Microsoft Defender XDR

Microsoft Defender XDR

191 Reviews and Ratings

Overview
Product	Rating	Most Used By	Product Summary	Starting Price
Microsoft Defender XDR	Score8.8 out of 10	N/A	Microsoft 365 Defender combines SIEM and XDR capabilities for Microsoft 365 environments, encompassing threat detection, post-breach detection, automated investigation, and response for endpoints. Additionally, it protects cloud apps, emails and documents, and employee identities.	N/A

Pricing

Microsoft Defender XDR

No answers on this topic

Pricing Offerings
Microsoft Defender XDR
Free Trial
Yes
Free/Freemium Version
No
Premium Consulting/Integration Services
No

No setup fee

—

Community Pulse
Key User Insights
	Microsoft Defender XDR
Considered Both Products	Microsoft Verified User Chose Microsoft Defender XDR The primary usecase was to secure User endponts specally covering windows OS then Microsoft XDR becomes a No-Brainer Incentivized Helpful? Verified User Chose Microsoft Defender XDR I used ManageEngine before. I just go over Microsoft products because we're a Microsoft shop. I think the product's much better because all the data's already there. Incentivized Helpful? Verified User Chose Microsoft Defender XDR Microsoft Defender XDR is included with M365, so it's part of the budget. Incentivized Helpful? Veli-Matti Mäkelä System Administrator in Information Technology at SeAMK (Education Management, 201-500 employees) Chose Microsoft Defender XDR Symantec Endpoint Security (and some other products from same software family) was our main endpoint protection for endpoints before Microsoft Defender XDR. Comparison is not really fair as we transitioned to Defender quite while ago. Even so, modern XDR product is really a … Incentivized Helpful? Zak Farris Computer and Information Systems Manager in Information Technology at Housing Authority of the Cherokee Nation (Government Administration, 201-500 employees) Chose Microsoft Defender XDR Microsoft Defender XDR is deeply integrated with Microsoft 365 services, offering a single pane of glass for endpoints, email, identity and cloud apps. The competitors require additional connectors for Microsoft workloads. Microsoft Defender XDR is highly cost-effective, … Incentivized Helpful? Gledson Rodrigues Analista de Redes N2 Pleno in Professional Services at Aloo Telecom (Telecommunications, 501-1000 employees) Chose Microsoft Defender XDR Não participei do processo decisório, mas é claro que o Microsoft Defender XDR funciona bem, integrado à plataforma Microsoft 365, que também temos na nossa empresa, o que facilita muito as operações. I wasn't involved in the decision-making process, but it's clear that … Incentivized Helpful? Verified User Chose Microsoft Defender XDR What we like in Microsoft Defender for XDR: Native Integration with Microsoft 365 and Azure Easier license model Incentivized Helpful? Verified User Chose Microsoft Defender XDR It provides additional protection and also integrates better with other Microsoft programs and operating systems. Incentivized Helpful? John Robinson Network Administrator in Information Technology at Children's Defense Fund (Non-profit Organization Management, 51-200 employees) Chose Microsoft Defender XDR We actually use both in tandem! This provides an extra layer of security as they do not appear to clash. Each works well with the other, and gives us greater coverage and visibility of any malicious attacks on our endpoints. Incentivized Helpful? Verified User Chose Microsoft Defender XDR We chose Microsoft Defender XDR for the ability to correlament the dangers in the Microsoft Ecosystem, Strong Automation, and email, Identification, Estruction, Establishment Points and Cloud Apps in the same platform. This gave us the end-to-end visibility without the need to … Incentivized Helpful? Lian Lopreiato Manager at Puget System (Computer Hardware, 51-200 employees) Chose Microsoft Defender XDR We saw CrowdStrike but Microsoft Defender XDR was already in our computer. It was cheaper too cause we had Micrsoft license. CrowdStrike look cool but had many buttons and hard to read. My team like Microsoft Defender XDR because it looks same like other Microsoft thing. We … Incentivized Helpful? Verified User Chose Microsoft Defender XDR Our product in that area, for instance as a security platform and for us it is for the moment really bad point. We started to move in that direction that there is that disconnect from the client management. So if there is some action that needs to be executed detected by … Incentivized Helpful? Nikhil Sharma Account Manager in Finance and Accounting at Alorica (Outsourcing/Offshoring, 51-200 employees) Chose Microsoft Defender XDR As a business already using Microsoft 365 and Azure, the seamless integration with Microsoft Defender XDR provided a unified security approach, streamlining management and operations. Incentivized Helpful? Hemant Patel Manager in Sales at Alorica (Logistics & Supply Chain, 51-200 employees) Chose Microsoft Defender XDR Avast had very limited capabilities, especially in terms of automation. We had to have some employees available 24/7 to monitor and take necessary actions. Microsoft Defender is so much more advanced. Incentivized Helpful? Verified User Chose Microsoft Defender XDR We have a microsoft ecosystem and we can easily implement Microsoft Defender XDR in a breeze. Using few option, we can actually start logging and managing all the data. Incentivized Helpful? Harshit Lal security consultant in Information Technology at wipro (Information Services, 10,001+ employees) Chose Microsoft Defender XDR Microsoft Defender XDR deployment process is seamless as compared to proofpoint Incentivized Helpful? Verified User Chose Microsoft Defender XDR I've used Trend Micro, but it's not exactly the same because Trend Micro is equivalent to one of the parts of Defender XDR, which is Defender for Endpoint. But Trend Micro has also a portal that combines all the incidents like Defender XDR, but I think the Microsoft one is much … Incentivized Helpful? Verified User Chose Microsoft Defender XDR Microsoft Defender XDR is more seamless than Sophos Intercept X as it is better integrated into the Microsoft 365 suite. Sophos Intercept X is a little bit cheaper per year than Microsoft Defender XDR though, and definitely worth looking into if you are looking for a security … Incentivized Helpful? Verified User Chose Microsoft Defender XDR Well, we're actually evaluating the other products now. We had selected Defender XDR because at the time we just got a good deal on it. Incentivized Helpful? Shubham Jurail IT Consultant in Information Technology at Unify Cloud (Information Technology & Services, 201-500 employees) Chose Microsoft Defender XDR It was easy to implement in comparison to Palo Alto, and cost-saving can integrate well with Windows products. Incentivized Helpful? Mario Urrutia CITO (Chief Information Technology Officer) in Information Technology at Travel Diunsa (Leisure, Travel & Tourism, 51-200 employees) Chose Microsoft Defender XDR It really was the first and most logical option since it is an integral part of the platform that we want to protect and so far the results have been optimal. Incentivized Helpful? Verified User Chose Microsoft Defender XDR We used the MS XDR as this is a bundle that we bought when we subscribed to the M365 platform, so having it was a bonus as we stated earlier, but due to limitation on licenses in Sentinelone, having this is just a blessing for us, so we can reduce around 200 licenses and can … Incentivized Helpful? Caridad Buenaventura Senior Financial Analyst in Finance and Accounting at Financials Euro Spain (Financial Services, 201-500 employees) Chose Microsoft Defender XDR The Microsoft 365 Defender is a product that has a lot of advantages over other similar products. This is because Microsoft 365 Defender integrates seamlessly with both Microsoft 365 services, is capable of detecting threats in real time, and has the capability of automating … Incentivized Helpful?
	Would buy again
	99% Would buy again 86 Answers
	Delivers good value for the price
	98% Delivers good value for the price 80 Answers
	Happy with the feature set
	99% Happy with the feature set 86 Answers
	Lived up to sales and marketing promises
	98% Lived up to sales and marketing promises 58 Answers
	Implementation went as expected
93% Implementation went as expected 67 Answers

Best Alternatives
	Microsoft Defender XDR
Small Businesses	Sophos Intercept X for Server Score9.5 out of 10
Medium-sized Companies	InsightIDR Score8.6 out of 10
Enterprises	Palo Alto Networks Cortex XDR Score8.5 out of 10
All Alternatives	View all alternatives

User Ratings
	Microsoft Defender XDR
Likelihood to Recommend	8.6 (87 ratings)
Likelihood to Renew	9.4 (6 ratings)
Usability	7.7 (8 ratings)
Availability	9.0 (2 ratings)
Performance	8.5 (2 ratings)
Support Rating	8.0 (4 ratings)
In-Person Training	9.1 (1 ratings)
Online Training	9.0 (2 ratings)
Implementation Rating	7.0 (2 ratings)
Configurability	9.0 (1 ratings)
Contract Terms and Pricing Model	10.0 (1 ratings)
Ease of integration	10.0 (1 ratings)
Product Scalability	9.5 (2 ratings)
Vendor post-sale	10.0 (1 ratings)
Vendor pre-sale	10.0 (1 ratings)

User Testimonials
	Microsoft Defender XDR
Likelihood to Recommend	Microsoft In our experience, Microsoft Defender XDR has been fantastic for phishing and account compromise scenarios, Endpoint Security, Automated threat detection and response and just generally giving a great overview through their dashboard, meaning the IT team doesn't need to switch between multiple tools to understand the full scope of an incident. In mostly remote organization like ours, it really helps to keep on top of any potential threats that we don't have the opportunity to spot in person. While it works great for us in a mostly Microsoft 365 environment, I can see how it would be less appropriate in an organization that is less integrated in the Microsoft ecosystem or uses a large number of third party tools. Incentivized Verified User Read full review
Pros	Microsoft One of the greatest strength of Microsoft Defender XDR has the ability to convey alert and signal in the closing point, email, identity and cloud applications in an event. Instead of obtaining isolated alert from each tool, Microsoft Defender XDR consolidates them in a full attack story, which helps the security teams to understand the scope and impact of a danger very fast. If a user clicks on the fishing link, Microsoft Defender XDR automatically can associate malicious emails with lateral movement efforts, suspected sine-in, and endpoint activity-to protect against hours of manual probes. The defender uses AI-powered automation for investigating and treatment of Microsoft Defender XDR events. It can separate the infected closing points, can cancel the compromised tokens, or remove malicious email - without the need for human intervention. When malware is detected on a device, the defender can separate the device, kill malicious processes, and automatically flag the same files throughout the environment, which can spread. Because it is integrated deeply with Microsoft 365 defender, Entra ID (Azure Ad), Intune, and PurView, the defender provides native safety in the XDR Microsoft Stack. It simplifies deployment and maintenance, offering deep visibility in user activity and cloud data. Incentivized Verified User Read full review
Cons	Microsoft Enhanced False Positive Mitigation: Improved algorithms to minimize false positives in threat detection, reducing the impact on security teams and preventing unnecessary investigations into non-threatening incidents. Advanced User-Friendly Interface: Streamlined and intuitive user interface for the centralized dashboard, making it more accessible for security professionals with varying levels of expertise. Greater Third-Party Integration: Increased compatibility and integration capabilities with a broader range of third-party security tools Incentivized stephen Hobson scrm Read full review
Likelihood to Renew	Microsoft We are pleased with the product and have no plans to look for alternatives. We are deeply invested in Microsoft ecosystem and Defender XDR provides seamless integration to other Microsoft products. For academic institution pricing is also quite affordable. In the contrary, we hope to extend the scope of the product for our entire environment. Incentivized Veli-Matti Mäkelä System Administrator Read full review
Usability	Microsoft Once configured, it's very usable for any security team or IT Analyst. It'll give you everything you need to know in a single consolidated dashboard, and while you can certainly dive deeper with a very feature rich platform, generally it's very usable. I gave it an 8 as some of the advanced features do have a very strong learning curve, while routine tasks are quite straightforward, some of the features such as threat hunting, custom detections and automated response workflows do have a bit of a learning curve and will require some research and experience to get to grips with Incentivized Verified User Read full review
Reliability and Availability	Microsoft Our experience has been the Defender XDR is consistently available for security operations and incident response activities. While any cloud based solution is vulnerable to outages, we have not experienced any during our 5 year usage of the product. Incentivized Zak Farris Computer and Information Systems Manager Read full review
Performance	Microsoft Most of the time the product is as responsive as you might expect from cloud product. Occasionly the product is little slugish, this has been at most a slight irritation. Reports generate quickly ennough for our needs. We also not have found that Defender XDR slows down systems that it is integrated with Incentivized Veli-Matti Mäkelä System Administrator Read full review
Support Rating	Microsoft Their support throughout our onboarding of the product was fabulous. They not only took the time to carefully explain to teams not as well equipped with the lingo but explained to the tech team how to teach the other teams to be successful. They never once seemed impatient or annoyed with basic questions and didn’t pretend to know something when they needed to research an answer Incentivized Morgan Thompson Account Executive Read full review
In-Person Training	Microsoft Good and hard to find someonme who can explain everything for you beside Microsoft they provide you everything you need. Incentivized Abdrhman Arar . Systems Engineer Read full review
Online Training	Microsoft I would give it a 9 out of 10 because of the sheer amount of information Microsoft provides. Its a comprehensive learning system that takes your from beginner to experienced SOC analyst if you are dedicated. Learn is also free, organized into learning paths and hands-on modules and applied skills content. Incentivized Zak Farris Computer and Information Systems Manager Read full review
Implementation Rating	Microsoft Organizations should focus early on onboarding data sources, tuning detections, reviewing Secure Score recommendations, and establishing incident response processes rather than treating Microsoft Defender XDR as simply another security product. We also didn't realize the full benefits until we began to leverage native integrations with Microsoft 365, Intune, Entra ID and Exchange Online. Incentivized Zak Farris Computer and Information Systems Manager Read full review
Alternatives Considered	Microsoft Our product in that area, for instance as a security platform and for us it is for the moment really bad point. We started to move in that direction that there is that disconnect from the client management. So if there is some action that needs to be executed detected by security team, there is not an easy way to make that available to the team that is responsible for managing the identities as users, as the devices Incentivized Verified User Read full review
Scalability	Microsoft We have been able to scale protection across hundreds of users, more than a thousand devices and across multiple office locations while maintaining a single pane of glass for security operations. The cloud native architecture and integration with Intune, Entra ID and Microsoft 365 has allowed us to grow our security capabilities without a proportional increase in cost. Incentivized Zak Farris Computer and Information Systems Manager Read full review
Return on Investment	Microsoft Security incident cannot be measured, once you down you down, hence the security applications like this is just a must have The subscription model will be cheaper and can be a good point if you want to free resources within the IT Team The SaaS model, if measured correctly can and will reduce long term cost in Infrastructure and Man Power Incentivized Verified User Read full review
ScreenShots	Microsoft Defender XDR Screenshots