In short: TrendAI Vision One Endpoint Security protects Windows, macOS and Linux devices in three tiers. Core covers anti-malware, firewall, device and application control, data loss prevention and intrusion prevention for PCs; Essentials adds the EDR sensor; Pro adds server protection such as integrity monitoring and log inspection. Each is licensed per endpoint.
What Vision One Endpoint Security is
TrendAI Vision One Endpoint Security is Trend Micro's protection for desktops, laptops, servers and cloud workloads, managed from the Vision One console. One lightweight agent combines several layers: signature, behaviour and machine learning detection, web reputation, firewall and device control, with protection against ransomware and fileless attacks.
On servers and workloads, the Pro tier adds the controls auditors and insurers often ask for: intrusion prevention that shields unpatched vulnerabilities (virtual patching), integrity monitoring and log inspection. Trend Micro also highlights protection for legacy systems. If you are moving from Apex One or Cloud One Workload Security, we can map what you run today onto the current tiers.
Core, Essentials and Pro compared
Trend Micro builds each tier on the one below it:
| Feature | Core | Essentials | Pro |
|---|---|---|---|
| Anti-malware, behaviour monitoring and machine learning | Yes | Yes | Yes |
| Web reputation and firewall | Yes | Yes | Yes |
| Device control and application control | Yes | Yes | Yes |
| Data loss prevention | Yes | Yes | Yes |
| Intrusion prevention for laptops and desktops | Yes | Yes | Yes |
| XDR for Endpoints (EDR sensor) | Add-on | Included | Included |
| Intrusion prevention for servers | No | No | Yes |
| Integrity monitoring and log inspection | No | No | Yes |
| Recommendation scan | No | No | Yes |
| Container protection | No | No | Yes |
In practice, Core and Essentials are aimed at user devices, with Essentials the choice if you want detection and response. Pro is built for servers and workloads, where server intrusion prevention, integrity monitoring and the recommendation scan (which suggests the right protection rules for each server) matter most.
Options and add-ons
Alongside the three tiers, these options are switched on from the same console and measured separately:
- Mobile Security for Android and iOS devices, which detects malicious apps and other risks, licensed per enrolled device.
- Sandbox Analysis (automatic submission), which sends suspicious files from Core or Essentials endpoints to Trend Micro's cloud sandbox; see Threat Intelligence.
- SAP Scanner for Endpoint Security, which scans content in SAP NetWeaver through its virus scan interface, and needs the Pro tier on each SAP server.
- Data Security sensor, which traces how sensitive data moves on endpoints.
- XDR for Endpoints on Core devices, if you want the EDR sensor without moving to Essentials; see XDR and Security Operations.
You can run different tiers on different groups, for example Essentials on laptops and Pro on servers, under one account.
How it is licensed
Endpoint Security is licensed per protected endpoint, with a different rate for each tier, under TrendAI Flex. Vision One works out which package each endpoint is using from the features enabled on it, and only protected devices count. If you retire servers or move them to containers, they stop counting.
Through Forever Systems, Trend Micro is billed monthly in arrears for what you actually used in the month, measured the way Trend Micro measures it, rather than as a credit pool you pay for up front. We size the quote against your device counts by type and tier. Costs depend on tier mix and quantity, so ask us for a quote.
Requirements, deployment and who it suits
The agent supports Microsoft Windows, macOS and Linux, on physical, virtual and cloud machines, with protection managed in the cloud console and no on-premises server required. Deployment is usually a packaged installer pushed by your device management tool, with your old antivirus removed first.
Endpoint Security suits organisations that want strong prevention on every device, a clear upgrade path to EDR and XDR, and real server protection without a separate product. Forever Systems scopes the tier for each device group, deploys the agent, builds policies and hands you a working console. Compare other options under endpoint protection.
How Forever Systems supplies your software licences
Forever Systems Ltd supplies business software subscriptions to UK organisations from one account, with one monthly invoice and a UK team who know the products.
- The right edition first time: we check what you need before you buy, so you are not paying for features you will never use
- Monthly or annual terms where the vendor offers them, and help timing renewals and commitments
- Licence changes handled for you: add or remove users, upgrade editions and true-up without starting a new contract
- Deployment and support from engineers who run these products every day, not just a reseller account
- Consolidated billing and renewal reminders so nothing lapses unexpectedly
We work with businesses, schools, charities and public sector organisations of all sizes.
Need a licence quote or a second opinion on your renewal?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
Does Vision One Endpoint Security include EDR?
The Essentials and Pro tiers include XDR for Endpoints, the sensor that provides EDR. On Core it is an optional add-on.
Which tier should I use for servers?
Pro is the server tier. It includes everything in Essentials and adds server intrusion prevention, integrity monitoring, log inspection, the recommendation scan and container protection.
Can I mix tiers in one account?
Yes. Different device groups can run different tiers, for example Essentials on laptops and Pro on servers, and each endpoint is counted at the tier it uses.
Does it protect Macs and Linux?
Yes. Trend Micro lists Windows, macOS and Linux for the endpoint agent. Phones and tablets are covered by the separate Mobile Security option.