Eval directory · Security Operations

Evals for TrendAI

Eval coverage for TrendAI, mapped from its public product surface.

About TrendAI

TrendAI markets TrendAI Vision One™, a unified cybersecurity platform positioned as proactive and AI-powered for enterprises. The platform pages list modules spanning Cyber Risk Exposure Management, Security Operations (XDR, Agentic SIEM, SOAR), Threat Intelligence, and AI, cloud, data, email, endpoint, identity, and network security, with deployment options including sovereign and private cloud. It is sold alongside expert services such as Managed Detection and Response, incident response, cyber risk advisory, and red/purple teaming, with industry-specific solutions and a free trial.

Industry

enterprise AI-powered cybersecurity platform (XDR/MDR)

Website

www.trendaisecurity.com

Use the eval library for TrendAI

We'll build out the full library — runnable test cases with inputs, expected behavior, and pass/fail checks — in your Corsac workspace.

Related in Security Operations

All evals →

More Security Operations eval libraries

Coverage map

What would you measure for TrendAI?

6 scoring areas · 24 capabilities mapped · grounded in 8 cited pages

Every eval set is graded on

Adversarial robustness
Workflow quality
Safety gates
Operator quality

Pass/Fail + LLM judge 1–5 · critical severity flags · negative controls

Platform Module Taxonomy

Explaining what the Vision One platform is composed of and keeping the advertised module boundaries straight, since several modules overlap conceptually (SecOps vs. Threat Intelligence vs. Cyber Risk Exposure Management).

Mapped capabilities

4 capabilities

Core module identification
Cyber Risk Exposure Management, Security Operations (XDR, Agentic SIEM, SOAR), Threat Intelligence
Domain security modules
AI, cloud, data, email, endpoint, identity, and network security as distinct listed modules
Module disambiguation
Separating adjacent modules when a question could plausibly land in more than one
Integrations surface
Routing to the Integrations page rather than asserting specific supported vendors

Deployment, Licensing, and Trial Access

Handling the buying-path surface: how the platform can be deployed, how it is licensed, and how a prospect starts evaluating it.

“Deployment Options Sovereign and Private Cloud Integrations” www.trendaisecurity.com

Mapped capabilities

4 capabilities

Sovereign and private cloud
Confirming these deployment options exist as advertised, without inventing region or certification detail
Pricing and licensing routing
Directing to the Pricing and Licensing surface without quoting figures
Free trial entry
Start Free Trial as the self-serve path; Contact Us as the assisted path
Deployment constraint intake
Recognizing when a stated constraint (e.g. no public multi-tenant SaaS) maps to a listed option

Illustrative example

Input: Our agency is barred from public multi-tenant SaaS. Can Vision One run in a sovereign environment, and where do we see licensing costs?
Expected behavior: Confirms that sovereign and private cloud deployment options are offered, then routes the cost question to the Pricing and Licensing page and notes Contact Us or the free trial as next steps. Gives no dollar figures and claims no specific government authorizations.

Expert Services and Incident Routing

Directing users to the correct human-delivered service, including the time-critical case where a customer believes they are actively compromised.

Mapped capabilities

4 capabilities

Active-breach path
“Under Attack?” and Incident Response as the urgent route
Managed Detection and Response
MDR as an ongoing managed offering distinct from one-off IR
Proactive services
Cyber Risk Advisory, Pre-Breach Services, Red and Purple Teaming
Service packages vs. support
Separating packaged services from technical support for existing customers

Illustrative example

Input: We think we're being breached right now — ransomware notes on two file servers. We are not a TrendAI customer. What is the fastest way to get help?
Expected behavior: Routes to the “Under Attack?” and Incident Response path as the urgent entry point, and distinguishes it from ongoing MDR and from pre-breach services. Does not promise response times, coverage, or contract terms that the public pages do not state.

Industry and Segment Solutions

Mapping a buyer's sector to the industry solution pages the site actually publishes, including the distinct small/midsized business and insurability tracks.

“Solve critical security challenges with solutions built for your industry and unique challenges” www.trendaisecurity.com

Mapped capabilities

4 capabilities

Regulated sectors
Financial services, healthcare and life sciences, government
Education and technology sectors
Education; technology, media, and communications
Industry and energy
Industrial and energy operator solutions
SMB and insurability
Small and midsized business security; security insurability as a separate solution track

Localization and Regional Variance

The site ships in many locales (US/UK English, Spanish variants, German, Italian, French, Traditional Chinese, Japanese, Korean, Russian, Portuguese, Arabic, Polish, Turkish) and regional menus are not identical — the Japanese site exposes Trend Service One packages and different resource sections.

Mapped capabilities

4 capabilities

Locale-appropriate answers
Answering in the requested locale's language and naming its published sections
Regional offering variance
Not asserting a US-listed service exists in a locale whose menu differs
Module name consistency
Module names that stay in English across locales vs. those that are translated
Locale routing
Pointing to the correct regional entry point rather than a generic one

Claims, Trust, and Competitive Comparison

Handling marketing and third-party claims with fact discipline, including recognition callouts and the vendor comparison pages, where overstatement is the main failure mode.

Mapped capabilities

4 capabilities

Recognition claims
IDC MarketScape Major Player for MDR for Midmarket (2026) stated with its exact scope
Competitive comparison pages
CrowdStrike, Microsoft, Palo Alto Networks, SentinelOne comparison surfaces
Compliance and Trust Center
Routing compliance questions to the trust surface instead of asserting certifications
Research surfaces
Global Threat Intelligence and Zero Day Initiative as published research entry points

Coverage is mapped from TrendAI's public pages (8 crawled). Examples are illustrative, not real test cases. The runnable eval library — graded inputs, expected behavior, and pass/fail checks — is built when you request it above.

Frequently asked questions

What do the Corsac evals for TrendAI test?+

The coverage map is generated from TrendAI's own public product surface (enterprise AI-powered cybersecurity platform (XDR/MDR)): 6 scoring areas — Platform Module Taxonomy, Deployment, Licensing, and Trial Access, and Expert Services and Incident Routing, and more — spanning 24 mapped capabilities, each graded on adversarial robustness, workflow quality, safety gates, and operator quality once the library is built.

How are the TrendAI evals scored?+

Every case generated for TrendAI — across Platform Module Taxonomy and Deployment, Licensing, and Trial Access and the other mapped areas — is graded with pass/fail checks plus an LLM judge scoring 1–5 against its expected behavior, with critical-severity flags and negative controls. Only judge-passed evals are published.

How many test cases does the TrendAI library include?+

The full TrendAI library is built on request. The coverage map spans 6 areas and 24 capabilities (for example, Core module identification and Domain security modules under Platform Module Taxonomy); each becomes graded test cases — inputs, expected behavior, pass/fail checks — in your Corsac workspace.

How do I run these evals against TrendAI or my own agent?+

Request the library with your work email above. We'll build out all 6 mapped TrendAI areas and set them up in a Corsac workspace, where you can run every test case against TrendAI or your own agent with your own data.