Microsoft Defender for Endpoint

Formerly Microsoft Defender ATP

It is a unified platform with lots of core features for exposure detection, antivirus and SIEM all in a single platform.

The centralized management is absolutely the it.

It creates a more intertwined secure environment because it integrates well with other Microsoft security apps.

Automated detection and remediation saves in time and money.

Visibilities of endpoints and advanced threat detection increase our security and well-being.

Centralized management is nice.

The visibility into the endpoints is helpful.

It integrates well with other Microsoft security platforms.

Great product and compliments our other 365 security tools

Has helped with our regulatory compliance by offering compliance reporting

Reduced downtime by identifying and preventing threats

EDR doesn't come as inidivual product - if an organization needs only EDR they cannot buy and have a forceful look at the complete suite.

Licenses consolidate and single visibility

Basic firewall security is provided - can be easily position to SMB size customer.

Only negative ROI is the costly licenses that can set you back a significant amount in your annual budget especially if you have a 300+ audience group.

With automated remediation we have seen a tremendous decrease in triage time and even were able to deflect potential attacks in the early stages.

With device groups, we have been able to customize EDR policies for different user types and hence were able to be compliant more effectively (in a user-friendly way).

We have been able to manage content filtering very effectively with Endpoint DLP and has proven to be a big positive ROI for us.

It saved us another 200 licenses from other commercial AV, this then distributed to folks without M365,

As we have different Antivirus, there are more efforts to manage two different systems

Easy centralised deployment

Centralised monitoring

Suited for Microsoft environment

Positive : Microsoft Defender for Endpoint offers sophisticated threat detection and response capabilities, putting it into use helps increase security. Reduced security incidents, data breaches, and related expenses may arise from this.

Positive : A more secure environment means less time and effort spent by IT and security teams on remediation and incident response.

False Positives: Like any security solution, false positives can occur, leading to unnecessary investigations and potential disruptions to business operations. This may require additional resources to manage.

It boosted security, saved costs, streamlined operations.

This streamlined operations, heightened security, impressive results.

Nothing else

Less license costs because of integration.

Better detection of threats and vulnerabilities.

Deployment was not always very smooth and took some time to become reliable.

By providing robust threat protection, Defender for Endpoint can prevent downtime caused by security issues. Employees can work without interruptions, leading to increased productivity.

By significantly decreasing the frequency of security incidents like malware infections and data breaches, Microsoft Defender for Endpoint can protect your network. The cost of incident response, cleanup, and potential regulatory fines are reduced as a result of the decrease in events.

The implementation and configuration of Microsoft Defender for Endpoint may require an initial investment in licensing, training, and deployment, which can temporarily affect ROI.

The cost of licensing can be substantial, especially for larger organizations. This cost needs to be factored into the ROI calculation.

Enhancement of our security posture.

Its automations have improved our operational efficiency.

Unified security through integrations.

Microsoft Defender for Endpoint have freed up so much time and resources and allow us to focus on what we do best.

ROI - who can ever put money on the worth of a company's data and existance?

Every day, we smoothly shift between various apps and devices while dedicated identity experts work tirelessly behind the scenes to improve technologies that enhance the security of our digital interactions. As nearly half of the data breaches stem from stolen credentials, it's crucial for these professionals to equip themselves with advanced, intelligent tools to stay ahead of potential threats. These tools must also strike a balance, ensuring financial feasibility without disrupting productivity or inhibiting growth. Microsoft Entra has been purposefully crafted to achieve these dual goals, uniting identity and access solutions in a comprehensive product family tailored for multi-cloud environments. Collaborating with skilled identity professionals, Microsoft Entra effectively aligns with organizations' imperatives to protect their digital assets while maintaining seamless business operations.

The ROI on a technology such as this is hard to quantify... until you need it. But peace of mind if priceless when you have protection.

Microsoft Defender for EndPoint has allowed out modest internal IT team to keep up-to-date with risk mitigation for our devices overall and brought protection to our mobile devices which previously were not protected.

We are protected from dangerous code

We trust the incoming files

Our business associates trust the files we send to them

Reduction in Security Incidents.

Preventing Data Breaches.

Improved Productivity.

Microsoft Defender for Endpoint gives opportunity to more tightly integrate with the OS , Like Windows 10, Mac & Linux

I think pricing is confusing & ATP is expensive specially for Customers who are not completely brought into the Microsoft Ecosystems, standalone Defender ATP is 60$ per year

In my experience, Microsoft conflate paid & free features which confuses the customers and their bundles structure causes the customers to buy unwanted products & features.

return of investment.

Simplicity of operation.

Secure of the business.

It was fast to deploy, took less time than expected (positive)

Overall, it seems to be an expensive solution (negative)

Problems solving are an issue due to lack of documentation (negative)

Driving force behind uplifting client to Business Premium or additional licensing

it's only 1 month now, so too soon to say

Reduces overall device protection management costs

It's included in our license so it's a no-brainer for anyone with access to it to at least test it out.

secure access to multiple machines instances reducing external threats

ease in work from remote locations

showing detail regarding the possible vulnerabilities, that may cause harm

easily manageable