Trend Vision One Reviews

Name: Trend Vision One
Brand: Trend Micro
Rating: 4 (58 reviews)

Vendor: Trend Micro

4.3 out of 5

58 reviews
96% willing to recommend

222 followers

Post review

What is Trend Vision One?

The Trend Micro Vision One platform is designed to extend threat detection and response across an organization's digital landscape. It is crafted to deliver advanced threat intelligence, using a layered approach to protect against a wide range of cyber threats.

Get the Trend Vision One Buyer's Guide and find out what your peers are saying about Trend Vision One, CrowdStrike Falcon, Microsoft Defender for Endpoint and more!

Trend Vision One is the #2 ranked solution in top Attack Surface Management (ASM) solutions, #3 ranked solution in top Network Detection and Response (NDR) solutions, #4 ranked solution in EDR tools, and #6 ranked solution in XDR Security products. PeerSpot users give Trend Vision One an average rating of 8.6 out of 10. Based on the analysis of the 58 most recent Trend Vision One reviews, the overall sentiment is positive, with a sentiment score of 7.8. (Among the highest in the category). Trend Vision One is most commonly compared to CrowdStrike Falcon: Trend Vision One vs CrowdStrike Falcon. Trend Vision One is popular among the midsize enterprise segment, accounting for 37% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a educational organization, accounting for 29% of all views.

Helped 814,649 peers since 2012

Featured reviews

Matthew Guzzi

Information Systems Administrator at a government with 10,001+ employees

The dashboard provides great visibility into our risk profile. We receive a daily email report that outlines our risk score and identifies the machines with the highest risk. This information is based on usage patterns, vulnerabilities, and non-compliance issues. This helps us prioritize which machines require patching or further investigation. Drilling down further, we can analyze how our users are utilizing their workstations, including the websites they visit. While we don't track specific website URLs, we can categorize website types and identify any potentially risky or inappropriate usage patterns. This allows us to proactively address any potential security concerns. For instance, we identified a user who was using ChatGPT for work-related tasks. This flagged our system, and we were able to discuss the user's usage of ChatGPT to gain a better understanding of how our users are working and identify any areas that require additional attention.

Read full review

Jasneet Singh

Cloud Security Engineer at a healthcare company with 5,001-10,000 employees

For our day-to-day use cases, the correlation and attribution of different alerts are valuable. It is sort of an SIEM, but it is intelligent enough to run the queries and intentionally detect and prioritize attacks for you. At the end of the day, it is different data that you see. It correlates data for you and makes it meaningful. You can see that someone got an email and clicked a link. That link downloaded, for example, malware into the memory of the machine. From there, you can see that they started moving laterally to your environment. I quite like it because it gives visibility, so Workbench is what we use every day. They also have something called virtual patching. If you have end-of-life systems or systems that are out of support, you cannot upgrade the agent, but you can still do the update if you get the signature. This is the feature I like. For example, today, if a new zero-day threat is out with a link vulnerability where attackers send you a link, and that link, even if opened in the preview mode, can basically execute a malicious code, we just cannot patch within four or five hours. We are a midsized organization. We are fairly big, and sometimes, it takes two days or even a week. With virtual patches being there and XDR with all that information connected, we can see that the virtual patch is working. It is there. We have all the mitigation in place, but then it is also detecting the environment for that threat. We can further write the hunting queries and enhance detections. So, Workbench detections and virtual patching are very helpful. It also gives us an executive dashboard where we are monitoring our external sites. We can see what ports are open and what known vulnerabilities are being scanned on them. We get visibility and better mean time to respond and act. The user interface is pretty easy to use. Sometimes, you learn it while you play around with it and you set it up. One thing I do like, which is very good, is that you can pivot from within the console to different sections if you know how to go about it, but if you have not used it, it could take a bit of learning. A good thing that Trend Micro has been doing for the last two years is organizing some sort of CDFs, which are scenarios based on real threat actors. They get you to come to those events. It is gamified so they can attract people. If you want to learn, they would show the event ID that came in and where to go and see that event ID. They show you how to hunt based on that event and how to extract the indicators of compromise from that ID. There is a feature called Suspicious Object. They show you how to block one. If you have a suspicious object linked to a threat intel feed that goes to Palo Alto, you can not only block it in XDR or Vision One, but straightaway, it also gets pushed to your firewall, so your firewall is also blocking it now. There are some cool functionalities, but you need to spend time to understand how you would pivot between different subsections. If someone is new and starting, it is still pretty straightforward. The UI interface is very self-explanatory. There are a lot of details. There is a lot of telemetry added to it for you to see and understand. It is not that complicated. If you have a bit of a cybersecurity background, you should be able to pick it up pretty straight. They are constantly updating it, which is a good as well as not-so-good thing. There is an update every few weeks. They are very good updates. I quite like it that they have such an agile development. They listen to their customer's feedback, and they are constantly investing in the product. They do not give you an off-the-shelf product. The world is changing, and the attacks are changing. It is kept up to date.

Read full review

Frank Bunton

Chief Information Security Officer at a healthcare company with 5,001-10,000 employees

Their toolset integrates well with our existing infrastructure. It integrates well with our AT&T AlienVault SIEM. Another piece that makes Trend Micro kind of unique—and I could see where they might have had a problem kicking the whole thing off—is that they were one of the companies, early on, that spent a lot of time integrating their toolsets, and I was really impressed with that. That meant the endpoint management system could reach out to the Deep Discovery system on the network and pick up something that it perceived as a suspicious object. It could then sandbox it and monitor it. If that suspicious entity reached out for command and control or did something nefarious, the endpoints would be alerted and would start getting rid of the problem. The issue this addresses—and it's one of the most important issues—is that you really have to consider automation and be conscious of it. Because when the stuff hits the fan, you're not necessarily fast enough, as a human being, to get everything done the way it needs to get done—and document the process. You might not think about that last piece so much when you start doing security engineering. But when you get into a big healthcare company like ours, there are audits going on all the time. The auditors will want to pick out two or three events that you've dealt with and say, "We want to see the audit trail," et cetera. As a result, there are advantages to the integration of Trend Micro's disparate toolsets. Trend Micro has worked very hard on making their toolsets, like IPS, Deep Discovery, Deep Security, et cetera, talk to each other and work together. And they're still doing it today. They have made their IPS an application rather than an appliance. You install it on the endpoint, which is a server in your data center, and it will actually configure it to a minimal standard. That means the applications and the version of the operating system you're running, right down to the colonel version, get only the tools installed that are needed for that particular instance. They minimize the installation because they don't want you looking for bugs and indicators of compromise that you're not in a position to experience because you're using an operating system that isn't vulnerable to them. That gets rid of a lot of overhead when it comes to server management. They keep in mind that these are servers that have a job to do. They're not just desktops, and if they're eating up a lot of the CPU, that's bad for us because we're out to do business and make money. We've never had a problem with them. It's really reliable, once you get it set up.

Read full review

Valuable Features

Trend Vision One's standout features include centralized visibility, effective endpoint and network protection, and integration capabilities. Users appreciate its advanced threat detection, attack surface management, and risk assessment capabilities. It offers comprehensive security, leveraging machine learning and telemetry for enhanced insights. The intuitive interface and AI automation simplify management, while its proactive security measures help efficiently reduce false positives and response times, making it a robust choice for improving security posture.

"I love everything about the solution, especially the XDR features, the attack surface management, and the workbench alerts. It oversees vulnerabilities among the system and devices, prioritizing areas that need patching."
"The workbench alerts provide valuable insights into attack chains and relevant information, while Observer techniques give a comprehensive overview of ongoing activities."
"Its threat intelligence sources enable it to automatically block domains known for command-and-control callbacks, effectively preventing attacks from those sources."

Room for Improvement

Improvements are needed in Trend Vision One's reporting functionality, integration with other tools, and user interface, which can be complex and require better organization. Users suggest enhancing support and technical documentation. They also see a need for more third-party integrations, streamlined deployment processes, and faster response times. There are requests for more advanced automation, customization features, and increased compatibility with various platforms. Enhancing the system's AI capabilities and threat detection efficiency could provide additional benefits.

"There are limitations in terms of threat response actions."
"Trend Vision One requires several enhancements for optimal performance."
"The reports lack detail and customization options, particularly for XDR, which hinders our ability to provide tailored reports to clients."

ROI

Users noted that the ROI from Trend Vision One was largely positive. The tool's cost-effectiveness balanced with its features, and automation integration allowed efficient resource use. Hours saved on labor and effective protection against threats contributed to returns. Organizations experienced reduced incidents and mitigated potential attacks, seeing savings in both operational and security costs. Some found it hard to quantify ROI directly, while others acknowledged substantial returns from time and resource savings.

Pricing

Enterprise buyers shared mixed experiences with Trend Vision One's pricing, often noting it as reasonable for its features but occasionally costly. Many highlighted a shift to a credit-based system, adding complexity but aligning costs with specific needs. Buyers appreciated Trend Micro's competitive pricing compared to peers like CrowdStrike. While some noted modular features could add costs, flexibility in pricing negotiations was commended. Overall, Trend Vision One is seen as cost-effective but not necessarily cheap.

"I find it to be a cost-efficient platform."
"Trend Micro's licensing is outsourced to third-party vendors, resulting in price variations depending on the vendor."
"While the pricing and licensing for Trend Vision One are generally acceptable, the need to purchase additional features separately adds complexity."

Popular Use Cases

Trend Vision One provides endpoint detection, security monitoring, and incident response. Users utilize it for ransomware protection, antivirus enhancements, and comprehensive threat visibility across cloud and on-premises environments. Employing AI and ML, it detects and analyzes threats, integrates with email and networks, and allows deployment flexibility. Organizations appreciate its centralized dashboard, hybrid deployment, and automated response features for managing thousands of endpoints and securing user activities effectively.

Service and Support

Trend Vision One customer service and support receive mixed feedback. Many find technical support responsive, knowledgeable, and helpful, often resolving issues swiftly. Some note improvements in newer updates and appreciate biweekly and monthly meetings. However, others encounter delayed responses, complex resolution processes, and occasional communication gaps. Satisfaction varies, with ratings mostly high, though some users believe there’s room for improvement in response time and problem-solving, especially for complex environments.

Deployment

Users described Trend Vision One's initial setup as generally straightforward, especially with cloud deployment, though hybrid environments increased complexity. Some needed external assistance, but many managed it internally with small teams. Deployment time varied based on organization size and endpoint quantity. Despite initial challenges like migration and learning curves, maintenance was often outsourced, reducing burden. Users highlighted Trend Vision One's user-friendly nature and the simplicity of deploying agents with minimal resource usage.

Scalability

Trend Vision One is highly scalable, accommodating various company sizes. Organizations find expanding capabilities straightforward, often citing ease of adding users and integrations. Many appreciate the cloud-based model and customizable options. Some mention resource usage concerns compared to previous years, but overall, it meets growing demands. Feedback indicates strong adaptability and satisfactory scaling rates, achieving seamless integration across diverse assets and environments. Many rate its scalability between eight to ten, reflecting their positive experiences.

Stability

Trend Vision One is described as stable, with no significant crashes or bugs encountered by users. Many rate its stability between eight to ten out of ten. Users appreciate its compatibility and performance, even with extensive use and updates. While some minor glitches have been reported, such occurrences are rare. Trend Vision One is considered reliable in various environments, supported by positive experiences in uptime and seamless integration with other security measures.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Trend Vision One Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Educational Organization

29%

Computer Software Company

18%

Financial Services Firm

Healthcare Company

Manufacturing Company

Government

Comms Service Provider

Construction Company

Insurance Company

Retailer

University

Real Estate/Law Firm

Hospitality Company

Media Company

Wholesaler/Distributor

Non Profit

Energy/Utilities Company

Legal Firm

Engineering Company

Transportation Company

Outsourcing Company

Performing Arts

Pharma/Biotech Company

Recreational Facilities/Services Company

Compare Trend Vision One with alternative products

Learn more about Trend Vision One

Trend Micro Vision One excels in integrating multiple security layers into a unified platform. It provides real-time visibility into an organization’s security posture, facilitating rapid detection, investigation, and response to threats. The platform includes features like endpoint security, email security, and network security, all managed through a centralized console. It leverages advanced analytics to help security teams prioritize and respond to the most critical threats more efficiently.

What are the key features of Trend Micro Vision One?

Threat Detection and Response: Automatically detects and responds to threats using integrated security layers.
Risk Visibility: Offers clear insights into the security posture and risk levels with detailed dashboards.
Security Posture Management: Helps manage and adjust the security stance with strategic guidance and compliance tracking.

Benefits to Look For:

Efficiency in Threat Management: Streamlines operations by reducing the number of security alerts and the time required to resolve them.
Enhanced Detection Capabilities: Uses advanced analytics to uncover hidden and sophisticated threats.
Proactive Threat Hunting: Provides tools for security teams to proactively search for potential threats before they manifest into breaches.

Trend Micro Vision One is flexible in deployment options, supporting environments like AWS, where it can be integrated to protect cloud workloads, manage compliance, and secure data transfers. This adaptability makes it suitable for a variety of use cases, including protecting against data breaches in multi-cloud environments, securing remote workforces, and maintaining compliance in highly regulated industries such as finance and healthcare.

Trend Micro Vision One is extensively implemented across sectors where data security is paramount, such as financial services, healthcare, and government. Organizations in these industries benefit from its comprehensive threat analysis, minimizing the risk of data breaches and enabling a robust defense against advanced persistent threats and ransomware.

In essence, Trend Micro Vision One is a sophisticated, AI-driven security solution that offers comprehensive protection and enhanced threat intelligence capabilities, making it ideal for enterprises looking to bolster their cybersecurity defenses.

Trend Vision One was previously known as Trend Micro XDR, Trend Micro XDR for Users, Trend Vision One - XDR for Networks.