We utilize Trend Micro Apex One for our endpoint security needs. This solution incorporates machine-learning capabilities that assist us in monitoring and preventing attacks.
IT Support Officer at a non-profit with 501-1,000 employees
Incorporates proactive machine learning, web application capabilities, and real-time scanning features
Pros and Cons
- "The most valuable features are web application features and real-time scans."
- "The support is slow and has room for improvement."
What is our primary use case?
How has it helped my organization?
Trend Micro Apex One effectively safeguards our endpoints against threats like malware and malicious scripts, provided that we accurately define our policies.
The advanced protection capabilities of Trend Micro Apex One, which adapt to safeguard against unknown and stealthy threats, are commendable. The solution scans our system and generates a repository that it can subsequently cross-reference when an unfamiliar application attempts to access or install a file on our system, thereby restricting access.
It is important for our organization that the runtime machine learning capabilities of Trend Micro Apex One can assist our organization in defending against ransomware, especially when we activate the behavior monitoring feature.
It is important that Trend Micro Apex One offers a single console for us to investigate threats.
Trend Micro Apex One is easy to learn. Additionally, there are numerous helpful training videos available online, along with a support site designed to assist with any issues.
Administering Apex One is easy through its user-friendly console.
Apex One has nearly all the features necessary to safeguard us from malicious or viral attacks. The solution incorporates proactive machine learning, web application capabilities, and real-time scanning features. Furthermore, we have the capability to install this agent on our server. Apex One encompasses a wide range of options that allow us to create policies on our server.
Apex One has helped reduce the number of viral attacks in comparison to our previous solution.
The deployment of the services endpoint in the cloud has helped to decrease our employees' workloads by 30 percent.
Apex One has reduced our administrative overhead by 30 percent.
Trend Micro's managed XDR service, in conjunction with Apex One, adds value by offering visibility into our environment.
What is most valuable?
The most valuable features are web application features and real-time scans.
What needs improvement?
The support is slow and has room for improvement.
Buyer's Guide
Trend Vision One Endpoint Security
January 2026
Learn what your peers think about Trend Vision One Endpoint Security. Get advice and tips from experienced pros sharing their opinions. Updated: January 2026.
881,082 professionals have used our research since 2012.
For how long have I used the solution?
I have been using Trend Micro Apex One for almost two years.
What do I think about the stability of the solution?
It is stable.
What do I think about the scalability of the solution?
Trend Micro Apex One is scalable.
How are customer service and support?
The technical support is not consistent and can take time to resolve our issues.
How would you rate customer service and support?
Neutral
Which solution did I use previously and why did I switch?
Previously we used Symantec Endpoint Security and switched to Trend Micro Apex One because we were not receiving sufficient support from Symantec Endpoint Security after its acquisition by Broadcom.
What about the implementation team?
The implementation was completed through a third-party partner.
Which other solutions did I evaluate?
We evaluated CrowdStrike and two other solutions.
What other advice do I have?
I would rate Trend Micro Apex One eight out of ten.
I recommend Trend Micro Apex One for endpoint security.
I have learned that there are features that assist administrators in granting access to specific servers by adding a MAC address and creating a policy.
Which deployment model are you using for this solution?
Private Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Industry Advisory at a comms service provider with 11-50 employees
Good security and endpoint protection with machine-learning capabilities
Pros and Cons
- "It's reduced administrative overhead overall thanks to its centralized dashboard and single network administrator."
- "The price is the main concern of the clients."
What is our primary use case?
Some customers require on-prem endpoint protection. When they need endpoint protection and DLP features with ransomware protection and firewall features, I use this product. And when they need multi-layer security, like application layers, network layers, IoT devices, and network switches, then I provide the XDR solution.
How has it helped my organization?
As resellers, we benefit from the solution offering multiple events, seminars, and more, to gain knowledge and help clients. The solution offers a lot of updates and support to their partners. Solutions like Sophos don't have principals in our country (Pakistan) either. They are in the UAE.
What is most valuable?
The core endpoint protection is the most valuable aspect. The DLP features are very good. The firewall security is also excellent.
When a customer wants DLP features and endpoint protection, they can not get it from Sophos or Kaspersky. Only Trend Vision offers certain features.
Trend Vision One Endpoint Security is great for defending endpoints against threats such as malware and malware and malicious scripts. Their AI feature is very attractive and very good as compared to the other malicious traffic detecting solutions. Trend Vision has excellent AI features and sensors are available when we use the XDR solution.
They provide email sensors in the network devices. They provide the sensor in firewall traffic. The sensors are very good, and they're working well.
Trend Vision offers virtual patching, which is a very good feature.
It has advanced protection capabilities that adapt to protect against unknown and known threats. They are connected with the global threat intelligence forum. They also have their own threat intelligence. They get data, use sensors, and have the capability to mitigate various attacks, including zero-day attacks.
It detects ransomware with runtime machine-learning capabilities. Benchmark protection is necessary when customers have confidential data. They need the backup solution or they need two anti-ransomware detectors to make sure they are protected. That way, when attackers compromise any end users, they stay on the end user, and cannot spread.
The product provides our customers with a single console for cross-layer detection, threat hunting, and investigation. They have a central dashboard for network administrators who can control everything from one window and analyze all of the end users and their activities. We can do single threat hunting from the console. Customers want the ability to see all events in their network and on their endpoints. It makes administration easy and more user-friendly.
There's visibility into the entire IT security environment. This end-to-end visibility reduced our customer's response times by 30% to 40%.
Trend Vision One Endpoint Security integrates with other security products. You can integrate with other Trend Vision products and third-party solutions like firewalls. The productivity with the integration goes from 70% to 80% up to 100% when you integrate with Trend Vision solutions. It's better to create a Trend Vision environment.
Trend Vision One Endpoint Security deploys rapid updates to endpoints. Their sandbox is good. They have, as mentioned, very good threat intelligence. They're sharing details on global direct intelligence with Palo Alto, Kaspersky, and Sophos. They share all the events, and all the intelligence, and upgrade their sandbox accordingly.
The updates to endpoints are very good and necessary to ensure protection from the latest threats.
The learning curve is low. It's easy and user-friendly to learn. You need to be a bit technical to properly administer the product.
Trend Vision One Endpoint Security offers very good virtual patching. This is important for customer networks. The patching allows multiple authorities to double source patching of endpoints. This helps with audits, as it allows for regular patching to ensure endpoints are up to date and protected according to compliance requirements.
We've seen reductions in viruses and malware since using the product. There are multiple levels of scanning, and AI helps to reduce threats and viruses. We've seen an overall reduction of 70% to 80%.
It's reduced administrative overhead overall thanks to its centralized dashboard and single network administrator. It reduced overhead by about 50%.
What needs improvement?
The main problem I faced with the solution was when customers were trying to buy the solution, they wanted a reasonable price, and when you compare this with Sophos or Kaspersky, Trend Vision is competitively more expensive. The price is the main concern of the clients. Otherwise, the solution is very good.
I'd like to see Trend Vision One Endpoint Security include role functionality and server protection. Users should have better email protection to ensure high results.
Customers would like DNS security improved in the product.
For how long have I used the solution?
I've used the solution for three years or more.
What do I think about the stability of the solution?
The solution is stable.
What do I think about the scalability of the solution?
Customers have been very happy with their ability to add endpoints.
How are customer service and support?
We manage the SLA for one- to three-year periods, and if any policies need changing, etc., we are there to help customers. There are people who monitor the network and offer on-call support. When customers need field support, my team can assist.
When we do need the assistance of support, we've been satisfied with their response. They are quick and effective.
How would you rate customer service and support?
Positive
How was the initial setup?
I'm not a fully technical person, so I was not directly involved in the deployment. My pre-sales manager was largely involved in deploying and handling the dashboard as well as administering it to multiple end-users. If we run into any trouble, we can get help from Trend Vision sales. They can provide guidance.
The solution is working okay. There is no maintenance needed.
What's my experience with pricing, setup cost, and licensing?
The solution is quite expensive.
What other advice do I have?
I'm a reseller. We sell the product to clients. Some of my customers want DLP and firewall options, and some require endpoint protection. Trend Vision One Endpoint Security is powerful when a customer requires protection and not detection. I'm also working with Trend Vision's XDR solutions.
I'd rate the solution nine out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer. reseller
Buyer's Guide
Trend Vision One Endpoint Security
January 2026
Learn what your peers think about Trend Vision One Endpoint Security. Get advice and tips from experienced pros sharing their opinions. Updated: January 2026.
881,082 professionals have used our research since 2012.
Director at a tech services company with 11-50 employees
Helps improve security posture, reduces overhead, and response times
Pros and Cons
- "Apex One includes a built-in fine-grained DLP solution."
- "The application and web controls have room for improvement."
What is our primary use case?
Our customer experienced a ransomware attack while using a different security solution. This prompted them to switch to Trend Micro Apex One, which they deployed for both their servers and endpoints. However, they only opted for the Endpoint Detection and Response version for their servers, not for their endpoints.
We have deployed Trend Micro Apex One to strengthen our defenses against viruses, enhance access control, and implement device control measures.
How has it helped my organization?
Apex One effectively defends endpoints against threats, including malware and malicious scripts.
The advanced protection capabilities adapt to safeguard against unknown and stealthy new threats, a critical advantage for our customers. We often observe that our customer's systems lack proper patching, making them more susceptible to infections. However, Apex One effectively mitigates the damage caused by these attacks.
It utilizes runtime machine learning capabilities to detect ransomware. This is crucial as ransomware poses a significant threat, and customers are increasingly moving beyond traditional antivirus solutions due to ransomware's heightened prevalence.
Apex One offers a unified console for cross-layer detection, threat hunting, and investigations, depending on the services we subscribe to. Utilizing a single console for these tasks is crucial as it eliminates the need to manage multiple solutions and their respective consoles. When a single OEM provides its solutions within a single console, it presents the most efficient approach, eliminating the need to toggle between different consoles, manage disparate systems, and correlate data across multiple platforms.
Apex One provides around 95 percent visibility into our IT security environment.
Improved visibility can help reduce response times and proactively address issues with our endpoints. This allows us to take a more proactive approach rather than a reactive one.
Apex One is easy to learn, but like any security product, it requires additional skills beyond simply navigating the solution. However, for those who need to explore the solution and figure things out, it is quite convenient. Technicians should not take long to adapt to a user's experience with any kind of endpoint security system.
It has improved our customers' security posture, enabling them to realize the benefits within the first three months.
Apex One proactively shields our customers from vulnerabilities by employing virtual patching, even before a patch is available for the underlying issue. This proactive approach proves invaluable in safeguarding against emerging threats.
Ideally, the reduction in risk stems from the implementation of multiple security measures. For instance, if an organization fails to implement device control, it might become susceptible to phishing attempts. These phishing emails, if clicked on or if attachments are downloaded, can lead to malware infections. However, endpoint security can block these threats before they reach the system, regardless of whether they arrive through a device, email, or web access. This is where detection becomes crucial. Endpoint security doesn't necessarily reduce the number of threats in the network environment, but it does prevent those threats from exploiting vulnerabilities on endpoints.
Apex One has helped reduce our customer's overhead by 30 to 40 percent.
What is most valuable?
Apex One includes a built-in fine-grained DLP solution. This is particularly beneficial for SMB customers, as they may not need to invest in a full-fledged DLP solution if Apex One meets their requirements.
What needs improvement?
The application and web controls have room for improvement. A fully integrated endpoint security system, encompassing EDR, should include application control, web control, device control, patch management, and encryption. This comprehensive solution would be highly appealing to customers, as they currently rely on multiple tools to address these security needs. Moreover, an EDR solution would provide visibility into endpoint vulnerabilities, such as unpatched systems, enabling proactive remediation. These features would undoubtedly enhance the value proposition of Trend Micro's security offerings.
For how long have I used the solution?
I have been using Trend Micro Apex One for one year.
What do I think about the stability of the solution?
Trend Micro Apex One is stable. We have not encountered any issues.
What do I think about the scalability of the solution?
Trend Micro Apex One is highly scalable, meaning there are no significant challenges with increasing the solution's capacity to meet growing demands.
How are customer service and support?
The technical support is good.
How would you rate customer service and support?
Positive
How was the initial setup?
My team was part of the deployment and from my end, it was a smooth process. The deployment took three days to complete.
We utilized Trend Micro's auto-deployment feature via Active Directory to seamlessly uninstall the existing antivirus software and deploy Trend Micro Apex One.
The deployment required two people from the customer's side and one person from our end.
What's my experience with pricing, setup cost, and licensing?
Apex One is expensive. On a scale of one to ten with ten being the most expensive, Apex One is an eight.
Initially, customers may be satisfied with the price of Apex One for the first year or two. However, as they become aware of other alternatives that meet their needs more effectively or at a lower cost, they start considering switching to a different option.
What other advice do I have?
I would rate Trend Micro Apex One nine out of ten.
For an organization with 500 to 700 employees, at least two dedicated personnel should be assigned to maintain Apex One if the customer operates multiple shifts. Otherwise, one dedicated personnel per shift is sufficient.
Trend Micro Apex One is a good option for organizations that don't have budget constraints.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Other
Disclosure: My company has a business relationship with this vendor other than being a customer. partner
Unit Head Infrastructure at a financial services firm with 201-500 employees
You can scan and control data leakage on the user system level
Pros and Cons
- "I like Apex One's DLP capabilities. You can scan and control data leakage on the user system level. Our previous solution would look at things from the user desktop level, and you had to have an agent deployed to collect that. The solution offers different levels of protection that you can invest in."
- "Apex One could improve endpoint patching. For example, Kaspersky can download Microsoft updates and install them. Having that feature in the cloud application would help a lot."
What is our primary use case?
We're using Apex One for data protection. It's an excellent solution because of its machine learning and other features.
How has it helped my organization?
Apex One delivers some components we use that aren't available in other solutions. We've seen a reduction in viruses and malware since switching to Apex One. I would estimate that the number of incidents has been reduced by about 25 percent.
We use Apex One as a service, with a few licenses in the cloud. When it's deployed on-prem, you need to maintain a physical site and deploy it within the environment. It's easier to manage on the cloud. I had no problems implementing policies on the application. It reduced the workload by about 50 percent. It saves some money because you do not need to maintain internal infrastructure. It can reduce your spending on Cisco hardware.
What is most valuable?
I like Apex One's DLP capabilities. You can scan and control data leakage on the user system level. Our previous solution would look at things from the user desktop level, and you had to have an agent deployed to collect that. The solution offers different levels of protection that you can invest in.
For example, you can implement Deep Security, which provides more advanced protection for your assets. If you are working in an industry like finance or health care, you need to secure critical user data on the servers. Apex One's ML-driven ransomware protection capabilities are critical these days.
Apex One provides a central server for monitoring. You can monitor activities, issues, and compliance. From the dashboard, you can see the number of systems experiencing alerts or find other system information. Having a single console for monitoring is essential because it's difficult to monitor on-premise systems one by one. I have integrated Apex One with QRadar.
The ease of use varies depending on the person, but you can usually learn how to do it by going to the Internet to find out how. I wasn't familiar with the solution when I started, but I could figure it out by using Google.
What needs improvement?
Apex One could improve endpoint patching. For example, Kaspersky can download Microsoft updates and install them. Having that feature in the cloud application would help a lot.
For how long have I used the solution?
I have used Trend Micro ApexOne for three years.
What do I think about the stability of the solution?
Apex One is stable.
What do I think about the scalability of the solution?
The SaaS version of Apex One is scalable and can increase with demand if you have the licenses. If you're using the on-prem solution, you may need to purchase some additional hardware sources.
How are customer service and support?
I hardly use Trend Micro's technical support because I haven't faced any major issues. When we were using another solution, we had some challenges with support. Trend Micro is a little more responsive.
Which solution did I use previously and why did I switch?
We were previously using Symantec antivirus but switched to Apex One because we were looking for a solution that also offered DLP. Symantec has limited DLP capabilities. With Apex One, you can also implement the DLP tool at the client level as well as the endpoint.
How was the initial setup?
Deploying Apex One was reasonably straightforward and took almost a month because we had to deploy it across multiple locations. Three or four engineers are enough to handle the deployment if you have any kind of organizational access and data purposes.
First, we had to identify and prioritize our assets. We did some testing on the low-level assets to analyze the solution's impact and adjust the policies. Some things might be inappropriately blocked. We deploy for a limited number of applications first to ensure they're running smoothly. After we install the antivirus, our full schedule is used for the other applications or on servers and production only.
What's my experience with pricing, setup cost, and licensing?
Apex One is a bit expensive, but the additional AWS costs are limited. It's competitive compared to other solutions in the market. It's a good price for the functionality that it provides.
Which other solutions did I evaluate?
We evaluated Kaspersky and CrowdStrike. The other solutions were too expensive.
What other advice do I have?
I rate Trend Micro Apex One eight out of 10. I would recommend it.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
GOV-CA Data Center Manager at a government with 5,001-10,000 employees
Helps protect our environment against threats, includes many features, and has good support
Pros and Cons
- "The number of accessories included is the most valuable feature."
- "The EDR feature is difficult to use and could be made more user-friendly."
What is our primary use case?
We utilize Trend Micro Apex One as our antivirus protection.
How has it helped my organization?
Trend Micro Apex One has assisted us in safeguarding our data.
Trend Micro Apex One has helped improve our organization's performance by preventing attacks. We noticed the benefits during the testing phase.
What is most valuable?
The number of accessories included is the most valuable feature.
What needs improvement?
The EDR feature is difficult to use and could be made more user-friendly.
I would appreciate the inclusion of malware and zero-day attack features in a future release of the solution.
For how long have I used the solution?
I have been using Trend Micro Apex One for five years.
What do I think about the stability of the solution?
Trend Micro Apex One is stable.
What do I think about the scalability of the solution?
Trend Micro Apex One is scalable. We have 50 people in our organization that are protected by the solution.
How are customer service and support?
The technical support is quick to resolve our issues.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
We used to employ McAfee, but we transitioned our systems and subsequently switched to Trend Micro Apex One.
What about the implementation team?
The implementation was completed in-house by our system integrator.
What's my experience with pricing, setup cost, and licensing?
Currently, Trend Micro Apex One's price is good and there are no extra costs attached.
Which other solutions did I evaluate?
We evaluated both Kaspersky and Avira, both of which are good solutions. However, we did not use them for our system. Trend Micro Apex One received a higher rating in our evaluations.
What other advice do I have?
I rate Trend Micro Apex One nine out of ten.
We employ four engineers to maintain the solution. Trend Micro Apex One is deployed in one central location.
I recommend Trend Micro Apex One to others.
Which deployment model are you using for this solution?
On-premises
Disclosure: PeerSpot contacted the reviewer to collect the review and to validate authenticity. The reviewer was referred by the vendor, but the review is not subject to editing or approval by the vendor.
Senior Manager at a comms service provider with 10,001+ employees
Quick response times, effective detection module, and secure
Pros and Cons
- "The most valuable feature of Trend Micro Apex One is the response time and detection module."
- "The solution could improve the Linux XDR functionality. It is not mature. There could be some improvement in the area of the use cases. For example, improvement is needed in OTN."
What is our primary use case?
I am supporting many clients with this solution. Each of my clients is using a different version based on their requirements.
How has it helped my organization?
Trend Micro Apex One is used for security for our endpoints, such as Microsoft Windows and mobile devices.
What is most valuable?
The most valuable feature of Trend Micro Apex One is the response time and detection module.
What needs improvement?
The solution could improve the Linux XDR functionality. It is not mature. There could be some improvement in the area of the use cases. For example, improvement is needed in OTN.
There are times when the solution reboots during the installation that could be minimized or improved.
For how long have I used the solution?
I have been using Trend Micro Apex One for approximately four years.
What do I think about the stability of the solution?
The solution can be unstable depending on what version is being used.
I rate the stability of Trend Micro Apex One a seven out of ten.
What do I think about the scalability of the solution?
We have over 25,000 users using this solution and approximately four clients.
The solution is scalable.
I rate the scalability of Trend Micro Apex One an eight out of ten.
How are customer service and support?
The support from Trend Micro Apex One is helpful. However, they only provide documents for XDR multiple integrations that could be improved. We had to search for more information ourselves.
I rate the support of Trend Micro Apex One an eight out of ten.
How would you rate customer service and support?
Positive
How was the initial setup?
The initial setup of Trend Micro Apex One is simple if it is a fresh installation and can take only minutes. However, if there are other solutions set up prior it will take more time.
What about the implementation team?
There are use cases that require assistance to implement the solution.
What other advice do I have?
I have approximately five people for the maintenance of the solution.
I rate Trend Micro Apex One an eight out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer.
Product Manager at a tech services company with 11-50 employees
Integrates well with other security products but has limited intelligence
Pros and Cons
- "Its database is better than most of the endpoint protection solutions."
- "It is weak in terms of intelligence. By implementing Trend Micro Apex One, I wanted to see real-life scenarios. I deployed it on 50 clients to check if I could do lateral moments and zero-day exploits. I wanted to check how the zero-day protection works with Trend Micro. It fails with most of them because it is signature-based. They are not looking at the MITRE ATT&CK framework, so with zero-day attacks, it mostly fails."
What is our primary use case?
I create real-life scenarios with products and work with products such as Trend Micro, CrowdStrike, SentinelOne, Palo Alto, etc. Trend Micro is not my focus item or brand. My focus is more on CrowdStrike, but I am using Trend Micro in my lab environments to check the real-life situation. I am not okay with what vendors share on their websites, so I give my customers and partners real-life scenarios.
How has it helped my organization?
I offer Trend Micro Apex One to our customers just because they want a secondary signature-based solution.
Apex One did not work as per my expectations. I am doing zero-day attacks by myself, and for fileless attacks, it does not work at all.
With the current architecture, Apex One does not have advanced protection capabilities that adapt to protect against unknown and stealthy new threats. It might have these capabilities in the future if they change the architecture. For instance, McAfee merged with FireEye and created a new brand Trellix. They changed the overall architecture. If Trend Micro considers shifting its architecture, it can get this kind of protection.
Apex One is okay for detecting ransomware with runtime machine-learning capabilities. It has some signature-based protection against ransomware, but it may miss the ransomware, which has been a huge threat at least for the last seven or eight years. It is the foundation of zero-day protection, and that is why I am looking for a more capable solution besides Trend Micro.
Apex One integrates with other security products. As part of this integration, when a threat is detected in the network sandbox, it deploys rapid updates to endpoints, which has huge importance because if you can respond to events in a short time, you get the least damage from attacks. It is of huge importance.
Apex One provides us with virtual patching to protect against vulnerabilities even before a patch is available for the source of the issue, but it is a problem in itself because it consumes too many resources on an endpoint. It is a good feature, but it is a problematic feature because it consumes lots of the system resources. If you use signature-less architecture, you do not have to deal with virtual patching because all attack types are already addressed with some framework, such as the MITRE ATT&CK framework. You do not have to deal with virtual patching at all.
There has been no reduction in viruses and malware since moving to Apex One because my customers are using it as a secondary solution. They have primary products, and there are not many things left for Apex One. My customers are using it as a secondary solution just because of their habits of using signature-based. Some of my customers could not understand the concept of signature-less protection. Antiviruses have been there for 40 years or so, and their habits are a little bit hard to change. That is the reason why I am offering this product.
What is most valuable?
I offer this solution only if a customer is looking for a signature-based protection solution. Its database is better than most of the endpoint protection solutions.
What needs improvement?
It is weak in terms of intelligence. By implementing Trend Micro Apex One, I wanted to see real-life scenarios. I deployed it on 50 clients to check if I could do lateral moments and zero-day exploits. I wanted to check how the zero-day protection works with Trend Micro. It fails with most of them because it is signature-based. They are not looking at the MITRE ATT&CK framework, so with zero-day attacks, it mostly fails. Instead of signature-based, Trend Micro may want to change the architecture to use more behavior analysis. Behavior analysis is included with Trend Micro, but it is not a complete set, so it needs enhancement.
Apex One does not provide a single console for cross-layer detection, threat hunting, and investigation. Managing it is a little bit hard. You have to use different consoles for Apex One, Deep Security, and Trend Micro endpoint protection, so managing it is a little bit tricky.
In terms of the learning curve, Apex One is easy for me, but regular users may have some issues. The management of Trend Micro products is a little bit tricky. Apex One does not include every protection in itself, so you have to use endpoint protection, and you have to use Deep Security. If three of them come together, at some point, it will be competitive with next-generation antiviruses or EPPs such as SentinelOne, Microsoft, CrowdStrike, etc.
Its implementation takes too much time. With CrowdStrike, I do not have to restart any operating system, but with Trend Micro, I have to.
Its administration is also a little bit tricky. It is easier when you have background knowledge.
For how long have I used the solution?
I have been using this product for a year.
What do I think about the stability of the solution?
Its stability is quite good. I cannot complain about the stability.
It sometimes also depends on luck. The product can sometimes conflict with other products, but to this day, I never encountered any issue like that.
What do I think about the scalability of the solution?
It is a little bit hard to scale as compared to CrowdStrike. I am using on-prem solutions most of the time. With on-prem solutions, it is a little bit hard to maintain, deploy, or scale a product, but cloud products are easier to scale.
I have a centralized customer, and I also have customers who have distributed locations all over Turkey, so I have both types of customers.
How are customer service and support?
It takes a little bit of time, and it can be improved. Sometimes, I get a response in two days, and at other times, I get a response in two hours. It depends. More consistency would be great, but I have already gotten used to this kind of issue, so I cannot complain at all. I would rate them a seven out of ten.
How would you rate customer service and support?
Neutral
Which solution did I use previously and why did I switch?
I am using other server protections and intelligence products. I still have CrowdStrike in my portfolio. I have clients for that, and I am okay with CrowdStrike.
How was the initial setup?
Its deployment takes time. If I have to deploy it in a huge company with over 10,000 clients, it takes a little bit of time. If I am using CrowdStrike, it would take only two or three days, whereas Trend Micro takes more time. I have not measured the exact time difference, but it takes more time compared to other solutions or the next-gen antiviruses. It also depends on the environment because organizational units are not available all the time.
I deployed it on the cloud and on-premises. It depends on the end-user scenarios and topology. In Turkey, customers mostly prefer on-prem solutions, but this is changing day by day. Customers in Turkey tend to have their information on-premises. If a customer wants an on-prem solution, then I offer them the Trend Micro product or Trellix product. It also depends on their budget.
Its deployment is not too complex in my experience, but from the customer perspective, it is a little bit tricky. It takes a little bit of time. They have to have a little bit of background knowledge.
The implementation strategy varies. Sometimes, I use third-party solutions, and sometimes, I am just pushing from the central management console. It depends on the customer's topology.
In terms of maintenance, it does require maintenance. It depends on the company budget because some of my customers have a few locations in Turkey, and sometimes, they have only one IT specialist. They send that one person everywhere in Turkey or to multiple locations. If they have more than one IT guy and if they are also distributed, they do not have to send those guys to other places. It depends on the customer's budget.
What about the implementation team?
If I deploy the product, then one person is enough, but if I have to leave it to my customers, they need two or three people. They are usually IT specialists, but they are not so knowledgeable.
What was our ROI?
It takes time, but it is better than some of the other products such as Symantec. Symantec takes more time compared to Trend Micro.
What's my experience with pricing, setup cost, and licensing?
It is okay. Compared to Sophos, it is a little bit expensive, but it is a good product and it is better than Sophos, for instance. It is equivalent to Trellix.
Its cost depends on the country. I am in Turkey, and Trend Micro is not so affordable in Turkey. SMB companies are looking for cheaper products. In Turkey, enterprise customers tend to use Trend Micro, and if they have more money, then they use next-generation antivirus or EPP products such as SentinelOne, CrowdStrike, or Microsoft E5 package.
Which other solutions did I evaluate?
I evaluate most of the popular brands such as Trellix, Sophos, and Kaspersky.
What other advice do I have?
Trend Micro Apex One has some good benefits, and CrowdStrike also has some benefits. I would recommend Apex One depending on the scenario. I have to check it with my customer first. I have to identify their basic needs and what they want to do. Sometimes, it just matches the requirements, and sometimes, it does not, so it depends.
If you are looking for the productivity of employees, go for a signatureless solution.
For an SMB, I would rate it an eight out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
Senior Manager at a tech services company with 51-200 employees
Easy to set up, stable, and scalable
Pros and Cons
- "Email security is the most valuable feature."
- "Trend Micro Apex One can improve its vulnerability assessment and monitoring tools."
What is our primary use case?
Trend Micro Apex One has various applications. We use the solution for our network interface, and also for endpoint malware attacks. We have also conducted simulation testing, and phishing attacks using the solution.
How has it helped my organization?
We have implemented three levels of security to minimize endpoint security for user protection. We have also implemented a Data Loss Protection (DLP) policy to protect data in transit, data in motion, and data at rest. Additionally, we have implemented Server Deep Security to protect virtualized servers hosted in our organization.
What is most valuable?
Email security is the most valuable feature.
What needs improvement?
Trend Micro Apex One can improve its vulnerability assessment and monitoring tools.
In a future release, I would like to have more assessment tools and tracing testing.
For how long have I used the solution?
I have been using the solution for two years.
What do I think about the stability of the solution?
The solution is stable.
What do I think about the scalability of the solution?
I give the scalability a nine out of ten.
We have over 300 people using the solution.
How are customer service and support?
Technical support provides an immediate response.
Which solution did I use previously and why did I switch?
We previously used Kaspersky and switched to Trend Micro Apex One because of the Integrated Business Solutions. My goal was to accomplish two areas, particularly the Deep Security server. I was searching for my server and subsequently, data loss protection. For the two extra seasons, the cost was lower than that of Kaspersky and the features were more extensive.
How was the initial setup?
The initial setup is not complex, but good documentation and knowledge are required. The person implementing the setup should be knowledgeable of all the features available, and the knowledge should be distributed among the end users so they are aware of what they will have and the benefits.
We completed the implementation within one week using three people. Our initial target was around three hundred users with endpoint protection and our deep security, which can virtualize our servers, as well as the additional features of the DLP.
What about the implementation team?
The implementation was completed with the help of a consultant, a Trend Micro support person, and myself.
What was our ROI?
We have seen a return on investment since we implemented Trend Micro. We have been able to get rid of all the spam features and additional tools we were using. Another benefit is that we are using the solution to prevent malware issues, which is cost-saving every year. Definitely, if I look at the past five years, I have still managed to save the cost because the implementation cost is a one-time fee, not an annual cost. In a five-year period, the solution has saved us around 30 percent of the cost.
What's my experience with pricing, setup cost, and licensing?
The price of the solution is reasonable but we also have to factor in the cost of the implementation which is expensive because we have to hire a third party.
The license fee for 300 users is approximately $2,000 USD and $500 USD for the implementation cost.
What other advice do I have?
I give the solution an eight out of ten.
We require three people to maintain the solution.
I advise people to focus on data protection and network security as these are the key areas in order to utilize the full benefit of Trend Micro Apex One. This includes data protection loss per the CTAR, which provides cybersecurity with data loss protection, and the networks.
Which deployment model are you using for this solution?
Private Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Other
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Buyer's Guide
Download our free Trend Vision One Endpoint Security Report and get advice and tips from experienced pros
sharing their opinions.
Updated: January 2026
Product Categories
Endpoint Protection Platform (EPP) Endpoint Compliance Endpoint Detection and Response (EDR)Popular Comparisons
CrowdStrike Falcon
Microsoft Defender for Endpoint
Fortinet FortiEDR
SentinelOne Singularity Complete
HP Wolf Security
Cortex XDR by Palo Alto Networks
Microsoft Defender XDR
Elastic Security
Fortinet FortiClient
Trellix Endpoint Security Platform
Trend Vision One
Symantec Endpoint Security
Check Point Harmony Endpoint
Kaspersky Endpoint Security for Business
Buyer's Guide
Download our free Trend Vision One Endpoint Security Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- What are the biggest differences between BitDefender and Trend Micro?
- What's the difference between Trend Micro Deep Security and Trend Micro Apex One?
- What is the biggest difference between EPP and EDR products?
- Can Cylance be used with Symantec or Kaspersky endpoint solutions without conflict?
- When evaluating Endpoint Security, what aspect do you think is the most important to look for?
- What's the best way to trial endpoint protection solutions?
- What are the threats associated with using ‘bogus’ cybersecurity tools?
- Which Endpoint Protection Solution offers Zero Trust (ZTN) as a feature?
- What to choose: an endpoint antivirus, an EDR solution or both?
- Which ransomware is the biggest threat in 2020?


















