Cost is based on hours during which your computers are protected by a Deep Security Agent. Partial protection within a clock-hour boundary is considered a full hour.

If the computer was added under an AWS, Azure, or GCP cloud connector: Protection-hours start when the instance is powered on, and include hours when the agent status is Offline. Protection-hours stop when the instance is powered off, deleted, or the agent is uninstalled. You must deactivate the agent before uninstalling it; otherwise, even if the agent is displayed as Offline in the Trend Cloud One Web console, charges will continue to incur.

If the computer was added as a data center (not under an AWS, Azure, or GCP connector): Protection-hours start when the instance is powered on, and excludes hours when the agent status is Offline.

If your computer is part of a vCenter, it is billed as a data center.

Even if an agent's status is Offline, protection continues with the agent's last known configuration. Other functionality such as centralized reporting, however, require connectivity with the Workload Security console. To troubleshoot, see Offline agent. Alternatively, if the computer is decommissioned and will be permanently offline, you should deactivate its agent on the Workload Security console.

To find out what happens after your trial or subscription expires, select your subscription type:

If you cancel your pay-as-you-go subscription, your subscription type automatically changes to Trial or Subscription Expired.

For more information about this subscription type, see Pay as you go billing.

If you do not renew your annual subscription, you are not allowed any new activations and you stop receiving updates, including pattern or rule updates. Your servers continue to be protected and Anti-Malware scans continue to run, however the protection might be outdated.

For more information about this subscription type, see Annual subscription.

After your free trial lapses, or when you cancel your pay-as-you-go billing, your subscription type changes to Trial or Subscription Expired.

For more information about this subscription type, see Free trial.

The following billing methods are no longer supported:

The Deep Security as a Service | Annual + Pay as You Go listing is no longer offered for new deployments. If you are already subscribed, you can continue to use it until the end of your term.

You are billed based on a number of seats, or licenses, that you prepurchase from Trend Micro. 1 seat equals 1 agent, and can be purchased for a 1 month, 1 year, 2 year, or 3 year term. If you need to protect additional computers later, those overages are billed at the pay-as-you-go rate

To lower your costs, Trend Micro applies the pay-as-you-go rate to the smallest size possible of your instances, and uses the (cheaper) seat license rate for your largest instances. For example, if you initially purchased 5 seats covering 5 medium instances, and then later added 4 more large instances, your 5 seats would cover the 4 large instances you just added plus 1 of your existing medium instances. The remaining 4 medium instances would be billed at the Pay as you Go rate.

Credit card billing is no longer offered for new deployments. You must move to a supported billing method to ensure you maintain your access to the service.

You are billed monthly for the protection-hours used the previous month. Workload Security tallies your hourly usage and sends the total owing that month to CleverBridge, a third-party billing service, which subsequently bills you. CleverBridge handles all credit card information so Trend Micro never sees any of it.

Credit card pricing is the same as pay-as-you-go.