Credit requirements for Trend Vision One apps and services

Trend Vision One Endpoint Security

The following table describes the available Trend Vision One Endpoint Security offerings and required credits.

Offering	Description	Required credits
Endpoint Sensor Detection and Response	Enable Endpoint Sensors to send activity data for state-of-the-art threat detection and alerting. Data retention period: 30 days (or in accordance with the Trend Vision One Data Retention policy) For more information, see Endpoint Inventory.	20 credits per deployment
Advanced Endpoint Security	Enable layered protection and detection capabilities, like advanced anti-malware, ransomware protection, host-based intrusion prevention, device and application control, and more. Data retention period: 30 days (or in accordance with the Trend Vision One Data Retention policy) For more information, see Standard Endpoint Protection and Server & Workload Protection.	45 credits per deployment
Advanced Server & Workload Protection	Enable advanced threat prevention, detection, and response capabilities optimized for servers, workloads, and other critical assets. Data retention period: 30 days (or in accordance with the Trend Vision One Data Retention policy) For more information, see Server & Workload Protection. For details on credit allocation, see How does credit allocation work for Server & Workload Protection?.	235 credits per deployment

Trend Vision One Email and Collaboration Security

The following table describes the available Trend Vision One Email and Collaboration Security offerings and required credits.

Offering

Description

Required credits

Email Sensor

Enable email sensor detection on user accounts to send activity data for state-of-the-art threat detection and alerting.

Data retention period: 180 days (or in accordance with the Trend Vision One Data Retention policy)

For more information, see Email Sensor.

5 credits per user account

Note

The user accounts that are charged credits are those added as email sensor targets.

Cloud Email and Collaboration Protection

Enable core protection for your email and collaboration services, including services in Microsoft 365 and Google Workspace, Box, and Dropbox.

Data retention period: 180 days (or in accordance with the Trend Vision One Data Retention policy)

For more information, see Cloud Email and Collaboration Protection.

25 credits per synced user account

Note

The user accounts that are charged credits are those synchronized from your organization's directory service.

Enable advanced protection features including Inline Protection and Virtual Analyzer for URLs (URL sandboxing).

Data retention period: 180 days (or in accordance with the Trend Vision One Data Retention policy)

For more information, see Cloud Email and Collaboration Protection.

25 credits per user account

Note

The user accounts that are charged credits are those synchronized from your organization's directory service.

Cloud Email Gateway Protection

Enable core protection to safeguard your email gateways against phishing, ransomware, BEC, other advanced email threats, and spam.

Data retention period: 180 days (or in accordance with the Trend Vision One Data Retention policy)

For more information, see Cloud Email Gateway Protection.

25 credits per user account

Note

The user accounts that are charged credits are your organization's unique email addresses passing through Cloud Email Gateway Protection.

Enable advanced protection features including Virtual Analyzer for URLs (URL sandboxing), Email Encryption, Email Continuity, Extra Large Message Size, and DMARC Report Analysis.

Data retention period: 180 days (or in accordance with the Trend Vision One Data Retention policy)

For more information, see Cloud Email Gateway Protection.

25 credits per user account

Note

The user accounts that are charged credits are your organization's unique email addresses passing through Cloud Email Gateway Protection.

Attack Surface Risk Management

Enabling Attack Surface Risk Management grants you access to the following apps that require credits:

Attack Surface Discovery
Operations Dashboard
Cloud Posture

Executive Dashboard is available without a license or credits. Identity Posture is available to all customers with an Attack Surface Risk Management entitlement. Credits allocated to other offerings, such as Zero Trust Secure Access and Sandbox Analysis, do not contribute to Attack Surface Risk Management credit requirements.

Note

Identity Posture is not available in all regions.

Once enabled, Attack Surface Risk Management automatically discovers your desktops, servers, and connected cloud accounts from your configured data sources, assesses the assets, and then distributes the necessary number of credits from the credits you have allocated. If needed, you may override the automatically calculated number of assessed assets with a different total.

The following table describes the available Attack Surface Risk Management apps and required credits.

App	Description	Required credits
Executive Dashboard	Gain insights into your company’s security posture by understanding your overall risk index, device exposure, on-going attacks, and all contributing factors. For more information, see Executive Dashboard.	No credits required
Attack Surface Discovery	Discover your organizational assets that may be exposed to attack, including devices, internet-facing assets, accounts, cloud apps, and cloud assets. Data retention period: 30 days (or in accordance with the Trend Vision One Data Retention policy) For more information, see Attack Surface Discovery.	20 credits per assessed desktop or server Assessed desktops and servers include the total number of managed desktops and servers plus any unmanaged desktops or servers in your environment that have experienced risk events in the last 30 days. Desktops and servers added to the exception list in Attack Surface Discovery are excepted from credit calculation. 8,000 credits per assessed cloud account Assessed cloud accounts include all connected cloud accounts across all supported cloud service providers.
Operations Dashboard	Quickly assess the cloud access activities and vulnerabilities related to users and devices and determine how to mitigate the risks found in your network. Data retention period: 30 days (or in accordance with the Trend Vision One Data Retention policy) For more information, see Operations Dashboard.
Cloud Posture	Get an overview of your cloud assets' compliance with industry standards and recommended practices. Data retention period: 30 days (or in accordance with the Trend Vision One Data Retention policy) For more information, see Cloud Posture.

Attack Surface Risk Management (add-on to XDR) (formerly Risk Insights Capabilities)

Note

Customers that previously purchased a Risk Insights license retain the current pricing model until the license expires.
Customers that have disabled Attack Surface Risk Management (add-on to XDR) are automatically migrated to the new pricing model when enabling Attack Surface Risk Management after November 20, 2023.

Enabling Attack Surface Risk Management (add-on to XDR) grants you access to Attack Surface Discovery, Operations Dashboard, and Cloud Posture. Executive Dashboard is available without a license or credits. Credits allocated to other offerings, such as Zero Trust Secure Access and Sandbox Analysis, do not contribute to Attack Surface Risk Management credit requirements.

Note

Before enabling Attack Surface Risk Management (add-on to XDR), you must first enable at least one type of XDR sensor.

The following table describes the available Attack Surface Risk Management apps and required credits.

App	Description	Required credits
Executive Dashboard	Gain insights into your company’s security posture by understanding your overall risk index, device exposure, on-going attacks, and all contributing factors. For more information, see Executive Dashboard.	No credits required
Attack Surface Discovery	Discover your organizational assets that may be exposed to attack, including devices, internet-facing assets, accounts, cloud apps, and cloud assets. Data retention period: 30 days (or in accordance with the Trend Vision One Data Retention policy) For more information, see Attack Surface Discovery.	20 credits per endpoint 3 credits per email account 12,500 credits per 500 Mbps
Operations Dashboard	Quickly assess the cloud access activities and vulnerabilities related to users and devices and determine how to mitigate the risks found in your network. Data retention period: 30 days (or in accordance with the Trend Vision One Data Retention policy) For more information, see Operations Dashboard.
Cloud Posture	Get an overview of your cloud assets' compliance with industry standards and recommended practices. Data retention period: 30 days (or in accordance with the Trend Vision One Data Retention policy) For more information, see Cloud Posture.

Trend Vision One XDR for Networks

The following table describes the available Trend Vision One XDR for Networks offerings and required credits.

Offering	Description	Required credits
Virtual Network Sensor	Deploy and connect the Virtual Network Sensor to monitor network activity. Data retention period: 30 days (or in accordance with the Trend Vision One Data Retention policy) For more information, see Network Inventory.	12,500 credits per 500 Mbps Calculated based on total average scanned throughput up to the last 30 days. Credits are allocated dynamically. For more information, see Credit Allocation for Network Inventory.
Deep Discovery Inspector with network sensor	Connect the Deep Discovery Inspector appliance and enable the network sensor feature to monitor network traffic. Data retention period: 180 days (or in accordance with the Trend Vision One Data Retention policy) For more information, see Network Inventory.	25,000 credits per 1 Gbps Calculated based on the configured maximum bandwidth of connected appliances with the network sensor feature enabled. Credits are allocated when Network Sensor is enabled. For more information, see Credit Allocation for Network Inventory.

Trend Vision One Cloud Security

The following table describes the available Trend Vision One Cloud Security offerings and required credits.

Offering	Description	Required credits
Container Security	Ensure the security of your containers from build to termination and shield them against evolving threats at every step. Data retention period: 30 days (or in accordance with the Trend Vision One Data Retention policy) For more information, see Container Security.	1,100 credits per protected Kubernetes node or Amazon ECS instance 110 credits per protected serverless container pod or task Required credits are based on usage over the past 7 days.
File Security	Enable File Security to scan your files and buckets for malicious software to help protect your applications, cloud storage, and more. Data retention period: 180 days (or in accordance with the Trend Vision One Data Retention policy) For more information, see File Security.	5,000 credits per 500,000 scans

Trend Vision One XDR for OT

After you connect your TXOne StellarOne or TXOne EdgeOne to Trend Vision One, credits are automatically allocated when data is transmitted from your managed OT agents or Edge network devices.

The following table describes the available Trend Vision One XDR for OT offerings and required credits.

Offering	Description	Required credits
XDR for OT - Device	Collect detection logs from your managed OT agents to conduct advanced threat analysis on endpoint activity. Data retention period: 30 days (or in accordance with the Trend Vision One Data Retention policy)	20 credits per agent
XDR for OT - Network	Collect detection logs from your EdgeIPS devices to conduct advanced threat analysis on network activity. Data retention period: 30 days (or in accordance with the Trend Vision One Data Retention policy)	200 credits per node

The following table describes the mapping between the device model and converted number of nodes for each OT network device.

Note

You can manage the network device models in the TXOne EdgeOne console.

Product	Model type	Model information	Node unit
EdgeIPS	EdgeIPS-102	IPS 102-BP-R	1
EdgeIPS	EdgeIPS-103	IPS 103-BP-R	1
EdgeIPS Pro	EdgeIPS Pro-1048	IPS Pro-1048-BP	12
EdgeIPS Pro	EdgeIPS Pro-2096	IPS Pro-2096-BP	36
EdgeIPS Pro	EdgeIPS Pro 216-R	IPS Pro-216-BP-R	8
EdgeIPS Pro	EdgeIPS Pro 216-C	IPS Pro-216-BP	8
EdgeIPS Lite	EdgeIPS LE-102	IPS LE-102-BP	1
EdgeFire	EdgeFire 1012	IEF-1012-R	1

Other apps and services

The following table describes the other Trend Vision One offerings and required credits.

Offering

Description

Required credits

Threat Insights

Receive the latest threat intelligence curated by Trend Micro threat experts, and view how current threats are affecting your own environment.

Data retention period: 30 days (or in accordance with the Trend Vision One Data Retention policy)

For more information, see Threat Insights.

50,000 credits per user account

Trend Threat Intelligence Feed

Integrate Trend Threat Intelligence Feed via API into your environment to enhance your security posture.

For more information, see Setting up the API for Trend Threat Intelligence Feed.

Trend Threat Intelligence Feed: 150,000 credits per year
Trend Threat Intelligence Feed for Service Providers: 500,000 credits per year

Mobile Sensor

Enable this sensor to send activity data from mobile devices.

Data retention period: 90 days (or in accordance with the Trend Vision One Data Retention policy)

For more information, see Mobile Inventory.

5 credits per device

Zero Trust Secure Access: Private Access

Gain control over your users' access to internal applications by enabling Private Access.

Data retention period: 180 days (or in accordance with the Trend Vision One Data Retention policy)

For more information, see Private Access .

Private Access: 50 credits per user

Zero Trust Secure Access: Internet Access

Gain control over your users' access to the internet by enabling Internet Access.

Data retention period: 180 days (or in accordance with the Trend Vision One Data Retention policy)

For more information, see Internet Access.

Internet Access and AI Service Access: 60 credits per user

Note

Enabling or disabling certain functions on on-premises gateways causes Zero Trust Secure Access to begin calculating credits for Internet Access based on total vCPU usage. Actions that result in credit calculation by vCPU usage include:

Not requiring user authentication for endpoints connecting without the Secure Access Module installed
Disabling the uploading of activity data from on-premises gateways to Trend Vision One
Enabling ICAP integration

Total required credits are calculated by the number of authenticated users over the last 180 days plus the daily number of vCPUs in use. One vCPU is equivalent to 75 users.

Private IP addresses permitted to bypass user authentication are included in the Internet Access user count when connecting through configured gateways. Each IP address is counted as one user.

Sandbox Analysis: Daily Reserved Submission

Submit objects for analysis in a secure virtual environment to determine the risk they pose to your organization.

Data retention period: 180 days (or in accordance with the Trend Vision One Data Retention policy)

For more information, see Sandbox Analysis.

50 credits per daily reserved submission

Trend Vision One XDR for Cloud: AWS CloudTrail Integrations

Extend detection and response capabilities to your cloud environments to monitor for suspicious behavior and take response actions.

Data retention period: 30 days (or in accordance with the Trend Vision One Data Retention policy)

For more information, see AWS features and permissions.

62 credits per 1 GB of data usage

Data Transfer

Send XDR activity data from Trend Vision One to integrated third-party platforms to conduct data analysis or retain data for regulatory compliance and auditing purposes.

Applicable integrations: AWS S3 bucket connector, Splunk HEC connector, and Datalake Pipeline public APIs

To allocate and manage credits, click Set Up, specify the total Data allowance for data transfer through the applicable integrations, and then click Save.

Note

Daily data usage less than 0.01 GB is calculated as 0.01 GB.

800 credits per 1 TB of data usage