Mandiant Advantage Threat Intelligence vs. Microsoft Defender for Endpoint

Overview
ProductRatingMost Used ByProduct SummaryStarting Price
Mandiant Advantage Threat Intelligence
Score 8.6 out of 10
Enterprise companies (1,001+ employees)
Since 2004, Mandiant has been a partner to security-conscious organizations. Mandiant’s approach helps organizations develop more effective and efficient cyber security programs and instills confidence in their readiness to defend against and respond to cyber threats.N/A
Microsoft Defender for Endpoint
Score 8.3 out of 10
N/A
Microsoft Defender for Endpoint (formerly Microsoft Defender ATP) is a holistic, cloud delivered endpoint security solution that includes risk-based vulnerability management and assessment, attack surface reduction, behavioral based and cloud-powered next generation protection, endpoint detection and response (EDR), automatic investigation and remediation, managed hunting services, rich APIs, and unified security management.
$2.50
per user/per month
Pricing
Mandiant Advantage Threat IntelligenceMicrosoft Defender for Endpoint
Editions & Modules
No answers on this topic
Academic
$2.50
per user/per month
Standalone
$5.20
per user/per month
Offerings
Pricing Offerings
Mandiant Advantage Threat IntelligenceMicrosoft Defender for Endpoint
Free Trial
YesYes
Free/Freemium Version
YesNo
Premium Consulting/Integration Services
YesNo
Entry-level Setup FeeOptionalNo setup fee
Additional DetailsPriced by company size
More Pricing Information
Community Pulse
Mandiant Advantage Threat IntelligenceMicrosoft Defender for Endpoint
Top Pros
Top Cons
Features
Mandiant Advantage Threat IntelligenceMicrosoft Defender for Endpoint
Endpoint Security
Comparison of Endpoint Security features of Product A and Product B
Mandiant Advantage Threat Intelligence
7.7
6 Ratings
0% below category average
Microsoft Defender for Endpoint
8.2
51 Ratings
4% below category average
Infection Remediation7.76 Ratings8.250 Ratings
Anti-Exploit Technology00 Ratings8.049 Ratings
Endpoint Detection and Response (EDR)00 Ratings8.550 Ratings
Centralized Management00 Ratings7.950 Ratings
Hybrid Deployment Support00 Ratings7.810 Ratings
Vulnerability Management00 Ratings8.348 Ratings
Malware Detection00 Ratings8.551 Ratings
Threat Intelligence
Comparison of Threat Intelligence features of Product A and Product B
Mandiant Advantage Threat Intelligence
8.0
10 Ratings
6% above category average
Microsoft Defender for Endpoint
-
Ratings
Network Analytics8.09 Ratings00 Ratings
Threat Recognition8.19 Ratings00 Ratings
Vulnerability Classification7.710 Ratings00 Ratings
Automated Alerts and Reporting8.19 Ratings00 Ratings
Threat Analysis7.910 Ratings00 Ratings
Threat Intelligence Reporting8.210 Ratings00 Ratings
Automated Threat Identification7.99 Ratings00 Ratings
Best Alternatives
Mandiant Advantage Threat IntelligenceMicrosoft Defender for Endpoint
Small Businesses
AlienVault USM
AlienVault USM
Score 8.0 out of 10
SentinelOne Singularity
SentinelOne Singularity
Score 9.1 out of 10
Medium-sized Companies
CrowdStrike Falcon
CrowdStrike Falcon
Score 9.1 out of 10
SentinelOne Singularity
SentinelOne Singularity
Score 9.1 out of 10
Enterprises
CrowdStrike Falcon
CrowdStrike Falcon
Score 9.1 out of 10
BeyondTrust Endpoint Privilege Management
BeyondTrust Endpoint Privilege Management
Score 8.7 out of 10
All AlternativesView all alternativesView all alternatives
User Ratings
Mandiant Advantage Threat IntelligenceMicrosoft Defender for Endpoint
Likelihood to Recommend
8.1
(18 ratings)
8.2
(71 ratings)
Usability
7.8
(18 ratings)
-
(0 ratings)
Support Rating
-
(0 ratings)
9.0
(5 ratings)
User Testimonials
Mandiant Advantage Threat IntelligenceMicrosoft Defender for Endpoint
Likelihood to Recommend
Mandiant
Usually SOC leverages Intel from mutiple sources. The scenarios are: 1.Suitable: In large scale SOC where more than 5000 devices are being monitored and the tech stack is wide, Mandiant will play an excellent role in that scenario. 2.Not Suitable: In small scale SOCs wherein limited devices belonging to the same tech stack is being used then the analysts can rely on OSINT and it is not useful to buy the solution.
Read full review
Microsoft
Usually we had lots two platforms tasked with scanning exposures, anti-malware and provision for information and threat management. But with Microsoft Defender for Endpoint we have an all inclusive platform that even integrate with other Microsoft security apps such as Microsoft Defender for Cloud for enhanced threat insights and visibility.
Read full review
Pros
Mandiant
  • accelerated threat response feature, prioritizing threats according to requirement.
  • Optimization of the threat intelligence , and can be integrated with 3rd party tools.
  • Features like - Breach ,Adversary, Machine and Operational Intelligence.
  • Mandiant dynamic host and the malware views along with indicators.
Read full review
Microsoft
  • It provides a unified security experience when combined with other Microsoft products such as Microsoft Defender for 365 and Azure Defender.
  • It has an excellent dashboard and centralized view that make it easy to see and control everything from one location.
  • It's an EDR tool designed to help you understand incidents and alerts better.
  • Real-time detection of attacks and prompt endpoint device responses. It effortlessly interacts with additional Microsoft security products.
Read full review
Cons
Mandiant
  • Paywalls exist throughout the data set and can halt an investigation without the right model
  • Some data was incomplete or broken up between pay tiers
  • Navigation through the data lacked a definitive trail or breadcrumbs to retrace steps during investigations
Read full review
Microsoft
  • Does not allow for remediation from the management console.
  • The ticket system doesn't alert the person assigned to the ticket.
  • You have to submit requests for whitelisting applications.
  • Scanning exclusions are tricky to find.
  • Adding devices, especially Apple devices, is very cumbersome.
Read full review
Usability
Mandiant
Mandiant Advantage Threat Intelligence has a very usable platform, with well-differentiated sections for the analyst, as well as the possibility of cross-searching to obtain the desired results. All this is presented with an interface that is easy on the eye and not very messy, which increases productivity and the speed with which work is done.
Read full review
Microsoft
No answers on this topic
Support Rating
Mandiant
No answers on this topic
Microsoft
The first time I tried to onboard my macOS endpoints to MDE I struggled for quite a bit. I had to reach out to Microsoft's MDE support team. The tech was very helpful in walking me through the steps during a screen share session
Read full review
Alternatives Considered
Mandiant
It gives more ways to analyze threats and options to fixed it. This device gives more visibility on vulnerability detection and its analysis. It provides detailed reports to have more information of all malwares which help us to increase overall security of our current organization
Read full review
Microsoft
in an overall protection sentinelone is providing better protection for us, but as it comes with subscription's limitation, we have to be really careful in managing the licenses, the MS Defender for endpoint is providing us a decent protection which we are not complaining about, why we chose them ? as mentioned, this is coming with our subscription
Read full review
Return on Investment
Mandiant
  • Improved incident response time
  • Specific investigations that have reduced the attack surface
  • Technical reports on threats not controlled by the bank's local team
Read full review
Microsoft
  • By providing robust threat protection, Defender for Endpoint can prevent downtime caused by security issues. Employees can work without interruptions, leading to increased productivity.
  • By significantly decreasing the frequency of security incidents like malware infections and data breaches, Microsoft Defender for Endpoint can protect your network. The cost of incident response, cleanup, and potential regulatory fines are reduced as a result of the decrease in events.
  • The implementation and configuration of Microsoft Defender for Endpoint may require an initial investment in licensing, training, and deployment, which can temporarily affect ROI.
  • The cost of licensing can be substantial, especially for larger organizations. This cost needs to be factored into the ROI calculation.
Read full review
ScreenShots

Mandiant Advantage Threat Intelligence Screenshots

Screenshot of Mandiant Advantage DashboardScreenshot of Mandiant Advantage Actor DetailsScreenshot of Mandiant Advantage Actor Graph

Microsoft Defender for Endpoint Screenshots

Screenshot of blocked activitiesScreenshot of Detects & respondsScreenshot of discovers vulnerabilityScreenshot of Eliminates blind spotsScreenshot of Risk management