Deep Discovery Inspector

Detect targeted attacks and targeted ransomware anywhere in your network


Monitor everything

Trend Micro™ Deep Discovery™ Inspector provides 360 degrees of visibility by monitoring all network ports and over 105 different protocols. A single Deep Discovery Inspector appliance monitors east-west traffic (or lateral movement) and north-south traffic.


Leverage custom sandboxing

Unlike other sandbox solutions, Deep Discovery uses custom sandboxes. Virtual images are used to match operating system configurations, drivers, installed applications, and language versions. Difficult for hackers to evade, they include a “safe live mode” and analyze multi-stage downloads, URLs, command-and-control, and more.


Advanced detection and response

Trend Vision One™ gives you the ability to correlate advanced threat events and prioritize your response. Just press play and visualize the attack life cycle at the network layer, including managed and unmanaged devices – contractor/third-party systems, IoT and IIoT devices, printers, and BYOD systems.


Extensive detection techniques

Prevent data breaches expand_more

Detect and prevent breaches

Trend Micro Deep Discovery Inspector is available as a physical or virtual network appliance. It’s designed to quickly detect advanced malware that typically bypasses traditional security defenses and exfiltrates sensitive data. Specialized detection engines and custom sandbox analysis detect and prevent breaches.

Prioritize and identify threats expand_more

Glean actionable data from the flood of threat intelligence

Network analytics help prioritize threats and provide visibility into an attack. By looking back up to 180 days, you can see the point of entry and impact. And standards-based advanced threat intelligence sharing (e.g. STIX/TAXII and YARA) keeps you ahead of threats while Trend Micro™ Deep Discovery™ automates the sharing of threat information across security solutions, strengthening multiple links in the security chain simultaneously.

Detect targeted ransomware expand_more

Detect targeted ransomware

Deep Discovery Inspector uses known and unknown patterns and reputation analysis to detect the latest ransomware attacks, including WannaCry. The customized sandbox detects mass file modifications, encryption behavior, and modifications to backup and restore processes.

Trend Micro™ Deep Discovery™ Email Inspector stops targeted ransomware attacks by blocking targeted spear phishing emails before they are delivered.

Extend your detection and response capabilities with managed XDR

We offer 24/7 alert monitoring, alert prioritization, investigation, and threat hunting as a managed service. Trend Micro™ Managed XDR includes standard or advanced service packages across email, endpoints, servers, cloud workloads, and networks.

Market-leading performance

Achieved Advanced Threat Defense certification in independent testing from ICSA Labs

What customers say
"Trend Micro Deep Discovery is looking at those dark corners of the network to see if there is traffic that deviates from baseline. It gives us visibility into our network, so we can immediately see and shut down anything malicious before it becomes a problem."
John Dickson,
Director IT Infrastructure

Explore related resources


Solution Brief

Lateral Movement



Deep Discovery Inspector



Detect lateral movement of known, unknown, and undisclosed threats

Other Network Security Products


Deep Discovery Analyzer

Detects ransomware, advanced malware, zero-day exploits, command and control, and multi-stage downloads


Trend Micro™ TippingPoint™

Provides high-speed, inline intrusion prevention system inspection and comprehensive threat protection against known and undisclosed vulnerabilities


Trend Micro™ Deep Discovery™ Director

Provides central management, data deduplication, log aggregation, advanced threat sharing, and more for the Deep Discovery family


Get started with Deep Discovery Inspector