Description
TrendAI Vision One Endpoint Security, Core
Core is the prevention tier of TrendAI Vision One endpoint security, licensed at 45 credits per endpoint. It covers Windows, Linux and macOS with antimalware, behavioral analysis, machine learning and web reputation, plus device control, DLP, firewall, application control and OS level intrusion prevention.
Core has no EDR and no XDR. It stops what it recognizes and it does it well, but it does not record what happened, so there is no investigation trail after an incident and nothing feeds into Vision One. If you need to answer the question of how something got in, that starts at Essentials.
What Core covers
- Antimalware, behavioral analysis, machine learning and web reputation across Windows, Linux and macOS.
- Device control for USB and removable media.
- Data Loss Prevention on the endpoint.
- Firewall and application control.
- Intrusion prevention at the OS level, and virtualization protection.
Where Core fits
User endpoints and basic servers, in organizations without a security operations function to work alerts. If nobody is going to investigate a detection, the detection and response capability at Essentials is money spent on a capability that goes unused.
The gap to Essentials is 20 credits per endpoint. That is a small step for what it buys, so price both before settling on Core.
Core, Essentials or Pro
| Capability | Core | Essentials | Pro |
|---|---|---|---|
| Credits per endpoint | 45 | 65 | 300 |
| Primary endpoint type | User endpoints and basic servers | User endpoints and basic servers | Critical endpoints including servers and workloads |
| Windows, Linux and macOS | Yes | Yes | Yes |
| Antimalware, behavioral analysis, machine learning, web reputation | Yes | Yes | Yes |
| Device control | Yes | Yes | Yes |
| Data Loss Prevention | Yes | Yes | Yes |
| Firewall and application control | Yes | Yes | Yes |
| Intrusion prevention, OS level | Yes | Yes | Yes |
| Virtualization protection | Yes | Yes | Yes |
| Endpoint Detection and Response (EDR) | No | Yes | Yes |
| Extended Detection and Response (XDR) | No | Yes | Yes |
| Intrusion prevention, server application | No | No | Yes |
| Integrity monitoring and log inspection | No | No | Yes |
Frequently asked questions
How is Vision One endpoint security licensed?
Per endpoint, at 45 credits per endpoint for Core. An endpoint is a protected device, whether that is a laptop, a desktop or a basic server. Send us your device count and we will convert credits to your contracted rate.
Does Core include EDR?
No. Endpoint Detection and Response starts at Essentials, as does XDR. Core is prevention only, so it blocks known and behaviorally suspicious activity but keeps no investigation trail.
Which operating systems does Core support?
Windows, Linux and macOS, on physical and virtual machines. Virtualization protection is included at every tier.
When should I choose Essentials over Core?
When somebody will act on detections. EDR and XDR are only worth licensing if there is a person or a managed service working the alerts. For 20 credits more per endpoint, Essentials adds both.
Get this quoted by Nuformat
Nuformat licenses TrendAI Vision One for businesses across Canada and the United States. Send us your endpoint count, how many are servers, and whether you need detection and response, and we will confirm the tier and the credit total, usually in two to three business days.
Request a quoteCapabilities and credit values as published by TrendAI. Credit rates confirmed by Nuformat at the time of quotation.

