Credit requirements for Trend Vision One solutions

Agentic SIEM - Analytic Data Ingestion

Analytic ingestion (Third-party data)

Third-party analytic ingestion collects third-party log data for analysis, correlation, and threat hunting, and supports both analytic and archival retention.

0.25 credits per 1 GB of data usage

Agentic SIEM - Archival Data Ingestion

Archival ingestion (Third-party data)

Third-party archival ingestion collects third-party log data for infrequent queries or to meet compliance requirements, and only supports archival retention.

0.08 credits per 1 GB of data usage

Agentic SIEM - Analytic Data Retention

Analytic retention (Platform data)

Connected Agentic SIEM & XDR data sources supply data used for analysis, threat hunting, and event correlation. Data is retained using analytic retention, which allows for more frequent data queries.

0.2 credits per 1 GB of data usage

Analytic retention (Third-party data)

Connected third-party data sources supply data used for analysis, threat hunting, and event correlation. Data is retained using analytic retention, which allows for more frequent data queries.

0.2 credits per 1 GB of data usage

Agentic SIEM - Archival Data Retention

Archival retention (Platform data)

Connected Agentic SIEM & XDR data sources supply data used for analysis, threat hunting, and event correlation. Archival retention is used to retain data for compliance purposes or infrequent queries, and is only available when collecting data using a log repository.

0.05 credits per 1 GB of data usage

Archival retention (Third-party data)

Connected third-party data sources supply data used for analysis, threat hunting, and event correlation. Archival retention is used to retain data for compliance purposes or infrequent queries, and is only available when collecting data using a log repository.

0.05 credits per 1 GB of data usage

Trend hosted AI Scanner and AI Guard

Scan your AI applications for common attack techniques, attack objectives, and harmful or sensitive content in inputs and outputs.

800 credits for 5,000 API calls daily

Self hosted AI Scanner and Guard

Deploy the self hosted AI Scanner and Guard in your AWS environment to ensure data sovereignty. Only scan results will be sent to Trend Vision One.

Scan your AI applications for common attack techniques, attack objectives, and harmful or sensitive content in inputs and outputs.

600 credits per instance

Ensure the security of your containers from build to termination and shield them against evolving threats at every step.

Container Security - Custom detection rules

Provides visibility into any activity of your running containers that violates your organization’s custom rules.

0.25 credits per 1 GB of custom rule data usage

Cyber Risk Exposure Management - Core

Proactively uncover, assess, and mitigate threats to reduce your cyber risk footprint.

Includes Cyber Risk Overview, Attack Surface Discovery, Threat and Exposure Management, Identity Security Posture, and Network Vulnerability Scanner capabilities.

1.67 credits per assessed or assessable desktop or server

Cyber Risk Exposure Management - Essentials

Proactively uncover, assess, and mitigate threats to reduce your cyber risk footprint.

Includes all Cyber Risk Exposure Management - Core capabilities plus Attack Path Prediction, Security Awareness, and Compliance Management capabilities.

Cloud account assessment 1-500 resources or cloud assets

Provides CSPM, EASM, DSPM, API risk visibility, attack path identification, agentless vulnerability and malware scanning, ASPM, and cloud identity entitlement. Licensed in tier increments of 500 cloud resources, per cloud account. Available independently of XDR.

83.33 credits per assessed cloud account

Cloud account assessment for 501-1,000 resources or cloud assets

166.67 credits per assessed cloud account

Cloud account assessment for 1,001-1,500 resources or cloud assets

250 credits per assessed cloud account

Cloud account assessment for 1,501-2,000 resources or cloud assets

333.33 credits per assessed cloud account

Cloud account assessment for 2,001-2,500 resources or cloud assets

416.67 credits per assessed cloud account

Cloud account assessment for 2,501-3,000 resources or cloud assets

500 credits per assessed cloud account

Cloud account assessment for 3,001-3,500 resources or cloud assets

583.33 credits per assessed cloud account

Cloud account assessment for 3,500+ resources or cloud assets

666.67 credits per assessed cloud account

Data transfer to third-party platforms

Send XDR activity data from Trend Vision One to integrated third-party platforms to conduct data analysis or retain data for regulatory compliance and auditing purposes.

800 credits per 1 TB of data

XDR for Email (EmDR)

Add Trend Vision One XDR to correlate email threats with broader attack patterns and stop phishing, BEC, and malware before they spread.

0.42 credits per user

Email and Collaboration Security - Core

or

Complete email security solution that includes anti-phishing, malware and spam filtering, Data Loss Prevention, account takeover, internal message scanning, file sandboxing, retro-scanning and more.

Supports the API-based (Cloud Email and Collaboration Protection) or MX-based (Cloud Email Gateway Protection) deployment.

2.08 credits per user

Email and Collaboration Security - Essentials

or

Advanced email security protection that includes all Email and Collaboration Security Core features, plus URL sandboxing, Email Continuity, Email Encryption, advanced DMARC analysis and more.

Supports the API-based (Cloud Email and Collaboration Protection) or MX-based (Cloud Email Gateway Protection) deployment.

4.17 credits per user

Email and Collaboration Security - Pro

In addition to all features included in Email and Collaboration Security Essentials, Pro adds XDR for Email – correlating user email, threat logs, and user behavior for deeper visibility into suspicious activity.

Supports both the API-based (Cloud Email and Collaboration Protection) and MX-based (Cloud Email Gateway Protection) deployments.

8.75 credits per user

Endpoint Security Core

Anti-malware, web reputation, firewall, device control, data loss prevention, application control, intrusion prevention (IPS) for laptops and desktops, and more.

3.75 credits per endpoint

Endpoint Security Essentials

All features provided by Trend Vision One Endpoint Security Core, XDR for Endpoints (EDR).

5.42 credits per endpoint

Endpoint Security Pro

All features provided by Trend Vision One Endpoint Security Essentials, integrity monitoring, log inspection, intrusion prevention for servers (IPS), recommendation scan, and container protection.

25 credits per endpoint

XDR for Endpoints (EDR)

Trend Vision One XDR capabilities to detect and respond to suspicious endpoint activity.

1.67 credits per endpoint

SAP Scanner for Endpoint Security - Pro

Anti-malware scanning for SAP NetWeaver via the Virus Scan Interface (VSI). Requires Trend Vision One Endpoint Security Pro license for each SAP server, host, or computer using NW-VSI 2.0.

400 credits per SAP server/host

Sandbox Analysis - Automatic Submission with Trend Vision One Endpoint Security

Automatically submits suspicious samples that Trend Vision One Endpoint Security detects to Trend Vision One - Sandbox Analysis.

Compatible with Trend Vision One Endpoint Security Core and Essentials only. The number of units for the sandbox must match the number of devices for Trend Vision One Endpoint Security.

0.58 credits per endpoint

Data Security for Endpoints

Data Security Sensor sends activity data to trace and analyze the movement of sensitive data defined by your data policies in Data Security. Data Security Sensor monitors local assets and devices for sensitive data in the data inventory, and also traces the movement of sensitive data to create a data lineage graph viewable in Observed Attack Techniques and Workbench.

2.5 credits per endpoint

File Security Storage

Protect object storage across Amazon S3, Azure Blob Storage, and Google Cloud Storage with File Security Storage. Choose from two pricing plans based on the amount of data you protect.

File Security SDK

Files scanned using the File Security SDK is charged on a per-scan basis, allowing you to secure files on any application.

5,000 credits per 500,000 scans

File Security Virtual Appliance

File Security Virtual Appliance protects files across your on-premises servers and cloud-hosted file servers. Choose from two pricing plans based on the amount of data you protect.

File Security Containerized Scanner

Secure file storage from vendors like NetApp, Hitachi, and Dell (using NFS, SMB, ICAP) via a containerized scanner. Choose from two pricing plans based on the amount of data you protect.

Evidence Collection

Evidence Collection offers a seamless experience for SOC analysts or DFIR specialists to conduct security investigations. Trend Vision One XDR for Endpoints (EDR) is required for evidence collection.

400 credits per 1 GB of storage

Enroll mobile devices to detect malicious mobile apps and identify other risks.

0.42 credits per device.

Sandbox Analysis - Manual Submission

Provides sandbox capacity for Trend Vision One or API submissions.

Only the following submitters count toward the submissions: Observed Attack Techniques, Response Management, Sandbox Analysis, Sandbox Public API, XDR Data Explorer, Security Playbooks (Automated Response Playbook), and Workbench.

2 credits per submission

Sandbox Analysis - Automatic Submission with Trend Vision One Endpoint Security

Automatically submits suspicious samples that Trend Vision One Endpoint Security detects to Trend Vision One - Sandbox Analysis.

Compatible with Trend Vision One Endpoint Security Core and Essentials only. The number of units for the sandbox must match the number of devices for Trend Vision One Endpoint Security.

0.58 credits per endpoint

Sandbox Analysis - Automatic Submission with Trend Vision One for Zero Trust Secure Access Internet Access

Automatically submits suspicious samples that Trend Vision One Endpoint Security detects to Trend Vision One - Sandbox Analysis. Requires Trend Vision One Zero Trust Secure Access Internet Access.

0.58 credits per user

Sandbox Analysis - Automatic Submission with Trend Vision One for Networks

Sandbox Analysis for Virtual Network Sensor

Enable the Send to Sandbox feature to automatically submit suspicious samples detected by Virtual Network Sensor to Trend Vision One - Sandbox Analysis.

166.67 credits per 500 Mbps of monitored throughput

Sandbox Analysis for Deep Discovery Inspector

Enable the Send to Sandbox feature to automatically submit suspicious samples detected by Deep Discovery Inspector to Trend Vision One - Sandbox Analysis.

166.67 credits per 500 Mbps of monitored throughput

Sandbox Analysis for TippingPoint Network Sensor

Enable the Send to Sandbox feature to automatically submit suspicious files detected by TippingPoint Network Sensor to Trend Vision One - Sandbox Analysis.

166.67 credits per 500 Mbps of monitored throughput

Get curated threat intelligence to stay ahead of attacks. Access detailed insights on threat actors and campaigns, including ready-to-use hunting queries and strategic reports that help you detect and analyze threats proactively. You can also receive a continuously updated feed of indicators of compromise (IoCs), delivered directly to your security tools through API integration with Trend Vision One.

6,666.67 credits per Trend Vision One account/tenant/business ID

XDR for Cloud

Cloud Detections for AWS CloudTrail

Forward your Cloud Audit logs to Trend Vision One to gain actionable insight into user, service, and resource activity. Leverage over 150 detection models, combined with global threat intelligence, to identify activity such as privilege escalation, password modification, and other attack techniques. Correlate and prioritize threat signals and automate response actions across your environment.

3 credits per 1 GB of uploaded data

Cloud Detections for Amazon Security Lake

Forward your Security Lake data to Trend Vision One, including CloudTrail logs, VPC Flow Logs, WAF logs, EKS audit logs, Route 53 Resolver query logs, and Security Hub findings.

Cloud Detections for AWS VPC Flow Logs

VPC Flow Log Monitoring in your AWS account collects your Virtual Private Cloud (VPC) flow logs enabling Trend Vision One to gather insight into your VPC traffic, with detection models to identify and provide alerts on malicious IP traffic, SSH brute force attacks, data exfiltration, and more.

XDR for Networks (NDR)

Virtual Network Sensor

Deploy and connect the Virtual Network Sensor to monitor network activity.

1,041.67 credits per 500 Mbps of monitored throughput

TippingPoint Network Sensor

Connect your TippingPoint SMS and enable the Network Sensor feature on managed appliances to monitor network traffic.

1,041.67 credits per 500 Mbps of monitored throughput

XDR for Networks (NDR) - Deep Discovery Inspector

Deep Discovery Inspector Network Sensor

Connect the Deep Discovery Inspector appliance and enable the Network Sensor feature to monitor network traffic.

1,041.67 credits per 500 Mbps of monitored throughput

Sandbox Analysis - Automatic Submission with Trend Vision One for Networks

Sandbox Analysis for Virtual Network Sensor

Enable the Send to Sandbox feature to automatically submit suspicious samples detected by Virtual Network Sensor to Trend Vision One - Sandbox Analysis.

166.67 credits per 500 Mbps of monitored throughput

Sandbox Analysis for Deep Discovery Inspector

Enable the Send to Sandbox feature to automatically submit suspicious samples detected by Deep Discovery Inspector to Trend Vision One - Sandbox Analysis.

166.67 credits per 500 Mbps of monitored throughput

Sandbox Analysis for TippingPoint Network Sensor

Enable the Send to Sandbox feature to automatically submit suspicious files detected by TippingPoint Network Sensor to Trend Vision One - Sandbox Analysis.

166.67 credits per 500 Mbps of monitored throughput

Private Access

Gain control over your users' access to internal applications by enabling Private Access.

4.17 credits per user

Internet Access

Internet Access

Gain control over your users' access to web by enabling Internet Access.

5 credits per user

Send to Sandbox add-on

With Send to Sandbox, Internet Access submits highly suspicious files, portable executables, and Office or PDF files to a virtual sandbox for analysis.

0.58 credits per user

AI Secure Access

Gain control over your users' access to generative AI resources by enabling AI Secure Access.

4.17 credits per user

Internet Access and AI Secure Access

Internet Access and AI Secure Access

Gain control over your users' access to web and to generative AI resources by enabling Internet Access and AI Secure Access.

7.08 credits per user

Send to Sandbox add-on

With Send to Sandbox, Internet Access submits highly suspicious files, portable executables, and Office or PDF files to a virtual sandbox for analysis.

0.58 credits per user

Outbound Static IP

Forwards outbound web traffic through static IP addresses provisioned via Internet Access and/or AI Service Access.

333.33 credits per 256 Mbps of bandwidth