Try our new research platform with insights from 80,000+ expert users
Julio César Quezada - PeerSpot reviewer
IT Security Engineer at a retailer with 10,001+ employees
Real User
Top 20
A cloud solution for providing all information in one dashboard

What is our primary use case?

We use the solution for event correlation.

How has it helped my organization?

We are deploying a server inside our network to use it as a data collector.

What is most valuable?

The solution provides all the information in only one dashboard. We have integrated with Lumen, NETSCOUT, and other MDM products such as Microsoft Intune and ManageEngine MDM. We have also integrated Chrome with VisionOne.

What needs improvement?

The login system could be improved. We must pass two different dashboards to log in to the solution. We have a second-factor authentication. We need to check the platform, which delays three or four minutes because of logging, checking email, and returning to the platform. If you multiply the entire team, we lose a lot of time daily.

Buyer's Guide
Trend Vision One
June 2025
Learn what your peers think about Trend Vision One. Get advice and tips from experienced pros sharing their opinions. Updated: June 2025.
861,524 professionals have used our research since 2012.

For how long have I used the solution?

I have been using Trend Vision One for two years.

What do I think about the stability of the solution?

I rate the solution’s stability an eight out of ten.

What do I think about the scalability of the solution?

I rate the solution’s scalability a nine out of ten.

Which solution did I use previously and why did I switch?

We have used Symantec before. We switched to Trend Vision because Symantec cut off support for Windows XP. We still have Windows XP in our environment.

How was the initial setup?

The initial setup is easy because our assets are in interactive directory.

What was our ROI?

We’ve seen ROI because we controlled a malware attack in our network with Trend Micro two weeks ago.

Which other solutions did I evaluate?

We have tried other malware solutions. We chose Trend Vision because it supports Windows XP.

What other advice do I have?

Overall, I rate the solution a nine out of ten.

Which deployment model are you using for this solution?

Public Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
reviewer2544210 - PeerSpot reviewer
IT Consultant at a tech services company with 201-500 employees
Consultant
Top 20
Centralized visibility and management with potential for integrated feature enhancement
Pros and Cons
  • "Trend Vision One offers centralized visibility and management across all protection layers, providing a holistic view of our environment and enhancing visibility across the entire infrastructure."
  • "Trend Vision One would be enhanced by incorporating an SIEM solution as a built-in feature."

What is our primary use case?

Our primary use case is protecting our environment from malicious threats with antivirus protection. Additionally, we utilize Trend Vision One for its integrated solution, providing comprehensive visibility across the entire environment.

The organization implemented Trend Vision One to support best practices.

How has it helped my organization?

Trend Vision One is essential to our organization because it provides comprehensive security coverage across our entire environment, including email, network, and endpoints.

Trend Vision One offers centralized visibility and management across all protection layers, which is crucial for comprehensive environmental protection. This holistic approach empowers the SOC team to perform their duties effectively.

The executive dashboard is handy.

The risk index feature helps us identify issues and where to improve our environment.

The solution has improved our quality by enhancing the visibility into our estate and our ability to manage risk.

The consolidated security features of Trend Vision One improved the efficiency of our SecOps team by simplifying their workflows.

Improved asset visibility and enhanced risk management capabilities have raised our overall quality.

What is most valuable?

Trend Vision One offers centralized visibility and management across all protection layers, providing a holistic view of our environment and enhancing visibility across the entire infrastructure.

What needs improvement?

Trend Vision One would be enhanced by incorporating an SIEM solution as a built-in feature. This integration would streamline functionality and eliminate the need for us to acquire and manage separate SIEM solutions.

For how long have I used the solution?

I have used Trend Vision One for over ten years.

What do I think about the stability of the solution?

Trend Vision One's stability is rated a six out of ten due to compatibility issues with other solutions and endpoint security interference.

What do I think about the scalability of the solution?

The solution is scalable and there have been no issues with scalability.

How are customer service and support?

I would rate Trend Micro's customer service an eight out of ten. While I experienced some minor issues, these are common with any technical solution.

How would you rate customer service and support?

Positive

What was our ROI?

We have not really seen a return on investment from this solution.

What's my experience with pricing, setup cost, and licensing?

While the pricing and licensing for Trend Vision One are generally acceptable, the need to purchase additional features separately adds complexity. A single, comprehensive price for the entire solution is not available.

What other advice do I have?

I would rate Trend Vision One seven out of ten.

Trend Vision One is deployed across multiple departments in our organization.

Trend Vision One requires maintenance.

Which deployment model are you using for this solution?

On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Flag as inappropriate
PeerSpot user
Buyer's Guide
Trend Vision One
June 2025
Learn what your peers think about Trend Vision One. Get advice and tips from experienced pros sharing their opinions. Updated: June 2025.
861,524 professionals have used our research since 2012.
reviewer2380077 - PeerSpot reviewer
Jr Cybersecurity Engineer at a tech services company with 51-200 employees
Real User
Top 20
Helps save investigation time, reduces false positives, and provides real-time analysis
Pros and Cons
  • "I appreciate the value of real-time activity monitoring."
  • "While blocking an IP address restricts access for 30 days, it eventually becomes accessible again."

What is our primary use case?

We use Trend Vision One for real-time analysis and monitoring to identify the root cause of security incidents. This includes finding details like how the attack unfolded, user names involved, IP addresses associated with the attack, and the affected systems and devices. By analyzing this information, we can map out the entire attack flow chart.

How has it helped my organization?

The network coverage provided by Trend Vision One is important.

Trend Vision One is an XDR tool so it is important for us that it provides centralized visibility and management across protection layers.

Centralized visibility and management across protection layers enable real-time monitoring, which improves our efficiency.

While the Trend Micro Vision One executive dashboard provides a valuable overview, the ability to drill down from that level into the XDR detections is crucial. During a real-time attack, this drill-down functionality is essential for identifying the root cause, prioritizing the threat type, and ultimately finding an effective solution.

Trend Micro Vision One's greatest strength lies in its real-time monitoring and analysis capabilities. This allows for the seamless blocking of malicious URLs and attacks.

The managed XDR has saved us time allowing us to focus on other tasks.

The managed XDR helps us detect and respond to threats in under five minutes. It will display all the details in a single, unified view, including any alerts, trends, usernames, and everything else relevant. By simply looking at the tag data, we can get a complete analysis. This eliminates the need to switch between different screens and saves us significant time. For example, if we see a flag, we can immediately understand its meaning and the associated location without having to search for it elsewhere. Having all this information on a single page is a huge time saver.

Trend Vision One helps reduce the time we spend investigating false positives. The more we familiarize ourselves with the tool the easier it becomes identifying false positives. The time saved by identifying false positives depends on the type of alert. In some cases, we only deal with simple attacks, such as brute-force password attempts, followed by alerts for unusual login failures. These are common attack methods. We can then determine if the user was trying a different password, mistyped their password, or there's a mismatch. In such cases, identifying a false positive can be relatively quick, taking only one to two minutes. 

What is most valuable?

I appreciate the value of real-time activity monitoring. It provides accurate data, giving us a clear picture of what's happening, including who attempted an attack, their location, and any other details we need to mitigate the threat.

What needs improvement?

While blocking an IP address restricts access for 30 days, it eventually becomes accessible again. For true permanence, blocked IPs need to be transferred to a dedicated storage solution. However, this storage has limited capacity. To accommodate new blocked IPs, we must remove existing ones, creating a disadvantage that has room for improvement.

For how long have I used the solution?

I have been using Trend Vision One for over 1 year.

What do I think about the stability of the solution?

Trend Vision One is stable.

What do I think about the scalability of the solution?

Trend Vision One is scalable.

Which solution did I use previously and why did I switch?

We previously used Palo Alto's Cortex XDR. However, we switched to Trend Micro Vision One because it's more user-friendly. Trend Micro's interface allows us to better understand the features and processes, enabling us to achieve the desired results more easily. Cortex XDR, on the other hand, was more complex to navigate.

What was our ROI?

The solution has delivered a return on investment through time savings.

What other advice do I have?

I would rate Trend Vision One 9 out of 10.

Maintenance is required but it is easy to do.

I would recommend Trend Vision One to others. I suggest completing training before using the solution.

Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
CTO at Cyber Correlate
Real User
Top 5Leaderboard
Good protection with centralized visibility and nice executive dashboards
Pros and Cons
  • "The centralized visibility is good."
  • "The support should be improved."

What is our primary use case?

It offers very good ransomware protection. You have more visibility on the network.

How has it helped my organization?

It helps with compliance. We are also well-protected from ransomware and network attacks.

It's improved our organization in two ways: we can have more visibility and have more confidence in security. We also have better reporting for regulatory compliance. 

What is most valuable?

The endpoint protection is the most useful. It's powerful. I've faced issues with other products regarding ransomware; however, with Trend Micro, I have no fear of network attacks. I have experience with consistent protection. 

Customers have NDR and XDR protection, and it's very good for protection. There are also regulations within our country that require us to use XDR. 

The centralized visibility is good. It's great for the IT team as they have to export reports to management for compliance. It helps with reporting. It's essential. 

The centralized visibility and management across protection layers helped our efficiency. We have a limited number of security engineers. With Trend Micro and its centralized dashboard, it will show everything we've learned and reflect reporting on the dashboard and this helps when you have a limited amount of users. It simply reduces the number of people that need to be involved in the security effort. 

We use the executive dashboards on both sides. We can drill down on them right into XDR detection. It's essential when we have an incident. If we need to know more about the threat, we need to know where and how they are attacking. We can drill down and get forensic data. 

The solution's risk index feature is very good. It comes out of the box. Our customers can use it. 

The product has helped us decrease our time to detect and respond to threats. 

What needs improvement?

It took some time to realize the benefits, as we had some issues with support. It took us three to four months to realize its benefits. 

The support should be improved. 

We'd like to see deception features in the next release. It would help us to reduce false positive alerts. 

For how long have I used the solution?

I've been using the solution for seven years now.

What do I think about the stability of the solution?

The stability is good overall. 

What do I think about the scalability of the solution?

The solution is scalable. You simply need the resources on the VM, and you can easily change your license. 

How are customer service and support?

We've had issues with support. Their services could be improved. 

How would you rate customer service and support?

Neutral

Which solution did I use previously and why did I switch?

I have used Fidelis and found you can control the endpoints better. They also have a deception module, which is very powerful. You can manage your endpoints perfectly. It also offers very good network visibility. I use both products. It depends on the customer's needs and approach.

How was the initial setup?

I observed the deployment process. 

We had issues. It should be straightforward; however, with a customer, we faced a problem with technical support. It took us almost eight months to deploy. They had issues with the installation on the endpoints and on the network side. We had a problem with a few things, including use cases. 

The plan was to deploy in two weeks, and yet it took almost eight months.

From the customer side, there were three engineers, and from Trend Micro, there were one or two engineers working on the solution.

Almost every two weeks, there are maintenance calls. The customer has three people handling maintenance duties. 

What about the implementation team?

The solution was deployed by support. 

What's my experience with pricing, setup cost, and licensing?

The pricing is average. The costs are acceptable. It's good for small or medium-sized businesses. 

What other advice do I have?

I'm a partner. 

We're using the latest version of the solution. 

I'd rate the solution eight out of ten. 

For enterprise customers, I wouldn't recommend the solution. However, it's a good solution for small or medium customers. New users need to ensure they have the correct sizing and licensing. 

You need to talk to the right support engineers in order to have a smooth experience. 

Which deployment model are you using for this solution?

On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer. partner
PeerSpot user
Faheem Shaikh - PeerSpot reviewer
Information Security Engineer at Cyberisk
Real User
Top 20
Comprehensive security offers effective risk management with centralized management
Pros and Cons
  • "The most valuable features of Trend Vision One are its capabilities for XDR, EDR, MDR, and NDR, allowing for network detection and response."
  • "I would like Trend Vision One to incorporate more AI."

What is our primary use case?

Trend Vision One is a comprehensive endpoint security platform that combines NDR, XDR, and MDR capabilities in a single dashboard. We deploy it in offline environments, such as power plants, using relay management to ensure system connectivity without internet access. This approach allows for implementing robust security workflows even in isolated networks.

How has it helped my organization?

Trend Vision One effectively protects endpoints from malware, ransomware, and malicious scripts by allowing for the configuration of policies and sensors that detect and prevent unauthorized file modification.

Trend Vision One offers advanced threat protection that adapts to new and unknown threats. Upon detecting a threat, it deploys a virtual patch to mitigate the issue.

Trend Vision One helps detect ransomware with runtime and machine learning capabilities and will alert us of the detection.

Trend Vision One provides us with a single console for cross-layer detection, threat hunting, and investigation and is easy to learn.

It enhances risk management by providing comprehensive visibility into our environment. This ensures all systems are up-to-date and vulnerabilities are minimized.

Virtual patching is extremely helpful because it provides proactive protection against vulnerabilities even before a fix is available for the underlying issue.

Trend Vision One has helped reduce the number of viruses and malware we received. It has also helped manage risk effectively across various products like workload security, email security, and others through a single dashboard, thus making it easier for the organization to manage risk.

What is most valuable?

The most valuable features of Trend Vision One are its capabilities for XDR, EDR, MDR, and NDR, allowing for network detection and response. It is a comprehensive solution, and even Gartner recognizes TrendMicro as a leader. Additionally, it offers excellent endpoint security and protection that can be easily managed with sensors and agents.

What needs improvement?

I would like Trend Vision One to incorporate more AI.

For how long have I used the solution?

I have been using Trend Vision One for approximately two and a half years.

What do I think about the stability of the solution?

I rate Trend Vision One's stability ten out of ten. I have only faced downtime once and am confident in its stability.

What do I think about the scalability of the solution?

Trend Vision One is scalable, and I have not encountered any issues scaling the solution to meet different client requirements.

I rate the scalability of Trend Vision One ten out of ten.

How are customer service and support?

Customer service and support are excellent. The support team is very timely and helpful, offering solutions and assistance as needed.

How would you rate customer service and support?

Positive

How was the initial setup?

The initial deployment can be done quickly and easily, especially for smaller deployments within one day. For larger deployments, like those with hundreds of endpoints, it might take a few weeks.

What's my experience with pricing, setup cost, and licensing?

I am not directly involved with pricing, but I emphasize the need for competitive pricing to facilitate easier sales.

What other advice do I have?

I would rate Trend Vision One ten out of ten.

Our clients range from small up to enterprise level.

I recommend Trend Vision One to others.

Which deployment model are you using for this solution?

On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
PeerSpot user
Specialist Security Operations at a financial services firm with 5,001-10,000 employees
Real User
Top 20
Good threat hunting and detection with a nice interface
Pros and Cons
  • "I'm satisfied with the level of coverage. The policies have been very useful and detailed."
  • "I'd like to see alert time reduction so that they show up on the dashboard faster."

What is our primary use case?

I did a POC with Trend Micro on our servers. We were testing for detection capabilities. We wanted to use it for security protection.

How has it helped my organization?

Once we deployed the solution into our organization, we were able to view logs. From there, we could handle detection. 

What is most valuable?

The detection was very good. It helps with threat hunting. 

Its interface is good. We were able to find logs easily.

It's been working well on our organization's network. I'm satisfied with the level of coverage. The policies have been very useful and detailed. 

We use the solution's executive dashboard. We actually have two or three dashboards. It helps us spot vulnerabilities. 

It's helped us reduce workloads. By getting logs, we could reduce detection time. The threat hunting became easier. We're still working through a POC, so I can't speak to if it will enable us to work on other tasks. We're still testing. 

The solution has helped us to decrease our time to detect and respond to threats. We can respond to threats in half an hour to an hour.

What needs improvement?

When an incident occurs, it will detect the incident within half an hour to an hour. I'd like to see alert time reduction so that they show up on the dashboard faster. 

For how long have I used the solution?

I've been using the solution since 2021. 

What do I think about the stability of the solution?

The solution is stable. 

What do I think about the scalability of the solution?

I've never tried to scale the solution. For my purposes, it's fine. I can't speak to how scaling would go. Likely, it can scale. 

How are customer service and support?

I've been satisfied with the technical support. They are very good. 

How would you rate customer service and support?

Positive

How was the initial setup?

To deploy the POC takes less than one week. Implementing the cloud is fast. It's not complex to set up. 

What's my experience with pricing, setup cost, and licensing?

The pricing is expensive. Most organizations cannot afford XDR. 

I don't deal with the licensing directly. 

Which other solutions did I evaluate?

I've looked into other solutions, like Cortex. Trend Micro offers good visibility. I prefer Trend Micro. It's good. I like the useability. 

What other advice do I have?

I'm an end-user.

We have yet to use the attack surface risk management capabilities. I only downloaded the sensors and installed them on the current phones and servers. We've only done this in the last week. 

I'd rate the solution nine out of ten.

Which deployment model are you using for this solution?

Public Cloud
Disclosure: PeerSpot contacted the reviewer to collect the review and to validate authenticity. The reviewer was referred by the vendor, but the review is not subject to editing or approval by the vendor.
PeerSpot user
Daniel Winninger - PeerSpot reviewer
Head of IT & Telecommunications at VA-Erzberg GmbH
Real User
A stable solution that monitors servers for intrusions and other security-related issues
Pros and Cons
  • "It is a stable product. It works very well."
  • "A room for improvement is Trend Micro XDR's website. It's a very complicated website since finding the right point one wants to see is difficult."

What is our primary use case?

Currently, our company uses the solution solely to monitor our servers for intrusions and other security-related issues.

What is most valuable?

I will have to have a look at my end to be able to explain the features that I find most valuable about the solution.

What needs improvement?

A room for improvement is Trend Micro XDR's website. It's a very complicated website since finding the right point one wants to see is difficult.

For how long have I used the solution?

I have been using Trend Micro XDR for a year now. Also, I am a customer using the solution.

What do I think about the stability of the solution?

It is a stable product. It works very well.

What do I think about the scalability of the solution?

Presently, we have 150 users in our company using the solution. Even if the number of users were to increase in my company, it would still work the same.

How are customer service and support?

Initially, while using the solution in a company, we faced some issues. Our company did help us to resolve these issues.

How was the initial setup?

Since another company carried out the initial setup process, my company did not find it complicated.

The solution is currently deployed on-premises, but we are planning a move to the cloud. We have a plan to conduct a POC for Trend Micro XDR on the cloud shortly.

What's my experience with pricing, setup cost, and licensing?

The pricing of the solution is okay. There is a need for me to look into the new pricing plan introduced by the solution recently.

What other advice do I have?

I would tell those planning to use the solution that they need to consider using it. I rate the overall product an eight out of ten.

Which deployment model are you using for this solution?

On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
reviewer1856883 - PeerSpot reviewer
Cyber Security Analyst at a consultancy with 10,001+ employees
Real User
Easy to maintain with advanced protection and helpful support
Pros and Cons
  • "We can scale the product as needed."
  • "We'd like to see a few more integrations."

What is our primary use case?

We primarily use the solution for the XDR.

We have integrated this with all of our endpoints. Basically, we are using it for incident response. We have a SOC team here, so we are using it in a SOC and the Workload solution. For two or three months, we have been migrating to Workload Security. It is mainly for incident response.

What is most valuable?

We are able to observe attack techniques and targeted attack detection. 

We need to explore more on it since it is still a new product for us. 

It is quite advanced, and it can help us protect our organization against threats. The targeted threat detection is great.

My understanding is the initial setup is pretty straightforward. 

The solution has been stable. 

We can scale the product as needed. 

Technical support is helpful.

It is easy to maintain. 

What needs improvement?

We'd like to see a few more integrations. Specifically, we'd like to see more IOC integration tools. 

We haven't implemented the automation piece just yet; however, we will go through that soon. We just need more time to see how it all works. 

For how long have I used the solution?

I've been using the solution for six or seven months. 

What do I think about the stability of the solution?

This solution seems to be pretty stable so far. I haven't come across any issues. There are no bugs or glitches. It doesn't crash or freeze. 

What do I think about the scalability of the solution?

The product is scalable. When we started, we had a few agents and very few endpoints. At this point, we've integrated with most of them. We haven't seen any issues as we've scaled up.

How are customer service and support?

Support has been quite helpful overall. We've dealt with them multiple times, and they have always been helpful. We tend to get the help we need within two or three hours. They ask many questions and get down to solving the problem at hand. 

How would you rate customer service and support?

Positive

Which solution did I use previously and why did I switch?

I also work with Microsoft Defender. 

We were using OfficeScan and ApexOne as well. 

We decided to work with this product as it had a good reputation.

How was the initial setup?

While I wasn't directly involved with the setup, my understanding is it was straightforward. I do not recall hearing about any complexities coming up. The deployment itself took a few months.

In terms of maintenance, we do get hotfixes every once in a while. It's pretty simple to maintain. 

What about the implementation team?

Trend Micros assisted our team with the setup process. However, it was mostly handled in-house. 

What's my experience with pricing, setup cost, and licensing?

I can't speak to the exact cost.

What other advice do I have?

I'm an end-user. We are using the latest version of the solution. 

The support is pretty good. It is really straightforward. It is very easy to understand, and therefore, I highly recommend the solution.

I'd rate the solution nine out of ten. 

Which deployment model are you using for this solution?

On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
PeerSpot user
Buyer's Guide
Download our free Trend Vision One Report and get advice and tips from experienced pros sharing their opinions.
Updated: June 2025
Buyer's Guide
Download our free Trend Vision One Report and get advice and tips from experienced pros sharing their opinions.