsApp on work computers.

A downside is that Trend Vision One requires more system resources, so we had to upgrade some computers with additional RAM. However, that is not just due to Trend Vision One but also Windows 11’s increased demands.

How was the initial setup?

We use a hybrid model—Trend Vision’s cloud solution with local installations on our devices. We operate entirely on-premise.

We worked with a partner and now manage everything internally.

What about the implementation team?

For the implementation, all admins were present to understand how it works. It was like a training session for us.

Fundamentally, there is one colleague responsible for it, and they spend about an hour to an hour and a half on it daily.

In terms of maintenance, it only requires updates.

What was our ROI?

We have seen an ROI through time savings. The email filtering system paid for itself within a year.

What's my experience with pricing, setup cost, and licensing?

It is very good. The flexibility to temporarily exceed license limits when setting up new devices is helpful, as it allows us to ensure security before purchasing additional licenses.

What other advice do I have?

Try it out. Ultimately, everyone has to decide for themselves if it fits their admin team. What I always say is that this tool monitors you and provides insights—it exposes weaknesses in an IT department. If IT management cannot handle that level of transparency, they should avoid it. If they see value in having more insights, it is a very valuable tool.

I would rate Trend Vision One an eight out of ten.

Which deployment model are you using for this solution?

On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
Works at Kreiskrankenhaus Grünstadt
User
Top 10
Feb 6, 2025
If a user mistakenly clicks on something they shouldn’t, the system can respond immediately and prevent damage before it occurs
Pros and Cons
  • "The SOC team is the most valuable feature for us because having experts who monitor global threat landscapes and can respond accordingly is incredibly helpful."
  • "Sometimes it’s difficult to find your way around."

What is our primary use case?

Our primary use case is to secure our endpoints and servers via Managed Detection. We secure them using XDA and Trend Micro’s SOC. We secure it based on behavior so that we have someone to respond if there are unusual issues with PCs, even on weekends and holidays when we’re not onsite, and then they inform us. That’s why we chose Trend Vision One.

We have it deployed on all of our PCs, both Windows and Linux laptops.

The security coverage is very important for my company's network. It is a requirement under the NIS2 directive, which is now coming into effect in the EU. The coverage is also important for us because we operate 24/7, but our IT staff is not available around the clock. To fill this gap, we opted for Trend Micro’s XDR solution. Trend Micro’s SOC team can respond even when no one from our team is available.

They also make sure we are properly notified because if an email comes in at 3 AM on a Sunday, no one will read it but if Trend Micro's SOC team calls, someone will check immediately. That’s why we chose this solution.

The security coverage is also particularly important for us because, as a hospital running 24/7, we must ensure the security of patient data and maintain the IT infrastructure's operational capability. If our systems go down, it could directly impact patient treatment. Around 10 years ago, before we had Trend Micro, we experienced an attack and our IT systems were down for an entire week. That was incredibly difficult.

With increasing digitalization and more medical processes relying on computers, doctors need easy access to X-rays, prior medical examinations, and other records. Since all of this data is stored digitally, solutions like Trend Vision One become even more essential. Availability must be guaranteed, and we cannot afford a situation where a system gets attacked and taken down. That’s why it is crucial for us to have this protection in place.

The biggest security challenges in my organization are:

  1. Preventing unauthorized external access.

  2. Reducing the risk of employees unknowingly giving attackers access to the network due to inexperience.

That’s why we use these solutions, in combination with Apex One and Deep Security, to prevent such incidents. If a user mistakenly clicks on something they shouldn’t, the system can respond immediately and prevent damage before it occurs.

How has it helped my organization?

With Trend Micro Vision One we now have a comprehensive overview of our entire network of all of our endpoints and Active Directory. We also have an industry comparison feature that allows us to gauge our security status.

For example, our advisor recently reviewed our security score and confirmed that we are in a good position. That gives us peace of mind.

What is most valuable?

The SOC team is the most valuable feature for us. Having experts who monitor global threat landscapes and can respond accordingly is incredibly helpful. They keep an eye on our system and can intervene if necessary to prevent significant damage. That is the most important aspect for us.

That’s a bit tricky to answer. Trend Vision One is a powerful tool that provides a vast amount of information. It requires some practice to filter out the most relevant insights and respond accordingly like investigating specific endpoints when necessary.

Since we are still relatively new to the platform and have a small IT team, we haven’t been able to fully explore all of Vision One’s capabilities. However, the data we do utilize helps us react appropriately and address potential threats before they escalate.

A major advantage is that we can integrate Active Directory into Vision One. This means we get alerts if something unusual happens in AD, and these notifications appear directly in Vision One. I believe firewalls can also be integrated, though we haven’t done that yet as we are currently upgrading our firewall infrastructure.

Having a centralized platform where logs and security alerts from multiple systems converge is a huge benefit, as it allows us to react efficiently from a single interface.

AI is beneficial because it can operate independently of predefined patterns, reacting based on behavior rather than fixed rules. It continuously learns and can detect threats that might not yet be covered by existing security protocols. This is a major step forward in cybersecurity.

We realized Trend Vision One's benefits quite quickly. Within one to two weeks, we already saw improvements. We really noticed the full impact after receiving our first report. That allowed us to analyze incidents, track past threats, and understand what was happening within our network. After about four weeks, we fully realized the platform's value.

It does save time when searching for an incident because you can simply display the incidents in the Vision One console. You can drill down to the task level and see which file was affected on which endpoint.

That makes things much easier when tracking a specific incident. It saves more than fifty percent of the time because, as mentioned, you can drill down directly from the endpoint in the console, down to the task, down to the file, the DLL, or whatever it is. And you also get a display of what it is without having to access the computer and search on Google. As mentioned, everything is displayed clearly and neatly in the Vision One console, sometimes even with suggestions on what to do.

My organization has reduced its cybersecurity risk. We have a centralized view of where the risks are, you can specifically access individual endpoints, and as mentioned, the SOC in the background immediately reports unusual behavior even when you’re not around. If it’s high-risk, we get a call.

In this regard, cybersecurity has improved significantly because a lot of things that previously went unnoticed are now detected.

What needs improvement?

Trend Vision One is already very powerful. The clarity and usability could be improved a bit. Sometimes it’s difficult to find your way around.

It’s such an important tool, and you can do a lot with it. With some practice and proper training, you can manage quite well.

We are currently implementing, as a pilot hospital, an ICAP virus scanner through the Service Gateway via Vision One, which scans our KIM emails. This was an important feature and Trend Micro has now implemented it.

For how long have I used the solution?

I have been using Trend Vision One for about six months.

What do I think about the stability of the solution?

I would rate the stability a nine out of ten.

What do I think about the scalability of the solution?

We are currently working on scaling. We are integrating with ICAP functionality.

The scalability is very good. You can integrate almost everything you need, including mail security, etc. I’d give scalability a 10 because nearly everything is integrated.

How are customer service and support?

The staff we have dealt with were always very competent. What I find a bit difficult is that there is no German support. Since my English isn’t the best, we usually go through our consultant, as he knows the Trend Micro support team well and handles these things daily. So, we rely on our partner for that.

In terms of knowledge, the support is competent. The language barrier is just a bit challenging because when they speak fast in English and I don’t understand much.

What about the implementation team?

The initial setup was done by a consultant from SoftwareOne. He did a really good job, and everything went smoothly except for the hybrid installation with Deep Security.

That went quite smoothly. Apex One had some issues, and we had to keep a support case open for a long time before it worked properly. But now, everything works fine.

We are only four people in IT here, and everyone does a bit of everything for the setup.

We install the agents ourselves, meaning we have to manually set them up on each computer or server.

The clients are already rolled out, and everyone contributes when needed like whenever we work on something, another sensor gets installed, etc.

We have around 400 endpoints and approximately 600 users with a Windows environment and a virtualized setup using VMware.

Our server environment also includes VMware View in some areas.

In terms of maintenance, I have to regularly check reports and see what needs to be done. Otherwise, everything updates itself in Vision One.

Since Vision One is cloud-based, the console updates itself, as do the agents. Once everything is installed, there’s little to do.

What's my experience with pricing, setup cost, and licensing?

There are additional costs.

Overall, the price-performance ratio is okay.

Which other solutions did I evaluate?

We looked at Sophos beforehand because we use it as a firewall. Since Vision One integrates well with existing solutions like Deep Security and Apex One, we chose an integrated solution and decided to go with Trend Vision One.

We also deliberately opted against a purely web-based solution. We run a hybrid installation, meaning that Apex One and Deep Security are still managed locally and connected to Vision One.

This is because we have been hacked before, and if I cut off internet access to our firewall, I wouldn’t be able to administer my security suite. With this setup, I can still manage and configure it before reconnecting to the internet.

What other advice do I have?

I would rate Trend Vision One a nine out of ten.

My advice to anybody considering Trend Vision One is that the most important aspect is the integration with existing solutions like Apex One and Deep Security.

It’s stable and provides a lot of information. The only downside is that it can be a bit complex to navigate.

Which deployment model are you using for this solution?

Public Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
Buyer's Guide
TrendAI Vision One
October 2026
Learn what your peers think about TrendAI Vision One. Get advice and tips from experienced pros sharing their opinions. Updated: October 2026.
920,336 professionals have used our research since 2012.
reviewer2879538 - PeerSpot reviewer
Soc Analyst at a consultancy with 11-50 employees
Real User
Top 20
Jul 24, 2026
Focused host investigations have become faster and triage now cuts threat response time in half
Pros and Cons
  • "TrendAI Vision One has helped reduce our time to detect and respond to threats by approximately 50%."
  • "TrendAI Vision One can definitely do better in the XDR Data Explorer part, where it could expand its query language to allow for summarizations or some kind of table view, not just simple operators like AND, OR, IS, and IS NOT."

What is our primary use case?

My main use case for TrendAI Vision One is that I mostly rely on the Workbench section and working through alerts, viewing events. I also use XDR Data Explorer extensively, as well as the Response Management section.

For example, we had a client who ran a script for the activation of Windows operating system and Office tools, but that script is somewhat illegal and sourced from GitHub. I received an alert that a script running from GitHub had been downloaded, so I opened my alert from the Workbench section and viewed the event. I saw the host name and searched the host name through the XDR Data Explorer to see how the user managed to access that GitHub repository. I discovered that it was actually a user execution, so the user genuinely performed that action. I made a response and also sent an email to my client explaining what happened.

I use TrendAI Vision One extensively for response management in that way and for scanning the hosts for malware.

What is most valuable?

In my opinion, one of the best features of TrendAI Vision One is the fact that you can intuitively see what is happening on one host without getting a lot of noise in the way.

There is not a specific function, but there is an option in XDR Data Explorer to investigate a certain host, so you can focus on one host and not query the whole environment.

I have noticed that our triage with TrendAI Vision One is better, faster, and more concise.

TrendAI Vision One helped us with its visualization. For example, when I view the event, there is a Process Timeline Tree, and I can see what happened. I can quickly see what assets are being affected by something.

Regarding TrendAI Vision One's AI capabilities, I think its security aspect is strong because it gives you a good picture of how our sensors are deployed, the agents deployed, their versions, and if their versions are updated or not.

I have used TrendAI Vision One's AI capabilities from time to time, and it is very good at explaining its events in a way that if I am not sure what happened in an event or alert, it can concisely tell me what is going on. I think it is pretty trustworthy since it is not jumping to conclusions.

What needs improvement?

TrendAI Vision One can definitely do better in the XDR Data Explorer part, where it could expand its query language to allow for summarizations or some kind of table view, not just simple operators like AND, OR, IS, and IS NOT. It could definitely improve by creating some sort of visualizations.

When investigating a host, it might be better if the table shown is more readable or if the table would be exportable. When I investigate a host and it gives me a table, I could export the table and look at it through Excel.

For how long have I used the solution?

I have been working in my current field for about eight months.

What do I think about the stability of the solution?

TrendAI Vision One has been mostly reliable; it did have some downtimes, but they were temporary and short. They were not long-lasting, so I can say confidently that it has been pretty reliable.

What do I think about the scalability of the solution?

TrendAI Vision One's scalability handles growth and new clients well.

How are customer service and support?

Fewer employees are needed, but I do not have any other relevant metrics.

Which solution did I use previously and why did I switch?

We have not previously used different solutions for this client, so this is our first solution, and we are quite happy with it.

How was the initial setup?

I do not know which cloud provider is used; I was not on the engineering side when it was deployed, so I am not sure.

What about the implementation team?

The engineering team evaluated other options, but I do not know which ones.

What was our ROI?

TrendAI Vision One helped us reduce cyber risk through its metrics and telemetry; it showed us what kind of data we are dealing with when our clients are in question. We can focus on what matters and implement new filtering and rules to reduce the noise and focus on what is really important.

TrendAI Vision One has helped reduce our time to detect and respond to threats by approximately 50%. It reduced the time to detect and respond because it has a really good way of showing what happened. The user interface is readable, and you get a lot of information just from the alert itself, so you do not need to do a lot of digging because the alerts are very detailed.

What's my experience with pricing, setup cost, and licensing?

I did not know about the pricing, setup cost, and licensing because I was not employed at the time when TrendAI Vision One was deployed and during the beginning of its use.

Which other solutions did I evaluate?

The engineering team evaluated other options, but I do not know which ones.

What other advice do I have?

Since I am not an engineer, I am not sure what kind of aspects someone would need to look for if they want to buy TrendAI Vision One, but I can say that I am happy using it as a SOC analyst.

From an analyst perspective, TrendAI Vision One is useful for looking into alerts and incidents and exploring various data. I would say it is readable and easy to use, and also very intuitive. I would rate this product an 8.

Which deployment model are you using for this solution?

Private Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Other
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
Last updated: Jul 24, 2026
Flag as inappropriate
PeerSpot user
Jörg Kälin - PeerSpot reviewer
Head of Infrastructure Services at Riza G
Real User
Top 5
Oct 21, 2025
Centralized visibility and consolidated insights make vulnerability management easy and fast
Pros and Cons
  • "TrendAI Vision One provides comprehensive insight into user behavior, dark web login monitoring, and open vulnerabilities, allowing us to see everything from a single platform, which simplifies security operations and reduces complexity."
  • "When investigating alerts, users often have to navigate through multiple windows and tabs to gather all relevant information."

What is our primary use case?

We started with the antivirus solution, TrendAI Vision One Endpoint Security, after switching from Sophos. Initially, our focus was antivirus, but later we expanded to include multiple TrendAI Vision One products: XDR for Networks, Managed SOC, and Cloud Endpoint Security.

Our deployment covers endpoints, network sensors, and integrations with Active Directory and Microsoft. We use virtual sensors for full network visibility and maintain a hybrid environment with both private and Azure cloud infrastructure.

How has it helped my organization?

Our customers are mainly in the public sector—municipalities, cities, healthcare, and retirement homes—so ransomware is a major concern. TrendAI Vision One provides tools to fend off attacks and allows us to use virtual patching to quickly close vulnerabilities without waiting for traditional patches.

TrendAI Vision One has significantly enhanced our visibility into vulnerabilities and security incidents. Unlike Sophos, which only offered basic antivirus protection, TrendAI Vision One provides comprehensive insight into user behavior, dark web login monitoring, and open vulnerabilities.

We can now see everything from a single platform, which simplifies security operations and reduces complexity. It also allows for real-time risk management linked to live data, enabling continuous improvement rather than periodic reviews.

The Swiss TrendAI Vision One team supported us closely in refining our cybersecurity processes, leading to substantial overall progress and reduced cyber risk across the organization.

What is most valuable?

The rollout was quick thanks to the cloud-based infrastructure of TrendAI Vision One Complete, which eliminated the need for additional hardware. The central visibility of the platform is particularly valuable: users can log in and immediately identify areas of high risk. The unified dashboard highlights vulnerable areas at a glance, streamlining remediation.

Attack Surface Risk Management (ASRM) is also a key feature, helping prioritize assets based on criticality and data sensitivity. For instance, devices holding high-value data receive more attention in risk scoring.

The platform's ability to provide insights across multiple protection layers helps us address vulnerabilities quickly and efficiently. The system's simplicity and consolidated data have also made managing risks far more effective than before.

What needs improvement?

The main area of improvement lies in the Workbench interface. When investigating alerts, users often have to navigate through multiple windows and tabs to gather all relevant information. Consolidating case details into a single, more intuitive view would streamline investigations and save time. Otherwise, the solution's functionality is well-balanced.

For how long have I used the solution?

We've had the solution for a little more than two years.

What do I think about the stability of the solution?

The solution's stability is excellent. We have not experienced any issues or downtime since implementation.

What do I think about the scalability of the solution?

Scalability has been strong. We began with server deployments and are now rolling out to 2,200 client devices. The process has been seamless, requiring minimal additional configuration.

How are customer service and support?

We have had an excellent experience with TrendAI Vision One's customer and technical support. The Swiss TrendAI Vision One team provides consistent, personalized assistance, with dedicated contacts who understand our setup well.

They have been very responsive, and we even have an ongoing relationship with them beyond technical support. Overall, I would rate the service a nine out of ten for professionalism, consistency, and expertise.

How would you rate customer service and support?

Positive

Which solution did I use previously and why did I switch?

Our previous solution was Sophos Endpoint Protection, which reached end-of-life. We evaluated multiple vendors, including Sophos's new offerings, but TrendAI Vision One stood out due to its platform capabilities, the SOC integration potential, and especially the excellent support from the Swiss TrendAI Vision One team.

The switch was smooth, and TrendAI Vision One's modern detection capabilities and compatibility with both legacy and modern systems were major advantages over Sophos's on-premises, outdated setup.

How was the initial setup?

There were no major deployment issues. The initial rollout was phased, starting with servers before moving to clients. TrendAI Vision One Switzerland supported the implementation directly, ensuring smooth execution.

The initial setup was straightforward. We rolled out the solution to around 1,000 on-premises data center servers over two to three months. The process was divided into test, review, and full rollout phases, which helped minimize issues. The overall setup was simple and efficient, especially for the scale of deployment.

What about the implementation team?

Implementation was handled internally by two people: myself and one team member. We managed all phases from planning and clarification to deployment.

TrendAI Vision One Switzerland provided close technical guidance during the process, and later, the service provider Pingas in Germany assisted with SOC integration. Our ongoing maintenance involves eight people from our team, although the TrendAI Vision One solution itself requires little upkeep.

What was our ROI?

Return on investment was not a primary goal. We offer managed services to our clients, with antivirus protection included as part of the package rather than a separate revenue stream. The investment was made to ensure robust cybersecurity and operational reliability. However, we plan to expand some of these services to external customers to achieve a return in the future.

What's my experience with pricing, setup cost, and licensing?

We have an Enterprise Agreement with TrendAI Vision One, a six-year strategic partnership covering a defined consumption volume. Pricing is considered fair for the range of functions included. It's neither excessively high nor low, and overall, it aligns well with the value provided.

Which other solutions did I evaluate?

We evaluated multiple alternatives, including Sophos's updated solutions, but TrendAI Vision One prevailed due to its modular service structure, modern platform design, and strong support from the Swiss TrendAI Vision One team.

What other advice do I have?

I would recommend others to evaluate this solution, especially with the support of a trusted partner during the introduction phase. Having expert guidance early on helps with configuration and understanding the platform's capabilities. TrendAI Vision One also consolidates vendor management effectively, reducing the need for multiple partners.

I would rate TrendAI Vision One a nine out of ten.

Foreign Language: (German)

Zentralisierte Sichtbarkeit und konsolidierte Einblicke – für ein schnelleres und einfacheres Schwachstellenmanagement.

Was ist unser primäres Einsatzszenario?

Wir haben mit TrendAI Vision One™ – Endpoint Security begonnen, nachdem wir von Sophos gewechselt hatten. Anfangs lag der Schwerpunkt ausschließlich auf dem Antivirenschutz. Inzwischen nutzen wir jedoch mehrere

Module der Plattform TrendAI Vision One – darunter XDR (Extended Detection & Response) für Netzwerke, Managed SOC und Cloud Endpoint Security.

Unsere Implementierung umfasst Endpoints, Netzwerksensoren sowie Integrationen mit Active Directory und Microsoft. Durch den Einsatz virtueller Sensoren erreichen wir vollständige Netzwerksichtbarkeit. Unsere Umgebung ist hybrid aufgebaut – mit privater sowie Azure-Cloud-Infrastruktur.

Wie hat die Lösung unserem Unternehmen geholfen?

Unsere Kunden stammen überwiegend aus dem öffentlichen Sektor – Gemeinden, Städte, das Gesundheitswesen und Pflegeeinrichtungen – für die Ransomware eine zentrale Bedrohung darstellt. TrendAI Vision One bietet leistungsstarke Tools zur Abwehr solcher Angriffe und ermöglicht virtuelles Patchen, sodass Schwachstellen umgehend geschlossen werden können, ohne auf klassische Patches warten zu müssen.

TrendAI Vision One hat unsere Transparenz hinsichtlich Schwachstellen und Sicherheitsvorfällen erheblich verbessert. Im Gegensatz zu Sophos, das lediglich grundlegenden Antivirenschutz bot, liefert TrendAI Vision One umfassende Einblicke in Nutzerverhalten, Dark-Web-Anmeldungen und offene Schwachstellen.

Heute haben wir alle sicherheitsrelevanten Daten auf einer einzigen Plattform, was den Betrieb vereinfacht und Komplexität reduziert. Zudem erlaubt die Lösung Echtzeit-Risikomanagement auf Basis von Live-Daten – ein kontinuierlicher Verbesserungsprozess statt punktueller Überprüfungen.

Das Schweizer Trend Micro Team hat uns bei der Optimierung unserer Cybersecurity-Prozesse eng begleitet. Das führte zu deutlichen Fortschritten und einer spürbaren Reduktion des Cyberrisikos in der gesamten Organisation.

Was ist am wertvollsten?

Die Implementierung verlief zügig, dank der Cloud-basierten Architektur von TrendAI Vision One, die keine zusätzliche Hardware erforderte. Besonders wertvoll ist die zentrale Transparenz der Plattform: Nutzer können sich einloggen und sofort risikoreiche Bereiche identifizieren. Das einheitliche Dashboard zeigt Schwachstellen auf einen Blick und erleichtert deren Behebung.

Ein herausragendes Feature ist das Cyber Risk Exposure Management (CREM), das Assets nach Kritikalität und Datenwert priorisiert. Systeme mit sensiblen oder geschäftskritischen Daten werden im Risikoscore entsprechend stärker gewichtet.

Durch die ganzheitliche Sicht über mehrere Schutzebenen hinweg können Schwachstellen schnell und effizient adressiert werden. Die einfache Bedienbarkeit und die konsolidierten Daten haben das Risikomanagement deutlich effektiver gemacht.

Was könnte verbessert werden?

Der Hauptverbesserungsbedarf liegt in der Workbench-Benutzeroberfläche. Bei der Untersuchung von Warnmeldungen müssen Anwender häufig zwischen mehreren Fenstern und Tabs wechseln, um alle relevanten Informationen zu erfassen. Eine konsolidierte, intuitivere Fallansicht würde Analysen beschleunigen und Zeit sparen. Abgesehen davon ist die Funktionalität der Lösung sehr ausgewogen.

Wie lange nutzen wir die Lösung?

Wir verwenden TrendAI Vision One seit etwas mehr als zwei Jahren.

Wie beurteile ich die Stabilität der Lösung?

Die Stabilität ist ausgezeichnet. Seit der Implementierung kam es zu keinerlei Ausfällen oder Problemen.

Wie beurteile ich die Skalierbarkeit?

Die Lösung ist hochgradig skalierbar. Wir begannen mit Server-Deployments und haben die Nutzung mittlerweile auf 2.200 Client-Geräte ausgeweitet – reibungslos und ohne größeren Konfigurationsaufwand.

Wie ist der Kundenservice und Support?

Unsere Erfahrungen mit dem Kunden- und technischen Support von Trend Micro sind durchweg positiv. Das Schweizer Trend Micro Team bietet eine konstante, persönliche Betreuung mit festen Ansprechpartnern, die unsere Umgebung bestens kennen.

Die Reaktionszeiten sind hervorragend, und die Zusammenarbeit geht über reine Supportfälle hinaus. Insgesamt bewerten wir den Service mit neun von zehn Punkten – für Professionalität, Zuverlässigkeit und Fachkompetenz.

Welche Lösung haben wir zuvor genutzt und warum der Wechsel?

Zuvor setzten wir Sophos Endpoint Protection ein, dass das End-of-Life-Stadium erreicht hatte. Nach Evaluierung mehrerer Anbieter – auch der neuen Sophos-Lösungen – überzeugte TrendAI Vision One durch seine Plattformfähigkeiten, SOC-Integrationspotenziale und den hervorragenden Support des Schweizer Teams.

Der Wechsel verlief reibungslos. Besonders die modernen Erkennungsmechanismen und die Kompatibilität mit sowohl älteren als auch modernen Systemen stellten deutliche Vorteile gegenüber der veralteten On-Premises-Struktur von Sophos dar.

Wie war die Erstimplementierung?

Es traten keine nennenswerten Probleme auf. Die Einführung erfolgte phasenweise, zunächst auf Servern, danach auf Clients. Die Implementierung wurde direkt vom Schweizer Trend Micro Team unterstützt und verlief reibungslos.

Insgesamt war die Einrichtung unkompliziert: Rund 1.000 Server im Rechenzentrum wurden innerhalb von zwei bis drei Monaten in Test-, Review- und Rollout-Phasen eingeführt. Der Prozess war effizient und gut strukturiert – besonders angesichts der Deployment-Größe.

Wer war am Implementierungsprozess beteiligt?

Die Implementierung erfolgte intern durch zwei Personen – mich selbst und einen weiteren Kollegen. Wir betreuten alle Phasen, von der Planung bis zum Rollout.

Das Schweizer Trend Micro Team leistete dabei enge technische Unterstützung. Später übernahm der deutsche Dienstleister PingUs die Integration des SOC. Die laufende Wartung wird von acht internen Mitarbeitenden übernommen, wobei der Pflegeaufwand der Lösung insgesamt gering ist.

Wie war der ROI?

Ein direkter Return on Investment war kein vorrangiges Ziel. Wir bieten unseren Kunden Managed Services an, bei denen Antivirenschutz im Gesamtpaket enthalten ist. Die Investition diente vor allem der Cyber-Resilienz und Betriebssicherheit. Künftig planen wir jedoch, Teile dieser Services auch extern anzubieten, um einen ROI zu erzielen.

Wie bewerte ich Preisgestaltung, Einrichtung und Lizenzierung?

Wir verfügen über ein Enterprise Agreement mit Trend Micro – eine sechsjährige strategische Partnerschaft mit definiertem Verbrauchsvolumen. Das Preisniveau ist für den Funktionsumfang angemessen: weder überhöht noch niedrig, sondern im Einklang mit dem gebotenen Mehrwert.

Welche Alternativen wurden evaluiert?

Wir haben mehrere Anbieter geprüft, darunter auch die neuen Sophos-Lösungen. TrendAI Vision One setzte sich durch – dank modularer Servicearchitektur, moderner Plattformstruktur und der starken Unterstützung durch das Schweizer Team.

Welchen Rat würde ich anderen geben?

Ich empfehle, diese Lösung in Betracht zu ziehen – insbesondere mit Unterstützung eines kompetenten Partners in der Einführungsphase. Fachliche Begleitung hilft, die Plattform optimal zu konfigurieren und ihr volles Potenzial auszuschöpfen. Zudem vereinfacht TrendAI Vision One das Vendor Management, da mehrere Anbieter überflüssig werden.

Ich bewerte TrendAI Vision One mit neun von zehn Punkten.

Welches Bereitstellungsmodell nutzen wir?

Hybrid-Cloud-Umgebung

Which deployment model are you using for this solution?

Hybrid Cloud
Disclosure: PeerSpot contacted the reviewer to collect the review and to validate authenticity. The reviewer was referred by the vendor, but the review is not subject to editing or approval by the vendor.
PeerSpot user
Chief Digital Officer at Samson Systems Group, Inc.
User
Top 20
Dec 4, 2024
Has significantly improved our company because we can now track and see how many attacks we have
Pros and Cons
  • "Trend Vision One has significantly improved our company because we can now track and see how many attacks we have. Since we’ve implemented it, we haven’t had any major attacks that have successfully entered the company. So, we know the defense mechanism is working."
  • "It would be great if there were Trend Micro products that could enhance the security of these devices, either as part of our product or in some other way integrated into our offering."

What is our primary use case?

Our use cases are essentially all the classic defense mechanisms that are used to protect devices, secure emails, and ensure that we don’t pull in anything harmful. We also monitor Internet and Intranet traffic to detect abnormal behavior and address it. This has helped us in many situations where we’ve faced external attacks, which then usually try to go back out. I always say that they try to drill through the wall and get back out, and in that way, we’ve been able to recognize when someone has gained access to our devices.

We operate in 60 countries with 4,000 to 4,500 employees, of which nearly 2,000 are based in Frankfurt. All of the end devices of our colleagues are under IT security monitoring. The Deep Discovery Inspector is implemented at three global locations: one in Europe, one in Asia, and one in the USA. This allows us to detect any issues early on, and with network segmentation, we can minimize potential damage in case of an incident.

The biggest security concerns in our industry are not really industry-specific but are intrusions. Identity theft is a challenge and then there are issues where people are manipulated into making money transfers to what seem like customer accounts that don’t actually exist.

Another is the classic attack, where ransomware is used to infiltrate systems and gain access through encryption and similar methods.

Additionally, we also have the issue of IP protection.

How has it helped my organization?

Trend Vision One has significantly improved our company because we can now track and see how many attacks we have. Since we’ve implemented it, we haven’t had any major attacks that have successfully entered the company. So, we know the defense mechanism is working.

In terms of our ability to manage risks, we already had the stances for risk management in place, from our side, from a purely conceptual standpoint. Through a solution like this, we always want to get a more concrete approach for the operational side. We aim to identify and assess risks and then determine the measures we can take to mitigate those risks. That’s where Trend Micro is very helpful.

Trend Vision One has significantly helped reduce our time to detect and respond to threats.

In terms of whether or not Trend Vision One has helped my organization reduce noise from false positives, it’s always a matter of perspective in terms of whether or not the number of alarms has truly been reduced or if they were false alarms. We rolled out the solution across the company, and as a result, we now monitor more devices and have a more comprehensive view of security. Therefore, the number of alarms and false alarms has certainly increased, because we are now looking at all devices. Previously, we didn’t monitor them, so we didn’t notice them.

We have always seen alarms and false alarms. However, we have incorporated mechanisms to identify where the false alarms are coming from, and we continuously refine the system. Sometimes, activities in the internal IT administrative area trigger alarms that are not actual threats, and we continuously adjust and refine those rules to reduce false alarms. We didn’t have a solution in place before to compare whether or not it has reduced false positives. The mechanisms we have now allow us to assess both alarms and false alarms in detail and, in the case of false alarms, to trace where they come from and implement rules to prevent them from happening again.

Trend Vision One has definitely reduced my organization's cyber risk. We took a holistic view of all devices, became more aware of IT security risks from the outset, and then integrated all devices into that view. In the incidents we encountered at the beginning, as we increasingly implemented and observed this solution, a clear path was outlined on how to address and resolve these issues.

What is most valuable?

We implement the sensors globally from the angle that we are, in fact, global and operate worldwide. The importance lies in the fact that we know attacks can happen from anywhere, and therefore we decided to implement this as a standard solution within our company, The Samson Group. The Samson Group itself has 60 legal entities worldwide, and from our side, this is more of a governance requirement, meaning it must be used to protect the entire organization.

We have found the Deep Discovery Inspector that is in place exceptionally valuable. It has consistently helped us identify areas where issues are happening and where there have been small vulnerabilities in the network that could lead to issues. This happens when, at some point, an unauthorized device—one that shouldn’t be in the network—somehow gains access. This is certainly one of Trend Micro's standout features, as it has provided us with insight into what is happening in our network, which has prevented us from facing significant damage.

We have a positive impression of Trend Vision One's ability to provide us with centralized visibility and management across protection layers. The impression is definitely positive for us. That’s also why we decided to extend the contracts. It’s a very mature solution that is well-understood and user-friendly for people working in this field.

Trend Micro helps us consolidate security vendors because we are now establishing this as standard software for the company. We only work with one solution provider, which is part of the consolidation. When selecting the solutions, we carefully considered what was important to us and where issues occurred. For example, we were particularly pleased that the base and system come from a Japanese company, meaning we don’t have to put ourselves in the hands of Russian or American companies to make this happen.

We use the CREM features and from our perspective, it is very helpful because it provides a supportive function. In situations where we notice something, we also have a very direct line to the team.

When it comes to having AI, from a high-level perspective, I don’t really care how it’s done in terms of the solution. It's great if AI is used because we measure based on the results we achieve. It must meet the requirements for performance and speed. Today, AI is the tool of choice to achieve the necessary speed and performance. But it’s not about the fact that AI is involved; it’s about the fact that, at the end of the day, a fast and reliable solution has been created.

What needs improvement?

We still have devices that are not traditional IT equipment but rather fall under the category of Operational Technology (OT) devices. There is increasingly a blending of the traditional OT world, which requires a specific focus, as OT devices often don't use standard Ethernet protocols and similar technologies. These are areas where I believe more can be done by Trend Vision One.

Taking it a step further, we also produce items that include IT elements, which are then used by customers. It would be great if there were Trend Micro products that could enhance the security of these devices, either as part of our product or in some other way integrated into our offering. But that's a different approach. At the moment, we use Trend Micro to protect our own company and our internal networks, but expanding this to our customer-facing products is an idea for the future.

For how long have I used the solution?

We have been using Trend Micro for a long time, since 2020. We started in 2019 and signed our first Trend Vision One contract in 2020.

What do I think about the stability of the solution?

The stability is very high. We rarely encounter stability issues. When we do have issues, we typically find that they originate from our side, usually because certain information couldn't be provided by the server.

What do I think about the scalability of the solution?

Compared to other companies, we're not huge, but during the rollout and expansion, we found that it scales easily. We haven't encountered any issues with scaling effects or anything like that.

How are customer service and support?

Their technical support is excellent because we continuously see that when an issue arises, direct communication is sought. The ability to act quickly and be in direct communication is very important to us. It's not just about high-level support with the chatbot; rather, when an issue occurs, we have the experts on-site and ready to respond swiftly, which is crucial. In such situations, you need to act quickly without wasting time on what should happen next.

Which solution did I use previously and why did I switch?

We have used a lot of products. Over the past few years, we have been consolidating into a single corporation and replacing other solutions with the corporate mandate of Trend Micro. The reason is for efficiency reasons, among others. By using the same solution across the entire company, we can manage and maintain it centrally, ensuring uniform behavior without having to deal with individual solutions for each part of the organization.

How was the initial setup?

I was involved in the setup in terms of managing the role and function, but not from a technical standpoint.

My colleagues reported that it is a very well-designed software. We’ve experienced other solutions where we’ve worked on software for a long time, and it didn’t go as smoothly. I haven’t heard any complaints, so the setup must have been good.

We took a risk-based approach to implement this. We started rolling it out in some large manufacturing companies, where the potential damage in case of an incident would be the greatest. From there, we moved to the smaller legal entities, such as just sales offices or similar, so from large to small.

We have a relatively small team in the global function with three people who worked on it. We also have a packaging team and similar resources when it comes to creating installation scripts for end devices.

In terms of maintenance, we have purchased Trend Vision One as part of a SaaS solution. This includes updates and ongoing support, such as the provision of virus signatures, so we don't have dedicated staff specifically for maintenance. We do have designated contacts around the world dedicated to handling alarms and events. This is an additional responsibility for the IT team members after their training, so I can't give you a precise number of people involved. These activities are integrated into the existing IT staff who manage them alongside their regular tasks.

What was our ROI?

We have seen a return on investment fundamentally more qualitatively, proportionally, and quantitatively. We haven't done a strict ROI calculation. We know it's in place to counter potential damage, but it's hard to quantify potential damage in an ROI calculation. On the other hand, we had two incidents during the rollout for the global company. Thankfully, we also had cyber security insurance, and the insurance covered the incidents because, through Trend Micro and the implementation of the solution, along with the data it provided, we were able to demonstrate what had happened. Without this, we certainly wouldn’t have received the insurance payout.

What's my experience with pricing, setup cost, and licensing?

Of course, we'd prefer for it to be free. Security has its price. Regarding the prices we've experienced, we consider Trend Micro to be competitive. However, we sometimes wish for a higher discount based on more usage as the company grows.

Which other solutions did I evaluate?

We looked around at other solutions. When we started evaluating options in 2019, we explored the typical solution portfolios available at the time. We considered several options, and then, based on different factors, we decided on a company operating out of Japan, rather than an extension of an American company. I don't quite remember all the details, but at the time, there was also a Russian solution that was quite popular in the European market, which we decided not to pursue further.

The main differences between these products and Trend Vision One were the functionality and the overall environment. We wanted a truly independent solution. From the perspective of German and European data protection laws, it was a matter of weighing where we could place the most trust and where we would see those principles reflected in the implementation.

What other advice do I have?

My advice would be that one should really take the time to think carefully about what they want and need, and particularly engage in conversations with colleagues to find the right solution. One could say that to perform Deep Discovery Inspector on network traffic, more nodes could be added but at some point, the cost-benefit effect becomes minimal.

We always felt that Trend Micro provided us with very good advice, suggesting that more than three nodes in a global context weren't necessary. Any additional nodes would only slightly improve performance, making it not worthwhile. It's important to listen to the Trend Micro team and communicate openly. What's key is that you have to think about your scenarios and risks in advance—this is something they can't take off your hands. For example, network segmentation, which isn't part of Trend Micro's offering, is a mechanism we also bring in. It's important to work hand in hand, and there needs to be a lot of dialogue at this stage.

Which deployment model are you using for this solution?

Hybrid Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
NasirKhan1 - PeerSpot reviewer
Director at Instec Digital Systems
Real User
Top 10
Jul 16, 2026
Unified security view has reduced response times and supports junior analysts with clear insights
Pros and Cons
  • "TrendAI Vision One platform's ability to provide centralized visibility and management across protection layers is quite helpful."
  • "I do see room for improvement and weaknesses in TrendAI Vision One."

What is our primary use case?

As a Trend Micro partner and service provider, we are a TrendAI Vision One company. I am using TrendAI Vision One sensors on endpoints and email. My customers use TrendAI Vision One platform for consolidated security across hybrid environments because they can integrate other devices through the service gateway.

What is most valuable?

The features I find most valuable in TrendAI Vision One include several powerful add-ons, such as Cyber Risk Exposure Management and threat-based segregation that can be applied on the telemetry data lake automatically, as well as the ability to query the endpoints.

TrendAI Vision One platform's ability to provide centralized visibility and management across protection layers is quite helpful. I can see all across without silos, and telemetry from endpoints, servers, web traffic, NDR, and email all get combined and correlated under a single pane.

TrendAI Vision One has helped reduce time to detect and time to respond to threats, which is the promise I often see happening.

The importance of having AI built into TrendAI Vision One is that natively, some of the detections are hard to decipher, so that helps considerably. For junior analysts, it is beneficial, as they can ask the Trend AI component to explain it in plain English.

What needs improvement?

I do see room for improvement and weaknesses in TrendAI Vision One. Currently, most of the security literature and other resources refer to protecting endpoints that are Microsoft-centric, so better telemetry of Microsoft endpoints and the ability to query them natively for registry and other information would be a significant help.

The additional features I would like to see in the future to make TrendAI Vision One closer to a perfect score are those that simplify operations. The AI could help cut down unnecessary information and decisions that need to be made early on, allowing analysts to focus on what really matters.

For how long have I used the solution?

I have been working with TrendAI Vision One for approximately four years.

How are customer service and support?

I would rate the technical support by TrendAI at around eight to eight point five. They are responsive and effective.

How was the initial setup?

The initial setup of TrendAI Vision One is straightforward. Right out of the box, we are accustomed to it, and customers who are using it find it very easy to set up. The out-of-box settings are available, and all they need to do is connect the right telemetry.

What other advice do I have?

The effectiveness of TrendAI Vision One in helping reduce noise from false positives can vary depending on how the customer uses it. Sometimes it requires fine-tuning to reduce false positives. I would rate this review at eight point five overall.

Which deployment model are you using for this solution?

Hybrid Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
Last updated: Jul 16, 2026
Flag as inappropriate
PeerSpot user
Alexander Lung - PeerSpot reviewer
Lead Infrastructure Analyst at Apsolut GmbH
Real User
Top 20
Sep 16, 2025
Worldwide Protection of the Entire IT Infrastructure with Just One Central Platform
Pros and Cons
  • "TrendAI Vision One gives us better visibility to detect and respond to threats because we can now see more than ever before."
  • "The only drawback is the usual subscription model - unfortunately, prices tend to move upward."

What is our primary use case?

Our main goal with TrendAI Vision One is to ensure comprehensive security coverage for all our devices and clients worldwide. We're concerned with far more than just traditional antivirus protection. With this solution, I can now see in detail which software updates have already been installed and which security vulnerabilities still exist. The comprehensive reporting and intelligent protective measures give me significantly more control than before. We can now cover all servers uniformly and completely, which is something that wasn’t possible with our previous solution at this level of quality.


What is most valuable?

The dashboard is the heart of TrendAI Vision One for me. What I particularly appreciate is the flexibility: each colleague can create their own dashboard, and I still maintain an overview of the big picture. This granular way of working while maintaining a holistic view motivates me to engage with the tool.

The cloud-based architecture offers considerable advantages over local, individual solutions. Previously, I had to manage patching across various Trend Micro systems manually - now, that’s centrally handled. However, I need to be cautious that updates aren't rolled out too quickly, which could impact notebooks or servers.

The global overview has definitely helped me a lot. The only drawback is the usual subscription model - unfortunately, prices tend to move upward.

Since I've been working with Trend Micro for over 20 years, we’ve been able to consolidate our security landscape and source everything from one vendor, rather than juggling multiple providers.

TrendAI Vision One gives us better visibility to detect and respond to threats because we can now see more than ever before. We've always made every effort to receive notifications quickly so we could act immediately. Now, I have a much clearer, centralized platform where I can manage all incidents in a structured way.

Interestingly, TrendAI Vision One shows us more error messages than before, not because more problems are occurring, but because I can now see them for the first time and address them systematically.

TrendAI Vision One helps us reduce our overall cyber risk. I've always had good experiences with Trend Micro. It gives me the confidence to recognize well-protected areas and uncover vulnerabilities that need attention. Even though I've achieved a good security level, I can't afford to relax. For security audits, the solution helps us demonstrate compliance with certain standards.

Regarding AI integration, I can't make a final judgment yet. AI has both advantages and disadvantages, and attackers are increasingly using it too. However, I believe that AI will become indispensable in security platforms.


What needs improvement?

The expansion of Phish Insight would be desirable, especially for employee training. Also, in the MDM area for mobile devices, not all functions are available that I know from on-premise or other cloud variants. There's still development potential there.

For how long have I used the solution?

We began implementing the current TrendAI Vision One solution in June 2024. However, Trend Micro has been our vendor for about ten years.


What do I think about the stability of the solution?

I'm very satisfied with the stability. I haven't experienced any direct outages so far. Occasionally, there were connection problems with individual clients, but those were exceptions.

What do I think about the scalability of the solution?

I think TrendAI Vision One offers very good scalability.

How are customer service and support?

I would rate the service and technical support for TrendAI Vision One at nine to ten points. Of course, it depends on the specific situation, but overall, I'm very satisfied.

Which solution did I use previously and why did I switch?

We didn't switch from another solution but rather implemented TrendAI Vision One as an evolution of our existing Trend Micro infrastructure. I had explored Microsoft solutions in recent years and attended related training, but ultimately, we stayed with Trend Micro.


How was the initial setup?

The initial setup has a certain complexity that varies by area. Some areas are relatively easy to configure; others definitely require expertise and practice. Without professional support, the start would have been difficult.

We had two German partners on board for several weeks and months. In short, intensive sessions of two to four hours, they developed a structured onboarding process with us. After about three two-hour sessions, we could work independently with the product.

Our implementation strategy for TrendAI Vision One was three-tiered: First, we migrated from our on-premise Apex One solution to TrendAI Vision One in the cloud. In the second step, we migrated the servers, and finally we checked all sensors.

What about the implementation team?

We worked with a Trend Micro partner for onboarding. With Trend Micro's recommendation, we also purchased the licenses through them. The partner guided us during the sessions, then we carried out the actual integration and migration ourselves.

For implementation, we needed two to three employees. A colleague and I carried the main responsibility, my colleague handled the cloud migration, agents, and clients. I brought in two additional colleagues for servers and local infrastructure, particularly for Mac systems.

From mid-June to mid-September, an average of two to three people were involved in the project.


What was our ROI?

I can't definitively evaluate the return on investment yet, since we've only been working productively for a few months. We had a very good onboarding process and worked intensively on it, but for a solid ROI evaluation, it's still too early. I plan to have meaningful numbers by year-end, particularly through patch management and sensor detections.


What's my experience with pricing, setup cost, and licensing?

As usual, we work with twelve-month or multi-year licenses on a subscription basis. The subscription model is ideal for the vendor and predictable for us, but still quite expensive.

I would like more flexibility - for example, the ability to purchase individual modules separately.

What other advice do I have?

For others evaluating TrendAI Vision One, I recommend checking whether the vendor is a pure security specialist or also active in other, non-security-related areas. That can be an important decision factor.

Overall, I rate the solution 9 out of 10 points.

Disclosure: PeerSpot contacted the reviewer to collect the review and to validate authenticity. The reviewer was referred by the vendor, but the review is not subject to editing or approval by the vendor.
PeerSpot user
reviewer2649927 - PeerSpot reviewer
System and security engineer at a outsourcing company with 201-500 employees
Real User
Top 10
Sep 23, 2026
Unified security console has simplified endpoint protection and improved user awareness
Pros and Cons
  • "TrendAI Vision One is a great solution for users requiring advanced protection."
  • "TrendAI Vision One has recently added updates and new features, which can be a bit confusing."

What is our primary use case?

TrendAI Vision One is used primarily in endpoint security, email security, mobile security, cyber risk exposure management, and  XDR.

For mobile security, TrendAI Vision One is used for mobile threat detection as an MTD solution, and it allows enrollment of both BYOD devices and company-owned devices while providing protection for mobile devices. The solution supports Android, iOS, and similar platforms.

My main use case for TrendAI Vision One is endpoint security, and I am also familiar with mobile security. TrendAI Vision One functions as a full-fledged next-generational antivirus solution for users, and it prevents malware, viruses, and similar threats. The solution has many machine learning features as well.

What is most valuable?

The best feature in my experience with TrendAI Vision One is that when implementing endpoint security and email security for an organization, there is no need to use multiple consoles. With TrendAI Vision One, a single console provides access to all these solutions, making it a comprehensive platform that includes all of the solutions. This consolidated approach is the main usefulness for users.

TrendAI Vision One can integrate with third-party solutions as well. Regarding usability, I credit TrendAI Vision One since it uses a credit-based model. Additionally, the licensing for TrendAI Vision One is very flexible for users and organizations.

TrendAI Vision One is a full-fledged platform for combining multiple solutions, making it easy for administrators to navigate and configure the console. It provides comprehensive security for devices and users, and the flexible licensing is very useful for organizations.

Regarding the platform's ability to provide centralized visibility and management across protection layers, the centralized visibility is really helpful for administrators to configure settings without having to navigate multiple consoles. This streamlines issue resolution and ensures that protection is covered from multiple aspects within the same console.

TrendAI Vision One has helped consolidate the use of security vendors and reduced silos significantly.

What needs improvement?

TrendAI Vision One has recently added updates and new features, which can be a bit confusing. However, those features are helpful but not organized clearly. When an administrator logs into the console, it can be difficult to find some features because of the organization.

Regarding documentation improvements for TrendAI Vision One, it would be easier with the TrendAI companion. Most of the documentation and answers can be found, but it would be helpful if the company could provide more data sheets or whitepapers as well as configuration support.

Additional improvements needed for TrendAI Vision One include issues where the console sometimes indicates that services are not available. I believe these issues are being improved, but they do not constantly display as expected.

For how long have I used the solution?

I have been using TrendAI Vision One for more than one and a half years.

What other advice do I have?

TrendAI Vision One provides more security for users regarding detections and security incidents, such as warnings on unsecured websites and detecting viruses. The solution has really reduced the number of detections over time while providing full protection for users.

The top security challenge in the industry is user awareness since users are often unaware of the dangers posed by certain applications and websites. TrendAI Vision One helps address this issue by providing user awareness training, such as phishing campaigns that inform users to avoid threats.

My main advice for others considering TrendAI Vision One is that it provides both basic and advanced protection for every user, while the licensing is very flexible compared to other solutions. With TrendAI Vision One, most features are included in basic licensing, unlike other solutions that require payment for simple features.

TrendAI Vision One is a great solution for users requiring advanced protection. Over the past 20 years, it has provided as many features as possible for every user, so I can confidently recommend it for organizations. I would rate this solution an 8 out of 10.

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Other
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Last updated: Sep 23, 2026
Flag as inappropriate
PeerSpot user
Zhaffi Ibrahim - PeerSpot reviewer
Assistant Vice President at NETS
Real User
Top 20
Jan 31, 2026
Centralized threat visibility has streamlined investigations and now reduces risk significantly
Pros and Cons
  • "By switching to TrendAI Vision One, I have reduced my risk by approximately eighty percent."
  • "In TrendAI Vision One, an area that has room for improvement is the DLP policy governance, particularly around data leakage protection."

What is our primary use case?

My use case for TrendAI Vision One is more focused on the XDR.

What is most valuable?

In my opinion, the best features of TrendAI Vision One are the UI itself, which is very user-friendly. I consider that to be the most intricate part about TrendAI Vision One compared to other XDR platforms.

I use the sensors in TrendAI Vision One, and they are critical for our network coverage. They help us considerably because we are using TrendAI Vision One in the corporate environment, where people come and go. The sensors are very helpful because when you want to release the sensor on a laptop that is not used, you can simply release it.

My impressions of TrendAI Vision One's ability to provide centralized visibility and management across protection layers are very interesting because other solutions do not actually provide a centralized platform to view everything. Trend Micro introduced TrendAI Vision One, which allows all that to be in one central console, enabling you to have all features enabled or disabled based on credits.

TrendAI Vision One helps consolidate my use of security vendors and reduces silos. Currently, we are mainly using the XDR function, but we are also looking at the sandboxing feature. It is a good platform because in our environment, the engineering team uses the XDR function while the Digital Forensic & Incident Response team uses the sandboxing analysis functions, allowing two cross-entities to use one platform for their own tools.

What needs improvement?

In TrendAI Vision One, an area that has room for improvement is the DLP policy governance, particularly around data leakage protection. I believe the main focus is currently on thumb drives and external drives, but in older environments, we also use CDs and DVDs for read and write functions.

For how long have I used the solution?

I have been using TrendAI Vision One for approximately eight months in totality.

What do I think about the stability of the solution?

I would rate the stability of TrendAI Vision One as very stable, giving it a nine out of ten.

What do I think about the scalability of the solution?

In terms of scalability, I would say TrendAI Vision One is a ten out of ten because it is based on credits.

How are customer service and support?

From one to ten, I would rate the technical support that TrendAI Vision One provides as a nine because we are subscribed to premium support.

How would you rate customer service and support?

Positive

How was the initial setup?

I found the deployment of TrendAI Vision One to be very easy; I was very surprised because we had a seamless migration from Apex One.

It took less than a day to implement TrendAI Vision One; in fact, it was completed in just one day.

What about the implementation team?

In my organization, we have a team of five engineers and close to three hundred endpoints using TrendAI Vision One.

What was our ROI?

I estimate that I have seen approximately fifteen to twenty percent return on investment from using TrendAI Vision One.

What's my experience with pricing, setup cost, and licensing?

Regarding the pricing of TrendAI Vision One, I think it is on the costlier side compared to other solutions due to the functions they offer, but in totality, it is cost-efficient.

Which other solutions did I evaluate?

I have tested other vendors for endpoint solutions, including Kaspersky and Symantec.

What other advice do I have?

The top security challenges in my industry include finding people who can operate TrendAI Vision One as an operator, and actually, TrendAI Vision One's user interface is so user-friendly that it takes maybe an experienced cybersecurity engineer about two to three weeks to get used to it.

The solution does not require any maintenance in terms of patching because we are on SaaS; we have a proxy, so there is no maintenance for it.

TrendAI Vision One has reduced my time to detect and respond to threats by approximately forty to fifty percent.

It has reduced noise from false positives by approximately twenty percent, which has saved me a significant amount of time.

By switching to TrendAI Vision One, I have reduced my risk by approximately eighty percent.

I would recommend TrendAI Vision One to other users because it is user-friendly and offers good support. I would rate this review a nine out of ten.

Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
reviewer2847057 - PeerSpot reviewer
Associate Engineer Systems And Security at a tech services company with 201-500 employees
Real User
Top 5
Oct 6, 2026
Unified security platform has reduced endpoint threats and simplified daily threat response
Pros and Cons
  • "TrendAI Vision One has positively impacted our organization by improving security and reducing the hazard of needing to switch between consoles since it has one single platform embedded with every solution."
  • "Regarding improvements for TrendAI Vision One, I sometimes wish the features that I didn't purchase could be hidden since most of the features can be seen within the console, making it confusing for users who haven't purchased those licenses."

What is our primary use case?

My main use case for TrendAI Vision One is endpoint security. I'm using TrendAI Vision One to enhance security across our company endpoints. It is very useful for application blocking for necessary users, and I am using it to stop malware, viruses, and similar threats.

Regarding how I use TrendAI Vision One day-to-day, I find that TrendAI Vision One is a cloud-hosted solution that really helps us improve security in our organization and is helpful to prevent malware and viruses.

I am using TrendAI Vision One sensors at the endpoints. This coverage is critical for our organization's network because it covers our entire endpoints and provides full security.

How has it helped my organization?

TrendAI Vision One has positively impacted our organization by improving security and reducing the hazard of needing to switch between consoles since it has one single platform embedded with every solution.

Since using TrendAI Vision One, I have seen user awareness improvement, and users are aware of this, leading to a reduction in malware and viruses since the endpoint agent installation. The time saved for administrators is significant because I have one single console to manage all of the email security, endpoint security, and cloud app security, as opposed to needing many consoles, which takes a lot of time.

I believe the top security challenge in my industry is a lack of user awareness, as users are not aware that these are viruses or malware. With TrendAI Vision One, I have user awareness training, and I can simulate user awareness campaigns, which helps address this issue and has really reduced the number of challenges.

TrendAI Vision One has helped consolidate my use of security vendors and reduced silos. TrendAI Vision One has helped reduce my time to detect and respond to threats, and with the automated tasks and brilliant detections, it has significantly reduced my overall endpoint security time.

What is most valuable?

The best features TrendAI Vision One offers are that with most of the other solutions out there for endpoint security, I have to purchase an additional license for additional features, but with TrendAI Vision One, it's embedded into one single platform and it's not going to cost so much with the licensing for the features. Those licenses include every feature in that.

The specific features I find myself using most often include automated security playbooks for preventing malware and viruses, which I use after detection.

In addition to the features, I would like to add that TrendAI Vision One also has endpoint security, email security, Zero Trust security access, mobile security, and cloud app security, all embedded into one single platform that is really useful for organizations to enhance their security.

Regarding TrendAI Vision One's AI capabilities, I believe it protects users' data using PCI DSS, according to their website, and it heavily uses AI to automate tasks, which is really helpful for us. When it comes to security, I can trust it because of the TrendAI global market.

In terms of accuracy and reliability of output, I am using TrendAI Companion in TrendAI Vision One console, which is really helpful for configuring XDR components and so on, but sometimes it can be not really accurate, while most of the time it is accurate. It is very important for our organization that TrendAI Vision One has AI built into its platform, as I am using TrendAI Companion to manage XDR features and to write XDR playbooks.

What needs improvement?

Regarding improvements for TrendAI Vision One, I sometimes wish the features that I didn't purchase could be hidden since most of the features can be seen within the console, making it confusing for users who haven't purchased those licenses.

I would add that when adding new features to TrendAI Vision One, if they can inform us or add them accordingly, it will be easier because new features are added frequently, which can be really confusing for us.

I chose eight out of ten for TrendAI Vision One because, as I mentioned earlier, new features are added here and there, which can be confusing, and it's also confusing to see the features that I have not purchased, which is why I gave it that score.

I think I could probably add a hardware inventory for endpoint security, and most of the time, this is okay.

For how long have I used the solution?

I have been using TrendAI Vision One for one and a half years.

What do I think about the stability of the solution?

TrendAI Vision One is stable.

What do I think about the scalability of the solution?

TrendAI Vision One provides great security for every endpoint, network, email, and so on, with a high detection rate.

How are customer service and support?

Customer support for TrendAI Vision One is excellent, and they provide active support for all my tickets. I would rate the customer support a nine out of ten.

Which solution did I use previously and why did I switch?

I did not use a different solution before TrendAI Vision One.

What was our ROI?

I have seen a return on investment, as it provides really automated tasks for end users and management with flexible credit usage.

What's my experience with pricing, setup cost, and licensing?

The pricing for TrendAI Vision One is really flexible.

Which other solutions did I evaluate?

Before choosing TrendAI Vision One, I evaluated other options such as CrowdStrike, SentinelOne, and others.

What other advice do I have?

TrendAI Vision One is deployed in my organization as a SaaS solution. It is hosted in TrendAI Vision One cloud solutions, which I believe involve AWS and Azure, but I don't exactly know the answer because the cloud-hosted databases are managed by TrendAI Vision One, and I don't have access to that. I did not purchase TrendAI Vision One through the AWS Marketplace, as I mentioned earlier, I have no knowledge about the cloud-hosted database because the cloud service is provided directly from TrendAI Vision One without my access.

My advice to others looking into using TrendAI Vision One is that if you are looking for a solution that has more features, this is the solution for you, because TrendAI Vision One has many solutions embedded into one. If you want one single platform for many solutions, this is it. I would rate TrendAI Vision One an eight out of ten.

Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Last updated: Oct 6, 2026
Flag as inappropriate
PeerSpot user
Buyer's Guide
Download our free TrendAI Vision One Report and get advice and tips from experienced pros sharing their opinions.
Updated: October 2026
Buyer's Guide
Download our free TrendAI Vision One Report and get advice and tips from experienced pros sharing their opinions.