CyberIndexBeta

Product

TrendAI Vision One Endpoint Security (formerly Trend Vision One Endpoint Security) provides endpoint threat protection with integrated detection and response for enterprise organisations. Protect even the most vulnerable systems, including servers, IoT, and legacy environments, while reducing complexity with TrendAI Vision One™, the all-in-one platform. Eliminate data silos and bridge information gaps by merging security tools and applications into a single platform, eliminating complexity and streamlining resources. With a single pane of glass providing extensive visibility over your endpoints, your security and IT teams can effectively monitor and manage threats across the entire organization. It runs on Linux, macOS and Windows.

Current Version
1.1
Market
EnterpriseSMB
Licence
Paid
Price
Quote
Record Created
2026-08-20
Last Updated
2026-10-12

Vendor

Trend Micro was founded in 1988 in Los Angeles by Steve Chang, Jenny Chang and Eva Chen, moved its headquarters to Tokyo and is listed on the Tokyo Stock Exchange — one of very few security vendors of its scale headquartered in Japan. Its US operation runs from Irving, Texas. In 2026 it split its identity in two: the enterprise business now trades as TrendAI and the consumer business as TrendLife. Both are the same company, and its own website now redirects to the TrendAI domain, so a reader following an older link lands on a name that does not match the one on the box. The enterprise platform is TrendAI Vision One, previously Trend Vision One, with Apex One as the endpoint agent beneath it; consumer products are still sold under the Trend Micro name, including Trend Micro Maximum Security. The company says it defends customers in 185 countries and draws on 20,000 internal and external security experts. Its products appear in both the consumer and the enterprise halves of this index, and the two new brand names are worth keeping in mind when matching a laboratory result to a product. Vendor page →

Country
Japan
Headquarters
Tokyo, Japan
Year Established
1988
Customers
25K organisations
Users
250M devices protected
Revenue
≈ $1.9B (2025)

Platforms

Linuxnative
macOSnative
Windowsnative

Target Market

Enterprise secondarySMB secondary

Capabilities

Malware Detectionkeynative
Ransomware ProtectionkeyNot known
Behavioral Detectionkeynative
Web ProtectionkeyNot known
Email ProtectionNot known
Host FirewallNot known
Sandbox AnalysisNot known
Cloud-Assisted ScanningNot known
Heuristic Detectionnative
Device ControlNot known
Vulnerability Shieldingnative
Central Management Consolenative

7 of 12 not yet known — not recorded, which is not the same as not supported.

Pricing

PlanLicencePriced perBilledPrice
SummaryPrice on requestnot statedno recurring chargeQuote

Versions

  • 1.1Windows

The newest release each source names per platform, not every release the vendor has shipped. A release date is shown only where one is recorded.

Independent Tests

At a glance — latest result per lab test

MITRE ATT&CK Evaluations (Enterprise)

2025-12-10lab report ↗

Each bar is one lab’s own figure on that lab’s own scale. Labs test different models at different times, so the figures are not combined into one score.

All results

MITRE ATT&CK Evaluations (Enterprise)MITRE ATT&CK Evaluations — Enterprise 20252025-12-10
Technique-level detection: 56.7%Any detection: 58.9%Benign activity not alerted: 100%Attack sub-steps evaluated: 90
MITRE ATT&CK Evaluations (Enterprise)MITRE ATT&CK Evaluations — Enterprise 20242024-12-11
Technique-level detection: 51.2%Any detection: 61.3%Benign activity not alerted: 90%Attack sub-steps evaluated: 80

Certifications

FedRAMPModerate1 activeFR2226231529
OESIS Framework SupportSupported1 activeSupported

Change History

This record was created 2026-08-20. Everything below is what has changed since.

  • 2026-10-12Certification addedCertified: FedRAMP (Moderate)evidence
  • 2026-10-07Test result addedNew MITRE ATT&CK Evaluations (Enterprise) resultevidence
  • 2026-10-07Test result addedNew MITRE ATT&CK Evaluations (Enterprise) resultevidence
  • 2026-09-23Capability addedHeuristic Detection: built inevidence
  • 2026-09-23Capability addedCentral Management Console: built inevidence
  • 2026-09-23Capability addedVulnerability Shielding: built inevidence
  • 2026-09-22Product updatedListed in Enterprise Antimalwareevidence
  • 2026-09-22Product updatedListed in Small Business Antimalwareevidence
  • 2026-09-22Product updatedListed in Home Antimalwareevidence
  • 2026-09-19Platform addedRuns on Linuxevidence
  • 2026-09-19Platform addedRuns on macOSevidence
  • 2026-09-19Product updatedNo longer sold to: Consumerevidence
  • 2026-09-19Product updatedAlso sold to: SMBevidence
  • 2026-09-19Pricing plan addedPrice: price on requestevidence
  • 2026-09-09New versionNew version: 1.1 (Windows)evidence
  • 2026-09-09New versionNew version: 1.0 (Windows)evidence
  • 2026-09-03New versionNew version: 1.1evidence
  • 2026-08-20Certification addedCertified: OESIS Framework Support (Supported)evidence
  • 2026-08-20Capability addedBehavioral Detection: built inevidence
  • 2026-08-20Capability addedMalware Detection: built inevidence
  • 2026-08-20Pricing plan addedPrice: paidevidence
  • 2026-08-20Product updatedAlso sold to: Consumerevidence
  • 2026-08-20Product updatedAlso sold to: Enterpriseevidence
  • 2026-08-20New versionNew version: 1.0evidence
  • 2026-08-20Platform addedRuns on Windowsevidence
  • 2026-08-20Product createdNew product listedevidence

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.