Trend Micro Smart Protection for Endpoints

What is included in Trend Micro Smart Protection for Endpoints?

Apex Central console – Central policies, dashboards and user-based threat view, on-premises or SaaS.
Apex One agent – Single Windows agent combining machine learning, behaviour analysis and ransomware protection.
Vulnerability Protection – Host-based intrusion prevention virtually patches operating system and application vulnerabilities.
Endpoint Application Control – Allow-listing and system lockdown stop unknown programs from executing.
Encryption and DLP – Full disk, file and removable media encryption plus template-based data loss prevention.
Important – Endpoint Sensor EDR needs a separate licence; no patch deployment.

What are the main benefits of Trend Micro Smart Protection for Endpoints?

Trend Micro Smart Protection for Endpoints is a centrally managed endpoint security suite that combines Apex One, the successor to OfficeScan, with encryption, application control and data loss prevention under one Apex Central console. Trend Micro stopped selling the suite to new customers on 1 August 2025 and ended renewals on 31 December 2025, and now directs customers to Trend Vision One, sold under the TrendAI brand since March 2026.

One console, two models – Run Apex Central on your own Windows server or as SaaS.
Fewer agents per device – Vulnerability protection and application control run inside the Apex One agent.
Protection before patching – Virtual patches shield systems until your regular patch window arrives.
Mac and file servers – Security for Mac and ServerProtect extend coverage beyond Windows clients.
Lost notebook scenario – Full disk encryption keeps data unreadable when a device goes missing.
User-centric investigation – Apex Central shows security events per user across all devices.

Why Windows Defender alone is not enough
Explains which gaps remain when a company relies only on the protection built into Windows.

Which company size is Trend Micro Smart Protection for Endpoints suitable for?

The suite is built for organisations with at least one administrator who maintains Apex Central, defines policies and reviews events, which typically means medium-sized and large companies. Because Trend Micro no longer sells or renews the suite, it is mainly relevant for companies that already run Apex One and need to keep an existing environment consistent while they plan the move to Trend Vision One.

Does Trend Micro Smart Protection for Endpoints meet the requirements of Swiss cybersecurity legislation?

The revised Information Security Act obliges operators of critical infrastructure, such as energy, healthcare, transport or finance, to report cyberattacks to the Federal Office for Cybersecurity (BACS) within 24 hours of discovery; most other companies are affected indirectly through requirements from customers in these sectors. Trend Micro Smart Protection for Endpoints supports the detection side of this obligation: Apex Central collects malware, ransomware and intrusion prevention events from all managed endpoints in one place, which gives you the affected devices, users and timestamps a report needs. It does not provide detailed root-cause telemetry unless the separately licensed Endpoint Sensor is added, and it contains no reporting workflow, incident process or backup that would cover recovery. The reporting obligation itself remains an organisational task. This information does not constitute legal advice; for a binding assessment of your obligations, consult a legal specialist.

Does Trend Micro Smart Protection for Endpoints meet the requirements of European cybersecurity legislation?

No software product makes an organisation compliant with the NIS 2 Directive, because the directive requires risk management measures that are largely organisational. These measures include incident handling, business continuity and backup, supply chain security, vulnerability handling, cryptography, access control and asset management, cyber hygiene and training, and multi-factor authentication. The suite supports incident handling through central detection, vulnerability handling through virtual patching, cryptography through Endpoint Encryption, and access control through application and device control. It does not cover backup and continuity, multi-factor authentication, training, actual patch deployment, email security or EDR-based investigation, and since the suite can no longer be renewed, the vendor support status of each component also becomes a supply chain question.

Does Trend Micro Smart Protection for Endpoints help with security questionnaires from large customers?

Partly. The suite gives clear answers to questions about centrally managed anti-malware on Windows and Mac endpoints, full disk encryption on notebooks, control of USB and removable media, application allow-listing and data loss prevention, and Apex Central reports serve as evidence for these points. It does not answer questions about endpoint detection and response or continuous monitoring, patch management with deployment evidence, email and phishing protection, backup, or multi-factor authentication, and questions about vendor-supported, renewable licences are harder to answer since suite renewals ended on 31 December 2025. The cleanest route to close these gaps within the same vendor is Trend Vision One, where the agent installs the endpoint sensor alongside protection and existing Apex One agents can be moved over; check which features your chosen package enables before answering the questionnaire.

What is the difference between Smart Protection for Endpoints and Smart Protection Complete?

The decisive difference is that Smart Protection Complete adds the email and web layers, while Smart Protection for Endpoints stops at the device. Complete includes email gateway and mail server security, Microsoft 365 protection, collaboration security for cloud storage services and a secure web gateway. Both suites share the same endpoint components, and in both the Apex One Endpoint Sensor for EDR is licensed separately. Both suites reached end of sale on the same dates in 2025, so neither is a current upgrade path.

Which limitations should you know before buying?

Trend Micro ended sales of Smart Protection for Endpoints to new customers on 1 August 2025 and ended renewals on 31 December 2025, and this applies to all regions including Europe; the individual components remain supported until their own end-of-life dates, which Trend Micro publishes in its list of supported products. No region-limited features were found, but platform coverage is uneven: the Apex One agent, Vulnerability Protection and Application Control are Windows components, Mac clients receive the separate Security for Mac product, and Linux is covered only for file servers through ServerProtect. EDR through the Endpoint Sensor requires its own licence, and the suite shields vulnerabilities virtually but does not deploy patches. Email and web protection are not part of this suite, and these three gaps are the most common reasons for follow-up purchases.

Best antivirus programs for Windows 2025
Compares current antivirus programs for Windows and the criteria that matter when choosing one.

Frequently asked questions about Trend Micro Smart Protection for Endpoints

Can existing Apex One agents be moved to Trend Vision One?

Yes. Trend Micro documents a migration in which agents are moved from the Apex One server console to Standard Endpoint Protection in Trend Vision One, and policies can be exported from Apex Central beforehand, so endpoints do not have to be reinstalled one by one.

Is Trend Micro now called TrendAI?

Since 23 March 2026, Trend Micro's enterprise business operates under the name TrendAI, and products such as Apex One and Vision One now appear with the TrendAI prefix in consoles and documentation. The consumer business continues under the Trend Micro name.