Overview
ProductRatingMost Used ByProduct SummaryStarting Price
Microsoft Defender for Endpoint
Score 8.8 out of 10
N/A
Microsoft Defender for Endpoint (formerly Microsoft Defender ATP) is a holistic, cloud delivered endpoint security solution that includes risk-based vulnerability management and assessment, attack surface reduction, behavioral based and cloud-powered next generation protection, endpoint detection and response (EDR), automatic investigation and remediation, managed hunting services, rich APIs, and unified security management.
$2.50
per user/per month
Sophos Intercept X
Score 8.8 out of 10
N/A
Sophos Endpoint Protection (Sophos EPP) with Intercept X is an endpoint security product providing an antivirus / antimalware solution that when upgraded with Intercept X or Intercept X Advanced provides advanced threat detection and EDR capabilities.
$28
per year per user
Trend Micro Cloud One
Score 7.9 out of 10
N/A
Trend Micro Cloud One (or Trend Cloud One) is a solution used to secure business-critical applications across hybrid cloud environments with a single platform.N/A
Pricing
Microsoft Defender for EndpointSophos Intercept XTrend Micro Cloud One
Editions & Modules
Academic
$2.50
per user/per month
Standalone
$5.20
per user/per month
Intercept X Advanced
$28
per year per user
Intercept X Advanced with XDR
$48
per year per user
Sophos Managed Threat Response
$79
per year per user
No answers on this topic
Offerings
Pricing Offerings
Microsoft Defender for EndpointSophos Intercept XTrend Micro Cloud One
Free Trial
YesNoNo
Free/Freemium Version
NoNoNo
Premium Consulting/Integration Services
NoNoNo
Entry-level Setup FeeNo setup feeNo setup feeNo setup fee
Additional DetailsPricing is for a 3-year commitment. Government and Education pricing available.
More Pricing Information
Community Pulse
Microsoft Defender for EndpointSophos Intercept XTrend Micro Cloud One
Considered Multiple Products
Microsoft Defender for Endpoint
Chose Microsoft Defender for Endpoint
I've used Sophos, Bitdefender, SentinelOne, and, of course, Microsoft Defender for Endpoint. We chose this at the time because we were such a Microsoft shop that it just seemed to integrate well with all the other things that we had set up with Microsoft.
Chose Microsoft Defender for Endpoint
Previously, we've used Sophos. We've used, way back when, McAfee, Norton, Symantec, all those. And we finally settled on Microsoft Defender for Endpoint. We're a Microsoft technology stack shop. So obviously it was natural. It's built into Windows, so we're not adding …
Chose Microsoft Defender for Endpoint
When building up policies, being independent is much easier compared to CrowdStrike, I would say.
Chose Microsoft Defender for Endpoint
Say licensing and cost primarily. And from our evaluation and our use cases, Microsoft Defender for Endpoint did relatively the same thing.
Chose Microsoft Defender for Endpoint
Unless you have a dedicated Security Operations Center working twenty four hours a day seven days a week that is able to constantly monitor Cylance and make the necessary changes for your users, it is not worth the trouble. Microsoft Defender for Endpoint does what it needs to …
Chose Microsoft Defender for Endpoint
Microsoft Defender for Endpoint consistently showed better user experiences during scans due to the reduced amount of resources used on each system compared to our previous endpoint protection solutions. However, the main reason we chose Microsoft Defender for Endpoint is …
Chose Microsoft Defender for Endpoint
Microsoft Defender for Endpoint offers strong integration with Microsoft 365 and Azure services, which provide a unified security experience. While McAfee Trellix is known for solid antivirus, Microsoft Defender excels in integration in the ecosystem.
Chose Microsoft Defender for Endpoint
Defender is far easier to deploy and manage than Sophos and tends to work without as many issues. The threat assessment portal provides an in-depth view of the organization's security posture, whereas Sophos only shows the patching status of the PCs. We did need Intune to get …
Chose Microsoft Defender for Endpoint
As Microsoft Defender for Endpoint easily integrated with our Office 365 setup, it was more beneficial as compared to other products
Chose Microsoft Defender for Endpoint
Cylance's policy is to block everything and requires an active person to monitor and unblock legitimate processes. As updates and software continue to evolve, it is a full-time job to be a Cylance administrator. Microsoft Defender for Endpoint is a set-and-forget solution that …
Chose Microsoft Defender for Endpoint
Microsoft Defender for Endpoint is the most cost effective solution considering our Microsoft 365 licensing status. While many 3rd party solutions are great and have been used over the years, in the non-profit world, cost is a huge driving factor of items. Coupled with …
Chose Microsoft Defender for Endpoint
Microsoft Defender for Endpoint is on par or exceeds the competitor products and provides an enterprise grade EDR solution. Based on the savings by bundling Microsoft products under the E5 license and the benefits it provides; it is an excellent choice for customers looking for …
Chose Microsoft Defender for Endpoint
MDE integrates much more into our M365 ecosystem than any other MDR possibly could. Bitdefender may have provided a similar level of endpoint protection but the reporting, vulnerability reporting and other incident tracking and correlation are critical in today's business …
Chose Microsoft Defender for Endpoint
Crowdstrike is the more feature complete product but licensing model and cost does not work well with the small business model. ESET Protect is considerably more complicated from a licensing perspective but once operational is a fine product.
Chose Microsoft Defender for Endpoint
Microsoft Defender for Endpoint is far more robust and easy to use than NinjaOne's RMM tools. Microsoft Defender for Endpoint allows us to easily manage our endpoints, from an almost single pane of glass, whereas Ninja has multiple settings, policies, etc. that are harder to …
Chose Microsoft Defender for Endpoint
We use Microsoft Defender for Endpoint along with Crowdstrike on some of our critical systems as it enhances the protection we have for our environment.
Chose Microsoft Defender for Endpoint
It's very convenient and very well integrated with our environment.
Chose Microsoft Defender for Endpoint
Majorly because our suite is Microsoft, so make totally sense to have this in the company and the price. It is Microsoft is better than CrowdStrike.
Chose Microsoft Defender for Endpoint
Sophos. Because of the integration with Microsoft ecosystem, we selected Defender.
Chose Microsoft Defender for Endpoint
We have not used anything else other than Microsoft Defender for Endpoint. Maybe we've used other antivirus software like Sophos and things like that. They're just not all encompassing and that's why we moved to use this product.
Chose Microsoft Defender for Endpoint
I have been working with customers that they are transitioning from Sentinel One, CrowdStrike to Defender for Endpoint, right? So I think it's because they see the value in the product and also they see how much they can save in terms of the cost for companies because they …
Chose Microsoft Defender for Endpoint
We previously used CrowdStrike on our servers. However, the seamless integration of Microsoft Defender (MD) with XDR and the entire Microsoft ecosystem led us to choose Microsoft Defender for Endpoint (MDE).
Chose Microsoft Defender for Endpoint
What we love more about this product is the way this pro gets integrated into the other family of solutions, especially Defender for Identity or the XDR solutions. We think that the market, the customers are full of unattended consults coming out from different vendors and that …
Chose Microsoft Defender for Endpoint
The technical features, usability and the support was nice as compared to the other products.
Sophos Intercept X
Chose Sophos Intercept X
Bitdefender was garbage, and it did not work well for non-persistent VDI desktops.

Even though we bought it we dumped it after a month and bought Sophos instead. The difference was like night and day.
Chose Sophos Intercept X
Sophos Intercept X is one of the industry leaders for a reason. Apart from integration issues, Sophos Intercept X stands above the rest when it comes to protection and usability. I have used at least 30 different antiviruses, antimalware, and antiransomeware programs and none …
Chose Sophos Intercept X
They have almost the same features but we ended up with a better offer for Sophos.
Chose Sophos Intercept X
Sophos Intercept X offers a far more comprehensive and stable product when pitted up against Comodo Advanced Endpoint Protection and Watchguard Endpoint Security - both of which we offer as low cost alternatives for customers who are adamant about not paying for Sophos …
Chose Sophos Intercept X
I don't feel it's fair to compare Sophos Intercept X with the versions of Symantec and AVG that I have used in the past - as that was such a long time ago. I'm sure those other companies have released far more features than I used all those years ago.
Chose Sophos Intercept X
Sophos Intercept X is easy to manage and deploy under your business. I think it is comparable to BitDefend with the ability to send out deployment via email or directly add it to the computer. I have noticed that Bitdefender seems to eat a lot of resources during its scans …
Chose Sophos Intercept X
Webroot endpoint protection is not even in the same league as Sophos Intercept-X. I have tested and compared both sides by side, run simulations and it's not even close. Plus the Sophos central management is so much better. Easier to view user activities and apply policies and …
Chose Sophos Intercept X
I personally found Sophos Intercept X GUI to be easy to use. The agent is easy to deploy on client machines and runs in the background silently. It has a very good virus, malware scan engine that picks out a high percentage of malicious software. The price was also very …
Chose Sophos Intercept X
Sophos is much more user friendly and scalable for partners who wish to [centralize] all security across the IT industry, from email security, server security, phish threat management and more.
Chose Sophos Intercept X
We have used Avast, AVG, Panda, Sophos' original antivirus product, and Symantec before and it is better than each of them. The cloud console is the star of the show and it dramatically reduces the cost and effort needed to install the product. Other products were only …
Chose Sophos Intercept X
It is one of the only products that will scan all code in memory and arbitrary data for malicious behaviors.
Chose Sophos Intercept X
We have been using this product for a number of years, which shows that it has worked well for us. I don't recall the other products we reviewed.
Chose Sophos Intercept X
It provides more features for the same price. These added features differentiate Sophos from the rest of the pack, making it a better solution. Also, the ability to integrate with your Sophos firewall if you have one adds another level of integration and protection. This …
Chose Sophos Intercept X
We didn’t evaluate any other products. I used Sophos at a previous company and when I started here, they were using the on-prem version. We immediately migrated to central and haven’t looked back. I am aware of the competitors, but once you are comfortable with a quality …
Chose Sophos Intercept X
Sophos offered better value for money whilst beating the above products on detection and prevention. The GUI is fantastic and easy to use and works seamlessly on top of other features like DLP, application control and web monitoring. I would recommend getting the XG firewall as …
Chose Sophos Intercept X
Sophos Intercept-X gave us a more well-rounded solution.
Chose Sophos Intercept X
Sophos Intercept X is a little less expensive than the comparable package from Trend Micro and a little more expensive than a comparable package from Symantec, but in my opinion, it's easier to operate and it's got better centralized controls than both of the others. But the …
Chose Sophos Intercept X
Trend Micro offered similar protection, however at the time did not offer EDR as a solution. The big benefit to Trend Micro was the capability to push out the installation of the agent to assets within the Trend Micro console, eliminating the need for a GPO or deployment …
Chose Sophos Intercept X
Sophos is by far the simplest of the products to setup and going in a very short period of time at a very similar price point. Trend is overly complex and relied on an appliance for each ESX node meaning you lose one appliance and then you lose protection across multiple …
Chose Sophos Intercept X
Besides legacy malware protection, Sophos is doing a good job in protecting against ransomware, thanks to their Intercept X and its behavioral analytics that would stop ransomware that was never seen in wild.
Chose Sophos Intercept X
Best in class... PERIOD... Bit Defender is a good AV product by itself, but it lacks in Next Gen Heuristic detection. It has allowed malware to get past it in our client environments, even with Admin permissions restricted. Sophos is hands down a superior product when paired …
Chose Sophos Intercept X
Sophos I feel is a better product upon installation we had a few systems that reported threats that ESET did not catch. Sophos also has multiple other products that we were able to bundle together and still have one interface to do. Intercept X, Endpoint Protection, and …
Chose Sophos Intercept X
In our analysis we discovered that for the price and feature set, Sophos was able to rise above the rest. Pricing is always a large consideration, however it isn't the only consideration - the feature set that Sophos Endpoint Protection provided over its competitors made the …
Trend Micro Cloud One
Chose Trend Micro Cloud One
Trend Micro Cloud One security supports the hybrid Infra. It can be integrated with public Cloud as well as Private cloud. It's an all in one solution which gives the flexibility to manage our Clouds, Workloads, Containers, Dockers etc. It protects against zero day attacks …
Chose Trend Micro Cloud One
1) flexible customer support and PoV assistance as compared to other vendors
2) Quick TAT turnaround, and easy sampling - Automation features are smooth to use and leverage
3) Our client was interested in this solution since they heard it from one of their other partners from …
Features
Microsoft Defender for EndpointSophos Intercept XTrend Micro Cloud One
Endpoint Security
Comparison of Endpoint Security features of Product A and Product B
Microsoft Defender for Endpoint
8.7
Ratings
2% above category average
Sophos Intercept X
8.1
Ratings
5% below category average
Trend Micro Cloud One
-
Ratings
Anti-Exploit Technology9.00 Ratings8.60 Ratings00 Ratings
Endpoint Detection and Response (EDR)9.10 Ratings8.00 Ratings00 Ratings
Centralized Management8.60 Ratings8.00 Ratings00 Ratings
Hybrid Deployment Support7.20 Ratings8.00 Ratings00 Ratings
Infection Remediation9.10 Ratings7.90 Ratings00 Ratings
Vulnerability Management8.60 Ratings8.40 Ratings00 Ratings
Malware Detection9.20 Ratings8.00 Ratings00 Ratings
Best Alternatives
Microsoft Defender for EndpointSophos Intercept XTrend Micro Cloud One
Small Businesses
ThreatLocker
ThreatLocker
Score 9.2 out of 10
ThreatLocker
ThreatLocker
Score 9.2 out of 10

No answers on this topic

Medium-sized Companies
BlackBerry Protect (CylancePROTECT)
BlackBerry Protect (CylancePROTECT)
Score 9.1 out of 10
BlackBerry Protect (CylancePROTECT)
BlackBerry Protect (CylancePROTECT)
Score 9.1 out of 10
CrowdStrike Falcon
CrowdStrike Falcon
Score 9.1 out of 10
Enterprises
BeyondTrust Endpoint Privilege Management
BeyondTrust Endpoint Privilege Management
Score 10.0 out of 10
BeyondTrust Endpoint Privilege Management
BeyondTrust Endpoint Privilege Management
Score 10.0 out of 10
CrowdStrike Falcon
CrowdStrike Falcon
Score 9.1 out of 10
All AlternativesView all alternativesView all alternativesView all alternatives
User Ratings
Microsoft Defender for EndpointSophos Intercept XTrend Micro Cloud One
Likelihood to Recommend
8.9
(0 ratings)
8.2
(0 ratings)
9.4
(0 ratings)
Likelihood to Renew
8.4
(0 ratings)
10.0
(0 ratings)
-
(0 ratings)
Usability
8.5
(0 ratings)
8.2
(0 ratings)
-
(0 ratings)
Availability
9.1
(0 ratings)
-
(0 ratings)
-
(0 ratings)
Performance
9.1
(0 ratings)
-
(0 ratings)
-
(0 ratings)
Support Rating
9.0
(0 ratings)
8.1
(0 ratings)
-
(0 ratings)
Implementation Rating
7.3
(0 ratings)
9.0
(0 ratings)
-
(0 ratings)
Configurability
8.2
(0 ratings)
-
(0 ratings)
-
(0 ratings)
Product Scalability
9.1
(0 ratings)
-
(0 ratings)
-
(0 ratings)
User Testimonials
Microsoft Defender for EndpointSophos Intercept XTrend Micro Cloud One
Likelihood to Recommend
I can definitely tell you where it’s more suited, because we haven’t come across any less appropriate scenarios. But definitely in regard to how we centrally manage our user space and our endpoints, it’s been beneficial from an API perspective and is really transferable, with strong collaboration with our Azure stack. It works very well.
Read full review
Sophos Intercept-X is well suited for any environment big or small. There is even a home version that is free that I highly recommend for anyone at home. If you are looking for endpoint protection that is centrally managed, catches everything, and has many features this is the product for you.
Read full review
Scenarios where it's well suited - 1) AWS cloud environments where application security and ZTN is a must. 2) One-stop-shop for centralized discovery of apps/workloads. 3) Custom reporting client needs. 4) CI/CD pipeline - easy to design DevOps cycles.
Read full review
Pros
  • It really protects our endpoints. We've used other antivirus programs in the past, and they haven't had that full confidence in those products compared to what Microsoft Defender for Endpoint does for us.
  • Another pro is that it's easy to manage the management console through Intune to see Microsoft Defender for Endpoint up in the cloud and see the state of our devices.
  • Another pro is we haven't had an incident since we installed it.
Read full review
  • Sophos is a little too good at DLP. But it is indeed very good at not allowing our data to leave our endpoints without strict adherence to policy.
  • Sophos is very good at protecting endpoints against viruses and other malware.
  • Sopho is really good at informing us of what is happening on our endpoints. OOTB reporting is way better than expected.
Read full review
  • Easy integration with AWS environment
  • holistic protection - workload and network security
  • Monitoring capabilities - SIEM tools which helps in RCA analysis.
Read full review
Cons
  • It would be good to continue to minimize the amount of resources needed during a scan
  • Provide more integration with Outlook to scan attachments with a notification that everything is good
  • Provide a Click to Fix option when listing issues or high-risk problems on systems
Read full review
  • The migration from on-prem sophos to cloud sophos, could have been a little more seamless
  • Would love to get more insight on what was blocked or flagged and what it was trying to do
  • Better and more granular feature management from group policies
Read full review
  • Granularity control over Agentless deployment
  • Alibaba Cloud Support
  • Technical Support
Read full review
Likelihood to Renew
Microsoft Defender is closely catching -up in market with existing competitors they have added DLP endpoint & DLP Network and Cloud DLP solution last year with OCR capabilities. I would say Microsoft Defender is not legacy Vendor in end point security, the need to learn from other vendors in market and focus on new XDR technologies, which is going to be new battle for all vendors
Read full review
We have gotten a great product for the price. Easy to maintain and set up on new devices. Support is great and easy to work with and understand.
Read full review
No answers on this topic
Usability
Microsoft Defender for Endpoint is a great EDR to have that works quickly and silently in the background and it integrates well with other Microsoft services. As an IT manager, I can appreciate that I do not get bombarded by alerts for every small detail. On the flipside, the management site can use some work in being more clear and should be more streamlined so I'm not clicking through multiple pages to figure out what happened
Read full review
The usability has never been a problem. Sophos Intercept X is a program you can install and let protect your company without much intervention. Apart from a few policies, Sophos will keep you protected better than most any product on the market. Sophos Intercept X works quite well when you are looking to "tighten your grip" on user's access to websites, programs, and add-ons.
Read full review
No answers on this topic
Reliability and Availability
Microsoft Defender for Endpoint chugs along just fine no matter what we throw at it and what systems it's running on. It doesn't take up a lot of resources either, so that's welcomed.
Read full review
No answers on this topic
No answers on this topic
Performance
Microsoft Defender for Endpoint is easy on memory and resources on clients.
Read full review
No answers on this topic
No answers on this topic
Support Rating
Overall support is really good for this product. Since it's a Microsoft product, you will get good support from a number of different resources, including knowledgebase articles on the web, support from Microsoft technicians, and documentation (which tends to very thorough). Also, there is a vast user support community for this product, so user support forums would also be another valuable channel to get help if needed. I don't envision too many people will have issues/problems with the product, as it tends to run good overall.
Read full review
Most of the support reps are fantastic. There have been a few though that have had to be escalated via Account Manager when they haven't followed up but this is a rare instance, and often followed up by the Support Manager for APAC.
Read full review
No answers on this topic
Implementation Rating
Deployment was handled by our team here and everything went pretty smoothly. We did have a few hiccups in our test group, but that only took a bit to get ironed out.
Read full review
Best thing was the help pushing out via group policy and was able to get instructions for that on sophos site
Read full review
No answers on this topic
Alternatives Considered
I've used Sophos, Bitdefender, SentinelOne, and, of course, Microsoft Defender for Endpoint. We chose this at the time because we were such a Microsoft shop that it just seemed to integrate well with all the other things that we had set up with Microsoft.
Read full review
I don't feel it's fair to compare Sophos Intercept X with the versions of Symantec and AVG that I have used in the past - as that was such a long time ago. I'm sure those other companies have released far more features than I used all those years ago
Read full review
Trend Micro Cloud One security supports the hybrid Infra. It can be integrated with public Cloud as well as Private cloud. It's an all in one solution which gives the flexibility to manage our Clouds, Workloads, Containers, Dockers etc. It protects against zero day attacks using next gen technology like Behaviour Analysis and Machine learning.
Read full review
Scalability
Microsoft Defender for Endpoint is easily scaled from small orgs to giant enterprises.
Read full review
No answers on this topic
No answers on this topic
Return on Investment
  • Another positive impact is that Microsoft Defender for Endpoint is built into the Windows OS. So naturally, it is much easier to load it out and manage it, rather than acquiring it through party ER, deploying it, and managing it separately. So that's definitely on the positive side that we observe there's a byproduct of changing Microsoft Defender for Endpoint.
Read full review
  • Before we had Intercept X, we had several infections of ransomware. Since that time it has stopped at least 10 attempts, saving us thousands of man-hours and hundreds of thousands of dollars.
  • By decreasing the time needed for malware remediation, it has saved us the cost of .25 FTE in the IT department.
  • Initial setup was cumbersome and cost us .1 FTE in additional costs the first year.
Read full review
  • Application control and security
  • United management for Hybrid Cloud
  • Complied to regulatory like GDPR, PCI DSS
Read full review
ScreenShots

Microsoft Defender for Endpoint Screenshots

Screenshot of blocked activitiesScreenshot of Detects & respondsScreenshot of discovers vulnerabilityScreenshot of Eliminates blind spotsScreenshot of Risk management

Sophos Intercept X Screenshots

Screenshot of Screenshot of Screenshot of