Trend Vision One Reviews

Name: Trend Vision One
Brand: Trend Micro
Rating: 4.3 (64 reviews)

Vendor: Trend Micro

4.3 out of 5

64 reviews
96% willing to recommend

230 followers

Post review

What is Trend Vision One?

The Trend Micro Vision One platform is designed to extend threat detection and response across an organization's digital landscape. It is crafted to deliver advanced threat intelligence, using a layered approach to protect against a wide range of cyber threats.

Get the Trend Vision One Buyer's Guide and find out what your peers are saying about Trend Vision One, CrowdStrike Falcon, Microsoft Defender for Endpoint and more!

Trend Vision One is the #2 ranked solution in top Attack Surface Management (ASM) solutions, #3 ranked solution in top Network Detection and Response (NDR) solutions, #4 ranked solution in EDR tools, and #6 ranked solution in XDR Security products. PeerSpot users give Trend Vision One an average rating of 8.6 out of 10. Based on the analysis of the 64 most recent Trend Vision One reviews, the overall sentiment is positive, with a sentiment score of 7.4. Trend Vision One is most commonly compared to CrowdStrike Falcon: Trend Vision One vs CrowdStrike Falcon. Trend Vision One is popular among the midsize enterprise segment, accounting for 37% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a educational organization, accounting for 29% of all views.

Helped 816,660 peers since 2012

Featured reviews

Matthew Guzzi

Information Systems Administrator at a government with 10,001+ employees

The dashboard provides great visibility into our risk profile. We receive a daily email report that outlines our risk score and identifies the machines with the highest risk. This information is based on usage patterns, vulnerabilities, and non-compliance issues. This helps us prioritize which machines require patching or further investigation. Drilling down further, we can analyze how our users are utilizing their workstations, including the websites they visit. While we don't track specific website URLs, we can categorize website types and identify any potentially risky or inappropriate usage patterns. This allows us to proactively address any potential security concerns. For instance, we identified a user who was using ChatGPT for work-related tasks. This flagged our system, and we were able to discuss the user's usage of ChatGPT to gain a better understanding of how our users are working and identify any areas that require additional attention.

Read full review

Jasneet Singh

Cloud Security Engineer at a healthcare company with 5,001-10,000 employees

For our day-to-day use cases, the correlation and attribution of different alerts are valuable. It is sort of an SIEM, but it is intelligent enough to run the queries and intentionally detect and prioritize attacks for you. At the end of the day, it is different data that you see. It correlates data for you and makes it meaningful. You can see that someone got an email and clicked a link. That link downloaded, for example, malware into the memory of the machine. From there, you can see that they started moving laterally to your environment. I quite like it because it gives visibility, so Workbench is what we use every day. They also have something called virtual patching. If you have end-of-life systems or systems that are out of support, you cannot upgrade the agent, but you can still do the update if you get the signature. This is the feature I like. For example, today, if a new zero-day threat is out with a link vulnerability where attackers send you a link, and that link, even if opened in the preview mode, can basically execute a malicious code, we just cannot patch within four or five hours. We are a midsized organization. We are fairly big, and sometimes, it takes two days or even a week. With virtual patches being there and XDR with all that information connected, we can see that the virtual patch is working. It is there. We have all the mitigation in place, but then it is also detecting the environment for that threat. We can further write the hunting queries and enhance detections. So, Workbench detections and virtual patching are very helpful. It also gives us an executive dashboard where we are monitoring our external sites. We can see what ports are open and what known vulnerabilities are being scanned on them. We get visibility and better mean time to respond and act. The user interface is pretty easy to use. Sometimes, you learn it while you play around with it and you set it up. One thing I do like, which is very good, is that you can pivot from within the console to different sections if you know how to go about it, but if you have not used it, it could take a bit of learning. A good thing that Trend Micro has been doing for the last two years is organizing some sort of CDFs, which are scenarios based on real threat actors. They get you to come to those events. It is gamified so they can attract people. If you want to learn, they would show the event ID that came in and where to go and see that event ID. They show you how to hunt based on that event and how to extract the indicators of compromise from that ID. There is a feature called Suspicious Object. They show you how to block one. If you have a suspicious object linked to a threat intel feed that goes to Palo Alto, you can not only block it in XDR or Vision One, but straightaway, it also gets pushed to your firewall, so your firewall is also blocking it now. There are some cool functionalities, but you need to spend time to understand how you would pivot between different subsections. If someone is new and starting, it is still pretty straightforward. The UI interface is very self-explanatory. There are a lot of details. There is a lot of telemetry added to it for you to see and understand. It is not that complicated. If you have a bit of a cybersecurity background, you should be able to pick it up pretty straight. They are constantly updating it, which is a good as well as not-so-good thing. There is an update every few weeks. They are very good updates. I quite like it that they have such an agile development. They listen to their customer's feedback, and they are constantly investing in the product. They do not give you an off-the-shelf product. The world is changing, and the attacks are changing. It is kept up to date.

Read full review

Frank Bunton

Chief Information Security Officer at a healthcare company with 5,001-10,000 employees

Their toolset integrates well with our existing infrastructure. It integrates well with our AT&T AlienVault SIEM. Another piece that makes Trend Micro kind of unique—and I could see where they might have had a problem kicking the whole thing off—is that they were one of the companies, early on, that spent a lot of time integrating their toolsets, and I was really impressed with that. That meant the endpoint management system could reach out to the Deep Discovery system on the network and pick up something that it perceived as a suspicious object. It could then sandbox it and monitor it. If that suspicious entity reached out for command and control or did something nefarious, the endpoints would be alerted and would start getting rid of the problem. The issue this addresses—and it's one of the most important issues—is that you really have to consider automation and be conscious of it. Because when the stuff hits the fan, you're not necessarily fast enough, as a human being, to get everything done the way it needs to get done—and document the process. You might not think about that last piece so much when you start doing security engineering. But when you get into a big healthcare company like ours, there are audits going on all the time. The auditors will want to pick out two or three events that you've dealt with and say, "We want to see the audit trail," et cetera. As a result, there are advantages to the integration of Trend Micro's disparate toolsets. Trend Micro has worked very hard on making their toolsets, like IPS, Deep Discovery, Deep Security, et cetera, talk to each other and work together. And they're still doing it today. They have made their IPS an application rather than an appliance. You install it on the endpoint, which is a server in your data center, and it will actually configure it to a minimal standard. That means the applications and the version of the operating system you're running, right down to the colonel version, get only the tools installed that are needed for that particular instance. They minimize the installation because they don't want you looking for bugs and indicators of compromise that you're not in a position to experience because you're using an operating system that isn't vulnerable to them. That gets rid of a lot of overhead when it comes to server management. They keep in mind that these are servers that have a job to do. They're not just desktops, and if they're eating up a lot of the CPU, that's bad for us because we're out to do business and make money. We've never had a problem with them. It's really reliable, once you get it set up.

Read full review

Valuable Features

Trend Vision One excels with its centralized visibility through a comprehensive dashboard. Detection capabilities extend from endpoint to network, enhancing threat hunting and response times. Features include attack surface management, behavior analytics, and XDR. Users value its scalability, integration with third-party tools, and affordability. The platform's AI capabilities and real-time monitoring improve efficiency, while centralized management simplifies operations and enhances security posture. It offers a holistic view, reducing investigation time for attacks and false positives.

"Trend Vision One provides centralized visibility and management across protection layers, which is crucial for compliance."
"I would definitely recommend Trend Vision One to others."
"The best part is the XDR threat investigation, which includes different modules like Observer Attack Techniques, Workbench, and Detection Model Manager."

Room for Improvement

Trend Vision One requires enhancements in reporting, compatibility with other products, and integration capabilities. Users highlight the need for a more streamlined and user-friendly interface. They seek improved technical support and quicker incident response. The system's complexity and learning curve are problematic, while false positives and limited automation present challenges. There's demand for better documentation, advanced AI integration, and flexibility in configuring and managing settings. Enhancements in mobile security, threat intelligence reports, and network integration are also needed.

"Vision One could improve its area networking and email security."
"For XDR threat investigation, there is not enough documentation about how to search for different keywords."
"For XDR threat investigation, there is not enough documentation about how to search for different keywords. The documentation for keywords used in attack techniques is lacking, making it difficult to understand certain aspects."

ROI

Trend Vision One provided significant value with automation and platform integration, reducing labor costs and increasing efficiency. It offered ransomware protection and helped control malware attacks, preventing potential issues before escalation, thus saving time and resources. Businesses noted the challenge in quantifying ROI on security products but expressed cost savings in operational and security areas. A 30 percent ROI improvement was reported, and overall experiences highlighted positive returns in time, money, and workforce utilization.

Pricing

Trend Vision One's pricing is viewed as competitive yet varies among users. Many find it cost-effective, aligning with market standards, while others note its expense compared to competitors. The licensing primarily involves annual subscriptions with options for modular features, adding complexity. The recent shift to a credit-based model has been met with mixed reactions. For large enterprises, pricing appears justifiable, but smaller organizations may find it challenging. Flexibility and negotiation options with sales teams are appreciated.

"The pricing is fair and not on the higher side."
"Trend Vision One is an expensive product."
"Trend Vision One offers a competitive price-to-value ratio."

Popular Use Cases

Trend Vision One is used for endpoint detection and response, antivirus protection, and enhanced security monitoring. It provides comprehensive visibility into network environments, detects ransomware, monitors user behavior, and integrates with cloud platforms such as Office 365 and Azure. Organizations leverage it for incident response, malware protection, and managing security threats across their infrastructure, providing a unified dashboard and automated playbooks to streamline security operations.

Service and Support

Trend Vision One's customer service is mostly praised for being responsive and knowledgeable. Users find the technical support team highly effective, with fast response times and helpful personnel. Some users appreciate its ability to provide root cause analysis, while others mention the support's willingness to collaborate and gather feedback. Despite overall satisfaction, certain users experience delays and communication issues. Improvement is suggested in areas such as streamlining communication and reducing redundancy during support interactions.

Deployment

Trend Vision One's initial setup is generally straightforward and user-friendly, though some users find it mildly complex. Cloud deployment tends to be quicker, while on-premises setups may require more time. Automation aids efficiency, and many organizations highlight minimal maintenance needs post-deployment. The ease is attributed to centralized management and helpful support, despite varying deployment times due to scale and technical environments. Teamwork enhances accuracy, but individual handling is possible for smaller deployments.

Scalability

Trend Vision One demonstrates exceptional scalability, accommodating diverse business sizes and needs. Its cloud-based structure ensures easy expansion and flexible scaling options, with most users experiencing seamless integration and deployment. Users appreciate the capability to scale efficiently, even across multiple sites, with no significant issues reported. Licensing adjustments allow further resource allocation. While some note increased resource usage compared to the past, they still view the scalability positively, rating it highly for adaptability and ease of implementation.

Stability

Trend Vision One is generally perceived as reliable and stable without frequent crashing or lagging. Most users rate its stability high, often around nine or ten out of ten. Occasional compatibility issues and the need for minor adjustments are noted, yet it maintains a strong performance. Feedback highlights its reliability in maintaining uptime with few bugs. The lightweight agent helps in minimizing resource usage, which contributes to its stability.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Trend Vision One Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Educational Organization

29%

Computer Software Company

18%

Financial Services Firm

Healthcare Company

Manufacturing Company

Government

Comms Service Provider

Retailer

Construction Company

Insurance Company

University

Real Estate/Law Firm

Hospitality Company

Media Company

Non Profit

Wholesaler/Distributor

Energy/Utilities Company

Legal Firm

Engineering Company

Transportation Company

Outsourcing Company

Performing Arts

Recreational Facilities/Services Company

Pharma/Biotech Company

Compare Trend Vision One with alternative products

Learn more about Trend Vision One

Trend Micro Vision One excels in integrating multiple security layers into a unified platform. It provides real-time visibility into an organization’s security posture, facilitating rapid detection, investigation, and response to threats. The platform includes features like endpoint security, email security, and network security, all managed through a centralized console. It leverages advanced analytics to help security teams prioritize and respond to the most critical threats more efficiently.

What are the key features of Trend Micro Vision One?

Threat Detection and Response: Automatically detects and responds to threats using integrated security layers.
Risk Visibility: Offers clear insights into the security posture and risk levels with detailed dashboards.
Security Posture Management: Helps manage and adjust the security stance with strategic guidance and compliance tracking.

Benefits to Look For:

Efficiency in Threat Management: Streamlines operations by reducing the number of security alerts and the time required to resolve them.
Enhanced Detection Capabilities: Uses advanced analytics to uncover hidden and sophisticated threats.
Proactive Threat Hunting: Provides tools for security teams to proactively search for potential threats before they manifest into breaches.

Trend Micro Vision One is flexible in deployment options, supporting environments like AWS, where it can be integrated to protect cloud workloads, manage compliance, and secure data transfers. This adaptability makes it suitable for a variety of use cases, including protecting against data breaches in multi-cloud environments, securing remote workforces, and maintaining compliance in highly regulated industries such as finance and healthcare.

Trend Micro Vision One is extensively implemented across sectors where data security is paramount, such as financial services, healthcare, and government. Organizations in these industries benefit from its comprehensive threat analysis, minimizing the risk of data breaches and enabling a robust defense against advanced persistent threats and ransomware.

In essence, Trend Micro Vision One is a sophisticated, AI-driven security solution that offers comprehensive protection and enhanced threat intelligence capabilities, making it ideal for enterprises looking to bolster their cybersecurity defenses.

Trend Vision One was previously known as Trend Micro XDR, Trend Micro XDR for Users, Trend Vision One - XDR for Networks.