Microsoft Defender for Endpoint (formerly Microsoft Defender ATP) is a holistic, cloud delivered endpoint security solution that includes risk-based vulnerability management and assessment, attack surface reduction, behavioral based and cloud-powered next generation protection, endpoint detection and response (EDR), automatic investigation and remediation, managed hunting services, rich APIs, and unified security management.
$2.50
per user/per month
Microsoft System Center Operations Manager (SCOM)
Score 8.4 out of 10
N/A
Microsoft's System Center Operations Manager (SCOM) is a monitoring and application performance management option, with the core datacenter and cloud-based systems monitoring.
N/A
Splunk AppDynamics
Score 8.4 out of 10
N/A
AppDynamics is an APM and Mobile APM program, with application mapping and predictive capabilities. These capacities enable automated remediation and code-level diagnostics in real time. It can be deployed on-premise or as a SaaS.
AppDynamics, in our organization, has given us a comprehensive and real time view of our environment. Appdynamics is great for drilling down and identifying trouble spots quickly.
I can definitely tell you where it’s more suited, because we haven’t come across any less appropriate scenarios. But definitely in regard to how we centrally manage our user space and our endpoints, it’s been beneficial from an API perspective and is really transferable, with strong collaboration with our Azure stack. It works very well.
Platforms for software as a service (SaaS) frequently cater to a large number of users with a variety of needs and usage patterns. Because AppDynamics offers multi-tenant monitoring capabilities to track performance across various customer environments, it is a good choice for SaaS platform monitoring. SaaS providers can maximize resource utilization, proactively detect and resolve performance issues, and provide a dependable and consistent user experience for their clients with AppDynamics.
Definitely on the threat action and response. We didn't have a stress-response option before, but the dependent brand point provided it instantly. Also, it's doing UVA and machine learning, which we didn't have before. So it's definitely providing more sophisticated threat-detection capabilities than we had before.
Business Transaction Monitoring is one of its signature strengths. This represents a major differentiator from generic infrastructure monitoring tools.
AI‑driven anomaly detection and intelligent alerting provide a significant advantage over traditional monitoring.
When combined with Splunk AppDynamics, full‑stack observability becomes a key part of Cisco/Splunk’s unified observability strategy.
The only thing is sometimes, because Microsoft has so many platforms, it gets a little confusing, like am I in the security platform? Am I in Purview? Where am I at right now? Because there's so many sites that are kind of doing a lot of the same thing, and so that does get a little confusing from time to time, but outside of that, it's a pretty good product.
One of the biggest drawbacks to SCOM is the sheer scope and complexity of the system. This can be a pro and a con. The system is very customizable, what you put into it is what you'll get out of it. That said, the learning curve is fairly steep. An organization needs to be committed to putting time and resources into SCOM to get the most out of it. I've heard stories from colleagues of several different companies that invested in SCOM and then abandoned it due to the excessive time and care required.
SCOM is expensive. Not only is the enterprise licensing costly, SCOM requires it's own servers, operational and warehouse databases to be maintained.
The OOB SCOM reports are a bit clunky and feel outdated.
AppDynamics may enhance its capacity to track transactions through complex distributed systems and microservices, offering a more comprehensive understanding of application behavior.
Better search and filtering capabilities would enable engineers to quickly obtain deeper context by drilling down into individual data points.
AppDynamics might be more widely available to engineers and organizations if it offered subscription plans or tiered pricing options.
Cost add-ons for Security features is nickel and diming the process to keep pace with cybercrime. Limited Education budgets require us to be more pro-active in finding cost-effective measures to protect our devices, staff and students. Defender is a strong, well-featured product that is pricing itself out of the education market
cause it achieves all our targets and we are satisfied with using Splunk also stable no technical challenges or problem caused by Splunk a lot for innovative integrations also all layers are using splunk NOC team , DEV team, application support team, managers security team also in forcasting for EA team
Microsoft Defender for Endpoint is a great EDR to have that works quickly and silently in the background and it integrates well with other Microsoft services. As an IT manager, I can appreciate that I do not get bombarded by alerts for every small detail. On the flipside, the management site can use some work in being more clear and should be more streamlined so I'm not clicking through multiple pages to figure out what happened
Splunk AppDynamics is great product that has positively maintained solid application workflows. It has simple and clean UI that displays graphical representation of our database and application behaviour. It gives us an opportunity to customize and set most reliable alerts and data configurations that aligns with our policies. It is easy to monitor operation hypothesis and lower RCA if you identify application coding errors.
Microsoft Defender for Endpoint chugs along just fine no matter what we throw at it and what systems it's running on. It doesn't take up a lot of resources either, so that's welcomed.
On a scale of 1 to 10, I would rate the availability of Splunk AppDynamics as a 9. Overall, the platform has proven to be highly reliable and is available when we need it. It consistently supports our monitoring and performance management needs across critical applications and infrastructure. There have been occasional issues with platform availability, such as intermittent application errors or brief unplanned outages. However, these instances have been infrequent and typically resolved quickly, minimizing any significant impact on operations. The stability and uptime of the platform have met our expectations, and we continue to rely on it as a core component of our APM strategy.
On a scale of 1 to 10, I would rate the performance of Splunk AppDynamics as a 6. While the platform generally delivers the expected functionality, we’ve experienced periodic slowness—particularly with page loads and report generation. These performance issues can be frustrating, especially when trying to quickly access critical data during incident response or analysis. One contributing factor may be our use of a shared controller environment with other enterprises, which can introduce resource contention and impact overall responsiveness. In some cases, this has led to delays in accessing dashboards or completing complex queries. Despite these challenges, the platform remains a valuable tool, and we’re exploring options to improve performance, including potential changes to our deployment model and support agreements.
The first time I tried to onboard my macOS endpoints to MDE I struggled for quite a bit. I had to reach out to Microsoft's MDE support team. The tech was very helpful in walking me through the steps during a screen share session
AppDynamics has its own community site that includes forums and a knowledge base. On the forums, you can converse with other members of the community and ask technical questions as you have them. Though this forum isn’t filled with people there are active members for you to gain some valuable insights.
On a scale of 1 to 10, I would rate the online training for Splunk AppDynamics as a 7. The training was generally acceptable and covered the core concepts and functionality of the platform. However, there were some challenges with communication during sessions—particularly around clarity and instructor engagement—which occasionally made it difficult to fully grasp certain topics. Additionally, the training could benefit from being more focused and tailored to specific roles or use cases. A more structured approach with clearer learning paths and practical, hands-on examples would enhance the overall effectiveness and help users apply the knowledge more confidently in real-world scenarios.
Deployment was handled by our team here and everything went pretty smoothly. We did have a few hiccups in our test group, but that only took a bit to get ironed out.
On a scale of 1 to 10, I would rate our satisfaction with the implementation of Splunk AppDynamics as a 9. The deployment process was smooth and well-coordinated, thanks to the collaborative efforts between Cisco Professional Services, our internal business stakeholders, and agency technical teams. Key Insights from the Implementation: Cross-functional Collaboration Was Critical: Engaging both technical and business teams early in the process ensured that the platform was configured to meet a wide range of operational and strategic needs. Value of Expert Guidance: Cisco’s Professional Services provided invaluable expertise, helping us navigate complex configurations and tailor the solution to our environment. Their involvement accelerated deployment and ensured best practices were followed. Importance of Planning and Communication: A well-defined implementation roadmap and regular communication across teams helped us stay aligned, manage expectations, and address challenges proactively. Scalable Architecture: We designed the implementation with scalability in mind, allowing us to expand usage across agencies and applications without major rework. Overall, the implementation laid a strong foundation for our APM program and positioned us for long-term success.
Previously, we've used Sophos. We've used, way back when, McAfee, Norton, Symantec, all those. And we finally settled on Microsoft Defender for Endpoint. We're a Microsoft technology stack shop. So obviously it was natural. It's built into Windows, so we're not adding additional agents. Some of the other vendors and their agents, for a while, would compete with CPU usage. And so it actually slowed down the machines. Because Microsoft Defender for Endpoint is built into the Windows product, Microsoft is going to ensure that it does not affect the other productivity tools that a user may use.
We used Altiris and WSUS and in the beginning Altiris had the better admin interface than SCOM, but it is no longer the case as SCOM has refined their admin interface. Altiris still has better and more robust group assignments for management roles and those two other tools can better manage non Windows OS devices than SCOM but for a large enterprise Windows shop, if you can afford it, SCOM is the way to go.
It is distinguished from these programs because the platform provides visualizations of application processes, showing the interplay between various parts and services. Understanding the architecture of complicated apps and finding their weak spots is greatly aided by this.
While the overall value of the Splunk AppDynamics platforms is strong, the pricing structure and contract terms can be complex and difficult to navigate. Unit pricing, licensing tiers, and billing frequency are not always intuitive, which can make it challenging to align purchases with the State’s evolving needs. I rely heavily on our Account Manager to help interpret and tailor the licensing model to our specific requirements. Their support has been invaluable in ensuring we make informed decisions. The most impactful change would be to simplify the licensing and pricing model. Clearer documentation, more transparent pricing tiers, and streamlined purchasing processes would significantly improve the experience and reduce administrative overhead.
On a scale of 1 to 10, I would rate the overall scalability of Splunk AppDynamics as a 7. The platform is designed to support enterprise-wide deployments across multiple departments and sites, and it performs well in large-scale environments. Its architecture allows for horizontal scaling and supports a wide range of application types and infrastructures. However, the agent management and deployment process can be complex and time-consuming, especially when onboarding a large number of applications or systems. Coordinating agent installation, configuration, and updates across diverse environments requires careful planning and often significant manual effort. Streamlining these processes—perhaps through more centralized management tools or automation—would enhance scalability and reduce operational overhead. Despite these challenges, once deployed, AppDynamics scales effectively and provides consistent performance and visibility across the enterprise.
Our experience with the professional services team supporting Splunk AppDynamics has been exceptional. They demonstrated deep technical expertise, strong collaboration skills, and a clear understanding of our business objectives. Their guidance was instrumental in the successful implementation of our APM program and platform integration. The rating of 9 reflects our high level of satisfaction, with a small margin left to acknowledge that continuous improvement is always possible. Overall, their support has been a key factor in the success of our deployment.
Through the identification of performance bottlenecks and efficient resource allocation, AppDynamics has contributed to cost savings and resource optimization. This has a direct positive impact on our overall return on investment.
While AppDynamics' numerous capabilities help maximize efficiency, they may place a strain on your system. Organizations with limited infrastructure capacity may have difficulties and therefore give this serious thought before implementing it.
