TrendAI Vision One Managed Detection and Response
A 24/7/365 service where TrendAI analysts monitor your environment, investigate high-risk alerts and give you a step-by-step remediation plan.
Know the exact item? Search above to go straight to it. Or buy from the options below.
| Capability | Included |
|---|---|
| 24/7/365 monitoring and alert triage | Yes |
| Investigation with root cause, attack vector, dwell time and impact | Yes |
| Containment: endpoint isolation, process kill, account disable | Yes |
| Step-by-step remediation plan and monthly reporting | Yes |
| Full incident response, onsite or remote | Separate engagement |
What is TrendAI Vision One MDR?+
A 24/7/365 service where TrendAI analysts monitor activity data from your TrendAI products, investigate high-risk threats and provide recommended actions. It covers email, endpoints, servers, cloud workloads and network from one console.
Does it include incident response?+
No. TrendAI states that the MDR service does not include incident response, onsite or remote. Investigations are limited to data from the MDR-licensed products. If you need the provider to carry out the full cleanup, compare against Sophos MDR Plus, which includes it.
What subscriptions are available?+
MDR for Users, Servers and Workload Security, where messaging is included and mailboxes are not counted separately, and MDR for Networks, licensed separately.
Do I still need Vision One XDR licences?+
Yes. MDR is the managed service layer on top of the platform, not a replacement for it. You need XDR licences for the products being monitored.

