TrustRadius: an HG Insights company

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    Cofense Triage

    Score9.4 out of 10
    Enterprise companies (1,001+ employees)
    Cofense Triage accelerates phishing qualification, investigation, and response by automating standard responses to suspicious emails to make analysts more efficient and driving out actionable intelligence, and providing incident response playbook.N/A

    Microsoft Defender for Endpoint

    Score8.8 out of 10
    N/AMicrosoft Defender for Endpoint (formerly Microsoft Defender ATP) is a holistic, cloud delivered endpoint security solution that includes risk-based vulnerability management and assessment, attack surface reduction, behavioral based and cloud-powered next generation protection, endpoint detection and response (EDR), automatic investigation and remediation, managed hunting services, rich APIs, and unified security management.

    $2.50

    per user/per month

    Pricing
    Cofense TriageMicrosoft Defender for Endpoint
    Editions & Modules
    No answers on this topic
    Academic
    $2.50
    per user/per month
    Standalone
    $5.20
    per user/per month
    Offerings
    Pricing Offerings
    Cofense TriageMicrosoft Defender for Endpoint
    Free Trial
    YesYes
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    YesNo
    Entry-level Setup FeeOptionalNo setup fee
    Additional Details——
    More Pricing Information
    Community Pulse
    Cofense TriageMicrosoft Defender for Endpoint
    Considered Both Products
    Cofense
    Chose Cofense Triage
    Cofense is easier to use and is at least 6-12 months ahead in functionality.
    Incentivized
    Microsoft
    No answer on this topic
    Key User Insights
    Would buy again
    89%
    Would buy again
    33 Answers
    96%
    Would buy again
    157 Answers
    Delivers good value for the price
    96%
    Delivers good value for the price
    24 Answers
    99%
    Delivers good value for the price
    146 Answers
    Happy with the feature set
    97%
    Happy with the feature set
    36 Answers
    95%
    Happy with the feature set
    155 Answers
    Lived up to sales and marketing promises
    100%
    Lived up to sales and marketing promises
    18 Answers
    97%
    Lived up to sales and marketing promises
    130 Answers
    Implementation went as expected
    91%
    Implementation went as expected
    20 Answers
    95%
    Implementation went as expected
    140 Answers
    Features
    Cofense TriageMicrosoft Defender for Endpoint
    Incident Response Platforms
    Comparison of Incident Response Platforms features of Cofense Triage and Microsoft Defender for Endpoint
    Feature
    Cofense Triage
    6.4
    35 Ratings
    33% below category average
    Microsoft Defender for Endpoint
    -
    Ratings
    Integration with Other Security Systems5.034 Ratings00 Ratings
    Attack Chain Visualization6.127 Ratings00 Ratings
    Centralized Dashboard7.735 Ratings00 Ratings
    Live Response for Rapid Remediation6.731 Ratings00 Ratings
    Endpoint Security
    Comparison of Endpoint Security features of Cofense Triage and Microsoft Defender for Endpoint
    Feature
    Cofense Triage
    -
    Ratings
    Microsoft Defender for Endpoint
    8.7
    79 Ratings
    2% above category average
    Anti-Exploit Technology00 Ratings9.075 Ratings
    Endpoint Detection and Response (EDR)00 Ratings9.179 Ratings
    Centralized Management00 Ratings8.679 Ratings
    Hybrid Deployment Support00 Ratings7.110 Ratings
    Infection Remediation00 Ratings9.077 Ratings
    Vulnerability Management00 Ratings8.774 Ratings
    Malware Detection00 Ratings9.278 Ratings
    Best Alternatives
    Cofense TriageMicrosoft Defender for Endpoint
    Small Businesses
    No answers on this topic
    SentinelOne Singularity
    Score9 out of 10
    Medium-sized Companies
    No answers on this topic
    BlackBerry Protect (CylancePROTECT)
    Score9.1 out of 10
    Enterprises
    No answers on this topic
    ESET PROTECT
    Score8.8 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    Cofense TriageMicrosoft Defender for Endpoint
    Likelihood to Recommend
    7.5
    (38 ratings)
    8.9
    (169 ratings)
    Likelihood to Renew
    10.0
    (1 ratings)
    8.4
    (10 ratings)
    Usability
    10.0
    (1 ratings)
    8.6
    (40 ratings)
    Availability
    10.0
    (1 ratings)
    9.1
    (1 ratings)
    Performance
    10.0
    (1 ratings)
    9.1
    (1 ratings)
    Support Rating
    -
    (0 ratings)
    9.0
    (7 ratings)
    In-Person Training
    10.0
    (1 ratings)
    -
    (0 ratings)
    Implementation Rating
    10.0
    (1 ratings)
    7.3
    (1 ratings)
    Configurability
    10.0
    (1 ratings)
    8.2
    (1 ratings)
    Product Scalability
    10.0
    (1 ratings)
    9.1
    (1 ratings)
    Vendor post-sale
    10.0
    (1 ratings)
    -
    (0 ratings)
    Vendor pre-sale
    10.0
    (1 ratings)
    -
    (0 ratings)
    User Testimonials
    Cofense TriageMicrosoft Defender for Endpoint
    Likelihood to Recommend
    Cofense
    The tool is very helpful in improving Phishing detection capabilities as it streamlines the process of analyzing user reports a lot. Besides it has a built-in mechanism of rating reporters(end-users) based on their historical performance. Downside - tool requires continuous resource investment to deliver best result. Tool is not helping too much in improving user-education, because automated response process is not immediate and is prone to errors
    Incentivized
    Read full review
    Microsoft
    If you have multiple endpoints in your environment, if you're looking to understand what your environment looks like, if you're trying to identify the health of your environment, or identify any risks or vulnerabilities in your environment pertaining to your endpoints and devices.
    Incentivized
    Read full review
    Pros
    Cofense
    • Separating links and attachments contained in the email, and checking to see if they are known malicious.
    • Clustering like emails to save time when responding.
    • Providing risks scores with each cluster to give an estimate on which clusters should be addressed first.
    Incentivized
    Read full review
    Microsoft
    • The big thing for us is on endpoint, it kind of integrates with everything else that we already have because we use Microsoft completely. And so that helps us with being able to integrate, and send things over to Azure Sentinel as we need to as well.
    Incentivized
    Read full review
    Cons
    Cofense
    • There are too many interdependent pieces which you have to acquire separately.
    • I think Cofense has a lot of capabilities and usefulness, but I think it's too a la carte.
    • We own Cofense and PhishMe currently and there are some gaping holes that require additional licensing to close.
    Incentivized
    Read full review
    Microsoft
    • I'd say building out summaries and log reviews for analysts reviewing incidents. So, pivoting from the alerts themselves to actually getting the detail underneath. Trying to understand what caused an alert, where they went from there, et cetera, et cetera. And then trying to get into deeper log review to take that investigation further can be a pain point.
    Incentivized
    Read full review
    Likelihood to Renew
    Cofense
    Cofense is stable and provides easy to use solution to aid the investigation of emails as well as managing simulated phishing campaigns.
    Incentivized
    Read full review
    Microsoft
    Cost add-ons for Security features is nickel and diming the process to keep pace with cybercrime. Limited Education budgets require us to be more pro-active in finding cost-effective measures to protect our devices, staff and students. Defender is a strong, well-featured product that is pricing itself out of the education market
    Incentivized
    Read full review
    Usability
    Cofense
    The interface is easy and intuitive.
    Incentivized
    Read full review
    Microsoft
    Because it's hard to find things sometimes. I can find things now because I know where they are. But you have to work with it a little while to figure out how. I'd basically say it was a security tool designed by developers. So you have to get that mindset to find things. So a new hire, a new person in the SOC would have a difficult time. I know that's sitting in here, or that screen is in here somewhere. So it's gotten better.
    Incentivized
    Read full review
    Reliability and Availability
    Cofense
    We've experienced zero downtime.
    Incentivized
    Read full review
    Microsoft
    Microsoft Defender for Endpoint chugs along just fine no matter what we throw at it and what systems it's running on. It doesn't take up a lot of resources either, so that's welcomed.
    Incentivized
    Read full review
    Performance
    Cofense
    No slowness seen.
    Incentivized
    Read full review
    Microsoft
    Microsoft Defender for Endpoint is easy on memory and resources on clients.
    Incentivized
    Read full review
    Support Rating
    Cofense
    No answers on this topic
    Microsoft
    The first time I tried to onboard my macOS endpoints to MDE I struggled for quite a bit. I had to reach out to Microsoft's MDE support team. The tech was very helpful in walking me through the steps during a screen share session
    Incentivized
    Read full review
    In-Person Training
    Cofense
    Training was through, relevant and easy to follow.
    Incentivized
    Read full review
    Microsoft
    No answers on this topic
    Implementation Rating
    Cofense
    No answers on this topic
    Microsoft
    Deployment was handled by our team here and everything went pretty smoothly. We did have a few hiccups in our test group, but that only took a bit to get ironed out.
    Incentivized
    Read full review
    Alternatives Considered
    Cofense
    The other product had a lot of fails on the auto-processing and did not integrate well with our current environment. One issue had to do with the way it sends the submissions to its processing engine—our email gateway configuration would have blocked this traffic. I also did not like the user interface.
    Incentivized
    Read full review
    Microsoft
    Particularly, we're evaluating Symantec Endpoint Protection, the commercial version. We've looked at eSet, a couple of the others, and it's much too heavy or difficult to manage, things like that. Ease of use, ease of integration. It's already there. It's super easy to update it with the regular OS updates and everything. So we can manage it whether we're using SCCM or Intune or Dato, it's very easy to deploy updates and manage things.
    Incentivized
    Read full review
    Scalability
    Cofense
    We've experienced zero downtime
    Incentivized
    Read full review
    Microsoft
    Microsoft Defender for Endpoint is easily scaled from small orgs to giant enterprises.
    Incentivized
    Read full review
    Return on Investment
    Cofense
    • Due to the integration potential, large amounts of time are saved on a daily basis.
    • Incident response time has dropped due to the increased information available by having access to phishing emails directly.
    • Staff are able to effectively learn how multiple tools in our environment are used by mastering Triage. This has decreased training time greatly and increased the effectiveness of each associate.
    Incentivized
    Read full review
    Microsoft
    • I think the positive impact overall is that we do a lot of sitting in front of assessors- federal assessors, government assessors. And it really comes down to when the assessor has to think about another product that you're bringing in that's not Microsoft, it creates a lot of confusion, more paperwork, more explanation. But the positive impact is that they know it, everybody kind of knows Microsoft. And so when you tell them you have this endpoint for Microsoft Defender for Endpoint, they're like, okay. The questions go away, and it makes the overhead a lot less during an assessment.
    Incentivized
    Read full review
    ScreenShots

    Cofense Triage Screenshots

    Screenshot of Triage DashboardScreenshot of Triage Dashboard Cluster DetailsScreenshot of Triage Cluster DetailsScreenshot of Triage Cluster Malicious AttachmentScreenshot of Triage Cluster HeadersScreenshot of Triage Reporter Details

    Microsoft Defender for Endpoint Screenshots

    Screenshot of blocked activitiesScreenshot of Detects & respondsScreenshot of discovers vulnerabilityScreenshot of Eliminates blind spotsScreenshot of Risk management