A reliable End to end security package.
Microsoft Defender for Endpoint is a Ai security guard which primarily secures the Organization from ransom ware and fast developing …
Microsoft Defender for EndpointFormerly Microsoft Defender ATP
Starting at $2.50 per user/per month
View PricingOverview
What is Microsoft Defender for Endpoint?
Microsoft Defender for Endpoint (formerly Microsoft Defender ATP) is a holistic, cloud delivered endpoint security solution that includes risk-based vulnerability management and assessment, attack surface reduction, behavioral based and cloud-powered next generation protection, endpoint detection and response (EDR), automatic investigation…
Recent Reviews
How Microsoft Defender for Endpoint Differs From Its Competitors
Awards
Products that are considered exceptional by their customers based on a variety of criteria win TrustRadius awards. Learn more about the types of TrustRadius awards to make the best purchase decision. More about TrustRadius Awards
Popular Features
- Malware Detection (51)8.585%
- Endpoint Detection and Response (EDR) (50)8.585%
- Infection Remediation (50)8.282%
- Centralized Management (50)7.979%
Reviewer Pros & Cons
Executive Engineer Transmission
Sui Northen Gas Pipelines Ltd (Oil & Energy, 10,001+ employees)
Pricing
Academic
$2.50
On Premise
per user/per month
Standalone
$5.20
On Premise
per user/per month
Entry-level set up fee?
- No setup fee
Offerings
- Free Trial
- Free/Freemium Version
- Premium Consulting/Integration Services
Product Demos
Microsoft Defender for Endpoint Overview
YouTube
Features
Return to navigation
Product Details
- About
- Competitors
- Tech Details
- FAQs
What is Microsoft Defender for Endpoint?
Presented as an epicenter for comprehensive endpoint security, Microsoft Defender for Endpoint helps users rapidly stop attacks, scale security resources, and evolve defenses across operating systems and network devices.
Rapidly
stops threats: Protects against sophisticated threats such as
ransomware and nation-state attacks.
Scales security: Puts time back in the hands of defenders to prioritize risks and elevate the organization's security posture.
Evolves the organization's defenses: Goes beyond endpoint silos and mature the organization's security based on a foundation for extended detection and response (XDR) and Zero Trust.
Microsoft Defender for Endpoint Features
Endpoint Security Features
- Supported: Anti-Exploit Technology
- Supported: Endpoint Detection and Response (EDR)
- Supported: Centralized Management
- Supported: Infection Remediation
- Supported: Vulnerability Management
- Supported: Malware Detection
Microsoft Defender for Endpoint Screenshots
Microsoft Defender for Endpoint Video
Microsoft Defender for Endpoint
Microsoft Defender for Endpoint Competitors
Microsoft Defender for Endpoint Technical Details
| Deployment Types | On-premise |
|---|---|
| Operating Systems | Windows |
| Mobile Application | No |
Frequently Asked Questions
Microsoft Defender for Endpoint (formerly Microsoft Defender ATP) is a holistic, cloud delivered endpoint security solution that includes risk-based vulnerability management and assessment, attack surface reduction, behavioral based and cloud-powered next generation protection, endpoint detection and response (EDR), automatic investigation and remediation, managed hunting services, rich APIs, and unified security management.
CrowdStrike Falcon, Symantec Endpoint Security, and Sophos Intercept X are common alternatives for Microsoft Defender for Endpoint.
Reviewers rate Endpoint Detection and Response (EDR) and Malware Detection highest, with a score of 8.5.
The most common users of Microsoft Defender for Endpoint are from Enterprises (1,001+ employees).
Comparisons
Compare with
Reviews and Ratings
(174)Attribute Ratings
Reviews
(1-25 of 72)Companies can't remove reviews or game the system. Here's why
April 16, 2024
A reliable End to end security package.
- Protections from ransomware
- AI based modern threat definitions.
- End to end device security
- Online documents and data security.
- Privacy of clients surety
- End to end device security
- It has a very intuitive and user-friendly UI that enables my team and I to navigate through it and respond to any threat efficiently.
- It's extensive dashboard gives a complete view of all our endpoint soo we can spot any potential threat and exposure across the networks.
- Robust detection and response capabilities that detect abnormal behavior, potential threats, and attacks as they happen and remediate and block any threat.
- Insights enable us to get to the root cause of incidents and alerts for deep investigation.
- It also provide a powerful 365 protection against any threat.
- It is pretty limited when it comes to devices that are not Microsoft-based. Adding a device is quite a task.
- False positives.
- Sophisticated automated investigation and response features.
- Exclusions during scanning are hard to spot.
- I always have to submit request for whitelisting apps.
February 07, 2024
Microsoft Defender for Endpoint Review
- Detects attacks as they happen.
- Detects potential attacks.
- Detects abnormal user behavior.
- Does not allow for remediation from the management console.
- The ticket system doesn't alert the person assigned to the ticket.
- You have to submit requests for whitelisting applications.
- Scanning exclusions are tricky to find.
- Adding devices, especially Apple devices, is very cumbersome.
November 28, 2023
Quick to rollout and get going, but takes some tweaking to optimize.
- Provides excellent integration with 365 security suite
- It tracks all activities on endpoints and helps our security team effectively investigate alerts
- It uses signature and behavior based techniques to detect / block threats
- It offers limited support for non-Microsoft devices
- It can be sometimes difficult to setup for optimization
- It can sometimes be the root issue for resource issues on the endpoints
November 27, 2023
Microsoft Defender Review
- Endpoint protection
- Basis level DLP
- Firewall security for endpoint.
- EDR - provides basic EDR capabilities
- Doesn't come as an individual product
- Threat Intelligence is not upto the market standards.
November 21, 2023
The one stop security shop for the endpoints
- Vulnerability Management is without a doubt one of the most efficient features of Microsoft Defender for Endpoint. It provides enough details about the vulnerability, its impact and the remediation as well.
- The latest addition of 'Endpoint Security Policies' has been a very well thought and insightful feature that relieves the security analysts from the hassle of switching to Intune just for reviewing the endpoint security policies.
- 'Automated Remediation' is a boon to many organizations across the industry that helps in responding to ongoing attacks at machine speed. Microsoft Defender for Endpoint does it quite well in terms of accuracy and quickness.
- Dynamic device tagging feature has been an underrated feature from Microsoft Defender for Endpoint. It is such a reliable and efficient feature that saves a lot of time whether you are dealing with vulnerabilities or incidents.
- While 'Vulnerability Management' is one of my favorite features, I do feel that it has been the same for quite some time and now it should have some integration capabilities to do actions like inform the affected users, or take small actions like updating the OS, sending prompts to devices etc.
- I think most people will agree with me when I say that 'Baseline Assessments' feature should now have more standards added to its inventory. CIS and STIG are the only ones available in this feature without any updates for a long time now.
- Device Discovery while a good feature is appearing to somewhat unstable in nature. It does not provide admins with enough details and any actions to take on the discovered devices.
November 21, 2023
Decent Protection for your endpoints
- Antivirus protection
- Malware protection
- Quarantine and alerts
- Offering with other suites in M365 family
- There are cases where it is not able to detect malware but other antivirus is detecting it
- Better dashboard
- Protection from malware and viruses
- Centralised Management
- Advanced Threat Analytics
- Better user interface
- Easy installation
- Lower price
November 03, 2023
"Microsoft Defender for Endpoint One of the best tool to manage threat, Vulnerability and Compliance of the endpoints."
- It provides a unified security experience when combined with other Microsoft products such as Microsoft Defender for 365 and Azure Defender.
- It has an excellent dashboard and centralized view that make it easy to see and control everything from one location.
- It's an EDR tool designed to help you understand incidents and alerts better.
- Real-time detection of attacks and prompt endpoint device responses. It effortlessly interacts with additional Microsoft security products.
- I must admit that I haven't discovered anything major regarding this product.
- It has limited integration options with third party security products.
- Sometime Automated Response is slow.
November 03, 2023
Secure workstations with MDE
Score 8 out of 10
Vetted Review
Verified User
- It blocks the unsafe applications from accessing.
- It provides User-friendly interface for seamless endpoint security.
- It gets the updates new pattern updates automatically and stays upto date.
- It has limited integration options with third party products.
- Expand Baseline Assessment beyond STIG and CIS benchmarks for broader security coverage and compliance flexibility.
- Nothing else.
October 26, 2023
Defender for Endpoint - First class EDR and more.
Score 8 out of 10
Vetted Review
Verified User
- One of the strong points is that AI is tightly integrated into the platform, which leads to excellent detection.
- Vulnerability management is very useful for assessing tracking, and mitigating threats across all protected devices.
- KQL integration is very good.
- Licensing between Defender for Endpoint and Servers is complicated.
- Deployment has improved but is not really streamlined. There is no single installer available and no single way of deploying settings.
- The Defender portal is rich in information but can be complicated to use.
- Defender for Endpoint uses cutting-edge threat detection technologies, such as behavioral analysis and machine learning, to recognize and neutralize both known and undiscovered threats. Even the most complex and elusive malware and exploits can be found by it.
- By providing threat analytics, it enables proactive threat prevention and mitigation by assisting organizations in understanding their security posture and trends over time.
- It offers immediate insight into threat activity and endpoint security. Security teams can react quickly to threats since they can see what's happening across all of the devices in their organization.
- For enterprises using the platform for the first time, the initial setup and configuration can be challenging. The experience might be enhanced by streamlining the onboarding procedure and offering more user-friendly setting wizards.
- It might be difficult to afford, especially for smaller firms. The solution might be more widely available if it had a more open and flexible price structure, particularly for smaller enterprises.
- Organizations could better address the escalating problems with cloud security with the help of enhanced functionality for monitoring and managing cloud apps and services.
October 18, 2023
Defend, Detect, Excel with Microsoft Defender for Endpoint
- Automated incident response
- Scalability
- Rapid threat mitigation
- Threat analytics keeping us aware of our security posture.
- Transparency in alert logic and visibility
- Clarity in licensing. There are many options and pricing tiers that aren't very clear at the start of deployment.
- Limited baseline assessment
October 02, 2023
Microsoft Defender for Endpoint
- Quick response to all threats across all devices protected.
- Help pick up vulnerabilities in systems which previously have gone unidentified.
- Centrally Managed with a single pane of glass view is super handy and useful.
- The only thing I think that can be improved on is the reporting.
September 29, 2023
Microsoft defended for endpoint user experience review.
- The threat detection is very good in Defender, during log4j exploitation we got a great deal of support from the Defender, and proactive coverage was received.
- During a recent security incident in our organization, the defender support team was quick to hop in and release the emergency patches and malware signature updates via hotfix, which has helped us deal with the security incident proactively.
- The ease of deployment on the endpoint and scanning feature, which consume minimal resources, and the offline and online coverages of threats are great advantages of Defender.
- Sometimes interacting with the support becomes difficult and more technical side, people who can understand customer concerns better will be of great help.
- Offline coverage can be even better.
- So far, I have had the best experience with defenders, and there is not much to complain about defenders.
September 26, 2023
Endpoint Defense You Can Count On
- Provides quick response to stopping threats identified on company owned devices.
- It has helped us discover multiple misconfigurations and exposed vulnerabilities we didn't know we had.
- Being able to utilize MS Defender for Endpoint on all of our devices from Windows to Mobile (iOS and Android) has really help secure our business.
- Initial configuration can be daunting and there's a lot of details to pour over to make it work properly.
- Reporting has been a challenge to get setup the way we want it to work.
September 25, 2023
Microsoft Defender helps us keep our software environment reliable and operationally secure.
- Incoming E-mails are tested for viruses
- Zip files that are extracted are checked for viruses
- Downloaded executables are also checked for viruses
- Better reporting of found dangerous code
- More insight into the resources used by a system scan
- It is good that regular updates are made available
September 25, 2023
Microsoft Defender for Microsoft Endpoint.
- Threat Protection.
- Endpoint Detection and Response (EDR),
- Advanced Analytics.
- Linux VMs.
- MAC OS VMs.
- iOS Platform.
September 25, 2023
Microsoft Defender for Endpoint-Best EDR Solution
- Microsoft Defender for Endpoint helps customers to more tightly integrate into the OS
- ATP integrate with their cloud based sandbox for malware analysis
- Microsoft Defender for Endpoint Antivirus provide ML based scanning
- Mac & Linux EDR visibility is weak spot for Microsoft Defender for Endpoint
- ATP does not have malware search functionality
- ATP includes dashboards for specific threats but not actor attributions
September 25, 2023
All-in-one subscription - good suites.
- Protect very well.
- Is lightweight.
- One subscription for all service.
- Integration with firewall.
- Logging, there are low log.
- Interface design could be better.
September 24, 2023
My experience using Microsoft Defender for Endpoint
- Notifications (alerts)
- Register and control of a big amount of devices
- Complete antimalware
- Problems to run integrations with other tools
- Security policies setup is hard
- Technical documentation
September 22, 2023
A no brainer for anyone using the Microsoft stack
- Front line next gen AV
- Integrated well into other MS security products
- It's simple to use and configure
- Better support for servers
September 22, 2023
Defender is the default choice for a Microsoft shop
- End Point Protection in real time
- Security Dashboard for CISOs
- End point detection and Response
- Don't have any points to add here
September 22, 2023
Endpoint protection products that are easy to use and configure
- The ability to provide decision support (or content about alerts) is powerful and allows us to become experts in analytics rather than in a specific technology
- Microsoft Defender provides security for unmanaged devices on corporate networks
- Microsoft Defender for Endpoint is a service in the Microsoft Defender Security Center. By adding and deploying client provisioning profiles, configuration administrators can monitor deployment status and obtain endpoint agent health status using Microsoft Defender.
- Windows Defender isn't perfect. It may miss some threats, especially new and sophisticated threats. So it’s important to supplement it with other security measures.
- Even though Windows Defender does a good job, it can't protect you from everything. Therefore, it is important to be aware of the risks and take steps to protect your computer, such as using complex passwords and being careful about clicking on anything, especially email attachments and some tech support scam calls.
September 21, 2023
Easy and Reliable to Use
- Auditing of All Endpoints and Events
- Real-Time Protection
- Configuration and Deployment of the Product
- It evolves as threats do, but keeping up with threats is always a concern.