Description
TrendAI Vision One Endpoint Security, Essentials
Essentials is the detection and response tier of TrendAI Vision One endpoint security at 65 credits per endpoint. Everything in Core, plus EDR and XDR, so activity on the endpoint is recorded and correlated with your other Vision One sensors.
Twenty credits separate Essentials from Core, and that gap is the entire detection and response capability. EDR records what happened on the endpoint. XDR correlates it with email, identity, network and cloud telemetry. Neither exists at Core.
What Essentials adds over Core
- Endpoint Detection and Response. Endpoint activity is recorded, so an alert becomes something you can investigate rather than just a block.
- Extended Detection and Response. Endpoint telemetry joins your other Vision One sensors, which is how a phishing click and the process it spawned become one investigation instead of two unrelated alerts.
Everything in Core carries over: antimalware, behavioral analysis, machine learning, web reputation, device control, DLP, firewall, application control, OS level intrusion prevention and virtualization protection.
Where Essentials fits
User endpoints and basic servers, same as Core, in organizations that have someone working alerts, whether that is internal staff or a managed detection and response service. Critical servers and workloads are the Pro case.
Core, Essentials or Pro
| Capability | Core | Essentials | Pro |
|---|---|---|---|
| Credits per endpoint | 45 | 65 | 300 |
| Primary endpoint type | User endpoints and basic servers | User endpoints and basic servers | Critical endpoints including servers and workloads |
| Windows, Linux and macOS | Yes | Yes | Yes |
| Antimalware, behavioral analysis, machine learning, web reputation | Yes | Yes | Yes |
| Device control | Yes | Yes | Yes |
| Data Loss Prevention | Yes | Yes | Yes |
| Firewall and application control | Yes | Yes | Yes |
| Intrusion prevention, OS level | Yes | Yes | Yes |
| Virtualization protection | Yes | Yes | Yes |
| Endpoint Detection and Response (EDR) | No | Yes | Yes |
| Extended Detection and Response (XDR) | No | Yes | Yes |
| Intrusion prevention, server application | No | No | Yes |
| Integrity monitoring and log inspection | No | No | Yes |
Who it is for
Someone works the alerts
Internal IT or an MDR provider who needs EDR to investigate, not just a block notice.
One investigation across layers
XDR joins endpoint activity to email, identity, network and cloud in the same case.
Most of the estate
User endpoints and basic servers. Keep Pro for the critical systems.
Upgrade path
- Endpoint Security Core. Prevention only: antimalware, device control, DLP, firewall and application control.
- Endpoint Security Essentials (this listing). Adds EDR and XDR, so endpoint activity is recorded and correlated with your other Vision One sensors.
- Endpoint Security Pro. Adds server application intrusion prevention, integrity monitoring and log inspection for critical servers.
- Vision One MDR. TrendAI analysts watch and respond around the clock.
Related TrendAI products
| Product | What it adds | Licensed by |
|---|---|---|
| Endpoint Security Core | Prevention for Windows, Linux and macOS | 45 credits per endpoint |
| Endpoint Security Essentials (this listing) | Core plus EDR and XDR | 65 credits per endpoint |
| Endpoint Security Pro | Essentials plus server application IPS, integrity monitoring, log inspection | 300 credits per endpoint |
| Workload Security | Server and workload protection for physical, virtual and cloud servers | TrendAI credits |
| SAP Scanner | Extends Endpoint Security Pro to SAP systems | 4,800 credits per detected endpoint |
| Data Security | Sensitive data discovery and protection on endpoints | 30 credits per endpoint |
| Mobile Security | Phone and tablet threat protection | 5 credits per device |
| Sandbox with Endpoint Security | Files arriving on protected endpoints | 7 credits per endpoint |
Frequently asked questions
What does Essentials add over Core?
EDR and XDR. Core is prevention only. Essentials records endpoint activity and correlates it with your other Vision One sensors, at 65 credits per endpoint against 45 for Core.
Do I need a security team to make use of Essentials?
Somebody has to work the alerts, but that somebody can be a managed service rather than internal staff. If nobody is going to investigate, Core is the honest choice.
Is Essentials enough for servers?
For basic servers, yes. Critical servers and workloads are what Pro is scoped for, and Pro adds server application intrusion prevention and integrity monitoring on top.
How is it licensed?
Per endpoint, at 65 credits per endpoint. The same license covers Windows, Linux and macOS.
Get this quoted by Nuformat
Nuformat licenses TrendAI Vision One for businesses across Canada and the United States. Send us your endpoint count, how many are servers, and whether you need detection and response, and we will confirm the tier and the credit total, usually in two to three business days.
Request a quoteCapabilities and credit values as published by TrendAI. Credit rates confirmed by Nuformat at the time of quotation.

