Updating to the new Cyber Risk Exposure Management pricing model

After January 1, 2026, all Trend Vision One Cyber Risk Exposure Management customers currently using the old pricing model will automatically update to the new pricing model.

The old pricing model was available to customers who previously purchased the Attack Surface Risk Management (add-on to XDR) license entitlement, formerly called Risk Insights Capabilities. The old pricing model is not available to new customers,and customers who purchased the Attack Surface Risk Management (add-on to XDR) license will have their licenses automatically converted into credits.

The credit requirement of the old pricing model was equal to the total number of credits allocated to all endpoint, email, and network sensors. In other words, enabling Cyber Risk Exposure Management on the old pricing model doubled your credit allocation to XDR sensors. The old pricing model did not charge for cloud accounts.

The new pricing model is the only model available after January 1, 2026. The new Cyber Risk Exposure Management offering comprises two features, Cyber Risk Exposure Management device assessment and cloud account assessment.

The credit requirement of the new pricing model is based on your number of assessed or assessable desktops and servers, assessed network infrastructure devices discovered by Network Vulnerability Scanner, and assessed cloud assets. The new pricing model does not charge for network or email.

The following table displays the differences in credit requirements between the old and new pricing models for Cyber Risk Exposure Management: