Microsoft Defender for Endpoint

Overview
ProductRatingMost Used ByProduct SummaryStarting Price
Microsoft Defender for Endpoint
Score 8.3 out of 10
N/A
Microsoft Defender for Endpoint (formerly Microsoft Defender ATP) is a holistic, cloud delivered endpoint security solution that includes risk-based vulnerability management and assessment, attack surface reduction, behavioral based and cloud-powered next generation protection, endpoint detection and response (EDR), automatic investigation and remediation, managed hunting services, rich APIs, and unified security management.
$2.50
per user/per month
Pricing
Microsoft Defender for Endpoint
Editions & Modules
Academic
$2.50
per user/per month
Standalone
$5.20
per user/per month
Offerings
Pricing Offerings
Microsoft Defender for Endpoint
Free Trial
Yes
Free/Freemium Version
No
Premium Consulting/Integration Services
No
Entry-level Setup FeeNo setup fee
Additional Details
More Pricing Information
Community Pulse
Microsoft Defender for Endpoint
Considered Both Products
Microsoft Defender for Endpoint
Chose Microsoft Defender for Endpoint
We evaluated several other reports XDR, CrowdStrike, Sentinel One and Cybereason. And at the end on now we purchase the Cybereason mostly for a matter of cost because it's cheaper and we are a relatively small company.
Chose Microsoft Defender for Endpoint
I have worked with CrowdStrike and Carbon Black. Because of the performance in Linux environments.
Chose Microsoft Defender for Endpoint
Microsoft Defender for Endpoint stacks up well against it competitors. It detects malicious files faster than other tools like CrowdStrike.
Chose Microsoft Defender for Endpoint
It has more functionality overall and then again, reporting is much better. The ability to prioritize and define our own criticalities, so I think that's a lot better.
Chose Microsoft Defender for Endpoint
It integrates all other Microsoft services like 365, Skype, Visio and mail.
Chose Microsoft Defender for Endpoint
Tenable Security Center was a fantastic exposure detection tool but there was always a lag and servers would hang alot when being scanned causing resource traffic. Microsoft Defender for Endpoint on the other hand does not use up most resources soo there is usually noo lag …
Chose Microsoft Defender for Endpoint
Bitdefender was a great platform, but didn't provide as much network insight that Microsoft Defender for Endpoint does. It did not work well as an Endpoint Detection and Response platform. Tenable Security Center was great for vulnerability scanning of the devices on our …
Chose Microsoft Defender for Endpoint
We have reviewed/used ESET and find Defender much better for Endpoints.
We have also used McAfee on Servers and have since migrated to Defender on Servers.
Chose Microsoft Defender for Endpoint
Microsoft comes as a bundle suite and for other solutions the purchasing needs to be done separately.
Chose Microsoft Defender for Endpoint
I found CrowdStrike to be confusing and complex when it comes to managing assets and incidents around endpoints. While it provides quality intelligence, it lacks a more admin-friendly way of presenting that information. Hence, as I have mentioned in the previous points as well, …
Chose Microsoft Defender for Endpoint
in an overall protection sentinelone is providing better protection for us, but as it comes with subscription's limitation, we have to be really careful in managing the licenses, the MS Defender for endpoint is providing us a decent protection which we are not complaining …
Chose Microsoft Defender for Endpoint
I feel that Microsoft Defender for Endpoint is much better in protecting our Windows based devices as it is developed by Microsoft itself. However, it comes with a little price hike.
Chose Microsoft Defender for Endpoint
Trend Micro's Apex One offers a comprehensive endpoint security solution, including advanced threat protection and vulnerability management.
Chose Microsoft Defender for Endpoint
Trend Micro also provides the similar capabilities but with some advanced features like Comprehensive Protection, Deep Security Integration etc.,
Chose Microsoft Defender for Endpoint
In my organization we already have E5 license so no need to procured additional license for EDR functionality.
Chose Microsoft Defender for Endpoint
For me personally, I can not really compare the two against each other, as they are both really good. For us as a business specializing in MS products, it is a logical choice to have followed.
Chose Microsoft Defender for Endpoint
It excels in detecting unusual behavior on endpoints, offering valuable insights into potential attack paths, and it operates with remarkable speed and responsiveness.
Chose Microsoft Defender for Endpoint
We choose Microsoft Defender for Endpoint as an additional solution to fill gaps and also to keep more of our solutions under one pane of glass (Microsoft 365).
Chose Microsoft Defender for Endpoint
Microsoft Defender is more easy to install, upgrade and use.
Eset is annoyingly visible.
Chose Microsoft Defender for Endpoint
Enterprise Endpoint Protection: Microsoft Defender for Endpoint is well suited for large organizations with numerous endpoints, such as desktops, laptops, and servers, as it provides centralized management and monitoring of security across the entire network. Microsoft …
Chose Microsoft Defender for Endpoint
CrowdStrike Falcon EDR is one the Best solution available in Market ,However, I think they are lack in Threat visibility and Vulnerability assessment& Management for application versions & configurations .
Chose Microsoft Defender for Endpoint
We have evaluated other products, such as Sophos, Trend Micro, and others. The advantage of Microsoft Defender for Endpoint is having a single subscription with Office 365 full packet, antivirus, and one drive with backup all in one subscription. Very easy to manage.
Chose Microsoft Defender for Endpoint
We found products with similar capabilities considering our needs. The opoortunity to test was crucial, and also the fact that Microsoft Defender for Endpoint is a Microsoft tool, since we are running a Microsoft environment for this project. There are a few differences among …
Chose Microsoft Defender for Endpoint
The fact it is integrated into the Microsoft 365 licensing our customers already purchase makes it an easy choice.
Chose Microsoft Defender for Endpoint
Microsoft Defender gels very well with the rest of the M365 suite of products. The security Dashboard gives one view for Email Security and Endpoint Security. The security events can be generated while getting integrated with SIEM solution or can use its own SIEM offering.
Top Pros
Top Cons
Features
Microsoft Defender for Endpoint
Endpoint Security
Comparison of Endpoint Security features of Product A and Product B
Microsoft Defender for Endpoint
8.2
53 Ratings
3% below category average
Anti-Exploit Technology8.051 Ratings
Endpoint Detection and Response (EDR)8.551 Ratings
Centralized Management7.952 Ratings
Hybrid Deployment Support7.810 Ratings
Infection Remediation8.252 Ratings
Vulnerability Management8.350 Ratings
Malware Detection8.553 Ratings
Best Alternatives
Microsoft Defender for Endpoint
Small Businesses
SentinelOne Singularity
SentinelOne Singularity
Score 9.1 out of 10
Medium-sized Companies
CrowdStrike Falcon
CrowdStrike Falcon
Score 9.2 out of 10
Enterprises
BeyondTrust Endpoint Privilege Management
BeyondTrust Endpoint Privilege Management
Score 8.7 out of 10
All AlternativesView all alternatives
User Ratings
Microsoft Defender for Endpoint
Likelihood to Recommend
8.2
(77 ratings)
Support Rating
9.0
(5 ratings)
User Testimonials
Microsoft Defender for Endpoint
Likelihood to Recommend
Microsoft
It says it's cloud-based. There are lags, so it works well because we have a distributed workforce now working primarily from home, so it's easy to get in there and make those changes. If we were on site and we wanted faster validation of the changes, it would be missing that because it can't do it fast enough and get those quicker turnarounds.
Read full review
Pros
Microsoft
  • When an end user opens a file or accesses a file I should say that has malicious content, it will quarantine the file. It will also let us know if an end user themselves has an issue now. So the whole Defender Suite has different parts. So some of these may be going over into Defender for identity and stuff. I'm not clear on which is which, but it's the whole ecosystem. I'll get an email letting me know that there's an issue and then we follow up. The email generally has a link in it to the actual event in the defender for endpoint or whatever console. And then we can start looking at the case, make sure the endpoint is quarantined. So it can't do anything. The only thing we can do is talk to it to do forensics or whatever so it's not totally isolated where we have to get somebody on the ground to go to the thing. We can still work on it remotely, but the end user can't do anything that would continue to cause lateral movement of the compromise or anything like that.
Read full review
Cons
Microsoft
  • While it's a very good product for auditing, it has a very hard time to distinguish what is malicious and is an attack, what is not. Very rarely we get indication of a real malicious attack. We got lots of hours for off the shelf malware that it cleans up automatically. So basically we never get to look at it, which is a positive thing, but threats are detected by the third party endpoint, so it will not be enough by itself.
Read full review
Support Rating
Microsoft
The first time I tried to onboard my macOS endpoints to MDE I struggled for quite a bit. I had to reach out to Microsoft's MDE support team. The tech was very helpful in walking me through the steps during a screen share session
Read full review
Alternatives Considered
Microsoft
Tenable Security Center was a fantastic exposure detection tool but there was always a lag and servers would hang alot when being scanned causing resource traffic. Microsoft Defender for Endpoint on the other hand does not use up most resources soo there is usually noo lag during scanning and it also provide more detailed insights on the network. Also Microsoft Defender for Endpoint integration power has helped us up our security game by delivering a smooth secure network.
Read full review
Return on Investment
Microsoft
  • Positive : Microsoft Defender for Endpoint offers sophisticated threat detection and response capabilities, putting it into use helps increase security. Reduced security incidents, data breaches, and related expenses may arise from this.
  • Positive : A more secure environment means less time and effort spent by IT and security teams on remediation and incident response.
  • False Positives: Like any security solution, false positives can occur, leading to unnecessary investigations and potential disruptions to business operations. This may require additional resources to manage.
Read full review
ScreenShots

Microsoft Defender for Endpoint Screenshots

Screenshot of blocked activitiesScreenshot of Detects & respondsScreenshot of discovers vulnerabilityScreenshot of Eliminates blind spotsScreenshot of Risk management