Microsoft Defender Threat Intelligence Reviews

Name: Microsoft Defender Threat Intelligence
Brand: Microsoft
Rating: 4.2 (31 reviews)

4.2 out of 5

31 reviews
93% willing to recommend

What is Microsoft Defender Threat Intelligence?

Microsoft Defender Threat Intelligence is a comprehensive security solution that provides organizations with real-time insights into the latest cyber threats. Leveraging advanced machine learning and artificial intelligence capabilities, it offers proactive threat detection and response, enabling businesses to stay one step ahead of attackers. With Microsoft Defender Threat Intelligence, organizations gain access to a vast array of threat intelligence data, including indicators of compromise (IOCs), security incidents, and emerging threats. This data is collected from a wide range of sources, such as Microsoft's global sensor network, industry partners, and security researchers, ensuring comprehensive coverage and accuracy. The solution's advanced analytics and machine learning algorithms analyze this threat intelligence data in real-time, identifying patterns, trends, and anomalies that may indicate a potential security breach. By continuously monitoring the network and endpoints, Microsoft Defender Threat Intelligence can quickly detect and respond to threats, minimizing the impact of attacks and reducing the time to remediation.

Get the Microsoft Defender Threat Intelligence Buyer's Guide and find out what your peers are saying about Microsoft Defender Threat Intelligence, Microsoft Defender for Office 365, Palo Alto Networks VM-Series and more!

Microsoft Defender Threat Intelligence is the #4 ranked solution in top Threat Intelligence Platforms, #11 ranked solution in top Advanced Threat Protection (ATP) solutions, and #18 ranked solution in top Microsoft Security Suite solutions. PeerSpot users give Microsoft Defender Threat Intelligence an average rating of 8.4 out of 10. Microsoft Defender Threat Intelligence is most commonly compared to Microsoft Defender for Office 365: Microsoft Defender Threat Intelligence vs Microsoft Defender for Office 365. Microsoft Defender Threat Intelligence is popular among the large enterprise segment, accounting for 61% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 18% of all views.

Buyer's Guide

Microsoft Defender Threat Intelligence

January 2025

Get the report

Helped 831,997 peers since 2012

Featured reviews

Nim Nadarajah

Partner & Director Advisory Services at Cruciallogics

One of the most valuable aspects is that Defender is a native Microsoft solution. You own your own data. With CrowdStrike and Rapid7, and other products, your log data leaves your tenant, it goes into their system, and they produce the analysis on their technology. Therefore, although you're running the agent instead of giving them the signals, you're really giving up a lot of your data for their own personal gain. Defender's biggest competitive advantage is that your data stays within your tenant, and you own it. It naturally keeps getting better and better. They have a very transparent roadmap for the product. We don't have any concerns or complaints. Defender exceeds expectations, especially for someone who's flipping from CrowdStrike or Falcon XR. This is night and day.

Read full review

Renju Varghese

General Manager at itcinfotech

We have an available agent running on our PCs that sends us notifications. We have a team that looks through the console, identifies the threats, and determines what needs to be done. The solution enables us to be on top of any upcoming threats. The solution also helps us to be proactive before threats impact several users. Microsoft Defender Threat Intelligence is deployed on the cloud in our organization. I would recommend the solution to other users. They should evaluate other products before choosing Microsoft Defender Threat Intelligence. The solution is good, but there are better products than Microsoft Defender Threat Intelligence. I rate the solution between seven and eight out of ten for its accuracy and the timeline of the threat intelligence data provided by the solution. The main benefit of using the solution is that it works well with a lot of other Microsoft products we are using. Overall, I rate the solution a seven or eight out of ten.

Read full review

ShaheenKapery

Solutions Architect at Altron

You can flag many instances together, and they form one logical entity. For example, if you want to split off a domain for a specific reason, you can do that easily. The flexibility to adjust and expand according to your needs is straightforward and efficient. You can add the device to the Azure platform to add a Microsoft product. The device is virtualized, so you don't pay for the hardware. You're getting a virtualized device in the cloud that works efficiently. We support two of the country's prominent banks and most retailers here. We have thousands of users and around 1,200,000 devices, so the numbers are substantial. I rate the scalability a ten out of ten.

Read full review

Microsoft Defender Threat Intelligence mindshare

Product category:

As of January 2025, the mindshare of Microsoft Defender Threat Intelligence in the Advanced Threat Protection (ATP) category stands at 1.1%, up from 0.9% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Advanced Threat Protection (ATP)

PeerAnalyst reports

Type	Title	Date
Category	Advanced Threat Protection (ATP)	Jan 30, 2025	Download
Product	Reviews, tips, and advice from real users	Jan 30, 2025	Download
Comparison	Microsoft Defender Threat Intelligence vs Microsoft Defender for Office 365	Jan 30, 2025	Download
Comparison	Microsoft Defender Threat Intelligence vs Microsoft Defender for Endpoint	Jan 30, 2025	Download
Comparison	Microsoft Defender Threat Intelligence vs Palo Alto Networks WildFire	Jan 30, 2025	Download

Title	Rating	Mindshare	Recommending
Microsoft Defender for Office 365	4.2	11.6%	97%	47 interviews Add to research
Palo Alto Networks VM-Series	4.3	1.3%	100%	60 interviews Add to research

Valuable Features

Microsoft Defender Threat Intelligence offers significant value through data retention, ensuring ownership remains with the user. Its integration within the Microsoft ecosystem provides seamless threat detection, user-friendly interfaces, global threat intelligence, proactive threat monitoring, and customizable security features. The platform's ability to analyze and quarantine suspicious files in a sandbox, alongside integration with tools like Office 365 and Azure, enhances protection. IT teams benefit from a unified experience, comprehensive visibility, and scalable, efficient threat management.

"I would rate Microsoft Defender ATP as nine out of ten."
"One of the best features is that it provides a certain level of customization, allowing us to set our spam confidence levels."
"It helps to monitor by providing the best 24/7 monitoring integrated with Sentinel and IBM systems."

Room for Improvement

Microsoft Defender Threat Intelligence could improve pricing, integration with non-Microsoft platforms, and reducing false positives. Users express concerns about stability, licensing, and support responsiveness. There's a desire for more automatic threat blocking, AI functionality, and better integration with IT security vendors. Enhancing documentation and offering more frequent updates would be beneficial. Users also seek better customization, a stable licensing model, smooth incident reporting, and a user-friendly notification system for faster IT communication.

"Some of the customization features could be improved by providing a portion of it as open source."
"Some of the customization features could be improved by providing a portion of it as open source."
"Non-Microsoft products may not integrate as smoothly."

ROI

Organizations experience significant return by using Microsoft Defender Threat Intelligence. By consolidating security on one platform, they reduce costs by approximately 62%. The solution's vast security signals enhance threat insight, providing effective protection and preventing costly data breaches. Companies save on resources, eliminating the need for multiple analysts, and achieve proactive threat detection, avoiding potential targeted attacks. Investing in Microsoft Defender Threat Intelligence proves invaluable due to its capability to manage diverse security issues.

Pricing

Enterprise users generally find Microsoft Defender Threat Intelligence pricing tied to Microsoft 365 licensing, primarily E5, which includes other services, making it economical for those already in the Microsoft ecosystem. Though the solution is perceived as expensive compared to individual competitors, it is cost-effective within the bundle. Pricing complexity may affect small to medium enterprises, but support from distributors often simplifies arrangements. Annual licensing fees are commonplace, with options for cost savings through discounted bulk agreements.

"On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing a six or seven out of ten."
"The product is a part of my Microsoft 365 subscription, so there is no additional cost. It is cost-effective."
"Microsoft's pricing structure involves annual fees."

Popular Use Cases

Organizations primarily use Microsoft Defender Threat Intelligence for various security purposes including threat detection, endpoint protection, and email security. It offers robust protection against malware, manages vulnerabilities, and integrates threat intelligence into Microsoft Sentinel. Companies utilize the features for both enterprise and SMB scenarios to defend against cyber threats via cloud and endpoint strategies. Administrators use it for identifying vulnerabilities and securing environments, while security teams deploy it for anomaly alerts and threat prevention measures.

Service and Support

Microsoft Defender Threat Intelligence's customer service and support receive mixed feedback. Many report excellent technical assistance with prompt responses and a comprehensive knowledge base. However, others mention difficulties reaching support and delays in response times. Partners with Microsoft's Premier Support express satisfaction, emphasizing proactive support access. Users highlight the need for improvement in level one support, while level two is praised for its expertise. The community platform is beneficial for issue resolution.

Deployment

Microsoft Defender Threat Intelligence's initial setup experience varies greatly. It often requires partner assistance and technical knowledge. Many find it straightforward but complex due to security considerations and organizational setup needs. Deployment strategies differ, with some taking just days, while others plan for months. Cloud-based deployments simplify the process for many, yet companies with hybrid setups face more challenges. Testing and scheduling are crucial to minimize disruptions during installation and ensure proper configuration.

Scalability

Microsoft Defender Threat Intelligence is highly scalable, handling from small companies to larger enterprises efficiently. It accommodates thousands of endpoints without users needing to manage infrastructure. Its cloud-based nature supports flexibility, allowing scalability through proper licensing. Users praise its ability to adapt to growing demands, though some mention cost increases with additional users. The cloud-managed approach facilitates seamless growth, achieving high ratings for scalability, ensuring robust availability and security measures as needs evolve.

Stability

Microsoft Defender Threat Intelligence receives high marks for stability, frequently rated between eight and ten out of ten. Many users note its reliability and consistent performance, although some mention occasional regional outages and patches. For most, the software works without issues, offering robust security measures. While a few suggest room for stability improvements, the platform maintains a strong reputation, particularly for cloud-based environments, with Microsoft investing heavily in resilience and reliability.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Microsoft Defender Threat Intelligence Buyer's Guide for additional reliable information.