Trend Vision One Reviews

Name: Trend Vision One
Brand: Trend Micro
Rating: 4.3 (59 reviews)

Vendor: Trend Micro

4.3 out of 5

59 reviews
96% willing to recommend

229 followers

Post review

What is Trend Vision One?

The Trend Micro Vision One platform is designed to extend threat detection and response across an organization's digital landscape. It is crafted to deliver advanced threat intelligence, using a layered approach to protect against a wide range of cyber threats.

Get the Trend Vision One Buyer's Guide and find out what your peers are saying about Trend Vision One, CrowdStrike Falcon, Microsoft Defender for Endpoint and more!

Trend Vision One is the #2 ranked solution in top Attack Surface Management (ASM) solutions, #3 ranked solution in top Network Detection and Response (NDR) solutions, #4 ranked solution in EDR tools, and #6 ranked solution in XDR Security products. PeerSpot users give Trend Vision One an average rating of 8.6 out of 10. Based on the analysis of the 59 most recent Trend Vision One reviews, the overall sentiment is positive, with a sentiment score of 7.4. Trend Vision One is most commonly compared to CrowdStrike Falcon: Trend Vision One vs CrowdStrike Falcon. Trend Vision One is popular among the midsize enterprise segment, accounting for 37% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a educational organization, accounting for 29% of all views.

Helped 816,406 peers since 2012

Featured reviews

Matthew Guzzi

Information Systems Administrator at a government with 10,001+ employees

The dashboard provides great visibility into our risk profile. We receive a daily email report that outlines our risk score and identifies the machines with the highest risk. This information is based on usage patterns, vulnerabilities, and non-compliance issues. This helps us prioritize which machines require patching or further investigation. Drilling down further, we can analyze how our users are utilizing their workstations, including the websites they visit. While we don't track specific website URLs, we can categorize website types and identify any potentially risky or inappropriate usage patterns. This allows us to proactively address any potential security concerns. For instance, we identified a user who was using ChatGPT for work-related tasks. This flagged our system, and we were able to discuss the user's usage of ChatGPT to gain a better understanding of how our users are working and identify any areas that require additional attention.

Read full review

Jasneet Singh

Cloud Security Engineer at a healthcare company with 5,001-10,000 employees

For our day-to-day use cases, the correlation and attribution of different alerts are valuable. It is sort of an SIEM, but it is intelligent enough to run the queries and intentionally detect and prioritize attacks for you. At the end of the day, it is different data that you see. It correlates data for you and makes it meaningful. You can see that someone got an email and clicked a link. That link downloaded, for example, malware into the memory of the machine. From there, you can see that they started moving laterally to your environment. I quite like it because it gives visibility, so Workbench is what we use every day. They also have something called virtual patching. If you have end-of-life systems or systems that are out of support, you cannot upgrade the agent, but you can still do the update if you get the signature. This is the feature I like. For example, today, if a new zero-day threat is out with a link vulnerability where attackers send you a link, and that link, even if opened in the preview mode, can basically execute a malicious code, we just cannot patch within four or five hours. We are a midsized organization. We are fairly big, and sometimes, it takes two days or even a week. With virtual patches being there and XDR with all that information connected, we can see that the virtual patch is working. It is there. We have all the mitigation in place, but then it is also detecting the environment for that threat. We can further write the hunting queries and enhance detections. So, Workbench detections and virtual patching are very helpful. It also gives us an executive dashboard where we are monitoring our external sites. We can see what ports are open and what known vulnerabilities are being scanned on them. We get visibility and better mean time to respond and act. The user interface is pretty easy to use. Sometimes, you learn it while you play around with it and you set it up. One thing I do like, which is very good, is that you can pivot from within the console to different sections if you know how to go about it, but if you have not used it, it could take a bit of learning. A good thing that Trend Micro has been doing for the last two years is organizing some sort of CDFs, which are scenarios based on real threat actors. They get you to come to those events. It is gamified so they can attract people. If you want to learn, they would show the event ID that came in and where to go and see that event ID. They show you how to hunt based on that event and how to extract the indicators of compromise from that ID. There is a feature called Suspicious Object. They show you how to block one. If you have a suspicious object linked to a threat intel feed that goes to Palo Alto, you can not only block it in XDR or Vision One, but straightaway, it also gets pushed to your firewall, so your firewall is also blocking it now. There are some cool functionalities, but you need to spend time to understand how you would pivot between different subsections. If someone is new and starting, it is still pretty straightforward. The UI interface is very self-explanatory. There are a lot of details. There is a lot of telemetry added to it for you to see and understand. It is not that complicated. If you have a bit of a cybersecurity background, you should be able to pick it up pretty straight. They are constantly updating it, which is a good as well as not-so-good thing. There is an update every few weeks. They are very good updates. I quite like it that they have such an agile development. They listen to their customer's feedback, and they are constantly investing in the product. They do not give you an off-the-shelf product. The world is changing, and the attacks are changing. It is kept up to date.

Read full review

Frank Bunton

Chief Information Security Officer at a healthcare company with 5,001-10,000 employees

Their toolset integrates well with our existing infrastructure. It integrates well with our AT&T AlienVault SIEM. Another piece that makes Trend Micro kind of unique—and I could see where they might have had a problem kicking the whole thing off—is that they were one of the companies, early on, that spent a lot of time integrating their toolsets, and I was really impressed with that. That meant the endpoint management system could reach out to the Deep Discovery system on the network and pick up something that it perceived as a suspicious object. It could then sandbox it and monitor it. If that suspicious entity reached out for command and control or did something nefarious, the endpoints would be alerted and would start getting rid of the problem. The issue this addresses—and it's one of the most important issues—is that you really have to consider automation and be conscious of it. Because when the stuff hits the fan, you're not necessarily fast enough, as a human being, to get everything done the way it needs to get done—and document the process. You might not think about that last piece so much when you start doing security engineering. But when you get into a big healthcare company like ours, there are audits going on all the time. The auditors will want to pick out two or three events that you've dealt with and say, "We want to see the audit trail," et cetera. As a result, there are advantages to the integration of Trend Micro's disparate toolsets. Trend Micro has worked very hard on making their toolsets, like IPS, Deep Discovery, Deep Security, et cetera, talk to each other and work together. And they're still doing it today. They have made their IPS an application rather than an appliance. You install it on the endpoint, which is a server in your data center, and it will actually configure it to a minimal standard. That means the applications and the version of the operating system you're running, right down to the colonel version, get only the tools installed that are needed for that particular instance. They minimize the installation because they don't want you looking for bugs and indicators of compromise that you're not in a position to experience because you're using an operating system that isn't vulnerable to them. That gets rid of a lot of overhead when it comes to server management. They keep in mind that these are servers that have a job to do. They're not just desktops, and if they're eating up a lot of the CPU, that's bad for us because we're out to do business and make money. We've never had a problem with them. It's really reliable, once you get it set up.

Read full review

Valuable Features

Trend Vision One is praised for endpoint features, tracking attacks, high detection rate, centralized visibility, and integration capabilities. Users appreciate its workbench engine, real-time monitoring, and AI for automation. Telemetry data, executive dashboards, and attack surface management enhance threat detection. Stability, scalability, and user-friendly setup are additional highlights. It offers reduced false positives, quick threat response, and valuable security playbooks.

"Overall, I rate Trend Vision One a ten out of ten as I am extremely happy with Trend Micro's capabilities and their platform's strength."
"Trend Vision One's most valuable feature is its centralized console, which provides comprehensive security features, including attack surface risk management."
"I love everything about the solution, especially the XDR features, the attack surface management, and the workbench alerts. It oversees vulnerabilities among the system and devices, prioritizing areas that need patching."

Room for Improvement

Trend Vision One requires improvements in reporting, third-party integration, and technical support. Users desire better user-friendliness and a more streamlined deployment process. The platform needs enhancements in automation features, interface design, and performance. Users also seek advancements in security capabilities, including expanded operating system support and threat detection. Improved alert visibility, reduced support response times, increased AI utilization, and enhanced flexibility for endpoint management are essential. Cost-effectiveness and documentation consistency are also areas needing attention.

"To improve support, the company should streamline communication and reduce response times."
"Expanding compatibility to include currently unsupported security tools, such as firewalls, would be beneficial."
"There are limitations in terms of threat response actions."

ROI

Trend Vision One provided justified cost-to-feature ratios, offering significant ransomware protection and automation benefits. Companies observed efficient resource utilization and labor cost reductions and noted the control of malware attacks, intercepting threats before escalation. Users reported saving time and resources, appreciating incident detection that prevented costly attacks. Some found quantifying ROI difficult, while others saw substantial reductions in operational and security costs. Overall, reports varied, with some expressing uncertainty about direct financial gains.

Pricing

Trend Vision One's pricing is perceived as competitive and reasonable for enterprise buyers. Users highlight that the cost aligns with the extensive features offered, although some note it's less affordable for smaller organizations. The licensing is typically annual, with subscription-based models. Recent changes to a credit system have introduced some complexity, yet provide flexibility. Many appreciate Trend Micro's negotiation skills, maintaining that while the product isn't the cheapest, its value justifies the expense.

"I find it to be a cost-efficient platform."
"Trend Micro's licensing is outsourced to third-party vendors, resulting in price variations depending on the vendor."
"While the pricing and licensing for Trend Vision One are generally acceptable, the need to purchase additional features separately adds complexity."

Popular Use Cases

Trend Vision One is primarily used for XDR, endpoint protection, and incident response, providing enhanced security capabilities. It offers endpoint detection and response, threat investigation, and real-time analysis, helping organizations improve visibility and response times. Trend Vision One integrates with cloud and email systems for comprehensive security management and centralized monitoring, enabling organizations to address vulnerabilities, automate response actions, and streamline workflows. It supports large-scale networks and complex environments, offering advanced protection against ransomware and other malicious threats.

Service and Support

Trend Vision One's customer service and support receive mixed feedback. While many find their technical support responsive, fast, and knowledgeable, some highlight issues with delays and lack of understanding in complex cases. Trend Micro's team is praised for proactive communication, regular meetings, and willingness to implement user suggestions. However, improvements are needed in streamlining communication and ensuring faster resolution times. Despite challenges, many users rate their support highly, appreciating their cooperative nature and engagement.

Deployment

Many users found Trend Vision One's initial setup straightforward and easy, with some praising its user-friendly design. It can be deployed quickly, sometimes within a week. Larger deployments might encounter complexity, particularly with on-prem to cloud migration. Organizations appreciate the supportive role of vendors and engineers during setup. Although some mentioned a need for multiple team members, others found it manageable by a few individuals, highlighting the importance of collaboration for effective deployment.

Scalability

Trend Vision One is highly scalable, enabling organizations to expand effortlessly. Its flexibility supports a range of company sizes, from small to large enterprises. Users appreciate its ease of deployment and adaptability, with no significant issues reported during scaling. The cloud-based model facilitates this process, accommodating various needs and environments. Many users rate its scalability very positively, highlighting its capability to handle increased workloads and diverse client requirements efficiently.

Stability

Trend Vision One is considered highly stable, with users frequently complimenting its reliability. Many highlight that it does not crash or freeze. While some encountered minor bugs or compatibility issues, these are typically resolved with support. The platform is praised for being dependable, with many giving high stability ratings. Users mention occasional memory-related incidents, but overall, the experience has been positive with minimal disruptions, particularly in environments with demanding workloads.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Trend Vision One Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Educational Organization

29%

Computer Software Company

18%

Financial Services Firm

Healthcare Company

Manufacturing Company

Government

Comms Service Provider

Insurance Company

Construction Company

Retailer

University

Real Estate/Law Firm

Hospitality Company

Media Company

Non Profit

Wholesaler/Distributor

Energy/Utilities Company

Legal Firm

Engineering Company

Transportation Company

Outsourcing Company

Performing Arts

Pharma/Biotech Company

Recreational Facilities/Services Company

Compare Trend Vision One with alternative products

Learn more about Trend Vision One

Trend Micro Vision One excels in integrating multiple security layers into a unified platform. It provides real-time visibility into an organization’s security posture, facilitating rapid detection, investigation, and response to threats. The platform includes features like endpoint security, email security, and network security, all managed through a centralized console. It leverages advanced analytics to help security teams prioritize and respond to the most critical threats more efficiently.

What are the key features of Trend Micro Vision One?

Threat Detection and Response: Automatically detects and responds to threats using integrated security layers.
Risk Visibility: Offers clear insights into the security posture and risk levels with detailed dashboards.
Security Posture Management: Helps manage and adjust the security stance with strategic guidance and compliance tracking.

Benefits to Look For:

Efficiency in Threat Management: Streamlines operations by reducing the number of security alerts and the time required to resolve them.
Enhanced Detection Capabilities: Uses advanced analytics to uncover hidden and sophisticated threats.
Proactive Threat Hunting: Provides tools for security teams to proactively search for potential threats before they manifest into breaches.

Trend Micro Vision One is flexible in deployment options, supporting environments like AWS, where it can be integrated to protect cloud workloads, manage compliance, and secure data transfers. This adaptability makes it suitable for a variety of use cases, including protecting against data breaches in multi-cloud environments, securing remote workforces, and maintaining compliance in highly regulated industries such as finance and healthcare.

Trend Micro Vision One is extensively implemented across sectors where data security is paramount, such as financial services, healthcare, and government. Organizations in these industries benefit from its comprehensive threat analysis, minimizing the risk of data breaches and enabling a robust defense against advanced persistent threats and ransomware.

In essence, Trend Micro Vision One is a sophisticated, AI-driven security solution that offers comprehensive protection and enhanced threat intelligence capabilities, making it ideal for enterprises looking to bolster their cybersecurity defenses.

Trend Vision One was previously known as Trend Micro XDR, Trend Micro XDR for Users, Trend Vision One - XDR for Networks.