Microsoft Defender for Cloud Reviews

Name: Microsoft Defender for Cloud
Brand: Microsoft
Rating: 4.0 (57 reviews)

Vendor: Microsoft

4.0 out of 5

57 reviews
94% willing to recommend

598 followers

Post review

What is Microsoft Defender for Cloud?

Microsoft Defender for Cloud is a comprehensive security solution that provides advanced threat protection for cloud workloads. It offers real-time visibility into the security posture of cloud environments, enabling organizations to quickly identify and respond to potential threats. With its advanced machine learning capabilities, Microsoft Defender for Cloud can detect and block sophisticated attacks, including zero-day exploits and fileless malware.

Get the Microsoft Defender for Cloud Buyer's Guide and find out what your peers are saying about Microsoft Defender for Cloud, Microsoft Intune, CrowdStrike Falcon and more!

Microsoft Defender for Cloud is the #2 ranked solution in top Compliance Management solutions, #3 ranked solution in Cloud Workload Protection Platforms, #3 ranked solution in top Cloud Security Posture Management (CSPM) solutions, #3 ranked solution in top Data Security Posture Management (DSPM) solutions, #3 ranked solution in top Microsoft Security Suite solutions, #4 ranked solution in top Cloud-Native Application Protection Platforms (CNAPP) solutions, #5 ranked solution in Container Security Solutions, #7 ranked solution in top Vulnerability Management solutions, and #10 ranked solution in Container Management software. PeerSpot users give Microsoft Defender for Cloud an average rating of 8.0 out of 10. Based on the analysis of the 57 most recent Microsoft Defender for Cloud reviews, the overall sentiment is positive, with a sentiment score of 7.2. (Among the lowest in the category). Microsoft Defender for Cloud is most commonly compared to Microsoft Intune: Microsoft Defender for Cloud vs Microsoft Intune. Microsoft Defender for Cloud is popular among the large enterprise segment, accounting for 65% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 16% of all views.

Buyer's Guide

Microsoft Defender for Cloud

October 2024

Get the report

Helped 815,597 peers since 2012

Featured reviews

Anurag Awasthi

Senior Consultant at HCLSoftware

The solution's robust security posture is the most valuable feature. We have a lot of firewalls, and we can manage them in the solution through the firewall manager. We can set up an Azure firewall and centralize the management policy. The solution provides excellent visibility into threats, and it's a cloud-based integrated solution, so we don't have to worry about any third-party products or services. Microsoft provides so many options, and that's great. Defender for Cloud generates reports we can use as an assessment, as it allows us to see the services in our environment and our points of highest risk. The solution's threat intelligence helps us prepare for threats before they hit and take proactive steps, which is very useful for analysis.

Read full review

Srikanth Matsa

Senior DevOps Engineer at a tech services company with 501-1,000 employees

Before Microsoft Defender our external team would give us updates on which ports are opening and which vulnerabilities are being attacked. Now with the recommendations of Microsoft Defender, we can find these vulnerabilities sooner and fix them. Before onboarding those respected resources into Microsoft Defender, we faced a few issues. Once we onboarded those resources, we received prompt recommendations that helped us make the organization's resources more secure. If resources are not secured, it can impact the reputation of the organization. The solution helped identify a lot of the issues, at a high priority that we could resolve. Microsoft Defender helps any organization that needs to follow security baseline recommendations in order to improve its environment. Regarding threats, I recommend Microsoft Sentinel for detecting and hunting the threats. I can identify what exactly happened at that particular time or particular resource with the help of Microsoft Sentinel. The solution has significantly reduced the overall time it takes us to detect issues. Most of the resources are scanned every 30 minutes, so it doesn't take much time for the solution to give us the respected recommendations. Depending on the issue, Microsoft Defender for Cloud has helped reduce our overall time to respond. There are a few recommendations that we can fix immediately by just clicking using the UI. However, the overall time to respond to issues depends upon that respected recommendation list. There are a few things that we need to consider when it comes to the security settings of our virtual machines which can take a long time to identify and fix.

Read full review

Junior Pierre-Toussaint

Senior Information Technology Security Officer at CLEAR (clearme.com)

I've done a couple of POCs for Microsoft Defender with the company, and the process is always the same. We don't deploy everything into live environments. It is deployed to a testing environment. After we test a couple of times, we undergo a complete training process. Finally, we organize and deploy it to a section of the company. We usually deploy one segment at a time, like finance, marketing, etc. If you have ATP Defender, you must set up a data lake. After deployment, there isn't much maintenance on our end besides managing the logs. You must create scripts for your use cases to inject into the solution. The deployment team typically consists of two people from security, two from infrastructure, and the service desk manager.

Read full review

Microsoft Defender for Cloud mindshare

Product category:

As of November 2024, the mindshare of Microsoft Defender for Cloud in the Cloud Workload Protection Platforms (CWPP) category stands at 14.5%, down from 15.7% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Cloud Workload Protection Platforms (CWPP)

Key learnings from peers

Last updated Nov 14, 2024

Valuable Features

Microsoft Defender for Cloud is valued for its intuitive interface, comprehensive security alerts, AI/ML-based detections, and seamless Azure integration. It assists with regulatory compliance, supports multi-cloud environments, and offers robust threat intelligence. Users appreciate the centralized management, recommendations, and vulnerability assessments. The security score feature aids in improving security posture. Integration with Logic Apps enhances automated incident response, and inventory tracking offers full visibility into the system, improving security and operational efficiency.

"The most valuable feature for me is the variety of APIs available."
"The most valuable feature for me is the variety of APIs available."
"The valuable features include the ability to manage devices and the fact that Defender can replace other security tools like SCCM."

Room for Improvement

Microsoft Defender for Cloud requires enhancements in false positive reduction, pricing options, and UI consistency. Users seek more automation, better documentation, and improved integration with third-party services. They highlight issues with policy management across multiple subscriptions and the need for clearer score metrics. The dashboard should be more intuitive and user-friendly. It's essential to allow customization of compliance requirements, provide faster detection times, and reduce resource consumption on older operating systems.

"I recommend that they extend the scope for legacy infra assets."
"I recommend that they extend the scope for legacy infra assets."
"There are challenges with the licensing policies, which are quite complicated."

ROI

Microsoft Defender for Cloud delivers positive returns through seamless Azure integration and reduces management time. Companies experience higher security scores, saving on specialized team costs. It offers great visibility and has shown efficiency gains of 30 percent in remediation tasks. Cost reduction of up to 50 percent is noted, yet licensing in regions like Vietnam is costly. Despite cost concerns, the benefits from threat prevention and integration make the investment worthwhile.

Pricing

Microsoft Defender for Cloud offers a flexible pricing model with both free and paid tiers, charged per resource at $15 monthly. Though it offers cost-effective integration and a straightforward licensing process, enterprise users often find it expensive, especially for large-scale implementations. The costs vary globally and depend on resource usage, with options to reduce expenses through bundled solutions or negotiating enterprise agreements. Despite concerns about price complexity, its comprehensive security features are favored among established organizations.

"The product's pricing policy is generally favorable."
"The solution is expensive, and I rate it a five to six out of ten."
"I am not involved much with the pricing but the bundle offering is good."

Popular Use Cases

Microsoft Defender for Cloud is used for securing infrastructure, monitoring security policies, and enforcing compliance. Many entities implement it for threat detection, incident management, and auditing. It is widely deployed for cloud security management, securing virtual machines, and integrating with SIEM tools. Users value its centralized platform for managing vulnerabilities and enhancing security posture across various environments. It supports integration with other Microsoft security services, providing comprehensive protection for hybrid and cloud-native setups.

Service and Support

Microsoft Defender for Cloud's customer service and support receive mixed feedback. Some users praise their responsiveness and expertise, especially with premium support or enterprise agreements. Many find support to be knowledgeable, quick, and helpful, while others report challenges with response times and inconsistent problem-solving. Documentation is highlighted as being excellent and resolving most issues. Satisfaction may vary based on support level and agreements, with some expressing concerns when interacting with third-party or outsourced support.

Deployment

Many users find Microsoft's Defender for Cloud easy to set up, often completing it within hours or days, though complexity can vary based on specific requirements and existing environments. While some describe the setup as intuitive, others note it can be challenging without prior knowledge. Typically, a small team is sufficient for deployment and ongoing management. Users appreciate its cloud-native features, which simplify maintenance and reduce the need for dedicated staff.

Scalability

Users find Microsoft Defender for Cloud to be highly scalable, handling thousands of users and various environments smoothly. Many appreciate its ability to automatically accommodate increased workloads without manual intervention. It supports numerous subscriptions and regions, making it suitable for both small and large enterprises. While some express concerns about potential costs associated with scaling, most agree it meets their requirements effectively. The platform integrates well across different cloud services and on-premises setups.

Stability

Microsoft Defender for Cloud is described as stable, with many users highlighting its reliable performance and minimal downtime. It works well across various environments and is generally free from bugs. Some users have experienced challenges with agent deployment and connectivity issues related to internet latency. While certain features are still in development, causing occasional issues, the overall stability rating frequently reaches eight or ten out of ten.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Microsoft Defender for Cloud Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Computer Software Company

16%

Financial Services Firm

13%

Manufacturing Company

Government

Insurance Company

Healthcare Company

Energy/Utilities Company

Retailer

Educational Organization

Comms Service Provider

University

Construction Company

Real Estate/Law Firm

Media Company

Legal Firm

Non Profit

Logistics Company

Transportation Company

Hospitality Company

Outsourcing Company

Wholesaler/Distributor

Performing Arts

Recreational Facilities/Services Company

Pharma/Biotech Company

Consumer Goods Company

Compare Microsoft Defender for Cloud with alternative products

Learn more about Microsoft Defender for Cloud

The solution also provides automated remediation capabilities, allowing security teams to quickly and easily respond to security incidents. With Microsoft Defender for Cloud, organizations can ensure the security and compliance of their cloud workloads, while reducing the burden on their security teams.

Microsoft Defender for Cloud was previously known as Microsoft Azure Security Center, Azure Security Center, Microsoft ASC, Azure Defender.