Check Deep Security pricing and billing on AWS Marketplace

In this article, you can learn more about:

Deep Security pricing

Pricing for AWS Marketplace billing subscription, prepaid credit and credit card subscription or Azure Marketplace Deep Security Manager (BYOL) payment options are:

Instance size Example instance types Cost of protected instance per hour (in USD)
Medium or smaller

Amazon EC2: C1, M1, M3, T1, T2

Amazon WorkSpaces

Azure: 1 core


Amazon EC2: C3, C4, M1, M3, M4, R3, T2

Azure: 2 cores

xLarge and bigger

Amazon EC2: C1, C3, C4, CC2, CG1, CR1, D2, G2, HI1, HS1, I2, M1, M2, M3, M4, R3

Azure: 4 or more cores

Data Center

All non-cloud instances


If you are using the prepaid credit option, Trend Micro notifies you when you have 30 days left of credit, estimated based on your current usage. If your credit runs out before you have renewed, your protection remains active but you won't be able to activate any new agents and existing agents will no longer receive any updates.

What Deep Security considers as a protection hour

With Deep Security as a Service AWS Marketplace billing, you pay for any hours during which your computers are protected. A computer that is protected for any part of an hour will be billed for the full hour.

You can see how this is calculated in the usage scenarios below:

Pricing and usage chart

For more information on how to check the current number of billed protection hours, see Check Deep Security as a Service billing and usage in AWS Marketplace.

When Deep Security considers a computer protected

When a computer is considered to be protected by Deep Security as a Service depends on where it is hosted.

Computers in a cloud

For computers added to Deep Security as a Service from a cloud service such as AWS, you are billed when the instance that the agent is protecting is powered on. This means that you will continue to be billed for agents in an "Offline" state if their instances are still powered on.

To avoid being billed for protection unnecessarily, if you are considering turning off an instance's Deep Security Agent, Trend Micro recommends that you power off that instance instead.

Computers not in a cloud

For computers added to Deep Security as a Service that are not on a cloud service, you are billed when the agent is not "Offline". A computer will enter the "Offline" state if the agent protecting it misses one or more heartbeats from the Deep Security Manager.