For general billing information on Trend Cloud One, see About Trend Cloud One billing and pricing.
Protection-hours in Workload Security
Cost is based on hours during which your computers are protected by a Deep Security
Agent. Partial protection within a clock-hour boundary is considered a full hour.

Protection-hours start and stop
If the computer was added under an AWS, Azure, or GCP cloud connector: Protection-hours
start when the instance is powered on, and include hours when the agent status is
Offline. Protection-hours stop when the instance is powered off, deleted, or the agent
is uninstalled. You must deactivate the agent before uninstalling it; otherwise, even
if the agent is displayed as Offline in the Trend Cloud One Web console, charges will
continue to incur.
If the computer was added as a data center (not under an AWS, Azure, or GCP connector):
Protection-hours start when the instance is powered on, and excludes hours when the
agent status is Offline.
If your computer is part of a vCenter, it is billed as a data center.
Even if an agent's status is Offline, protection continues with the agent's last known configuration. Other functionality
such as centralized reporting, however, require connectivity with the Workload Security
console. To troubleshoot, see Offline agent. Alternatively, if the computer is decommissioned and will be permanently offline,
you should deactivate its agent on the Workload Security console.
Trial or subscription expired
What happens after your trial or subscription expires depends on your subscription
type:
- Pay-as-you-go: If you cancel your Pay-as-you-go subscription, your subscription type automatically changes to Trial or Subscription Expired. For more information, see Pay-as-you-go billing.
- Annual subscription: If you do not renew your Annual subscription, you are not allowed any new activations and you stop receiving updates, including pattern or rule updates. Your servers continue to be protected and Anti-Malware scans continue to run, however the protection might be outdated. For more information, see Annual subscription.
- Free trial: After your free trial lapses, or when you cancel your pay-as-you-go billing, your subscription type changes to Trial or Subscription Expired. For more information, see Free trial.
Legacy Workload Security billing methods
The following billing methods are no longer supported:
- Annual + Pay as you Go: The Deep Security as a Service | Annual + Pay as You Go listing is no longer offered for new deployments. If you are already subscribed, you can continue to use it until the end of your term. You are billed based on a number of seats, or licenses, that you prepurchase from Trend Micro. 1 seat equals 1 agent, and can be purchased for a 1 month, 1 year, 2 year, or 3 year term. If you need to protect additional computers later, those overages are billed at the pay-as-you-go rate. To lower your costs, Trend Micro applies the Pay-as-you-go rate to the smallest size possible of your instances, and uses the cheaper seat license rate for your largest instances. For example, if you initially purchased 5 seats covering 5 medium instances, and then later added 4 more large instances, your 5 seats would cover the 4 large instances you just added plus 1 of your existing medium instances. The remaining 4 medium instances would be billed at the Pay-as-you-go rate.
- Credit card: Credit card billing is no longer offered for new deployments. You must move to a supported billing method to ensure you maintain your access to the service. You are billed monthly for the protection-hours used the previous month. Workload Security tallies your hourly usage and sends the total owing that month to CleverBridge, a third-party billing service, which subsequently bills you. CleverBridge handles all credit card information and Trend Micro has no access to it. Credit card pricing is the same as Pay-as-you-go.