In short
Trend Micro Apex One is Trend's earlier business endpoint protection, run from an on-premises server or as Apex One as a Service. Trend now documents moving Apex One agents to Standard Endpoint Protection in TrendAI Vision One, which needs Vision One credits or entitlement and, on premises, server build 12994 or later. Check Trend's lifecycle list for dates.
Get a quote for Trend Micro Apex One migration
Tell us roughly how many users or sites you have and we will reply by email with options and a quote.
What Apex One is
Apex One is Trend Micro's earlier endpoint protection product for businesses, managed centrally from one console. It came in two forms:
- Apex One on-premises: you run the Apex One server yourself and the agents report to it.
- Apex One as a Service: Trend Micro hosts the management side and you manage agents from the cloud.
Trend Micro's newer documentation shows it as TrendAI Apex One, following Trend's move to the TrendAI brand. Its successor for new protection is TrendAI Vision One Endpoint Security, sold in Core, Essentials and Pro tiers; see Trend Micro Endpoint Security for what each tier includes.
This page is about planning the move. It does not cover Apex One downloads, patches, uninstall tools or support procedures: those belong with Trend Micro's support site.
What Trend Micro documents about moving off Apex One
Trend Micro publishes guidance for both versions of Apex One.
Apex One on-premises. Trend's knowledge base article KA-0016834 (updated 27 February 2026), "Migrating Apex One server on-premise agents to Vision One", is a reference for moving on-premises agents to a Vision One Standard Endpoint Protection instance. It covers:
- Checking the Apex One server version: Trend says the server must be on build 12994 or later, updating first if it is not.
- Making sure you have valid Vision One credits or entitlement to access Standard Endpoint Protection.
- Having the Apex One server's Activation Code to set up the Vision One environment.
- Creating the Vision One environment and the Standard Endpoint Protection instance.
- Exporting settings and policies from Apex One and importing them.
- Moving the agents across.
Apex One as a Service. Trend's online help has an "Update from TrendAI Apex One as a Service" section, with update paths for new and existing Vision One customers (from an activation email or from the Vision One console) and a published feature mapping from Apex One as a Service to Standard Endpoint Protection.
The final step in the on-premises article moves agents from the Apex One server to Vision One, so you can plan it in waves rather than all at once.
Apex One vs Vision One Endpoint Security
People searching "Apex One vs Vision One" usually want to know what changes. In short:
| Apex One | Vision One Endpoint Security | |
|---|---|---|
| Management | Your own Apex One server, or Apex One as a Service | Vision One cloud console |
| Where moved agents are managed | n/a | Standard Endpoint Protection, an app within Vision One |
| Product structure | One Apex One product | Core, Essentials and Pro tiers, per endpoint |
| Licensing | Apex One licence and Activation Code | TrendAI Flex (formerly Trend Vision One Credits) |
| Detection and response sensor | Not covered on this page | XDR for Endpoints sensor included in Essentials and Pro |
| Dedicated server controls | Not covered on this page | Pro tier adds server IPS, integrity monitoring and log inspection |
Trend's own feature mapping is the authority on which Apex One settings carry across, so we check it against your policies before any move. For on-premises customers, the practical gain is no longer running a management server; for everyone, the Essentials and Pro tiers give a path to detection and response without changing vendor.
Not sure which option fits? Ask us
Tell us what you need and we will recommend the right option for your organisation, with a quote.
What to check before you move
The technical move is documented by Trend Micro. The things that cause problems are usually local to your organisation, so check them first:
- Exclusions: Apex One servers often carry years of scan exclusions for business software. Review which are still needed rather than copying them all.
- Device control and application rules: make sure USB and application policies behave the same in Standard Endpoint Protection, using Trend's feature mapping as the reference.
- Servers: decide whether servers should move into the Pro tier, which adds server intrusion prevention, integrity monitoring and log inspection that a basic agent move does not give you.
- Network access: agents need to reach Trend Micro's cloud services from every site and from home workers' connections.
- Reporting: if you send Apex One reports to an insurer, auditor or board, plan the equivalent from Vision One before you retire the old server.
- Pilot first: move a small group, live with it for a while and fix differences before moving everyone.
We can work through this list with you as part of a quote and set out the plan in it.
Is Apex One end of life?
We do not guess at dates. Trend Micro publishes end-of-support and end-of-life dates on its product support lifecycle list, and those dates can differ between Apex One on-premises, Apex One as a Service and individual agent versions.
What we can say from Trend's own documentation is that it provides a route from both versions of Apex One into Vision One, and that Vision One licensing is now TrendAI Flex. Check Trend Micro's lifecycle list for the dates that apply to your version. When you ask us for a quote, we confirm what applies to your licence and renewal before recommending anything.
Is Trend Micro Apex One migration the right fit for you?
We will check it against your systems and requirements and recommend the right option.
Planning the move
A move from Apex One is usually straightforward, but it touches every device, so it is worth planning:
- Inventory: list Apex One servers, agent counts by operating system, and any servers protected by Apex One.
- Check versions: on-premises servers need build 12994 or later before Trend's migration process applies.
- Choose tiers: decide which groups need Core, Essentials or Pro. Servers usually belong on Pro; see server antivirus.
- Licensing: arrange Vision One credits or entitlement; we can supply this and confirm the terms at quote.
- Pilot: move a small group of agents, compare policy behaviour and exclusions, and fix differences.
- Move the rest in waves, then retire the Apex One server once nothing reports to it.
If you are reviewing vendors at the same time, our vendors page compares the endpoint protection products we supply, and EPP vs EDR helps decide whether you need the Essentials sensor. For detection and response planning beyond antivirus, see our EDR, XDR and MDR guidance.
Contact us with your Apex One version and agent counts and ask us for a quote for Vision One Endpoint Security.
Apex One or Microsoft Defender?
Some organisations coming off Apex One consider relying on the Microsoft Defender Antivirus already built into Windows instead. That can be reasonable for some, but it is a different decision from replacing like with like: Apex One gave you central management, policies and reporting from one console, and the built-in antivirus on its own does not.
Our guide Is Windows Defender enough? sets out the gaps fairly and what Microsoft sells to fill them. If you stay with Trend Micro, you keep a vendor your team knows, and Trend's feature mapping helps carry your Apex One settings across.
How Forever Systems helps with endpoint protection
We are an independent UK IT and cyber security provider. We supply business antivirus and endpoint protection from several vendors, so we can recommend what fits your devices, your team and your budget rather than pushing one product.
- Review what you have: we look at your current antivirus, your Microsoft licences and the devices you need to cover before suggesting anything new
- Compare the options: next-generation antivirus, EDR and managed services from vendors including CrowdStrike, SentinelOne, ThreatDown, Bitdefender, Trend Micro, Sophos, Check Point, WatchGuard and Acronis
- Licensing and quotes: the right edition and licence count for your Windows, Mac, Linux, server and mobile devices, with pricing confirmed at quote
- Deployment and migration: we can help roll out agents, set policies and remove the old product cleanly
- Support after go-live: help with policy tuning, alerts and renewals, with the scope agreed at quote
We can also help with the rest of your security, from endpoint security and EDR to Cyber Essentials and security awareness training.
Frequently asked questions
Is Trend Micro Apex One end of life?
Check Trend Micro's product support lifecycle list for the dates that apply to your version, as they can differ between on-premises and as a Service. Trend documents a route from both into Vision One, and we confirm what applies to your licence when we quote.
What replaced Trend Micro Apex One?
For new protection Trend Micro sells TrendAI Vision One Endpoint Security in Core, Essentials and Pro tiers. Existing Apex One agents can be moved to Standard Endpoint Protection in Vision One, following Trend's documented process.
What do I need to move Apex One agents to Vision One?
For on-premises Apex One, Trend says the server must be on build 12994 or later, you need valid Vision One credits or entitlement, and you need the Apex One server's Activation Code. Apex One as a Service has its own update path from the Vision One console or an activation email.
What is the difference between Apex One and Vision One?
Apex One is the earlier endpoint product with its own server or hosted service. Vision One is Trend Micro's cloud platform; its Endpoint Security solution provides tiered endpoint protection, with an EDR sensor in Essentials and Pro and server protection in Pro.
Can Forever Systems supply Vision One Endpoint Security for an Apex One estate?
Yes. We supply Vision One Endpoint Security per endpoint, billed monthly in arrears for actual use, and can help plan the move. Ask us for a quote.
Still have a question about Trend Micro Apex One migration?
Ask us and a member of our team will reply by email.
More endpoint protection guides
Trend MicroTrend Micro's business antivirus in three tiers: Core, Essentials and Pro, licensed per endpoint.Worry-Free ServicesTrend Micro's per-user suite for small businesses, from Worry-Free Services to Co-Managed XDR.Is Windows Defender enough?An honest look at Microsoft Defender Antivirus for business: what it does, the gaps and the options for closing them.Server antivirusWhy Windows servers need their own antivirus licence and careful exclusions.EPP vs EDRThe difference between endpoint protection (EPP) and EDR, which products bundle both, and when EPP alone is reasonable.Vendors comparedThe endpoint protection vendors we supply compared on platforms, licence unit, EDR upgrade path and managed options.