Microsoft Defender External Attack Surface Management vs. Webroot Antivirus

Microsoft Defender External Attack Surface Management is particularly well-suited for discovering, inventorying, and continuously monitoring the external attack surface, especially in environments with heavy Microsoft adoption. It is less suitable as a standalone solution for internal scanning, real-time attack detection, automated remediation, or advanced application testing. Microsoft Defender External Attack Surface Management es especialmente adecuado para descubrir, inventariar y monitorear continuamente la superficie de ataque externa, sobre todo en entornos con fuerte adopción de Microsoft. Es menos adecuado como solución única para escaneo interno, detección de ataques en tiempo real, remediación automática o pruebas avanzadas de aplicaciones. Parts of this review were originally written in Spanish and have been translated into English using a third-party translation tool. While we strive for accuracy, some nuances or meanings may not be perfectly captured.

Incentivized

Webroot SecureAnywhere is a good solution for those wanting to protect their endpoints from viruses and malware. It also works great for MSPS as you can manage all clients in a single portal. You have the option for DNS protection and web browser filtering as well. This would also work well in any small business.

Incentivized

• Lack of visibility of external assets
• Reduction of the risk of external attacks
• Falta de visibilidad de activos externos
• Reducción del riesgo de ataques externos

Incentivized

• Webroot checks all search result links and delivers warnings or approvals to users. This means Webroot is thorough and assists to keep users familiar with any potential problem sites.
• Webroot is easily activated as a Chrome or browser extension to ensure ease of access.
• Webroot monitors activity and will send updates to the IT department to keep them privy of any potential problems.

Incentivized

• Asset Attribution and Ownership Clarity
• Risk Prioritization and Business Context
• Noise and False Positives

Incentivized

• Webroot could do a better job of working on their integration partnerships with companies like LabTech (now known as Automate). Many times we make it through 2 or 3 levels of support before one of the parties says "oh well you need to talk to LabTech about this" or vice versa. That can be frustrating for partners when trying to understand and resolve issues between the two applications.
• Cryptolocker/ransomware is a hot topic and I will say that Webroot has provided us with adequate protection when we first started using in 2014. I understand the complexities and challenges AV companies face with new threats being created everyday. I do want to point out that there have been instances where Webroot has not been able to stop one of those types of attacks. After talking with support - it was clear that they had no good answer as to why that particular threat was not stopped and quarantined.
• Support for the enterprise side of Webroot can be daunting at times. Response times are hit or miss depending on the severity of the issue. Sometimes you get a great support engineer who will go above and beyond - sometimes I ask myself how this person is even employed with the lack of communication skills or actual interest in helping resolve partner issues.

Incentivized

It's easy to renew with Webroot, their support is very attentive and highly available. However if you do choose to change products, they even provide means of removing the software from your endpoints via the admin portal which is very convenient.

Incentivized

We rate Microsoft Defender External Attack Surface Management’s overall usability as 10 out of 10 because it delivers a strong balance between depth of capability and ease of use, particularly within organizations already operating in the Microsoft security ecosystem.

Incentivized

There is nothing perfect in this world, but Webroot Antivirus + Internet Security Complete (SecureAnywhere) is easy to use in comparison to others. Also Webroot tech support is only a phone call away. There have been several times I ran into an issue, but tech support as there to help resolve the issue.

Incentivized

We have not had to use Webroot support much over the years. The one or two times we did we were referred to online documentation and in a somewhat condescending manner in one case and in another case, the support person did not demonstrate much knowledge of their product and referred us to the user community for support.

Incentivized

Because Microsoft Defender External Attack Surface Management is part of the broader Microsoft Defender family (including Defender XDR, Entra ID, Azure Security, Sentinel, etc.), it:
Shares identity, endpoint, and threat context across tools
Reduces the need for custom integrations or connectors
Works in a “single pane of glass” experience for SOC analysts
Why it matters:
Organizations already invested in Microsoft security tools gain greater contextual insight and lower operational overhead.

Incentivized

While we consider alternatives from time to time when putting together our budget, we haven't felt the need to thoroughly test a competitor since webroot has been working well for us and we are comfortable with the pricing.

Incentivized

Ease of implementation across various devices is easy and efficient regardless of scale. Whether it is 5 devices or 500 the product continually proves its the best in its class.

Incentivized

• Reduced Business Risk from Unknown External Assets
• Operational Efficiency and Cost Avoidance
• Faster Risk Identification During Change Events

Incentivized

• It has had a mostly positive impact as we have not had any breaches.
• The only negative impact has been when Webroot Antivirus + Internet Security Complete (SecureAnywhere) changed something on their end that caused one of our business applications to not be usable by end-users. That cost our business a fair amount as it took 4 days before it could be used again.

Incentivized