Robust, wide-coverage tool
What do you like best about the product?
risk view, attack surface and workbench correlation
What do you dislike about the product?
not having a single agent for servers and workstations
What problems is the product solving and how is that benefiting you?
With it we are able to focus our efforts on the most crucial point of the organization.
The Perfect Tool to monitor and Optimize Risk around the organization
What do you like best about the product?
The Things I like the most is features like runnig a remote script which makes it easy to patch and implement
Apart of that its integration with firewall and other data sources for various tasks is very easy to implenet and use
being the tip of the iceberg trendmicro also proivdes automated response playbook which makes it a easy daily respond to alerts
What do you dislike about the product?
Althogh I like many features there is this credit usage system, it is a bit confusing
What problems is the product solving and how is that benefiting you?
As a SOC Analyst it provides me a solution to monitor security posture of my enviroment checkking alerts creating automated playbooks taking shell remotely also at some pooint patch management
Nothing but positive feedback
What do you like best about the product?
The platform is intuitive to navigate, even for first timers there is the "Platform directory" page that acts as a tree root for all functions.
In case help is needed, the online documentation is very helpful and clear.
Support is very responsive in cases.
Too many possibilities to integrate with third party vendors.
Most important, the platform is under constant evolution and new features are getting added.
What do you dislike about the product?
The search under XDR Threat Investigation could use some tweaks, for example relaxing the restrictions to be able to do more "free text" searches across all collected events and telemetry data without having to specify the Search Method (Endpoint activity data, Detections, etc).
No major downsides but there are sometimes minor bugs with the UI that get resolved
What problems is the product solving and how is that benefiting you?
It's a one stop shop for all security related events across all products that are connected, so it serves a quick way to start investigating a security event.
Centralized management of trend micro
What do you like best about the product?
the best in the trend micro is user friendly interface and has the centralized protection and the customer suppport is too fast frequency of the use is very easy to the client easy of integration and finally ease of implementation frquency of use is good
What do you dislike about the product?
there is no dilikes in the trend micro the official website is providing the mitigation plan for the each and every vulnerabilities.
Finally comes to say that trend micro is excellent to the preventing mitigating and centralized management
What problems is the product solving and how is that benefiting you?
It is a centralizied management and best to detect and prevention of the organization
Best in XDR
What do you like best about the product?
Trend Vision One is an integrated cybersecurity platform that uses AI to enhance threat detection and response. It supports multi-tenancy for MSPs, provides a clear risk exposure dashboard, and continuously improves automation and endpoint-to-cloud coverage. These capabilities help security teams gain the visibility, speed, and insights needed to stay ahead of evolving threats
What do you dislike about the product?
The interface is a bit complex at times, and deeper integrations with third-party tools would make it more flexible
What problems is the product solving and how is that benefiting you?
Before we had all other ThrendMicro products separately and it was a tedious process to manage everything, after the implementation of Trend Micro XDR all the Trend Micro products are under one roof and we have a clear-cut picture of what is happening in our environment.
TrendMicro is an all in One solution for every Enterprise or small business
What do you like best about the product?
Easy to use Console with AI assistant to help and also the Search option.
What do you dislike about the product?
The downside I noticed till now is that it is slower to receive telemetry from its agent after I integrate Cloud One Workload security with it.
What problems is the product solving and how is that benefiting you?
The features I mostly use are service gateway, ASRM, and Endpoint Inventory and I find them very useful as some of our customers had their servers on air-gapped environments, Service gateway helps there, and just like that ASRM helps in determining where a certain organization's risk score is and how to reduce it.
TrendMicro Vision One XDR with intelligence
What do you like best about the product?
TrendMicro Vision One XDR uses holistic approach to detect and respond. it collects and correlates deep activities across the layers like – email, endpoint, server, cloud workloads, and network. The platform automates the analysis and detects threats faster. As a result, security analysts enjoy data at tips and able to conduct through investigations.
What do you dislike about the product?
In my experience, teams need to be careful while implementing as this needs to be customized little bit.
What problems is the product solving and how is that benefiting you?
We are keenly aware of the growing risk of threats from both inside and outside the organization. The ramifications of any network security breach to an organization are far-reaching, and post-breach cleanup costs are significant. We need to be prudent and implement proper security controls that will put ahead of criminals and provide the ability to detect and prevent complex, integrated attacks on the networks. We implemented TrendMicro Vision One with virtual patching to examine network traffic traffic to devices. TrendMicro's R&D team is quick and fast on releasing the remediation code that can prevent the specific exploits.
One stop for monitoring cross functional log sources and correlation of logs
What do you like best about the product?
The XDR functionality plays a vital role in Cyber Security Operations.
What do you dislike about the product?
Need to focus on the SIEM and SOAR platform.
What problems is the product solving and how is that benefiting you?
A single platform for monitoring Endpoints Severs, Cloud environments and other channels like network and mail, which is the major problem for any organisation. Trend Micro Vision One has soultuion for this
The visibility, integration and orchestation is the turnkey on Trend Micro Vision One
What do you like best about the product?
Personally i consider that Trend Micro Vision One have a lot of functionalities that we can access easily, let us to have a lot of posibilities to view and monitoring the ciber risk and the surface attack.
Another thing that i like very much about Vision One is that is always refreshing and updating funcitonalities accopling technologies to the enterprise enviroment. Ive seen the importante of use in the enterprise, because the administrator permant access to the platform to monitoring and see the risk information.
What do you dislike about the product?
It would be interresting that Trend Micro Vision One, have te ability to see other endpoint, mail sensors besides its own sensors.
What problems is the product solving and how is that benefiting you?
The main problem that is solving is about the visibility and the automation of cibersecurity incidents. In ocassions is important to give this control to the cibesecurity tools. A really big benefit about Vision One is the capacity to correlate the information about some feeds, this let us to have one point and unique control and risk insights.
Provides great visibility, saves us time, and integrates well
What is our primary use case?
We utilize Trend Vision One to identify and neutralize malicious activities on our network. This comprehensive security solution extends beyond traditional antivirus software, which relies on pattern matching, by actively monitoring endpoint behavior for anomalies and deviations from established norms.
In 2020, we transitioned to remote work like many other companies. During this transition, we conducted an internal Trend Micro office scan, which revealed that many of our users' devices were out of date due to their inability to connect to the VPN for extended periods. This prompted us to switch to Apex One later that year. As part of the Apex One implementation, we were given a complimentary trial of Vision One. During this trial, we received an alert that demonstrated the product's effectiveness, leading us to purchase a subscription. Vision One has been an excellent addition to our security arsenal. Trend Micro continuously adds new features and updates, making it an ever-evolving and valuable tool. The product's capabilities, functionality, and incident response capabilities have improved significantly over the past several years. We can set up playbooks to automate our response to specific incidents, which is a tremendous asset. Vision One is an outstanding security solution.
How has it helped my organization?
We are a state government agency that is subject to oversight by the state. Vision One has detected attempted attacks that the state SOC has missed, enabling us to swiftly halt these attacks and address the vulnerabilities before they escalate into more widespread problems.
The integrations have been great. There have been a couple of issues, but overall they've been very helpful. Vision One recently added the ability to connect to our on-premises AD. This was a sticking point for us for a year or so because we didn't have Azure. So we were stuck in a situation where we couldn't tie Vision One to our AD. But since they added the on-premises integration, it's been easy to set up.
Trend Vision One has saved us ten percent of our time. It has eliminated the need for us to rebuild machines. It has helped us even more than that because the few times we have had a threat, it has stopped it in its tracks. This has prevented the threat from spreading and compromising multiple machines. Without Trend Vision One, we would have had to investigate the threat, which would have taken time and resources. Additionally, we would have had to rebuild the compromised machines, which would have taken them offline and impacted our users. In some cases, a widespread outbreak could have occurred, causing even more disruption.
What is most valuable?
The dashboard provides great visibility into our risk profile. We receive a daily email report that outlines our risk score and identifies the machines with the highest risk. This information is based on usage patterns, vulnerabilities, and non-compliance issues. This helps us prioritize which machines require patching or further investigation.
Drilling down further, we can analyze how our users are utilizing their workstations, including the websites they visit. While we don't track specific website URLs, we can categorize website types and identify any potentially risky or inappropriate usage patterns. This allows us to proactively address any potential security concerns.
For instance, we identified a user who was using ChatGPT for work-related tasks. This flagged our system, and we were able to discuss the user's usage of ChatGPT to gain a better understanding of how our users are working and identify any areas that require additional attention.
What needs improvement?
Trend Vision One offers training sessions every few weeks or every month to showcase new features. However, the product's rapid development and the introduction of numerous new features make it challenging to keep track of the evolving interface and maintain a consistent understanding of its usability. While the continuous addition of features is commendable, the sheer volume of changes makes it difficult to stay abreast of the latest developments.
For how long have I used the solution?
I have been using Trend Vision One for two years.
What do I think about the stability of the solution?
Trend Vision One has proven to be extremely stable in our environment. We have deployed the Trend Micro client across all workstations. Additionally, we utilize a tool for vulnerability scanning, one for application whitelisting, and FireEye, as mandated by state regulations. These security solutions coexist harmoniously, causing no compatibility issues. We have also implemented laptop encryption and other security measures to further enhance protection. Throughout our experience, Trend Micro has not caused any conflicts with Microsoft or our other security tools.
What do I think about the scalability of the solution?
Trend Vision One is scalable. We can add another 150 machines with no problems.
How are customer service and support?
The technical support is excellent. We experienced what we initially thought was a technical issue, but it turned out to be a state update that triggered alerts across all of our machines. I contacted the support team and our sales representative. Within an hour, the incident response team was on the phone with me, examining the file hashes of the updated DLL to determine the cause of the issue. They quickly identified that the update was not malicious. Their promptness and thoroughness were outstanding. The incident was resolved within three hours of receiving the alerts.
How would you rate customer service and support?
Which solution did I use previously and why did I switch?
We lacked an XDR tool. Instead, we relied on FireEye, which offers similar capabilities, but it doesn't provide us with the same level of visibility as Vision One. Vision One has consistently detected threats that FireEye missed. While we were mandated to use FireEye by state regulations, we sought a more robust solution that could effectively identify anomalies and patterns. Vision One's utilization of the MITRE ATT&CK framework has been particularly advantageous. We've found great value in Vision One's comprehensive feature set, particularly its well-designed playbooks.
How was the initial setup?
The initial deployment was straightforward. I was able to deploy Trend Vision One with the vendor's assistance within one week.
What about the implementation team?
The vendor guided us through the implementation process and continues to conduct periodic check-ins to verify that everything continues to function effectively in accordance with industry best practices.
What was our ROI?
Our return on investment does not stem from direct cost savings but from the fact that Vision One has mitigated issues before they escalated into larger problems. This has saved us time, which is a valuable asset.
What's my experience with pricing, setup cost, and licensing?
The pricing for Trend Vision One is reasonable. I am not sure of the exact amount we pay, but it is not excessively expensive.
What other advice do I have?
I would give Trend Vision One a perfect score of ten out of ten. It is undoubtedly the best product in the market today. While I appreciate CrowdStrike and its offerings, I believe Trend Vision One stands out as the leader. In my opinion, these two products are the clear frontrunners in the XDR space at this moment.
Trend Vision One is deployed at a single location. We have approximately 50 endpoints. Most of our devices are laptops because we have a large number of employees who travel frequently.
Trend Vision One is maintenance-free, which is convenient because patching is handled seamlessly from the backend in the cloud. Trend Micro proactively notifies users about upcoming patching schedules and provides detailed information about the patches, new features, and updates. The patching process is managed entirely by Trend Micro, eliminating the need for user intervention. A client installed on the machines receives updates from the cloud server, ensuring that all devices remain protected and up-to-date without any manual effort.
I highly recommend Trend Vision One. Contact Trend Micro and they'll be happy to schedule a demo. I suggest installing the demo, testing it out, and seeing if it's a good fit for the organization's needs before purchasing. Trend Vision One is worthwhile.
