In short
Trend Micro Endpoint Security, now TrendAI Vision One Endpoint Security, protects Windows, macOS and Linux in three tiers. Core covers anti-malware, machine learning, web reputation, firewall, device and application control, DLP and IPS for PCs; Essentials adds the XDR for Endpoints sensor; Pro adds server protection. It is licensed per endpoint and billed monthly through us.
Get a quote for Trend Micro Endpoint Security
Tell us roughly how many users or sites you have and we will reply by email with options and a quote.
What Trend Micro Endpoint Security is now
Trend Micro is a long-established security vendor, and its business endpoint protection has been through several names. Today Trend Micro markets its enterprise products under the TrendAI brand, and its endpoint protection is TrendAI Vision One Endpoint Security, managed from the Vision One console. You will also see it written as Trend Vision One Endpoint Security; it is the same product line.
One lightweight agent combines several layers: signature, behaviour monitoring and machine learning detection, web reputation, firewall, device control and application control, with protection against ransomware and fileless attacks. The same agent family covers desktops, laptops, servers and cloud workloads on Windows, macOS and Linux, so you do not need separate products for user devices and servers.
If you previously ran Apex One, Trend's earlier endpoint product, see Trend Micro Apex One for how Trend documents the move into Vision One. The wider platform, including XDR and exposure management, is covered on our sister site's Trend Vision One page. Smaller organisations should also look at Trend Micro Worry-Free Services.
Core, Essentials and Pro compared
Trend Micro builds each tier on the one below. The table reflects Trend Micro's current tier descriptions:
| Feature | Core | Essentials | Pro |
|---|---|---|---|
| Anti-malware, behaviour monitoring and machine learning | Yes | Yes | Yes |
| Web reputation and firewall | Yes | Yes | Yes |
| Device control and application control | Yes | Yes | Yes |
| Data loss prevention | Yes | Yes | Yes |
| Intrusion prevention for laptops and desktops | Yes | Yes | Yes |
| XDR for Endpoints (EDR sensor) | Add-on | Included | Included |
| Intrusion prevention for servers (virtual patching) | No | No | Yes |
| Integrity monitoring and log inspection | No | No | Yes |
| Recommendation scan | No | No | Yes |
| Container protection | No | No | Yes |
Core is the antivirus and endpoint protection tier for user devices. Essentials is Core plus the sensor that feeds detection and response. Pro is aimed at servers and workloads, where virtual patching, integrity monitoring and log inspection are the controls auditors and insurers ask about.
Not sure which tier fits? Ask us
Tell us what you need and we will recommend the right tier for your organisation, with a quote.
Which tier for which device
Most organisations end up with a mix, and Trend Micro lets you run different tiers on different groups under one account:
- Laptops and desktops with no one to investigate alerts: Core gives you the prevention layers, including device control, DLP and IPS for PCs, which is more than many entry-level products include.
- Laptops and desktops where an insurer or customer asks about EDR: Essentials, so the XDR for Endpoints sensor is collecting activity. Who looks at those detections (your own team or a managed service) is a separate decision; see EPP vs EDR.
- Windows and Linux servers: Pro. Server intrusion prevention shields unpatched vulnerabilities until you can patch, integrity monitoring flags unexpected changes to key files, and the recommendation scan suggests the right protection rules for each server. See our guides to server antivirus and Linux antivirus.
- Container hosts: Pro includes container protection.
Vision One works out which tier each endpoint uses from the features enabled on it, so a server running Pro features is counted as Pro.
Options alongside the tiers
These are switched on from the same console and measured separately:
- Mobile Security for iOS and Android, licensed per enrolled device. See mobile antivirus for business.
- XDR for Endpoints on Core devices, if you want the EDR sensor without moving to Essentials.
- Sandbox analysis, which sends suspicious files from Core or Essentials endpoints to Trend Micro's cloud sandbox.
- Data Security sensor, which traces how sensitive data moves on endpoints.
Detection and response across email, network and cloud sits in Vision One's XDR solutions, which go beyond antivirus; our EDR, XDR and MDR guidance explains that side.
Is Trend Micro Endpoint Security the right fit for you?
We will check it against your systems and requirements and recommend the right option.
How Trend Micro Endpoint Security is licensed
Trend Micro licenses Vision One through TrendAI Flex, formerly Trend Vision One Credits. Each solution and tier has its own rate per unit, and Endpoint Security is measured per protected endpoint, with a different rate for Core, Essentials and Pro. There are no separate product keys: solutions are switched on in the console and their usage is measured.
Through Forever Systems, Trend Micro is billed monthly in arrears for what you used in the month, measured the way Trend Micro measures it, rather than as a credit pool you pay for up front. If you retire a server or move a team to a lower tier, the next bill reflects it.
| Item | Unit | Notes |
|---|---|---|
| Endpoint Security Core, Essentials or Pro | Per endpoint | Rate depends on tier; tiers can be mixed |
| Mobile Security | Per mobile device | Separate option |
| XDR for Endpoints on Core | Per endpoint | Included in Essentials and Pro |
Costs depend on tier mix and quantity. Our sister site explains Trend Micro Endpoint Security licensing in detail, and our business antivirus cost guide explains what drives price across vendors. Ask us for a quote.
Deploying Trend Micro Endpoint Security
Vision One Endpoint Security is run from Trend Micro's cloud console, so there is no management server to install. A typical rollout through us looks like this:
- Scope: we count endpoints by type (laptops, desktops, Windows servers, Linux servers, container hosts) and agree a tier for each group.
- Prepare: the old antivirus is removed in groups so two products are not running on one device, and server exclusions are agreed in advance.
- Deploy: a packaged installer is pushed through your device management tool, Group Policy or scripts, on physical, virtual and cloud machines.
- Policies: separate policies for user devices and servers, with device control, application control and web reputation set to suit how you work. On Pro servers, the recommendation scan suggests intrusion prevention rules for what each server actually runs.
- Review: we can check detections, blocked applications and any business software caught by the new controls with you in the first weeks.
Because the tiers share one agent, moving a group from Core to Essentials later is a console change rather than a reinstall.
Worry-Free or Vision One Endpoint Security?
Trend Micro has two routes for business antivirus:
| Worry-Free Services | Vision One Endpoint Security | |
|---|---|---|
| Built for | Small and medium-sized businesses wanting one simple suite | Organisations wanting tier choice, server protection and a path to XDR |
| Licence unit | Per user | Per endpoint |
| Server protection | Windows servers included as protected devices | Pro tier adds virtual patching, integrity monitoring and log inspection |
| Linux | Not in Worry-Free's listed device types | Yes |
| Email security | In Services Advanced and above | Separate Vision One solution |
Trend Micro lets Worry-Free customers update their console to Vision One later, so starting small does not lock you in. See Trend Micro Worry-Free Services.
Contact us with your device counts by type and ask us for a quote. We can recommend a tier for each group and set up the console, policies and agent rollout for you.
Explore Trend Micro
How Forever Systems helps with endpoint protection
We are an independent UK IT and cyber security provider. We supply business antivirus and endpoint protection from several vendors, so we can recommend what fits your devices, your team and your budget rather than pushing one product.
- Review what you have: we look at your current antivirus, your Microsoft licences and the devices you need to cover before suggesting anything new
- Compare the options: next-generation antivirus, EDR and managed services from vendors including CrowdStrike, SentinelOne, ThreatDown, Bitdefender, Trend Micro, Sophos, Check Point, WatchGuard and Acronis
- Licensing and quotes: the right edition and licence count for your Windows, Mac, Linux, server and mobile devices, with pricing confirmed at quote
- Deployment and migration: we can help roll out agents, set policies and remove the old product cleanly
- Support after go-live: help with policy tuning, alerts and renewals, with the scope agreed at quote
We can also help with the rest of your security, from endpoint security and EDR to Cyber Essentials and security awareness training.
Frequently asked questions
Is Trend Micro Endpoint Security an antivirus?
Yes, and more. Every tier includes anti-malware with behaviour monitoring and machine learning, plus web reputation, firewall, device and application control, data loss prevention and intrusion prevention for PCs. Higher tiers add EDR sensors and server protection.
What is the difference between Trend Micro Endpoint Security Core, Essentials and Pro?
Core is the prevention tier for user devices. Essentials adds the XDR for Endpoints sensor for detection and response. Pro adds server intrusion prevention, integrity monitoring, log inspection, the recommendation scan and container protection.
Which Trend Micro tier should I use for servers?
Pro is the server tier. It includes everything in Essentials and adds virtual patching through server intrusion prevention, integrity monitoring, log inspection and the recommendation scan.
Is Trend Micro now TrendAI?
TrendAI is the brand Trend Micro now uses for its enterprise products, so you will see TrendAI Vision One Endpoint Security. The company behind it is still Trend Micro, and existing agents carry on through the rename.
Does Trend Micro Endpoint Security protect Macs and Linux?
Yes. Trend Micro lists Windows, macOS and Linux for the endpoint agent. Phones and tablets are covered by the separate Mobile Security option.
Can I pay for Trend Micro Endpoint Security monthly?
Yes, through us. We bill it monthly in arrears for the endpoints and tiers you actually used, so the bill follows changes in your estate.
Still have a question about Trend Micro Endpoint Security?
Ask us and a member of our team will reply by email.
More endpoint protection guides
BitdefenderBitdefender's GravityZone business editions explained, and how we supply them monthly per endpoint.Vendors comparedThe endpoint protection vendors we supply compared on platforms, licence unit, EDR upgrade path and managed options.