Microsoft Defender for Cloud Reviews

Name: Microsoft Defender for Cloud
Brand: Microsoft
Rating: 4.0 (67 reviews)

Vendor: Microsoft

4.0 out of 5

67 reviews
93% willing to recommend

616 followers

Post review

What is Microsoft Defender for Cloud?

Microsoft Defender for Cloud is a comprehensive security solution that provides advanced threat protection for cloud workloads. It offers real-time visibility into the security posture of cloud environments, enabling organizations to quickly identify and respond to potential threats. With its advanced machine learning capabilities, Microsoft Defender for Cloud can detect and block sophisticated attacks, including zero-day exploits and fileless malware.

Get the Microsoft Defender for Cloud Buyer's Guide and find out what your peers are saying about Microsoft Defender for Cloud, Wiz, Prisma Cloud by Palo Alto Networks and more!

Microsoft Defender for Cloud is the #2 ranked solution in top Compliance Management solutions, #3 ranked solution in Cloud Workload Protection Platforms, #3 ranked solution in top Cloud Security Posture Management (CSPM) solutions, #3 ranked solution in top Data Security Posture Management (DSPM) solutions, #3 ranked solution in top Microsoft Security Suite solutions, #4 ranked solution in top Cloud-Native Application Protection Platforms (CNAPP) solutions, #5 ranked solution in Container Security Solutions, #7 ranked solution in top Vulnerability Management solutions, and #10 ranked solution in Container Management software. PeerSpot users give Microsoft Defender for Cloud an average rating of 8.0 out of 10. Based on the analysis of the 67 most recent Microsoft Defender for Cloud reviews, the overall sentiment is positive, with a sentiment score of 7.1. Microsoft Defender for Cloud is most commonly compared to Wiz: Microsoft Defender for Cloud vs Wiz. Microsoft Defender for Cloud is popular among the large enterprise segment, accounting for 65% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 16% of all views.

Buyer's Guide

Microsoft Defender for Cloud

November 2024

Get the report

Helped 817,457 peers since 2012

Featured reviews

Javier_Rodriguez

Cloud Consultant at i-Community AG

At the moment, we work with Sophos, SentinelOne, or Microsoft Defender. Most of our customers have Microsoft infrastructure, and they are cloud-only customers with Microsoft business licensing. I primarily recommend Microsoft Defender for customers who already have Microsoft infrastructure The…

Read full review

Antonio Andres

Manager, Microsoft Technology Alliance at Silverfort

Microsoft Defender for Cloud monitors our entire cloud environment. It enables conditional access and incorporates features like number matching and single sign-on for all our cloud apps. It is great for protecting against ransomware and various security threats. The solution's native integration with our other Microsoft security solutions gives us security insights. It alerts us to potential breaches, old accounts, and nonhuman identities that we need to be aware of. It notifies us in time, and we don't have to worry about it. If something comes up, Defender immediately detects it. It lets us choose what we want to do and remedy the issue from the console, whether that's implementing a conditional access policy or an MFA.

Read full review

Vibhor Goel

Senior Cloud Platform Engineer at Deutsche Börse

We are using the Microsoft Azure Security Benchmark along with the CIS Benchmark. We rely quite heavily on these benchmarks, and I would rate the CSPM functionality a nine out of ten. Most recommendations are focused on generic security gaps, but overall, those recommendations are very good from the security aspect, irrespective of the industry. It is pretty good in terms of the range of workloads covered. It covers most of the IaaS infrastructure that Azure offers and most of the PaaS services that we are using. I cannot recall any service that we are using for which Microsoft Defender for Cloud does not have recommendations. We have integrated the alerts that we are getting from Microsoft Defender for Cloud with our on-premises Splunk solution. We capture those alerts. They are integrated via Microsoft Events Hub. It acts like a queue and pulls those alerts from Microsoft Defender for Cloud and then sends them to Splunk. This integration helps our global security team to figure out which alerts are critical. They can then reach out to the owner of an asset. Microsoft Defender for Cloud helps in improving our overall security posture. We have a nice overview of what is missing where and what can be improved. Without Microsoft Defender for Cloud, we will not have any visibility into our security posture. The way on-premises things work in our company is complex. We have ten different tools for ten different categories. We have one tool for vulnerability assessment and one for patch fixing. Microsoft Defender for Cloud is a single integrated tool. It gives me a holistic overview of my whole security posture.

Read full review

Microsoft Defender for Cloud mindshare

Product category:

As of December 2024, the mindshare of Microsoft Defender for Cloud in the Cloud Workload Protection Platforms (CWPP) category stands at 14.5%, down from 15.7% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Cloud Workload Protection Platforms (CWPP)

Key learnings from peers

Last updated Dec 4, 2024

Valuable Features

Microsoft Defender for Cloud provides intuitive dashboards, effective remote workforce capabilities, seamless integration with Azure services, and comprehensive threat intelligence. It offers regulatory compliance support, proactive security alerts, and vulnerability assessments. Its compliance policies, security recommendations, and support for multi-cloud environments enhance security posture. Features like automated incident management, machine learning, and AI-driven models help in managing and monitoring security threats efficiently. It also integrates well with Microsoft Sentinel and Azure Policy for enhanced visibility.

"Microsoft Defender for Cloud has improved our security poster by at least 100 percent."
"The most valuable feature of Microsoft Defender for Cloud is its ability to assess an environment and give us a clear idea of what security components are lacking and which are not."
"Defender for Cloud has improved our security posture."

Room for Improvement

Microsoft Defender for Cloud requires enhancement in areas such as user interface consistency and reducing complexity. Customization should be improved, especially in configuring alerts and policies. Users seek more efficient automation and real-time responses to security threats. The need for a better integration with third-party tools and clearer pricing models is evident. Additionally, addressing false positives and providing more granular control over features would improve user satisfaction. Improved support and communication are also desired.

"I rate Microsoft support five out of 10. It gets better once you're escalated past the first and second levels. It's difficult to get the necessary support when tickets are first opened."
"Although Microsoft Defender for Cloud is based on security, I wish it went beyond providing assessments, reports, and generic steps. More detailed procedures would be helpful, especially for lower-level support staff."
"If they had an easier way to display all the vulnerabilities of the machines affected and remediation steps on one screen rather than having to dive deep into each of them, that would be a lot easier."

ROI

Microsoft Defender for Cloud delivers strong returns through effective security features, seamless integration, improved efficiency, and time savings. Users emphasize enhanced visibility, reduced management time, and cost savings. Despite the expense, they value proactive threat detection and risk prevention which avoids costly breaches. Companies highlight the tool's contribution to compliance, security posture improvement, and significant efficiency gains in remediation tasks. While some struggle to quantify savings, the overall feedback is positive regarding investment returns.

Pricing

Microsoft Defender for Cloud offers a mix of free and paid options tailored to organizational security strategies. Pricing is competitive with comparable solutions, but costs can accumulate based on usage, with $15 per resource monthly for workloads. Some organizations find it manageable within bundled enterprise agreements, while smaller businesses may find it costly. Licensing is generally straightforward, though complexities exist in understanding specific costs, particularly when adding advanced features or services. The solution's affordability varies widely across different markets and use cases.

"The licensing is straightforward but can become expensive if you cover everything. You must balance the cost against the importance of what needs covering."
"While we pay for any additional features, the pricing seems competitive, though I am not involved in the specific cost details."
"Defender's basic version is free, which is good. Many of our teams are evaluating the paid version against third-party products."

Popular Use Cases

Microsoft Defender for Cloud is primarily used for cloud security management, workload protection, and compliance monitoring. Organizations utilize it for threat detection, vulnerability management, regulatory requirements, and managing a secure cloud environment. It helps enforce security policies, integrate with security tools, and provides insights for improving security postures. Users implement it across various deployments, including hybrid and multi-cloud, to safeguard virtual machines, containers, databases, and applications while optimizing their security practices.

Service and Support

Microsoft Defender for Cloud support varies. Some users find the support efficient, especially with premium or enterprise-level plans, benefiting from quick, knowledgeable responses. Others experience delays and need escalation. Documentation is praised for clarity, helping resolve most issues without direct contact. However, interactions can be inconsistent; users face challenges with repeated explanations to new staff. The quality of assistance fluctuates based on the specific support team or individual handling the case.

Deployment

Microsoft Defender for Cloud's initial setup is generally straightforward, with users finding it easy to deploy in various environments. Deployment time varies based on client requirements, environment complexity, and existing setups. Some found initial setup intuitive, though others noted potential complexity due to add-ons and configuration needs. Documentation and Microsoft support are helpful, and typically one to two people suffice for maintenance. Experience with cloud or network security can simplify the process.

Scalability

Microsoft Defender for Cloud demonstrates impressive scalability, accommodating diverse and substantial workloads across various organizations. Users report successful scaling to accommodate thousands of resources, from smaller setups to large enterprises with significant user counts. Defender for Cloud's seamless integration within Azure ensures flexibility and adaptability, although some express concerns about scalability limitations in extremely large environments. Defender for Cloud's structure allows numerous subscriptions and regions with reliable scalability, though increased use may incur additional costs.

Stability

Microsoft Defender for Cloud is frequently described as stable and reliable. Many users note minimal downtime and consistent performance, though some mention occasional portal access delays and configuration changes. Certain organizations have observed agent deployment challenges and downtime in Azure affecting stability. Despite these concerns, it is generally praised for its high availability, security features, and robust protection, providing confidence that Microsoft will maintain its backend infrastructure diligently.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Microsoft Defender for Cloud Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Computer Software Company

16%

Financial Services Firm

13%

Manufacturing Company

Government

Insurance Company

Healthcare Company

Energy/Utilities Company

Retailer

University

Comms Service Provider

Educational Organization

Construction Company

Real Estate/Law Firm

Media Company

Non Profit

Legal Firm

Transportation Company

Hospitality Company

Logistics Company

Outsourcing Company

Wholesaler/Distributor

Performing Arts

Recreational Facilities/Services Company

Pharma/Biotech Company

Consumer Goods Company

Compare Microsoft Defender for Cloud with alternative products

Learn more about Microsoft Defender for Cloud

The solution also provides automated remediation capabilities, allowing security teams to quickly and easily respond to security incidents. With Microsoft Defender for Cloud, organizations can ensure the security and compliance of their cloud workloads, while reducing the burden on their security teams.

Microsoft Defender for Cloud was previously known as Microsoft Azure Security Center, Azure Security Center, Microsoft ASC, Azure Defender.