In short: TrendAI Vision One Email and Collaboration Security protects Microsoft 365 and Google Workspace email plus Box and Dropbox. It can run through APIs, as an MX-based cloud email gateway, or both. Core gives standard protection, Essentials adds advanced features such as URL sandboxing, encryption and continuity, and Pro adds XDR for Email. It is licensed per user.
What Email and Collaboration Security is
TrendAI Vision One Email and Collaboration Security is Trend Micro's email protection, managed in the Vision One console. It brings together products Trend Micro used to sell separately, including its cloud email gateway and Cloud App Security, and uses AI to judge what a message is trying to do.
It is built to stop phishing, QR code phishing, business email compromise (BEC), account takeover and ransomware delivered by email or shared files. Writing style analysis compares a message with how the supposed sender normally writes, which helps catch payment diversion fraud from a compromised supplier mailbox.
Two ways to deploy
Trend Micro offers two independent deployments, and you can use either or both:
| Deployment | How it works | What it protects |
|---|---|---|
| Cloud Email and Collaboration Protection | API connection, with an optional inline mode for Exchange Online and Gmail | Microsoft 365 (Exchange Online, OneDrive, SharePoint and Teams), Google Workspace, Box and Dropbox |
| Cloud Email Gateway Protection | Your MX records point at Trend Micro, which filters inbound and outbound mail | Any mail service, including Microsoft 365, Google Workspace and on-premises Exchange |
Many organisations use both: the gateway for pre-delivery filtering and continuity, and API protection for internal mail and file sharing. XDR for Email can be added to either, to correlate email threats with endpoint, identity and network activity; see XDR and Security Operations.
Core, Essentials and Pro
Trend Micro packages the features in three tiers:
| Package | What it adds |
|---|---|
| Core | Standard protection on your chosen deployment: anti-phishing, malware and spam filtering, data loss prevention, account takeover detection, internal message scanning, file sandboxing and retro-scanning |
| Essentials | Everything in Core plus advanced protection: URL sandboxing, inline mode for Exchange Online and Gmail, and on the gateway, email encryption, email continuity, extra-large message handling and DMARC report analysis |
| Pro | Advanced protection on both the API and gateway deployments, plus XDR for Email |
On Core and Essentials, a user protected by both deployments is counted in each. Pro counts each user once across the API, gateway and XDR components, which can make it the simpler choice if you want both deployments.
How it is licensed
Email and Collaboration Security is licensed per user under TrendAI Flex, at a rate set by the package. On the API deployment, the users counted are those covered by your protection policies, and unlicensed, guest, disabled users and shared mailboxes in Microsoft Entra ID are excluded. On the gateway, active users or active email addresses on your protected domains are counted.
Through Forever Systems, Trend Micro is billed monthly in arrears for what you actually used in the month, measured the way Trend Micro measures it, rather than as a credit pool you pay for up front. Ask us for a quote based on your user count and the deployment you want.
Who it suits and how we help
It suits Microsoft 365 and Google Workspace customers who want stronger protection than the built-in filtering, especially against BEC and supplier fraud, and those already using Vision One for endpoints who want email detections correlated in one place. For organisations that keep mail in their own data centre, Trend Micro also offers ScanMail for Microsoft Exchange and PortalProtect for SharePoint.
Forever Systems checks your mail flow and DNS, connects the APIs, tunes quarantine settings and reviews DMARC so legitimate mail keeps flowing. It pairs well with security awareness training. See email security to compare vendors, or DMARC and email authentication for the domain side.
How Forever Systems supplies your software licences
Forever Systems Ltd supplies business software subscriptions to UK organisations from one account, with one monthly invoice and a UK team who know the products.
- The right edition first time: we check what you need before you buy, so you are not paying for features you will never use
- Monthly or annual terms where the vendor offers them, and help timing renewals and commitments
- Licence changes handled for you: add or remove users, upgrade editions and true-up without starting a new contract
- Deployment and support from engineers who run these products every day, not just a reseller account
- Consolidated billing and renewal reminders so nothing lapses unexpectedly
We work with businesses, schools, charities and public sector organisations of all sizes.
Need a licence quote or a second opinion on your renewal?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
Does Trend Micro email security work with Microsoft 365?
Yes. It connects to Exchange Online, OneDrive, SharePoint and Teams through Microsoft's APIs, and can also sit in front of Microsoft 365 as a cloud email gateway.
What happened to Trend Micro Cloud App Security?
Its capabilities now sit inside TrendAI Vision One Email and Collaboration Security as Cloud Email and Collaboration Protection, managed in the Vision One console.
Do I need to change my MX records?
Only for the gateway deployment. API-based protection works without MX changes, so you can start there and add the gateway later if you want pre-delivery filtering and email continuity.
Does it include email encryption?
Email encryption is an advanced gateway feature, so it comes with the Essentials or Pro package on the Cloud Email Gateway Protection deployment, not with Core.