Microsoft Defender deep dive
Microsoft Defender is a magnificent to in security purpose of our applications. This tool has been useful in ensuring real time monitoring …
Microsoft Defender for EndpointFormerly Microsoft Defender ATP
Starting at $2.50 per user/per month
View PricingOverview
What is Microsoft Defender for Endpoint?
Microsoft Defender for Endpoint (formerly Microsoft Defender ATP) is a holistic, cloud delivered endpoint security solution that includes risk-based vulnerability management and assessment, attack surface reduction, behavioral based and cloud-powered next generation protection, endpoint detection and response (EDR), automatic investigation…
Recent Reviews
How Microsoft Defender for Endpoint Differs From Its Competitors
Awards
Products that are considered exceptional by their customers based on a variety of criteria win TrustRadius awards. Learn more about the types of TrustRadius awards to make the best purchase decision. More about TrustRadius Awards
Popular Features
- Malware Detection (53)8.585%
- Infection Remediation (52)8.282%
- Anti-Exploit Technology (51)8.080%
- Centralized Management (52)7.979%
Reviewer Pros & Cons
Executive Engineer Transmission
Sui Northen Gas Pipelines Ltd (Oil & Energy, 10,001+ employees)
Pricing
Academic
$2.50
On Premise
per user/per month
Standalone
$5.20
On Premise
per user/per month
Entry-level set up fee?
- No setup fee
Offerings
- Free Trial
- Free/Freemium Version
- Premium Consulting/Integration Services
Product Demos
Microsoft Defender for Endpoint Overview
YouTube
Features
Return to navigation
Product Details
- About
- Competitors
- Tech Details
- FAQs
What is Microsoft Defender for Endpoint?
Presented as an epicenter for comprehensive endpoint security, Microsoft Defender for Endpoint helps users rapidly stop attacks, scale security resources, and evolve defenses across operating systems and network devices.
Rapidly
stops threats: Protects against sophisticated threats such as
ransomware and nation-state attacks.
Scales security: Puts time back in the hands of defenders to prioritize risks and elevate the organization's security posture.
Evolves the organization's defenses: Goes beyond endpoint silos and mature the organization's security based on a foundation for extended detection and response (XDR) and Zero Trust.
Microsoft Defender for Endpoint Features
Endpoint Security Features
- Supported: Anti-Exploit Technology
- Supported: Endpoint Detection and Response (EDR)
- Supported: Centralized Management
- Supported: Infection Remediation
- Supported: Vulnerability Management
- Supported: Malware Detection
Microsoft Defender for Endpoint Screenshots
Microsoft Defender for Endpoint Video
Microsoft Defender for Endpoint
Microsoft Defender for Endpoint Competitors
Microsoft Defender for Endpoint Technical Details
| Deployment Types | On-premise |
|---|---|
| Operating Systems | Windows |
| Mobile Application | No |
Frequently Asked Questions
Microsoft Defender for Endpoint (formerly Microsoft Defender ATP) is a holistic, cloud delivered endpoint security solution that includes risk-based vulnerability management and assessment, attack surface reduction, behavioral based and cloud-powered next generation protection, endpoint detection and response (EDR), automatic investigation and remediation, managed hunting services, rich APIs, and unified security management.
CrowdStrike Falcon, Symantec Endpoint Security, and Sophos Intercept X are common alternatives for Microsoft Defender for Endpoint.
Reviewers rate Endpoint Detection and Response (EDR) and Malware Detection highest, with a score of 8.5.
The most common users of Microsoft Defender for Endpoint are from Enterprises (1,001+ employees).
Comparisons
Compare with
Reviews and Ratings
(175)Attribute Ratings
Reviews
(1-3 of 3)Companies can't remove reviews or game the system. Here's why
April 27, 2022
Microsoft Defender for Endpoint Review
My company utilizes Defender for Endpoint across all end point devices, including Windows and Linux servers. For me, Defender's capabilities are above any other AV tool I previously used. Some of the main benefits for us are:
- Cloud Console
- Cloud based updates
- Live protection
- AV/Malware protection
- Vulnerability Management
- End Point Detection and Response (EDR)
- Onboarding devices
- Device configuration can be challenging
- In order to use this product to its full capabilities, Intune will be required
- EDR
- Vulnerability Management
- AV/Malware protection
90%
9.0
- Savings over previous vendor
- ease of administration
- increased SOC SLA
Defender works better for my org. This may depend on your ecosystem, however for me, Defender is a clear winner. I like Defender's ability to utilize multiple sensors and data points to detect possible breaches. I like the built-in EDR functionality. I do not need to purchase a separate EDR software anymore. I really like the vulnerability management. it has enabled our SOC team to view multiple security-related sensors from a single portal.
November 03, 2021
Microsoft Defender holds up to the sales pitch and more
We use it organization-wide. Defender has addressed malware, phishing, and viruses (trojans). This has significantly decreased our issues and potential exposure.
- Great dashboard for the techs on the end of support
- Provides good notifications for the user
- Does a great job quarantining questionable emails that may have suspicious links.
- Stop changing the product name - creates confusion at times
- Able to identify potential issues with files and attachments
- Provides details on the back end so tech staff can determine if it is a real threat, especially if someone decides to share the suspicious file
- Notifications are very clear
82.85714285714286%
8.3
- The product has remediated risks
- Raised confidence within upper management after dealing with a breach prior to moving to Defender
- The amount of false positives are very low so it becomes credible
Very reliable with accuracy
Does not become a resource hog
Does not become a resource hog
October 20, 2021
Holistic approach to Cybersecurity
MDE is Microsoft's latest cybersecurity tool which takes a holistic approach to protect my organization from known and zero-day threats. I love the fact that I don't need to stitch together a diverse solution to increase my organization's security posture. I only have to use one login to manage my dashboard. MDE is compatible with all endpoints in my organization. I have macOS, iOS, Windows server, Windows 10, and Ubuntu Linux on-boarded. It is an EDR, XDR that is mapped against the MITRE ATT&CK framework.
- Compatible with macOS, iOS, Android, Windows Server, Windows 10 and Linux
- It runs natively on Windows it is not a bolted on solution. Once you have the correct license it is easy enough to light up the application to protect the endpoint
- Integrated with Microsoft Intune
- It is designed to detect and remediate adversary tactics from the MITRE knowledge base.
- Microsoft analyzes billions of signals daily to detect attacks against O365 tenants these same signals are fed into ML to further fine-tune MDE. How many other solutions out there will have access to this vast amount of data to analyze to train their ML?
- Automated detection and remediation of threats with a graphical timeline view of how the treat got into the device and was stopped
- It has its own vulnerability scanner to feed data into the dashboard so you can see daily which endpoints need to be patch first based on its value
- It comes with an advanced hunting tool using the kusto query language to search your tenant for threats
- It can keep 180 days of log data
- From one bundled license I can protect Exchange online email, Sharepoint, Microsoft Teams, One Drive, Azure identities, AD, endpoints
- Web filtering on the macOS it not available yet
- They recently made it easier to on-board macOS endpoints using Microsoft Intune by deploying it as an app. It used to take a lot of more configuration profiles to set up. For older macOS Sierra using the older extensions it will still require the multiple steps to on-board to MDE
- They need to integrate Microsoft Cloud app into the new dashboard of MDE
- Reduce the memory overhead of the mdatp agent running on Linux
- Holistic cybersecurity tool
- Compatibility with all of my OS
- It is like having my own SOC for my small organization
100%
10.0
- You will have to move up to Microsoft 365 E5
- You can get rid of other 3rd party security tools and just use the Microsoft ecosystem
MDE is a complete solution from one vendor.
Yes
I was using Avast Business edition to protect my macOS endpoints. I decided to go with Microsoft Defender for Endpoint to get deeper protection. I don't like the idea of having to log in to different portals to manage my endpoint protection.
- Product Features
- Product Reputation
The cross-platform solution providing protection to all of the operating systems we used at work.
No. Tech support through phone or email comes with Microsoft 365 E5 license.
No