Advanced Threat Protection

Detect and respond to targeted attacks moving inbound, outbound, and laterally

Real-time protection against targeted attacks

Increasingly, organizations are facing stealthy targeted attacks in their networks. Often custom designed to penetrate standard defenses, these attacks are poised to monetize intellectual property and customer information or to encrypt essential data for ransom.

Our Advanced Threat Protection solution, powered by XGen™ security, delivers a blend of cross-generational threat defense techniques that protect against targeted attacks, advanced threats, and ransomware. Featuring Trend Micro™ Deep Discovery™, Advanced Threat Protection gives you the power to detect, analyze, and respond to today’s stealthy ransomware, its variants, including WannaCry, and targeted attacks in real time.

NSS Labs

Highest detection rate possible

Detect targeted attacks and targeted ransomware anywhere in the network. In NSS Labs 2017 Breach Detection Systems test, Deep Discovery not only detected 100% of the threats, but also posted the quickest detection time, uncovering 90.3% of threats in less than 1 minute — over 15% more than the next closest vendor.

360-degree network protection

Deep Discovery Inspector is a network appliance that monitors all ports and over 105 different network protocols to discover advanced threats and targeted attacks moving in and out of the network and laterally across it. The appliance detects and analyzes malware, command-and-control (C&C) communications, and evasive attacker activities that are invisible to standard security defenses.

Advanced sandbox analysis

Deep Discovery Analyzer provides custom sandbox analysis to extend the value of security products, such as endpoint protection, web and email gateways, network security, and other Deep Discovery offerings. Suspicious objects or URLs are automatically or manually sent for analysis, and threat insight is automatically shared with Trend Micro and third-party products. The analyzer detects ransomware, advanced malware, zero-day exploits, and more.

Threat sharing and network analytics

Deep Discovery utilizes intelligence sharing and analytics to detect and understand advanced threats faster. It shares standards-based (YARA, STIX/TAXII) advanced threat intelligence across your Trend Micro and third-party security solutions. Deep Discovery correlates events by extracting metadata from network traffic to provide you with real-time attack data and visibility.

Choose and combine the Advanced Threat Protection product that's right for you

Deep Discovery Inspector

Monitors all ports and over 105 different network protocols to discover advanced threats and targeted attacks.

Threat Sharing & Analytics

Enables greater threat visibility and faster threat detection by employing standards-based sharing and event correlation.

Deep Discovery Analyzer

Provides customized sandboxing for existing security solutions, including endpoint protection, web gateways, network security, and more.

Simplify your decision

100% Detection Rate Recommended 4 Years in a Row


Achieved Advanced Threat Defense certification in independent testing from ICSA Labs.

Get started with Advanced Threat Protection

Protect more

Network Defense

Trend Micro Network Defense encompasses Advanced Threat Protection by Deep Discovery and Intrusion Prevention by TippingPoint. Together through integration, they provide industry-leading detection and prevention of known, unknown, and undisclosed threats.

Our smart, optimized, and connected technology ensures that everything is working together to give you visibility and control across the evolving threat landscape.