In short: TrendAI Vision One Cloud Security protects cloud-native workloads. Container Security scans images and protects running containers on Kubernetes, Amazon ECS and serverless containers, licensed per node, instance or pod. File Security scans files in cloud storage, applications and file servers, licensed by scan volume or per bucket or scanner.
What Vision One Cloud Security covers
TrendAI Vision One Cloud Security is the set of Trend Micro products for applications running in public and hybrid cloud. It is managed in the Vision One console alongside everything else, so cloud findings feed the same risk scores and investigations.
This page covers the two cloud-native products licensed on their own: Container Security and File Security. The rest of the cloud range is covered elsewhere on this site:
- Servers and virtual machines in the cloud are protected by Server and Workload Protection in Endpoint Security Pro.
- Cloud posture and misconfigurations are covered by cloud account assessment in CREM.
- Cloud detection and response is XDR for Cloud in XDR and Security Operations.
Trend Micro also lists Code Security, for vulnerabilities, malware and secrets in code and CI/CD pipelines, and Cloud IPS within the same area.
Container Security
Container Security protects containers through their life cycle:
- Before deployment: scans container images for vulnerabilities and malware, and policy enforcement stops images that break policy from running.
- Kubernetes posture: checks cluster configuration and runs automated compliance checks.
- At runtime: scans running containers and watches for suspicious activity, with optional custom detection rules.
| Licensing option | Counted by |
|---|---|
| Container nodes and Amazon ECS instances | Each Kubernetes node or protected ECS instance |
| Serverless containers | Each protected serverless container pod or task |
| Custom detection rules | Volume of custom rule data |
File Security
File Security scans files for malware, including previously unseen threats, before they are trusted. That matters wherever customers or partners upload documents into your applications or storage.
| Option | How it works | Counted by |
|---|---|---|
| File Security Storage | Scans objects in Amazon S3, Azure Blob Storage and Google Cloud Storage, and can quarantine anything malicious | Scans, or per protected bucket |
| File Security SDK | Call the scanner from your own application code | Scans |
| File Security Virtual Appliance | Protects files on on-premises and cloud-hosted file servers | Scans, or per scanner |
| File Security Containerised Scanner | Scans file storage over NFS, SMB or ICAP | Scans, or per scanner |
How it is licensed
Both products are part of TrendAI Flex. Container Security counts protected nodes, ECS instances, pods or tasks from regular snapshots, so a cluster that scales up and down is charged on what it actually ran. File Security is either volume-based, in blocks of scans, or counted per bucket or scanner, and the right choice depends on how many files you scan.
Through Forever Systems, Trend Micro is billed monthly in arrears for what you actually used in the month, measured the way Trend Micro measures it, rather than as a credit pool you pay for up front. Ask us for a quote based on your cluster sizes and file volumes.
Who it suits and how we help
Cloud Security suits software teams running containers in production, and any organisation that accepts file uploads from outside into a cloud application or bucket. It is also a natural next step for Vision One customers whose workloads are moving from virtual machines into containers, because the same console and account cover both.
Forever Systems connects your cloud accounts, deploys the Container Security components into your clusters, sets image and runtime policies and wires File Security into your storage or applications. We start in report-only mode where possible, so developers see what would be blocked before any policy is enforced. For a wider review of your cloud estate, see our sister site's cloud security assessment.
How Forever Systems supplies your software licences
Forever Systems Ltd supplies business software subscriptions to UK organisations from one account, with one monthly invoice and a UK team who know the products.
- The right edition first time: we check what you need before you buy, so you are not paying for features you will never use
- Monthly or annual terms where the vendor offers them, and help timing renewals and commitments
- Licence changes handled for you: add or remove users, upgrade editions and true-up without starting a new contract
- Deployment and support from engineers who run these products every day, not just a reseller account
- Consolidated billing and renewal reminders so nothing lapses unexpectedly
We work with businesses, schools, charities and public sector organisations of all sizes.
Need a licence quote or a second opinion on your renewal?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
How is Trend Micro Container Security licensed?
Per protected Kubernetes node or Amazon ECS instance, or per serverless container pod or task, measured from regular snapshots.
Does Container Security work with Kubernetes?
Yes. It scans images before deployment, checks Kubernetes cluster posture and protects running containers.
What is Trend Micro File Security used for?
Scanning files for malware before they are trusted, for example customer uploads to an application, objects landing in Amazon S3, Azure Blob or Google Cloud storage, or files on a file server.
How do I protect cloud servers?
Cloud servers and virtual machines are protected with Vision One Endpoint Security, usually the Pro tier, rather than Container Security.