Cybereason Next-Generation Antivirus vs Microsoft Defender for Endpoint comparison

Cybereason Next-Generation Antivirus vs. Microsoft Defender for Endpoint

Download the complete report

Helped 832,138 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cybereason Next-Generation ...

Ranking in Anti-Malware Tools

20th

Average Rating

8.6

Reviews Sentiment

6.7

Number of Reviews

Ranking in other categories

No ranking in other categories

Microsoft Defender for Endp...

Ranking in Anti-Malware Tools

1st

Average Rating

8.0

Reviews Sentiment

7.1

Number of Reviews

190

Ranking in other categories

Endpoint Protection Platform (EPP) (1st), Advanced Threat Protection (ATP) (2nd), Endpoint Detection and Response (EDR) (2nd), Microsoft Security Suite (6th)

Mindshare comparison

As of February 2025, in the Anti-Malware Tools category, the mindshare of Cybereason Next-Generation Antivirus is 0.4%, down from 0.7% compared to the previous year. The mindshare of Microsoft Defender for Endpoint is 17.4%, down from 23.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Anti-Malware Tools

Featured Reviews

Peter Nowak

Business Development Manager for Cybereason at Bechtle

Cross-platform capability enhances security integration

The single agent, combined with the EDR system, delivers additional information and data for the EDR. Regarding the use cases, or maybe it fits better into another question about the motivation of the customers, I can see two approaches. The first approach is where the customer has an existing EDR system running, and their contract comes to an end. They are looking to either prolong it, renew it, continue with the current system, or look for something cheaper or better. When they reevaluate the contract, it's a sales approach to suggest that for a similar amount of money, not very much more, they can get something much better. It's not only a plain EDR or plain antivirus system - it's antivirus plus EDR. The difference in price is not much. Especially for the antivirus, the cross-platform capability is significant, as it's for Windows and Linux workstations and servers. Having one system for all platforms is essential. This has helped in two ways. The majority of customers want one thing for all, however, some customers definitely want two systems, servers separated from workstations. I have a big data center for banks, and they separate Windows Servers from Linux Servers. It is important for them to have two different systems. By providing this multi-operating system capability, I have engaged with customers via the Linux servers because the Windows servers are handled differently, so they were looking for a second different system, which opened the door for us.

Read full review

AnuragSrivastava

Information Security Engineering Lead at a energy/utilities company with 10,001+ employees

Provides detailed visibility into threats but the ability to add exceptions needs improvement

One major item for improvement is the ability to add exceptions. We can add some exceptions, but not at the level we need to. The second major area for improvement involves enhanced capabilities for different operating systems or platforms. That is, even though we have coverage for different operating systems or platforms such as Linux, we don't get all of the controls and enhanced capabilities that are available with Windows devices. Reporting could also be improved because, at present, we get limited results at times. For example, in an environment with more than 100,000 devices, you may just get 10,000 results when you run a report.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Especially for the antivirus, the cross-platform capability is significant, as it's for Windows and Linux workstations and servers."

"The tool's detection range works fine. Its most valuable features are its ease of employment and lightweightness. It's not heavy on resources. We focus on malware and ransomware detection."

"I would rate the overall product as an eight out of ten."

"The solution's most valuable feature is its AI detection algorithm part, which helps and is Cybereason's way of detecting the unknown, not just the signature-based threats."

"The most valuable feature is that it comes with the package, so there is no additional installation of third-party software. It's also easy to use."

"A few years ago, when I was using a different product, I was affected by a virus that destroyed everything. Since using Microsoft Defender, I have not had this kind of problem."

"I like the process visibility. This ability to visualize how something was executed is valuable, and the fact that Defender ATP is also linked to the threat intelligence that they have is also valuable. So, even if you have something that doesn't have a conventional signature, the fact that you get this strange execution means that you can detect things that are normally not visible."

"It is a very advanced system based on AI. It has a very large database of places or sites on the internet where you should not go. It is continuously online."

"The virus scanning capability is excellent, and it feeds all the logs into the Microsoft 365 Defender portal, making them easy to search for."

"Its threat intelligence feature is beneficial. This solution smoothly integrates with SIEM."

"Defender for Endpoint has significantly reduced our SOC team's workload by automating threat detection and response, allowing them to focus on other critical projects."

"It's really stable. I've used a lot of stuff, a lot of products, like ESET and Kaspersky. None of them are comparable with this one. This one is much better."

More Microsoft Defender for Endpoint pros

Cons

"I have been told several times that the stability of the sensor, not the back end, is an issue."

"Cybereason Next-Generation Antivirus is not available in the local language, which can be inconvenient."

"Integrating other tools is sometimes an issue when using Cybereason Next-Generation Antivirus."

"My main issue with the tool is that there are too many menus. This causes a steep learning curve for those without training or unfamiliar with Defender for Endpoint. From an end-user perspective, the solution is there on the machine and does its job; it works seamlessly. However, as a security professional dealing with it behind the scenes, the learning curve can be steep, but not too steep. Still, it has taken some of my analysts up to a month to get familiar with the product."

"Defender's cloud integration could be improved."

"We encountered some issues when we were trying to enable automatic updates from our group policy."

"Microsoft Defender for Endpoint can use more advertising to promote their features."

"Microsoft Defender for Endpoint can improve by providing more and different types of reports."

"Sometimes, there are difficulties in downloading a file considered as malicious."

"The dashboard customization could be improved."

"It is currently more suitable for end-users rather than enterprises with lots of other processes and third-party tools. It needs improvement on that front. We had many issues while integrating it with our enterprise solutions, such as Splunk, and third-party tools. It provides everything via APIs. Other vendors provide integration with third-party tools, but Microsoft doesn't do that. It is also logging too much and is not serialized from the process aspect. It has all the data, but it is not in a proper format or not properly indexed, which doesn't make it easier for enterprises to use this data. Other vendors provide troubleshooting information that can be used to troubleshoot issues, but Microsoft doesn't provide anything like that."

More Microsoft Defender for Endpoint cons

Pricing and Cost Advice

"I rate the solution's pricing a four out of ten. Its pricing is justified."

"I rate the solution's pricing a seven on a scale of one to ten, where one is cheap, and ten is expensive."

"For me, the pricing is very good, but for management it's very expensive. Other solutions are less expensive. But when I present all the information and all the reports they say, "Well, it's expensive, but the cost-benefit is very good.""

"Microsoft Defender for Endpoint comes with Windows 10, and it's free. But for you to be able to manage it in the cloud and use the console, you need to have either an Office 365 E5 subscription or a Microsoft M365 subscription. You need to buy an extra license."

"It is built into Windows 10. If our clients are using Microsoft Defender, the cost goes away for them."

"The pricing is competitive."

"Microsoft Defender for Endpoint is more affordable compared to some other endpoint solutions."

"The solution is free and comes with Windows."

"We have been using the free version."

"It's included with the Windows Operating System, I don't pay for any licensing fees."

More Microsoft Defender for Endpoint pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Anti-Malware Tools solutions are best for your needs.

See recommendations

832,138 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

15%

Comms Service Provider

University

Financial Services Firm

Educational Organization

27%

Computer Software Company

11%

Government

Financial Services Firm

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

Questions from the Community

What do you like most about Cybereason Next-Generation Antivirus?

The solution's most valuable feature is its AI detection algorithm part, which helps and is Cybereason's way of detecting the unknown, not just the signature-based threats.

What is your experience regarding pricing and costs for Cybereason Next-Generation Antivirus?

I rate the solution's pricing a four out of ten. Its pricing is justified.

What needs improvement with Cybereason Next-Generation Antivirus?

Cybereason Next-Generation Antivirus is not available in the local language, which can be inconvenient.

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface, applies behavioral-based endpoint protection and response, and includes risk-ba...

Which offers better endpoint security - Symantec or Microsoft Defender?

We use Symantec because we do not use MS Enterprise products, but in my opinion, Microsoft Defender is a superior solution. Microsoft Defender for Endpoint is a cloud-delivered endpoint security s...

How does Microsoft Defender for Endpoint compare with Crowdstrike Falcon?

The CrowdStrike solution delivers a lot of information about incidents. It has a very light sensor that will never push your machine hardware to "test", you don't have the usual "scan now" feature ...

CrowdStrike Falcon vs Microsoft Defender for Endpoint

Comparisons

No data available

Compared 8% of the time

Symantec Endpoint Security vs Microsoft Defender for Endpoint

Compared 5% of the time

Microsoft Intune vs Microsoft Defender for Endpoint

Compared 5% of the time

Cortex XDR by Palo Alto Networks vs Microsoft Defender for Endpoint

Compared 4% of the time

Trellix Endpoint Security vs Microsoft Defender for Endpoint

Compared 4% of the time

More Microsoft Defender for Endpoint Competitors

Product Reports

Anti-Malware Tools

Download Cybereason Next-Generation Antivirus product report

Cybereason Next-Generation Antivirus report

Microsoft Defender for Endpoint

Download Microsoft Defender for Endpoint product report

Also Known As

Cybereason NGAV

Microsoft Defender ATP, Microsoft Defender Advanced Threat Protection, MS Defender for Endpoint, Microsoft Defender Antivirus

Interactive Demo

Demo not available

Cybereason

Microsoft

Overview

Next-generation antivirus (NGAV) is a new breed of software that was created to bridge the gap left by traditional antivirus.

What exactly constitutes NGAV in the cybersecurity industry is still unclear since there’s not a widely-accepted definition for the term. At a minimum, next-generation antivirus products need to go beyond performing signature-based detection while also incorporating some type of advanced technology.

Most NGAVs go beyond the use of indicators of compromise (IOCs) and metadata such as virus signatures, IP addresses, file hashes, and URLs. Using technologies like advanced data science, machine learning, artificial intelligence and data analytics, next-generation antivirus solutions look for patterns of behavior used by attackers to discover tactics, techniques, and procedures (TTPs).

Cybereason

Microsoft Defender for Endpoint is a comprehensive security solution that provides advanced threat protection for organizations. It offers real-time protection against various types of cyber threats, including malware, viruses, ransomware, and phishing attacks.

With its powerful machine-learning capabilities, it can detect and block sophisticated attacks before they can cause any harm. The solution also includes endpoint detection and response (EDR) capabilities, allowing organizations to quickly investigate and respond to security incidents. It provides detailed insights into the attack timeline, enabling security teams to understand the scope and impact of an incident.

Microsoft Defender for Endpoint also offers proactive threat hunting, allowing organizations to proactively search for and identify potential threats within their network. It integrates seamlessly with other Microsoft security solutions, such as Microsoft Defender XDR, to provide a unified and holistic security approach. With its centralized management console, organizations can easily deploy, configure, and monitor the security solution across their entire network.

Microsoft Defender for Endpoint is a robust and scalable security solution that helps organizations protect their endpoints and data from evolving cyber threats.

Microsoft

Sample Customers

CONNECTICUT WATER, BEAM SUNTORY, CADWALADER, WICKERSHAM & TAFT, RTI Surgical, HOSPITAL REVENUE CYCLE MANAGEMENT COMPANY, MCBEE ASSOCIATES, FORTUNE 500 BANK

Petrofrac, Metro CSG, Christus Health

Cybereason Next-Generation Antivirus vs. Microsoft Defender for Endpoint