Description
TrendAI Vision One Endpoint Security, Core
Core is the prevention tier of TrendAI Vision One endpoint security, licensed at 45 credits per endpoint. It covers Windows, Linux and macOS with antimalware, behavioral analysis, machine learning and web reputation, plus device control, DLP, firewall, application control and OS level intrusion prevention.
Core has no EDR and no XDR. It stops what it recognizes and it does it well, but it does not record what happened, so there is no investigation trail after an incident and nothing feeds into Vision One. If you need to answer the question of how something got in, that starts at Essentials.
What Core covers
- Antimalware, behavioral analysis, machine learning and web reputation across Windows, Linux and macOS.
- Device control for USB and removable media.
- Data Loss Prevention on the endpoint.
- Firewall and application control.
- Intrusion prevention at the OS level, and virtualization protection.
Where Core fits
User endpoints and basic servers, in organizations without a security operations function to work alerts. If nobody is going to investigate a detection, the detection and response capability at Essentials is money spent on a capability that goes unused.
The gap to Essentials is 20 credits per endpoint. That is a small step for what it buys, so price both before settling on Core.
Core, Essentials or Pro
| Capability | Core | Essentials | Pro |
|---|---|---|---|
| Credits per endpoint | 45 | 65 | 300 |
| Primary endpoint type | User endpoints and basic servers | User endpoints and basic servers | Critical endpoints including servers and workloads |
| Windows, Linux and macOS | Yes | Yes | Yes |
| Antimalware, behavioral analysis, machine learning, web reputation | Yes | Yes | Yes |
| Device control | Yes | Yes | Yes |
| Data Loss Prevention | Yes | Yes | Yes |
| Firewall and application control | Yes | Yes | Yes |
| Intrusion prevention, OS level | Yes | Yes | Yes |
| Virtualization protection | Yes | Yes | Yes |
| Endpoint Detection and Response (EDR) | No | Yes | Yes |
| Extended Detection and Response (XDR) | No | Yes | Yes |
| Intrusion prevention, server application | No | No | Yes |
| Integrity monitoring and log inspection | No | No | Yes |
Who it is for
Prevention on every laptop and desktop
Antimalware, behavioral analysis, machine learning and web reputation on Windows, Linux and macOS.
USB and data control
Device control for removable media and endpoint DLP are already in Core.
A starting tier
Move to Essentials when you need to investigate how an attack got in.
Upgrade path
- Endpoint Security Core (this listing). Prevention only: antimalware, device control, DLP, firewall and application control.
- Endpoint Security Essentials. Adds EDR and XDR, so endpoint activity is recorded and correlated with your other Vision One sensors.
- Endpoint Security Pro. Adds server application intrusion prevention, integrity monitoring and log inspection for critical servers.
- Vision One MDR. TrendAI analysts watch and respond around the clock.
Related TrendAI products
| Product | What it adds | Licensed by |
|---|---|---|
| Endpoint Security Core (this listing) | Prevention for Windows, Linux and macOS | 45 credits per endpoint |
| Endpoint Security Essentials | Core plus EDR and XDR | 65 credits per endpoint |
| Endpoint Security Pro | Essentials plus server application IPS, integrity monitoring, log inspection | 300 credits per endpoint |
| Workload Security | Server and workload protection for physical, virtual and cloud servers | TrendAI credits |
| SAP Scanner | Extends Endpoint Security Pro to SAP systems | 4,800 credits per detected endpoint |
| Data Security | Sensitive data discovery and protection on endpoints | 30 credits per endpoint |
| Mobile Security | Phone and tablet threat protection | 5 credits per device |
| Sandbox with Endpoint Security | Files arriving on protected endpoints | 7 credits per endpoint |
Frequently asked questions
How is Vision One endpoint security licensed?
Per endpoint, at 45 credits per endpoint for Core. An endpoint is a protected device, whether that is a laptop, a desktop or a basic server. Send us your device count and we will convert credits to your contracted rate.
Does Core include EDR?
No. Endpoint Detection and Response starts at Essentials, as does XDR. Core is prevention only, so it blocks known and behaviorally suspicious activity but keeps no investigation trail.
Which operating systems does Core support?
Windows, Linux and macOS, on physical and virtual machines. Virtualization protection is included at every tier.
When should I choose Essentials over Core?
When somebody will act on detections. EDR and XDR are only worth licensing if there is a person or a managed service working the alerts. For 20 credits more per endpoint, Essentials adds both.
Get this quoted by Nuformat
Nuformat licenses TrendAI Vision One for businesses across Canada and the United States. Send us your endpoint count, how many are servers, and whether you need detection and response, and we will confirm the tier and the credit total, usually in two to three business days.
Request a quoteCapabilities and credit values as published by TrendAI. Credit rates confirmed by Nuformat at the time of quotation.

