TrustRadius: an HG Insights company

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    Microsoft Defender XDR

    Score8.7 out of 10
    N/AMicrosoft 365 Defender combines SIEM and XDR capabilities for Microsoft 365 environments, encompassing threat detection, post-breach detection, automated investigation, and response for endpoints. Additionally, it protects cloud apps, emails and documents, and employee identities.N/A

    Sophos Email

    Score9.1 out of 10
    N/ASophos Email is presented as Predictive Cloud Email Security Powered by Artificial Intelligence designed to block spam and malware, as well as protect employees and block phishing attempts.N/A
    Pricing
    Microsoft Defender XDRSophos Email
    Editions & Modules
    No answers on this topic
    No answers on this topic
    Offerings
    Pricing Offerings
    Microsoft Defender XDRSophos Email
    Free Trial
    YesNo
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoNo
    Entry-level Setup FeeNo setup feeNo setup fee
    Additional Details
    More Pricing Information
    Community Pulse
    Microsoft Defender XDRSophos Email
    Considered Both Products
    Microsoft
    Chose Microsoft Defender XDR
    McAfee has a product, I can't remember the name. I'm terrible with names that I've used that were similar, but I don't know of any others. It is easier to use because most of the stuff that we have is cloud-based Microsoft products, so they fit hand in hand.
    Incentivized
    Sophos
    Chose Sophos Email
    Sophos is better than the McAfee email gateway. Depending on which license for Defender you have it could be better or worse.
    Incentivized
    Key User Insights
    Would buy again
    99%
    Would buy again
    85 Answers
    90%
    Would buy again
    18 Answers
    Delivers good value for the price
    98%
    Delivers good value for the price
    79 Answers
    95%
    Delivers good value for the price
    18 Answers
    Happy with the feature set
    99%
    Happy with the feature set
    85 Answers
    90%
    Happy with the feature set
    18 Answers
    Lived up to sales and marketing promises
    98%
    Lived up to sales and marketing promises
    58 Answers
    89%
    Lived up to sales and marketing promises
    17 Answers
    Implementation went as expected
    93%
    Implementation went as expected
    66 Answers
    100%
    Implementation went as expected
    17 Answers
    Features
    Microsoft Defender XDRSophos Email
    Secure Email Gateway
    Comparison of Secure Email Gateway features of Microsoft Defender XDR and Sophos Email
    Feature
    Microsoft Defender XDR
    -
    Ratings
    Sophos Email
    9.2
    21 Ratings
    9% above category average
    Anti-malware00 Ratings9.521 Ratings
    Customizability00 Ratings9.021 Ratings
    Data Loss Protection00 Ratings9.018 Ratings
    Threat Detection00 Ratings10.020 Ratings
    Sandboxing00 Ratings9.016 Ratings
    End-to-End Encryption00 Ratings9.018 Ratings
    Management Tools00 Ratings9.021 Ratings
    Best Alternatives
    Microsoft Defender XDRSophos Email
    Small Businesses
    Sophos Intercept X for Server
    Score9.5 out of 10
    Zoho Mail
    Score9.2 out of 10
    Medium-sized Companies
    InsightIDR
    Score8.5 out of 10
    Barracuda ESG (discontinued)
    Score6.2 out of 10
    Enterprises
    Kaspersky EDR Optimum
    Score9.2 out of 10
    Microsoft Exchange
    Score8.6 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    Microsoft Defender XDRSophos Email
    Likelihood to Recommend
    8.7
    (86 ratings)
    9.0
    (24 ratings)
    Likelihood to Renew
    9.7
    (5 ratings)
    1.1
    (2 ratings)
    Usability
    7.6
    (7 ratings)
    9.0
    (11 ratings)
    Availability
    9.0
    (1 ratings)
    -
    (0 ratings)
    Performance
    8.0
    (1 ratings)
    -
    (0 ratings)
    Support Rating
    9.0
    (3 ratings)
    2.8
    (11 ratings)
    In-Person Training
    9.1
    (1 ratings)
    -
    (0 ratings)
    Online Training
    9.1
    (1 ratings)
    -
    (0 ratings)
    Implementation Rating
    9.0
    (1 ratings)
    -
    (0 ratings)
    Product Scalability
    9.0
    (1 ratings)
    -
    (0 ratings)
    User Testimonials
    Microsoft Defender XDRSophos Email
    Likelihood to Recommend
    Microsoft
    In our experience, Microsoft Defender XDR has been fantastic for phishing and account compromise scenarios, Endpoint Security, Automated threat detection and response and just generally giving a great overview through their dashboard, meaning the IT team doesn't need to switch between multiple tools to understand the full scope of an incident. In mostly remote organization like ours, it really helps to keep on top of any potential threats that we don't have the opportunity to spot in person. While it works great for us in a mostly Microsoft 365 environment, I can see how it would be less appropriate in an organization that is less integrated in the Microsoft ecosystem or uses a large number of third party tools.
    Incentivized
    Read full review
    Sophos
    Sophos Email is ideal for protecting business email from advanced threats. It comes with features that make it easy to detect and block email threats, such as spam, phishing, ransomware, and data leaks. In addition, Sophos Email is ideal for email encryption and helps train teams to identify phishing threats.
    Incentivized
    Read full review
    Pros
    Microsoft
    • One of the greatest strength of Microsoft Defender XDR has the ability to convey alert and signal in the closing point, email, identity and cloud applications in an event. Instead of obtaining isolated alert from each tool, Microsoft Defender XDR consolidates them in a full attack story, which helps the security teams to understand the scope and impact of a danger very fast.
    • If a user clicks on the fishing link, Microsoft Defender XDR automatically can associate malicious emails with lateral movement efforts, suspected sine-in, and endpoint activity-to protect against hours of manual probes.
    • The defender uses AI-powered automation for investigating and treatment of Microsoft Defender XDR events. It can separate the infected closing points, can cancel the compromised tokens, or remove malicious email - without the need for human intervention.
    • When malware is detected on a device, the defender can separate the device, kill malicious processes, and automatically flag the same files throughout the environment, which can spread.
    • Because it is integrated deeply with Microsoft 365 defender, Entra ID (Azure Ad), Intune, and PurView, the defender provides native safety in the XDR Microsoft Stack. It simplifies deployment and maintenance, offering deep visibility in user activity and cloud data.
    Incentivized
    Read full review
    Sophos
    • We could customize it to have a certain level of workflow. We manage to enforce certain email (based on key-phrases) to be quarantined before send it to the recipient. And the email needs to be approved (manually) before being released.
    • For certain type (using regex) of email, we will encrypt it if it's sent outside our organization domain.
    • Scalable
    Incentivized
    Read full review
    Cons
    Microsoft
    • Enhanced False Positive Mitigation:
    • Improved algorithms to minimize false positives in threat detection, reducing the impact on security teams and preventing unnecessary investigations into non-threatening incidents.
    • Advanced User-Friendly Interface:
    • Streamlined and intuitive user interface for the centralized dashboard, making it more accessible for security professionals with varying levels of expertise.
    • Greater Third-Party Integration:
    • Increased compatibility and integration capabilities with a broader range of third-party security tools
    Incentivized
    Read full review
    Sophos
    • I would love to see tips integrated into the user interface from the management side to allow for easier dissection of email headers. This would allow lower level admins that may work at smaller companies to better understand the information presented.
    Incentivized
    Read full review
    Likelihood to Renew
    Microsoft
    We are pleased with the product and have no plans to look for alternatives. We are deeply invested in Microsoft ecosystem and Defender XDR provides seamless integration to other Microsoft products. For academic institution pricing is also quite affordable. In the contrary, we hope to extend the scope of the product for our entire environment.
    Incentivized
    Read full review
    Sophos
    It was easy to use and easy to implement. You don't need previous knowledge on the products, after we got this up and running, it took us hours to put everything together. The transition was easy and seamless.
    Incentivized
    Read full review
    Usability
    Microsoft
    Once configured, it's very usable for any security team or IT Analyst. It'll give you everything you need to know in a single consolidated dashboard, and while you can certainly dive deeper with a very feature rich platform, generally it's very usable. I gave it an 8 as some of the advanced features do have a very strong learning curve, while routine tasks are quite straightforward, some of the features such as threat hunting, custom detections and automated response workflows do have a bit of a learning curve and will require some research and experience to get to grips with
    Incentivized
    Read full review
    Sophos
    It's mostly great and for policies and features, it does everything we would ask it to and more. The only thing keeping it from being a 10 is the lack of granularity in the reporting, which is actually an issue within Sophos Central as a whole. The ability to drill down from dashboards into accurate, detailed data would be very helpful at times.
    Incentivized
    Read full review
    Reliability and Availability
    Microsoft
    In our experience there has been very little downtime for Microsot Defender XDR. For us there hasn’t been any single incident where we needed the product and it was not available.
    Incentivized
    Read full review
    Sophos
    No answers on this topic
    Performance
    Microsoft
    Most of the time the product is as responsive as you might expect from cloud product. Occasionly the product is little slugish, this has been at most a slight irritation. Reports generate quickly ennough for our needs. We also not have found that Defender XDR slows down systems that it is integrated with
    Incentivized
    Read full review
    Sophos
    No answers on this topic
    Support Rating
    Microsoft
    Their support throughout our onboarding of the product was fabulous. They not only took the time to carefully explain to teams not as well equipped with the lingo but explained to the tech team how to teach the other teams to be successful. They never once seemed impatient or annoyed with basic questions and didn’t pretend to know something when they needed to research an answer
    Incentivized
    Read full review
    Sophos
    Support is slow to respond. They call back outside of normal business hours despite clearly being advised when they should call. They try to BS you that the platform is working properly although there is hard evidence to the contrary. Once you get to senior level of support they agree that the product is incapable of performing properly in its current iteration.
    Read full review
    In-Person Training
    Microsoft
    Good and hard to find someonme who can explain everything for you beside Microsoft they provide you everything you need.
    Incentivized
    Read full review
    Sophos
    No answers on this topic
    Online Training
    Microsoft
    Microsoft Provides a good training for the Microsoft 365 Defender and has a good learning paths to learn and take the exams and get your Certifications.
    Incentivized
    Read full review
    Sophos
    No answers on this topic
    Implementation Rating
    Microsoft
    seemless and almost transparent. can be deployed by script if needed so every endpoint on our system get's it. if you have intune it gets dumped on the the endpoint by policy so nothing escapes it
    Incentivized
    Read full review
    Sophos
    No answers on this topic
    Alternatives Considered
    Microsoft
    Our product in that area, for instance as a security platform and for us it is for the moment really bad point. We started to move in that direction that there is that disconnect from the client management. So if there is some action that needs to be executed detected by security team, there is not an easy way to make that available to the team that is responsible for managing the identities as users, as the devices
    Incentivized
    Read full review
    Sophos
    Many other solutions are a complicated setup and take a lot of time for the configuration. With Sophos email we were setup and seeing data/emails within an hour. As I have described the ease of use from a high-level for someone like me a Director just peeking into the system or an analyst that can do a deep dive is one of the best users interfaces I have seen for any product.
    Incentivized
    Read full review
    Scalability
    Microsoft
    Azure cloud provides techical power to scale the product for whole organization. From organizational point of view scaling Defender XDR for various IT teams needs good collaboration and clear norms that all teams must agree to and follow.
    Incentivized
    Read full review
    Sophos
    No answers on this topic
    Return on Investment
    Microsoft
    • Security incident cannot be measured, once you down you down, hence the security applications like this is just a must have
    • The subscription model will be cheaper and can be a good point if you want to free resources within the IT Team
    • The SaaS model, if measured correctly can and will reduce long term cost in Infrastructure and Man Power
    Incentivized
    Read full review
    Sophos
    • AI-powered email threat prevention ensures that no threats reach our email system, preventing data contamination.
    • The BEC defense ensures our business reputation remain in place.
    • URL protection protects our users from clicking on malicious links that would otherwise compromise our email systems.
    • Ability to encrypt emails keeps our email data secure which a plus.
    Incentivized
    Read full review
    ScreenShots

    Microsoft Defender XDR Screenshots

    Screenshot of AH Advanced ModeScreenshot of AH Guided modeScreenshot of CD exampleScreenshot of CD Supported actions