Microsoft Defender for Business vs. Qualys VMDR

Microsoft Defender for Business is well suited for small and medium businesses that are running on a smaller budget, with little to no IT department and require a quick and effective setup to manage and protect their endpoints. It can be deployed and managed very quickly, and the person doing it can have little to no experience as long as they follow directions.

Incentivized

Qualys VMDR is best suited for larger companies with a very large IT asset footprint. Qualys VMDR is not suited for businesses that are small and upcoming as the price for the tool is very expensive and could be a budget sink if not used properly. In our organization we use the Qualys VMDR dashboard and reporting in order to collect any vulnerabilities we miss during our routine audits to ensure that our environment is stable and protected for attacks.

Incentivized

• Already integrated with Windows
• Allows for folder and executable-specific exceptions when combined with Intune.
• Incident response and analytics are fantastic.

Incentivized

• Seamless reporting across the different widgets (i.e. TruRisk)
• DEEP-DIVE into an asset's info/vulns
• Baked-in PCI ASV scans that a Qualys QSA can approve

Incentivized

• Confusion between the different Defender products
• Ease of setup and configuration
• Reporting and Alerts

Incentivized

• Qualys VMDR can definitely improve on its reporting of assets as we have caught devices not captured in the Qualys VMDR scans.
• We would like to see an improvement on the dashboard interface as it is faulty sometimes.
• Qualys VMDR should focus on more competitive pricing as it is very expensive.

Incentivized

So far we have found no alternative that would overall offer us more than we are getting from Microsoft Defender for Business!

Incentivized

Next to Veeam (which is a tremendous product for backup/DR) this is the best service/software I have used in the past three decades. Should be called the Swiss Army Knife of security.

Incentivized

Microsoft Defender for Business is a solid tool for smaller businesses looking to manage their endpoints and devices, while staying on budget. The setup is minimal compared to the full-blown InTune and EMS suite, and the product can be included in some Small Business SKUs that they may already have.

Incentivized

infrastructure to identify vulnerabilities

Always available with the exception on maint windows

Incentivized

Once in a while it would be slow -

Incentivized

This is iron but I am giving it 5 star and I can give more If I can do because they are best in support. So once you own this product they will assign a dedicated support for you and when you are under the weather with anything just connect them with anything call, ping or ticket they will come like Genie.

Not really - the integrations via connectors is not heavy lifting. Any complexity has to do with a service that requires more steps (i.e. AWS/GCP)

Incentivized

Microsoft Defender for Business has better reporting and incident response. There is limited client rollout due to being integrated with Windows. Microsoft Defender for Business is much better at identifying asset risks and giving a broad security overview. Because we moved to Microsoft 365 to access the Office applications and Exchange online, Microsoft Defender for Business was essentially cost free to us. Where Microsoft Defender for Business falls short in comparison to Sophos is that it requires integration with Intune to enforce many of the physical controls that Sophos offers in their client.

Incentivized

It is a very similar tool but Qualys VMDR is much better when it comes to reporting and solutions provided. Asset management is really good in Qualys VMDR. Qualys VMDR support is really quick , you can get a TPM if you run into any issues. Qualys VMDR has wide variety of scanning options which lacks in tenable.

Incentivized

MOSTLY good - but as noted having all features purchased on portal only - nothing that is not purchased.

Incentivized

Outside some pretty arcane apps or OS this is painless. The problem - and self-inflicted - is that older stuff is not supported.

Incentivized

• Improved cybersecurity
• Learning curve
• Resource consumption

Incentivized

• Cut down on manual efforts to investigate or remediate vulnerabilities, which can be a big driver of ROI
• Avoidance of potential incidents with upfront risk mitigation
• Patching efficiency gains

Incentivized