Analyze, investigate, and respond to incidents and alerts using the power of generative AI.

Trend Vision One™—Companion is an AI-powered chatbot for cybersecurity. Companion can help you to:
  • Investigate, analyze, and respond to Workbench alerts.
  • Generate search queries for the Search app.
  • Answer any questions related to cybersecurity.
  • You need to enable Companion before using the feature.
  • Companion can only understand questions in English.
  • Each user can send up to 100 messages per day and 10 messages per minute. The message limit resets every day at 00:00 UTC.
  • Prompts have a 500-character limit.
  • Companion has filters in place to remove personal information from prompts. Learn more
The following table outlines the available functionality in Companion.
Supported Apps
Open Companion
Click the Companion icon (companion-icon-bw.png) to start a conversation.
All apps and screens in Trend Vision One™.
Explain a Workbench alert
During alert investigations, Companion can explain the alert displayed on your screen.
You can use prompts such as Provide an explanation of this Workbench alert to ask Companion to explain a Workbench alert.
Add response to case
Click Add to Case to add a response as a case note.
Add response to a Workbench alert note
Click Add to Note to add a response to the alert notes.
Generate search queries
When using the Search app, Companion can help you write search queries and decide what is the appropriate search method for your query.
Begin your prompts with Search for or Search in to have Companion create search queries.
Example: Search for all elements where the destination port is 80
  • Search
Add generated search query to search box
Click Add to Search Query to add the generated search query to the search box.
Companion automatically selects the suggested search method when adding queries to the search box.
  • Search
Explain CLI commands in Workbench alerts and search results
Right-click a CLI command element (cmd-icon.png) and choose Explain Command.
Companion can also provide explanations for CLI commands that include base64-encoded elements.