Trend Vision One - Cloud Security Reviews

We use Trend Vision One - Cloud Security for our cloud security, but we especially love it because we're multi-cloud. We want a single solution that can help us protect, inspect, and gain information about all of our cloud assets, regardless of whether they're in Microsoft Online, Office 365, Azure, or AWS, where we have most of our workload.

We also love that Trend Vision One - Cloud Security is not just an endpoint solution or a DevSecOps add-on. It also has a source code repository, which allows us to put things in our DevOps pipeline to protect them. Additionally, we can use Cloud Conformity, which is part of Trend Vision One - Cloud Security, to monitor our posture management.

This means that Trend Vision One - Cloud Security is not just a reactive solution that runs software on virtual machines or in containers. It can stop problems in the development process before they even happen, even if the code is still on someone's machine or in the pipeline or repository. This helps us protect ourselves in a way that many other solutions cannot.

Before implementing Trend Vision One - Cloud Security, we were facing all sorts of unknown threats, including third-party vulnerabilities and misconfigurations. We need to protect ourselves from bad actors, but that's only half of it. We also have to protect our infrastructure from ourselves. No one on our team is going to intentionally do anything malicious, but they can make mistakes. And I can't monitor every piece of code or infrastructure that my team writes or has. I need a solution that can monitor our infrastructure continuously and notify us of any misconfigurations or mistakes so that we can fix them before they become major problems.

We deployed Trend Vision One - Cloud Security 100 percent on the cloud and we use AWS and Azure.

I am satisfied with the protection that Trend Vision One - Cloud Security provides for our multi-cloud environment. I need a single pane of glass that will give me the information I need quickly and easily. I set up Trend Vision One - Cloud Security in one afternoon, which I have done before. With one person, it only takes a day or so. Now, it is so simple to get it into any cloud and give it a small permission set to go in there and read our infrastructure, and then get some valuable insights very quickly.

Trend Vision One - Cloud Security provides us with contextual data, which is especially useful when we are acquiring a company or when I take on a new role and need to quickly understand what they have. Trend Vision One - Cloud Security also helps me to quickly correlate information in the DevSec process, as it protects everything. There are three times when a security vulnerability can be caught: when we write the code, when we deploy the code, or when the code is running. If a vulnerability is not caught until the code is running, we probably made a mistake. We can then go back and look at the first two steps to see where we should have caught the issue. I am 100 percent satisfied with the context provided by Trend Vision One - Cloud Security.

Trend Vision One - Cloud Security protects my cloud workloads. If an attack gets past the first two layers, I still need a way to protect the endpoints, whether they're EC2 instances, virtual machines in Azure, or even on-premises servers. I need a single pane of glass to see all of my endpoints. And let's say there's a zero-day attack, something that no one knew about and couldn't have caught. With Workload Security, I don't need to patch it immediately, even if it's a Windows update. Workload Security can patch it for me and put security tools around it. So we use it for patching and filtering, as well as other security needs. It sits on our virtual machines and whatever cloud we use.

The biggest benefit of Trend Vision One - Cloud Security is its single pane of glass view. Other cloud providers, such as AWS and Azure, offer similar features, but they require multiple dashboards and reports. With Trend Vision One - Cloud Security, I have a single pane of glass view of my entire infrastructure. We also use Trend Vision One - Cloud Security for many security needs, including endpoint protection and Office 365 protection. This gives me a single vendor, a single pane of glass, and a single console to manage the security of all of my platforms.

Trend Vision One - Cloud Security gives us full visibility and control of our cloud environments.

When I am asked difficult questions, or when I am going through an audit or other process, I use its reporting and dashboarding capabilities to get all the information I need in one place. This saves me from having to correlate data from different sources, and it helps me to resolve audit and compliance workflows more quickly.

Visibility helps us resolve complexity in our environment by providing quick snapshots of an account. This is especially useful when I'm trying to get an overview of a new workload or a new company, as it allows us to take a snapshot of the environment to make it easier to ingest.

We buy our subscriptions through the marketplace because it's easier. I don't want to buy credits, because I can use the marketplace as needed. It also allows us to quickly bill the subscriptions to our existing account, so I don't have to set up another vendor or billing terms. I can just quickly use the marketplace, choose the subscriptions I want, and pay as I go. It's perfect.

Conformity would give me a good overview of what infrastructure we are using and where we can potentially save costs by emphasizing the infrastructure that we do not necessarily need.

Trend Vision One - Cloud Security protects me in the cloud, protects my registry, and protects my DevOps pipeline. It is not necessary for Trend Vision One - Cloud Security to protect all of these things. Additionally, Trend Vision in general also protects our Office 365 infrastructure, including SharePoint, Teams, and Outlook.

Protecting all the data across our environment is extremely important these days. No matter what industry we're in, it's crucial to understand our data security protocols, where our data is stored, how it's protected, and how it's accessed. This information gives us a single, overarching view of our data security posture, which helps us to identify and remediate misconfigurations and quickly respond to zero-day attacks or compromises. The sooner we know about a security incident, the fewer repercussions we're likely to experience.

We use Trend Vision One - Cloud Security to monitor our environment through its dashboard and take corrective action when issues are detected.

The primary challenge to our domain's security is the prevalence of spam and malicious emails. Users, often unaware of the sender's true identity, may inadvertently open these emails and expose the organization to harmful content, compromising its security. Trend Vision One - Cloud security aims to protect our assets, but the rapid spread of viruses and vulnerabilities through malicious emails remains a significant concern.

We are currently utilizing all three components of Trend Vision One across our entire infrastructure. Trend Vision One is deployed on our servers, provides anti-spam measures for our email through a cloud solution, and functions as an antivirus solution on end-user devices. All three products are sourced from Trend Micro.

Trend Vision One - Cloud Security offers centralized visibility across all protection layers, enabling 24/7 monitoring of our environment and immediate issue resolution. If needed, we can also submit a ticket to Trend Micro for assistance.

The executive dashboard helps identify abnormalities by highlighting them, allowing for immediate action.

The primary benefit of implementing Trend Vision One has been the noticeable increase in network security. Since its implementation, we have observed a significant reduction in attacks on our network.

Trend Vision One consolidates security across our network, enabling rapid response capabilities.

Trend Vision One helps decrease our threat detection and response time. The platform suggests system improvements as needed, which we then review and implement.

Trend Vision One helps decrease the time spent investigating false positives. 

We deploy Trend Vision One - Cloud Security on all systems as part of the standard package. When rolling out new devices, it allows me to monitor East-West traffic between our endpoints. Previously, I had no visibility into communication between Trend user A and end user B within the network. XDR now grants me this insight, while also sending alerts for suspicious activity. I can click on these alerts, investigate in Trend Vision One - Cloud Security, and visualize the communication flow in a user-friendly diagram. This helps me distinguish genuine threats from warnings or false positives. For example, one day I saw an alert indicating someone attempting to reinstall Chrome on a PC. Trend Vision One - Cloud Security confirmed this activity. Additionally, XDR enables me to directly block malicious attempts from the workbench.

Trend Vision One - Cloud Security operates entirely in the cloud, enabling remote access to user devices for necessary changes, virus removal, and patch implementation.

The biggest problem was that I couldn't see our East-West network traffic between our endpoints. However, I could see North-South traffic, meaning anything that went up to the firewall and back. This meant if, for example, a coworker and I were sending something malicious to each other, I wouldn't be able to see it or tell where it was coming from. I might get an alert saying suspicious activity was detected, but wouldn't have specific details. 
Implementing an XDR system changed this. Now, I can see all East-West traffic and set up rules for specific actions if certain events occur. I can also filter the information to focus on what's most important. Every day, I review XDR alerts, investigate them, and determine if they're suspicious or not.

We use Trend Vision One - Cloud Security across all our endpoints, including PCs, laptops, and servers. The coverage it provides is extremely important. We leverage Trend Vision's XDR capabilities for enhanced threat detection and response. Additionally, we utilize the Trend Vision One - Cloud Security app security solution. We have Trend Vision One - Cloud Security as a service, and I also manage TippingPoint. Our cybersecurity posture is significantly stronger than it was four years ago. Back then, we were hit by a ransomware attack, which exposed vulnerabilities in our security measures. We were only spending around eight thousand dollars annually on cybersecurity, and as the company grew rapidly, investments in cybersecurity weren't prioritized. While achieving absolute security is impossible, we are demonstrably more secure than ever before.

Trend Vision One - Cloud Security provides centralized visibility. Every day, I log into Vision One and the first thing I check is my risk score. Based on my score, I take action. For example, if my score jumps from 36 to 50, I investigate the change in Vision One. Vision One tells me what caused the increase and offers specific recommendations. I can then easily see what actions will reduce my risk. For example, I might see that fixing a specific vulnerability will lower my score by six points, but another fix won't help. Trend Vision One - Cloud Security is a powerful tool, and that's just a glimpse of its capabilities. It shows me my OS vulnerabilities, application vulnerabilities, and even critical business exposures. For example, it might alert me to an Adobe CBE and tell me which devices are affected. This allows me to quickly identify and patch vulnerable devices. Furthermore, I can directly initiate patching from Vision One. Additionally, I can use integrated products like Container Security for AWS to gain comprehensive security insights across different environments, all within the same platform.

Every day, I start by logging into the Executive Dashboard. It's the first thing I check, as it provides me with my risk index and a summary of potential issues. Furthermore, I can view information about our devices, risk levels, and other relevant data points. After reviewing the Executive Dashboard, I transition to the Operations Dashboard for a more granular look at individual devices and their associated risks.

Before XDR, I could spend hours trying to track down the issue behind an alert. Now, everything is at my fingertips within Vision One. I simply click on the link, and it gives me all the information I need: who the user is, the PC name, and relevant context depending on the alert type e.g., a suspicious email. So, instead of spending hours figuring out the source of the alert, I can now resolve it in just a couple of minutes.

With the managed XDR service, I have peace of mind knowing that if they find something suspicious, they will alert me immediately. They can even call me and say, "Hey, we found some unusual activity and stopped it. Do you want us to continue investigating or revert to the previous state?" I can then confidently say yes and trust that they are handling the situation effectively. I've received calls in the past late at night about suspicious activity, and I'm grateful that I don't have to be the one monitoring everything 24/7. Now, I have a team of experts who do it for me, providing a significant advantage over-relying on a single person. They only alert me when something serious arises, allowing me to focus on other matters.

The managed XDR service has freed up our team's time by eliminating the need for 24/7 on-call duty with Vision One. This allows us to focus on other tasks instead of spending hours diagnosing potential issues. Now, we're able to resolve concerns in minutes, freeing up additional time for projects and other responsibilities.

While I find the Attack Surface Risk Management module to be a valuable addition to the executive dashboard, I don't utilize the Attack Surface Discovery feature as frequently, maybe once a week. This is primarily because I rely on the XDR management system to monitor for potential threats and alert me to anything critical. Manually reviewing the detailed discovery overview doesn't add significant value at present, as I trust the XDR system to flag any urgent issues.

The Attack Surface Risk Management module helps to identify blind spots in our environment, especially where assets are highly exposed. It presents explainable CDZs and provides a rich asset score for each PC or device. This allows me to easily identify high-risk devices and investigate further. For example, when I saw a server with a suspicious file flagged as a 96 high-risk alert, I could investigate and find that it was an Excel file with a macro, explaining the risk. I can then determine if it's a false positive and communicate this appropriately. The module's continuous learning ensures improved accuracy over time.

Implementing the managed XDR has significantly reduced our time to detect and respond to threats. Previously, I received security alerts via email, which could be delayed. Additionally, I often needed to manually review logs and scan results, which was time-consuming and inefficient. Now, the managed XDR provides timely alerts directly in the platform, streamlining my workflow and keeping me informed promptly. This has saved me one to two hours per day.

Implementing a managed XDR solution has significantly reduced the number of false positives I encounter. This allows me to identify and address real issues much faster. Instead of spending 45 minutes tracking down potential threats, I can now simply click a link and determine if an alert is legitimate within three minutes.

We use playbooks that have certain rules and are set up to automatically take action when they find something suspicious. This way, I don't have to sit there and make judgment calls every single day. If a certain event occurs, or if we discover something unexpected, I can create a playbook to automatically start looking for it everywhere on the network.  

We use Cloud Security for workload and application security. The company also uses AWS Cloud Conformity. Cloud Security protects us from application-delivered attacks. The solution is protecting our private services, internal customers, and security account holders. 

Trend Vision One - Cloud Security is a core component of our security system, offering total visibility into everyday activities across our cloud environments. The solution has helped us to automate some things. We usually report high-severity issues to our customers, so they can investigate them manually, but our security team can fix these via automation in some cases.

The tool is doing most of the work from the security perspective. We only assess the results. We have Vision One. If anything appears on Vision One, we can act based on the workbench alerts. 

My organization uses Trend Vision One - Cloud Security and to get information based on business-critical applications running on the cloud environment. We get information on workload security, vulnerabilities, or third-party package issues. We also focus on configuration management changes that are suspicious.

Four teams in our organization use the tool across multiple regions. Since my team is an information security team, we have visibility into all the different teams and how they use it. We support the teams with alerts and issues. If an alert comes up, someone from my team will respond. If we need more information, we work with the team impacted because of the alert to understand the issue and do the remediation with them.

We implemented Trend Vision One - Cloud Security to enhance our security and visibility into different cloud networks, especially on AWS. We deal with different environments, storage, and S3 buckets. We wanted to ensure we have full visibility of file-based threats, network threats, and any misconfigurations we may have when a new environment is being spun out.

We can detect crypto mining easily, see what's going on, and block it. Lastly, we use the tool to focus on compliance because we need to stay compliant. The tool really helps drive our compliance information and deliver requirements to auditors and other regulatory organizations that need necessary information from us.

The biggest jump has been on the compliance side. We actively see the vulnerabilities, the third-party package issues, misconfigurations, and network threats. The solution is helping us get the information and do the remediation to achieve compliance. We do SOC 2 and PCI. We are able to drive our vulnerability management program well.

We use Trend Vision One - Cloud Security mostly for endpoint security. There are more things that we're going to get into, but we mostly use it right now for endpoint security.

Trend Vision One - Cloud Security addressed our organization's pain points related to cost and things related to it. The nicest experience with Trend Vision One - Cloud Security is that I haven't had any real issues, and it's doing its job effectively. People can access things as they want, and productivity is not impacted. Security and productivity are sometimes inversely related. If you have more security and authentication, you put employees through more steps, sometimes affecting their ability to do their jobs. I haven't had that concern with Trend Vision One - Cloud Security.

Our company has around 50 critical servers that need advanced security beyond our existing endpoint protection. We were looking for a dedicated server security solution that could protect against attacks specific to server operating systems and MITRE ATT&CK techniques, while also being lightweight so it wouldn't impact the performance of other applications running on the servers. Trend Micro Vision One - Cloud Security seemed to meet all these requirements.

Our previous security solution struggled to identify and resolve malware, leaving our production servers vulnerable. Frequent reboot requests, high memory usage, and increased BCP utilization choked system performance. To address these issues, we deployed Trend Micro Vision One - Cloud Security. This solution effectively protects against malware, ransomware, and other threats.

Our current security solution covers server protection, endpoint security with mobile device management capabilities on occasion, and some data loss prevention features. Everything enters our endpoint security followed by our server security, which includes our cloud environments.

Trend Cloud One simplifies data analysis by providing context, offers user-friendly management and features, and assists with web application security projects by identifying threats and suggesting solutions. This was especially helpful for our tight deadlines, allowing us to quickly find the right solution. The platform's modular design lets us choose and manage additional features from a single dashboard, like workload security which includes container security, file security, and open source security, all of which we plan to utilize in the near future.

Trend Cloud One provides security for all cloud workloads.

Trend Vision One simplifies security management by offering a unified platform. It streamlines log analysis, providing better visibility into the root cause of attacks. When an attack is blocked, the system pinpoints the origin, the internet to the on-premises server, and the triggered service. User-friendly logs and clear statistics further simplify security tasks.

It provides full visibility and control of our cloud environments.

While our organization doesn't currently have compliance requirements, Trend Vision One itself adheres to various US and Asian compliance standards. This future-proofs our implementation in case we need to comply with regulations down the road.

Trend Vision One's comprehensive visibility and control over our cloud environment frees us up for high-value projects. This is especially true for security experts, as most tasks are automated and the included, fully-managed XDR service significantly reduces the daily workload required to manage our entire security portfolio and respond to threats.

Cloud One provides a full view of our cloud environment, including cloud security posture, overall architecture, and visibility down to the container level. This unified view helps identify and fix misconfigurations. It achieves this by combining Cloud Security Posture Management capabilities with Container Native Application Protection functionalities. The CNAP features provide a dashboard highlighting configuration issues and their compliance implications with regulations like GDPR, HIPAA, NIST, and PCI DSS. This allows us to ensure our cloud configurations are aligned with relevant compliance standards.

Trend Vision One - Cloud Security helps protect all data in the Cloud and on-premises.

We are mostly using it for cloud workload security, that is endpoint and workload security.

Recently, it has helped in reducing costs. When we go through AWS Marketplace, it's a great benefit. It has saved us between $1,000 and $3,000 per month.