I would rate Trend Micro Web Security a nine, but not because I have some issues in mind. I have only seen a bit better product. I was also a McAfee partner some time ago, when there was still McAfee. Some features definitely in McAfee were better than what I see in Trend Micro. I cannot tell what Trend Micro could learn from web security products of their competitors because this product has not existed for at least eight years now for McAfee, and I have no experience with other competitors. But relative to my experience and expertise, I should rate it a ten, but still I am a bit cautious because other products also have great features and these features are not covered 100% by Trend Micro. I cannot tell what additional features I would like to see in the next release, but when I see such a feature, it is very compelling. When you get into a new car and this car has something new and great, adaptive suspension, whatever, you just feel a nice feeling and you want this car. That is how I feel. I have not complained that something is missing from Trend Micro product, but I have seen in specific examples some great ideas in competition.
The cons include it not being implemented in the mid-enterprise segment. For these organizations, it is an additional expense. Even companies with multi-tenant, multi-cloud, and multi-geolocation environments are not using this WAF solution because it is an investment. They already have endpoint protection, EDR, firewalls, and authentication. Spending on WAF is an extra investment for them. This is one reason mid-enterprise segments hesitate to adopt it.
There is room for improvement in the anti-malware capabilities. The most important improvement would be to enhance the capabilities to both initiate and mitigate DDoS attacks. Anyone using the product should have the ability to perform these actions. While it has features like anti-malware, anti-DDoS, and anti-spam, these could be further enhanced. In my opinion, while it is a good product, many other products offer similar functions. Trend Micro Web Security could be enhanced, particularly in mitigating DDoS attacks. It should focus on enhancing security features, as other products offer comparable functionalities.
Head of Technical - Systems and Security at a tech consulting company with 51-200 employees
Real User
Top 5
Apr 30, 2024
One aspect I'd like to improve about Trend Micro Web Security is the WFA feature in the on-prem version. This legacy version currently lacks WFA, which is a useful tool for managing bandwidth and applying data control limits to specific users. It's especially beneficial for organizations using Android and Azure. In contrast, the cloud data version only offers time-based bandwidth management. Enhancing this feature or integrating it better with other aspects of the product would greatly enhance its appeal and functionality.
Learn what your peers think about Trend Micro Web Security [EOL]. Get advice and tips from experienced pros sharing their opinions. Updated: February 2026.
I don't like the user interface provided by Trend Micro Web Security since it is difficult to use, making it one of the areas in the solution where improvements are required. The product's scalability is an area of concern where improvements are required.
The price of Trend Micro Web Security is the only area of concern where improvements are required. From an improvement perspective, the product should be made available to users at a cheaper rate.
Senior Information Security Consultant at a tech services company with 11-50 employees
Consultant
Aug 31, 2022
This solution has a lot of restrictions on what non-administrator users can do, including generating comparative code. We would like to see this changed as the product is developed. We would also like more reporting features to be added to this solution.
Consultant at a computer software company with 51-200 employees
MSP
Mar 2, 2022
What could help Trend Micro Web Security in terms of improvement is the addition of a DDoS protection feature. Better DDoS protection is what I'm expecting, though I'm unsure if they now have that, because DDoS protection is more specialized than just web security.
Sr.Customer Engineer- Projects at a tech services company with 201-500 employees
Real User
Sep 17, 2021
The ease of use depends on the blacklisting of the sites. Some of the authorized sites have been blacklisted, which requires a request to unblock the site. The process of authorizing sited needs to improve. The performance could be better. Sometimes the browser hangs. it is possible that the integration in coordination with the browser causes that issue. I would like to see better scalability and better performance.
The system should generate reports when an attack has been stopped, contained, or removed. As it is now, if an attack is halted then we don't know about it unless we search through the logs.
Trend Micro Web Security [EOL] integrates machine learning, endpoint security, and Zero Trust technology to offer comprehensive threat detection and protection. It supports cloud filtering, access control, and advanced DLP licensing for effective monitoring and security management across environments.Trend Micro Web Security [EOL] is designed for robust protection against threats like hacking, malware, and ransomware. Combining features such as centralized management with OWASP Top 10...
![Trend Micro Web Security [EOL] Logo](https://images.peerspot.com/image/upload/c_scale,dpr_3.0,f_auto,q_100,w_40/2wuq6mq8liciuy8jm6aqj4dp5bgm.jpg?_a=BACAGSGT){kind=small}
I would rate Trend Micro Web Security a nine, but not because I have some issues in mind. I have only seen a bit better product. I was also a McAfee partner some time ago, when there was still McAfee. Some features definitely in McAfee were better than what I see in Trend Micro. I cannot tell what Trend Micro could learn from web security products of their competitors because this product has not existed for at least eight years now for McAfee, and I have no experience with other competitors. But relative to my experience and expertise, I should rate it a ten, but still I am a bit cautious because other products also have great features and these features are not covered 100% by Trend Micro. I cannot tell what additional features I would like to see in the next release, but when I see such a feature, it is very compelling. When you get into a new car and this car has something new and great, adaptive suspension, whatever, you just feel a nice feeling and you want this car. That is how I feel. I have not complained that something is missing from Trend Micro product, but I have seen in specific examples some great ideas in competition.
The cons include it not being implemented in the mid-enterprise segment. For these organizations, it is an additional expense. Even companies with multi-tenant, multi-cloud, and multi-geolocation environments are not using this WAF solution because it is an investment. They already have endpoint protection, EDR, firewalls, and authentication. Spending on WAF is an extra investment for them. This is one reason mid-enterprise segments hesitate to adopt it.
There is room for improvement in the anti-malware capabilities. The most important improvement would be to enhance the capabilities to both initiate and mitigate DDoS attacks. Anyone using the product should have the ability to perform these actions. While it has features like anti-malware, anti-DDoS, and anti-spam, these could be further enhanced. In my opinion, while it is a good product, many other products offer similar functions. Trend Micro Web Security could be enhanced, particularly in mitigating DDoS attacks. It should focus on enhancing security features, as other products offer comparable functionalities.
One aspect I'd like to improve about Trend Micro Web Security is the WFA feature in the on-prem version. This legacy version currently lacks WFA, which is a useful tool for managing bandwidth and applying data control limits to specific users. It's especially beneficial for organizations using Android and Azure. In contrast, the cloud data version only offers time-based bandwidth management. Enhancing this feature or integrating it better with other aspects of the product would greatly enhance its appeal and functionality.
Pricing could be improved.
The stability of the product is an area of concern where improvements are required.
I don't like the user interface provided by Trend Micro Web Security since it is difficult to use, making it one of the areas in the solution where improvements are required. The product's scalability is an area of concern where improvements are required.
The price of Trend Micro Web Security is the only area of concern where improvements are required. From an improvement perspective, the product should be made available to users at a cheaper rate.
The product should be more secure and stable. It is also not flexible.
The costs are a bit high in terms of licensing.
This solution has a lot of restrictions on what non-administrator users can do, including generating comparative code. We would like to see this changed as the product is developed. We would also like more reporting features to be added to this solution.
The interface could be improved. We need it to be more user-friendly. The installation is a little bit complex.
It could be less expensive.
What could help Trend Micro Web Security in terms of improvement is the addition of a DDoS protection feature. Better DDoS protection is what I'm expecting, though I'm unsure if they now have that, because DDoS protection is more specialized than just web security.
There are multiple ways Web Security could improve, such as usability and web access to several programming modes.
The ease of use depends on the blacklisting of the sites. Some of the authorized sites have been blacklisted, which requires a request to unblock the site. The process of authorizing sited needs to improve. The performance could be better. Sometimes the browser hangs. it is possible that the integration in coordination with the browser causes that issue. I would like to see better scalability and better performance.
The system should generate reports when an attack has been stopped, contained, or removed. As it is now, if an attack is halted then we don't know about it unless we search through the logs.