Seller Cheat Sheet

Trend Vision One™ -

Endpoint Security

What is Trend Micro’s complete Endpoint Security solution?

• Trend Vision One™ has long been known for its leadership in extended detection and response (XDR) as well as attack surface
risk management (ASRM).
• The Trend Vision One platform can now also meet user endpoint, server, virtual, and cloud workload security needs (visibility +
protection + EDR) in a single console*.
• This Trend Vision One service for new endpoint prospects and existing Trend Micro endpoint customers, Trend Vision One
– Endpoint Security, is available for SaaS, on-prem, and hybrid environments with no agent migration required for existing
customers.
• We have optimized the Trend Vision One services for user endpoints with device control and desktop IPS rules, for example, and
for servers/workloads with file integrity monitoring, server IPS, containers, log inspection, etc.
• The Trend Vision One platform will expand to include centralized visibility and management of Trend products for cloud, email,
network, IT/OT in addition to the XDR, ASRM, endpoint, and mobile security that it now provides.

Target Customers

We are addressing the user endpoint and server/workload security market as we always have, but are now selling the
Trend Vision One – Endpoint Security service as a single offering to that audience instead of Trend Micro Apex One™ or
Trend Cloud One™ – Endpoint Security/Trend Cloud One™ – Workload Security.

For an endpoint security sale, this solution applies:

• To mid-sized through large and very large enterprises (100-5,000+ users)
• Across all industry verticals
• To endpoint security prospects and existing Trend customers. (Current Trend Micro Apex One on-premises or Trend Micro™ Deep
Security™ Software on-premises customers are not a target unless they are adding or already using EDR/XDR in
Trend Vision One.)

Buyer and Influencer Roles:

• IT/information security (director, manager, engineer, architect, specialist): IT security is our traditional buying center for endpoints
and the data center. Responsible for security across the enterprise.
• Security operations: EDR is typically the responsibility of SOC analysts and EDR/XDR conversations with this group can turn into a
broader endpoint security discussion, and a desire to purchase protection along with EDR/XDR.
• Cloud operations (including cloud security managers, cloud architects, cloud services operations, cloud operations manager):
Experts in cloud deployment, looking for ability to automate and find solutions that enable the agility of the cloud. This is an
audience for cloud workload specific capabilities, but can lead to a broader endpoint security discussion since the same solution
serves all types of endpoints.

*Note: the combination of EPP and EDR/XDR functionality into a single console is only available to SaaS
customers. On-prem customers will need to maintain their on-prem console for EPP functionality.

Page 1 of 5 Seller Cheat Sheet • Trend Vision One™ - Endpoint Security

 Seller Cheat Sheet

Endpoint Security Buyer Profile

• Motivation: Improve endpoint security
• Job title: IT security is our traditional buying center for endpoints and the data center
• Who they report to: Head of IT
• Budget ownership/influence: If looking at endpoint protection only, IT will be the budget owner and solution evaluator/buyer
What do They Care About? Impact of Not Achieving Goals
• Less complexity: have products co-exist and/or work • Overwhelmed and resource-limited staff
together in their environment • Slow to detect and investigate incidents, increasing
• Ability to react quickly to security events and not get business risks
overwhelmed with alerts • Successful breaches and attacks that cause business
• Tools that can adapt to the changing attack landscape to disruption and costs
stay effective

Why choose Trend Vision One – Endpoint Security?

Benefit
Full range of advanced endpoint
security capabilities via a single,
high-performance platform and
with unified management and
role-based access control
Broadest security against all
types of threats across all types of
endpoint environments
Platform that expands to meet the
needs of an organization
Pain Point Addressed
• Inefficiency and operational
complexity/costs that comes
from analysts having to use
multiple products or consoles
• Lack of centralized visibility
and management across
user endpoints and
physical, virtual, and cloud
environments
• Successful breaches and
attacks that can cause
significant business disruption
and costs, and add to IT
teams’ workload.
• Siloed solutions equal
blind spots, alert overload,
operational complexity,
security gaps
• Time-consuming manual
processes to perform tasks
and work across solutions
Trend Micro Differentiators
• Offers a single product, without sacrificing depth of
security capabilities
• Native telemetry and integration across
security layers
• Smart, layered security maximizes protection, while
different service options offer the ability to apply
distinct capabilities according to endpoint type
• Industry’s most timely virtual patching (vulnerability
protection with IPS)
• Proven leadership in security effectiveness (as
validated by third parties)
• Full-featured EDR/XDR capabilities and attack
surface risk management (cyber asset discovery, risk
assessment, and mitigation)
• API integrations that allow customers to automate
security deployment, policy management and
compliance reporting
• Turn-key integrations that connect security with
other protection products, threat intel sharing, SIEM,
orchestration, build pipeline and more

*Note: the combination of EPP and EDR/XDR functionality into a single console is only available to SaaS
customers. On-prem customers will need to maintain their on-prem console for EPP functionality.

Page 2 of 5 Seller Cheat Sheet • Trend Vision One™ - Endpoint Security

 Seller Cheat Sheet

Available Services
• Different Trend Vision One services offer the ability to license the capabilities needed for the different endpoint types in a
customer’s environment.
• Mix and match accordingly (for example, 350 of Trend Vision One – Endpoint Security Essentials for desktop endpoints and 250 of
Trend Vision One – Endpoint Security Pro for cloud workloads).
• Licensed per device.
• Can be purchased as annual subscription or with Trend Vision One Credits via Trend Micro pricelist.
• Option to purchase and procure through AWS Marketplaces (Azure Marketplace TBD).

Endpoint
Security Includes: Compares to: Applies to:
Package
Core Protection Comparable to buying Trend Micro Apex Endpoint customers who want protection
• Antimalware and One as a Service standalone or Trend without EDR functionality for user
ransomware protection Cloud One – Endpoint Security. endpoints - Windows and Mac OS and
• Web reputation virtual desktops.

• Firewall
• Device control
• IPS for Desktop OS
• Application control
Essentials Protection (per above) + Comparable to buying Trend Micro Recommended service to lead with for
built-in EDR/XDR Apex One™ as a Service with the XDR all new endpoint prospects looking to
endpoint sensor or Trend Cloud One – protect user endpoints - Windows and
Endpoint Security with XDR. Mac OS and virtual desktops.

Also comparable to the former Trend
Cloud One – Workload Security,
Essentials package, but now includes
added endpoint functionality, such as
device control
It can also operate on a Windows or Linux
server operating system, though it does
not contain any specialized server or
cloud workload functionality. Recommend
that it is only considered in scenarios
where only basic security capabilities are
required for servers that have low value
to the business

Pro Protection + built-in EDR/
XDR with capabilities
optimized for servers and
cloud workloads (such
as IPS specific for server
applications), and additional
specialized features (such as
log inspection and container
protection)
Comparable to Trend Cloud One -
Workload Security with XDR.
This is same package as the former
Trend Cloud One – Workload Security,
Enterprise, but now includes EDR/XDR
(not a separate purchase).
Recommended service to lead with for all
new server and workload prospects.
In select scenarios, there can be a use-
case for high-value or high-risk user
endpoints that can benefit from some of
the advanced capabilities.

*Note: the combination of EPP and EDR/XDR functionality into a single console is only available to SaaS
customers. On-prem customers will need to maintain their on-prem console for EPP functionality.

Page 3 of 5 Seller Cheat Sheet • Trend Vision One™ - Endpoint Security

 Seller Cheat Sheet

Sales Motions
Endpoint Audience Solution to Sell
Endpoint prospect looking for endpoint protection only Trend Vision One – Endpoint Security CORE
Endpoint prospect looking for endpoint protection and EDR Trend Vision One – Endpoint Security ESSENTIALS
Prospect looking for a complete endpoint protection, detection Mix and Match
and response offering for endpoints, servers, and cloud Service options according to endpoint type and need, leading
workloads with:
Trend Vision One – Endpoint Security ESSENTIALS
Trend Vision One – Endpoint Security PRO

Current customers with: For Trend Micro Apex One SaaS, Trend Cloud One – Endpoint
• Trend Micro Apex One, Security, and Smart Protection customers without XDR: Trend
• Trend Cloud One – Endpoint and Workload Security Vision One – Endpoint Security CORE

• Smart Protection Suites, or

• XDR for Users For XDR for Users, Trend Micro Apex One SaaS, Trend Cloud One
– Endpoint Security, and Smart Protection customers with XDR:
Trend Vision One – Endpoint Security ESSENTIALS

For Trend Cloud One – Workload Security with XDR customers:

Trend Vision One – Endpoint Security PRO

Trend Micro Apex One and Deep Security Software on-premises

Trend customer looking to expand to endpoint security
customers with XDR can update to the new Trend Vision One and
Endpoint Security, but will renew on their existing product. These
customers will have consolidated inventory visibility, detection,
and response capability in Trend Vision One with EPP policy
management separately in their existing Trend Micro Apex One
or Deep Security Software console
Trend Vision One – Endpoint Security ESSENTIALS

Add Trend Service One™

Maximize customer value with premium support, managed detection
and response (MDR) and access to incident response services.

*Note: the combination of EPP and EDR/XDR functionality into a single console is only available to SaaS
customers. On-prem customers will need to maintain their on-prem console for EPP functionality.

Page 4 of 5 Seller Cheat Sheet • Trend Vision One™ - Endpoint Security

 Seller Cheat Sheet

Objection Handling
Trend has always talked about how servers and endpoints are different and that is why two products were necessary. What
happened to that opinion?
• We maintain that cloud workloads/servers and endpoints are different. We have not backed down on that, nor are we changing
how we are addressing unique cloud workloads and server security needs with the Trend Vision One – Endpoint Security Pro
service.
• One product and one platform for all endpoint types. We are further consolidating other Trend products into Trend Vision One as
well with centralized visibility and management for endpoint, mobile, cloud, email, network, and IT/OT.
• We have optimized each of these Trend Vision One services for user endpoints with device control and desktop IPS rules for
example and for servers/workloads with file integrity monitoring, server IPS, containers, etc.

Am I missing anything by buying Trend Vision One – Endpoint Security that I would get with Trend Micro Apex One, Trend Cloud
One – Endpoint and Workload Security, Deep Security Software, Smart Protection Suite, or XDR for Users?
• The Trend Vision One – Endpoint Security feature set, (which includes advanced antimalware, web reputations services, device
control, app control, firewall, DLP, IPS and EDR/XDR) serves the EPP and EDR requirements for the vast majority of customers.
Exception cases are rare and would be driven by very specific needs. For example:
• You have a strict requirement for an on-premises endpoint solution. We still encourage customers to consider migrating
to SaaS, but we also understand that this may not always be possible even if the customer believes in the value of doing
so. Trend Micro Apex One and Deep Security Software on-prem are still options in this scenario; however, we strongly
recommend that these customers add XDR. On-prem customers would need to continue to use their Trend Micro Apex
One or Deep Security Software console(s) for EPP functionality, but they’d have visibility, detection, and response in Trend
Vision One. As well, the more Trend products they use, the more they benefit from Trend Vision One, XDR, and ASRM.
• While the recommendation is to always buy protection with EDR, if there is a need for only EDR/XDR capabilities, you can
buy a standalone XDR sensor.
• With Trend Vision One – Endpoint Security, we aimed to deliver feature parity for customers moving from Trend Micro Apex One
or Trend Cloud One as much as possible. There are a few limitations which are covered in this KB article.
• Trend Vision One – Endpoint Security is not PCI compliant at launch. Customers requiring this will need to stay on Trend Cloud One
for all endpoints requiring PCI compliance.
• Trend Vision One does not have a data center in Canada or the U.K. Trend Micro Apex One and Trend Cloud One customers in
Canada and Trend Cloud One customers in the U.K. with data sovereignty concerns should not update those products to Trend
Vision One – Endpoint Security. Refer to the Trust Center for a list of our global SaaS data centers.
• Trend Vision One – Endpoint Security is not included in any product suites or bundles, so customers looking for products like
Trend Micro™ Cloud App Security or Trend Micro™ Mobile Security, for example, can purchase those separately.

Resources
• Seller content (FAQ, brochure, customer deck, product video)
• Vision One University (education content)
• Endpoint Security Trial Registration Page

*Note: the combination of EPP and EDR/XDR functionality into a single console is only available to SaaS
customers. On-prem customers will need to maintain their on-prem console for EPP functionality.

©2023 by Trend Micro Incorporated. All rights reserved. Trend Micro, and the Trend Micro t-ball logo, OfficeScan and Trend Micro Control Manager are trademarks
or registered trademarks of Trend Micro Incorporated. All other company and/or product names may be trademarks or registered trademarks of their owners.
Information contained in this document is subject to change without notice. [PB01_TV1_ES_Cheat_Sheet_230726US]

For details about what personal information we collect and why, please see our Privacy Notice on our website at: trendmicro.com/privacy

Page 5 of 5 Seller Cheat Sheet • Trend Vision One™ - Endpoint Security