
Apex One
Enterprise · Endpoint protection & EDREnterprise endpoint protection with detection and response capabilities for larger, more complex environments. This is where organizations that have outgrown basic antivirus and need investigation and response tooling land.
IncludedEDR, ransomware protection, vulnerability protection, endpoint sensor
- No user minimum by request
- On-prem or SaaS deployment
- Integrates with Vision One XDR
- Vulnerability protection for unpatched systems

Cloud One – Workload Security
Enterprise · Server & cloud workload protectionServer and cloud workload protection covering physical, virtual, and cloud instances from a single platform. It suits organizations running mixed environments — some servers on-prem, some in AWS or Azure — who want one policy set across all of them.
IncludedAnti-malware, intrusion prevention, integrity monitoring, application control
- Covers physical, virtual, and cloud servers
- Pay-as-you-go or subscription licensing
- Supports AWS, Azure, and on-prem
- Intrusion prevention without a hardware appliance

Email Security
Enterprise · Hosted email protectionCloud-based email security that filters spam, phishing, and business email compromise before it reaches Exchange or Gmail. It sits in front of your existing mailbox provider, so no MX record ownership changes are needed at the mailbox level.
IncludedAnti-spam, anti-phishing, BEC protection, sandbox malware analysis
- Works with Microsoft 365 and Google Workspace
- Business email compromise (BEC) detection
- No on-site hardware required
- Sandbox analysis for suspicious attachments

Vision One
Enterprise · XDR & unified securityA unified detection and response platform correlating signals across endpoints, email, servers, and cloud workloads. This is the layer that ties your other Trend Micro products together into one investigation timeline instead of separate consoles.
IncludedCross-layer detection and response (XDR), threat investigation, automated response
- Correlates alerts across the environment
- Reduces investigation time
- Add-on to existing Trend Micro products
- Automated response playbooks

Apex Central
Enterprise · Centralized security managementA single management console for Apex One and related endpoint products, giving IT teams one place to see policy status, alerts, and compliance across the whole endpoint fleet. It's the layer that keeps multi-site or multi-team deployments from turning into separate, disconnected consoles.
IncludedCentralized policy management, compliance reporting, threat intelligence sharing
- Single console across endpoint deployments
- Compliance and audit reporting
- Reduces admin overhead on multi-site rollouts
- Pairs directly with Apex One

Deep Discovery
Enterprise · Network threat detectionNetwork-level threat detection that inspects traffic for advanced malware and lateral movement that endpoint tools alone can miss. It's typically added where compliance or risk requirements call for network-layer visibility on top of endpoint and email protection.
IncludedNetwork traffic inspection, sandbox analysis, lateral movement detection
- Detects threats endpoint tools alone can miss
- Sandbox analysis for suspicious network traffic
- Feeds detections into Vision One
- Suited to compliance-driven environments