Microsoft Defender for Cloud vs. Palo Alto Networks Prisma Cloud

Microsoft Defender is very good while we are enhancing our organization's security, and it is very useful in getting threat alerts and vulnerabilities that can harm our system and users. It is recommended to use this to improve overall security and threat protection of our users and organization. With the help of Microsoft Defender, we get fully covered and secured.

Finding specific Cloud Vendor specific Cloud resource configuration, tags, network information and etc. is fairly easy to do. Cloud alert capabilities are pretty good and with proper knowledge top notch alerts can be created. Only downside I can think of is ease of use.

Incentivized

• detect and respond to security threats in the cloud environment, reducing the risk of data breaches and unauthorized access.
• The product assists our organization dealing with sensitive data in achieving and maintaining compliance with data protection rules.
• The product provides real-time visibility into the cloud environment, offering insights into ongoing security activities.
• It guarantees that security teams can actively handle possible threats by delivering real-time monitoring and notifications, reducing the impact on business operations.

Incentivized

• Vulnerability assessment using Twistlock
• Enhancing Security by scanning workload based on different Security standards and provide a compliance report
• CF template integration with CI/CD pipeline to identify any security issue before workload are deployed
• IAM/UEBA features additional to enchaining security posture
• Auto remediation
• Integration is simple and solution is supported on multiple cloud
• Customized dashboard/queries

Incentivized

• 'Regulatory Compliance' is definitely an area of improvement for MDC. The complex and high number of controls within a specific framework should allow a more helpful and detailed guidelines in order to tackle them.
• The limitation of options in the incident management menu of MDC has proven to be a hassle while managing security alerts. For example, an analyst cannot even provide a comment about the actions taken on an incident.
• There is a missing functionality of connecting other EDR or XDR solutions to MDC which I think should be there for a CSPM tool.

Incentivized

• Real-time supports would be much appreciated. At the moment they have a third-party ticketing support tool, which can be replaced with real-time support, which can be provided to the user at the time of the issue.
• The user should be provided with all the learning material by the Palo Alto team at the time of license purchase. This would save a lot of users' time, which is taken up by research and finding the correct documents from the website.
• Themes can be introduced in the feature set, which would help the user customize the software as per their needs.

Incentivized

Defender for Cloud (previously known as Azure Security Center) is a more comprehensive and extensive security solution. Currently, threat analytics make up only a small portion of the whole picture. It encourages a comprehensive picture of the cloud environment across all of its endpoints. For example, firewalls, virtual machine coverage, etc. When compared to the former Threat Analytics, the attack surface of Defender for Cloud is vastly expanded.

Incentivized

Our organization didn't consider any other tool, and so far we are pretty much satisfied with Prisma Cloud.

Incentivized

• It creates a great insight in all assets that are available
• The CSPM makes sure that certain risk that might have been missed are addressed
• Being able to query across the data gives great insights in threats and possible vulernabilties for CVEs

• Investigation time is severely reduced
• Has potential to identify misconfigurations
• Hard to setup

Incentivized