Views:

Sandbox Analysis has moved to a simplified credits model. Explore how this model affects you and available configuration options.

Starting January 1, 2026, Sandbox Analysis requires monthly credits. This includes:
  • Sandbox Analysis - Manual Submission
  • Sandbox Analysis - Automatic Submission with Trend Vision One Endpoint Security
  • Sandbox Analysis - Automatic Submission with Trend Vision One for Networks
  • Sandbox Analysis - Automatic Submission with Trend Vision One for ZTSA Internet Access
The sections below answer common questions about credit usage for Sandbox Analysis.
For more information about credit usage, see Credits.
The following sections answer questions about configuration options for Sandbox Analysis manual submissions.

How many credits do I need to use Sandbox Analysis?

Each month, Trend Vision One draws down credits for the previous month's usage based on submission type.

Credits by submission type

Submission
Credits
Per
Manual
2
Submission
Automatic using Endpoint Security
0.58
Endpoint
Automatic using ZTSA
0.58
User
Automatic using Network Security
166.67
500 Mbps of monitored throughput

How and when does Trend Vision One draw down credits?

Trend Vision One deducts credits monthly based on usage. It deducts usage for the current month on the first day of the next month. Unused amounts do not carry over.

How does Trend Vision One round usage?

When calculating your monthly credit drawdown, Trend Vision One rounds credits to the nearest whole number.
For network traffic, Trend Vision One rounds up throughput to the next 500 Mbps tier.
Your usage and credit information updates daily at 5:00 (UTC).

How do I check credit usage?

In Sandbox Analysis, click Manage usage to open the credits drawer then click Usage details.
To view the latest estimated total credit drawdown for the current month, go to Platform Usage and Credits → Credits overview → Credit usage overview.
To view raw credit usage values, download the usage report for each solution, or go to Platform Usage and Credits → Usage management → Usage details and click Download report.

What happens if I run out of credits?

If your credit balance becomes negative, purchase additional credits to continue using Sandbox Analysis.

How do I stop credit drawdown for Sandbox Analysis?

In the credits drawer, disable Sandbox Analysis.

How should I manage Sandbox Analysis credits?

  • Check the credit drawer and usage details regularly.
  • Purchase extra credits in anticipation of seasonal peaks or unexpected incidents.
  • Reduce submissions or buy more credits if usage trends higher than planned.
  • Multiply monthly credits by 12 to budget annual credits.

Before I can download and re-analyze file objects, what setting must I configure?

In the credits drawer, select Allow Trend Micro to save submitted file objects (recommended). You must enable this option to download and re-analyze file objects.

Can I help accelerate detection and response of emerging threats?

Yes, in the credits drawer, select Enable Smart Feedback to share protected threat information with Trend Micro (recommended). This option helps Trend Micro more quickly identify and address threats which, in turn, provides superior protection for you.

Can I use my Deep Discovery Analyzer to analyze submissions?

Yes, in the credits drawer, enable Use your Deep Discovery Analyzer instead of the Sandbox Analysis sandbox. This option is only available when you have connected your Deep Discovery Analyzer to Trend Vision One.
Important
Important
You can connect multiple Deep Discovery Analyzer appliances to Trend Vision One and any of the connected appliances can receive samples. However, Sandbox Analysis currently does not support specifying which Deep Discovery Analyzer appliance analyzes submissions.