


Skyhigh Security and Microsoft Defender for Cloud Apps are leading contenders in the cloud application security market. Skyhigh Security has an edge in shadow IT capabilities and detailed cloud risk assessments, while Microsoft Defender excels with its integration within the Microsoft ecosystem, offering comprehensive visibility and security features.
Features: Skyhigh Security provides advanced shadow IT detection through proxy log analysis, comprehensive risk assessments for cloud services, and data loss prevention enforcement. Its Cloud Risk Registry and user analytics are crucial for categorizing cloud applications based on risk. Microsoft Defender for Cloud Apps delivers seamless integration with Microsoft products, robust monitoring of sensitive data and user activities, and real-time alerts for enhanced protection.
Room for Improvement: Skyhigh Security needs to improve console performance, reporting speeds, and user interface functionality. It requires better integration support for unsanctioned applications. Microsoft Defender for Cloud Apps should enhance its reporting features, user-friendly customization options, and reduce response times for threat detection. It also needs better integration with non-Microsoft solutions and improvements in handling false positives.
Ease of Deployment and Customer Service: Skyhigh Security offers flexible deployment options, including hybrid, on-premises, and public cloud, though its complex setup can impact user experience. It is generally well-regarded for customer service but may have inconsistent technical support. Microsoft Defender for Cloud Apps boasts wide deployment options, particularly suited for Azure environments, and receives positive feedback for responsive and efficient customer service, especially within Microsoft products.
Pricing and ROI: Skyhigh Security's pricing model requires separate licenses for different services, catering to those focused on shadow IT discovery, and is valued for its detailed assessments despite being costly. Microsoft Defender for Cloud Apps is often bundled with Microsoft 365 suites, presenting a cost-effective option within the Microsoft ecosystem. Though its pricing is higher, seamless integration within the Microsoft suite often justifies the cost for businesses.
With iboss, whenever you turn on your laptop, the iboss agent automatically connects to the iboss cloud, enforcing all security policies. So with respect to the security side, it strengthens measures.
I have seen some cost effectiveness from iboss; it has reduced certain support requirements, making it a more hands-off solution.
We have seen a return on investment, with a 40 to 50 percent reduction in manual investigations due to auto-alerts plus policy-based remediation.
I have seen a return on investment, as I have reduced Shadow IT uses by forty to fifty percent, lowering overall SaaS risk exposure.
The biggest return on investment so far has been visibility, knowing what we have in our environment.
They are very fast, responsive, and knowledgeable.
The quality of the support is fantastic.
We had promising discussions about resolving these issues, but no real action followed.
Their customer service is pretty good, but it's frustrating to go through three or four channels before reaching the right person.
Customer support for Microsoft Defender for Cloud Apps is good, and the documentation is very well prepared.
The customer support is good, providing excellent documentation such as step-by-step configurations, which helps us significantly.
We can know the case severity such as P1, P2, or P3, allowing easy interaction from the customer support side.
They are also able to meet on-demand requirements based on your contract with them, and can easily provide adequate resources and scalability.
I would rate it a nine out of ten for scalability.
If I start seeing sluggishness or anything like that, I just reach out to my rep, and they connect with their dev team, typically resolving it the same day.
It handles thousands of users and multiple SaaS apps easily since it is fully cloud-native.
The scalability of Microsoft Defender for Cloud Apps has been solid for us, as it scales easily across large user bases and multiple SaaS apps since it is fully cloud-native without any infrastructure or performance bottlenecks.
For what I know about the log collector and how much data it can take in, it is super scalable and capable of handling high workloads.
Scalability is very good, and I can give a rating up to nine out of ten for scalability.
It's been pretty solid; I've never had an outage with them, and if I ever had, it's only been once out of the seven years.
We've experienced zero downtime.
Our biggest problem with their service was it did not recognize the device despite our ClearPass sending information to the iboss box.
I would rate it a ten because I have not experienced any stability issues so far with Defender for Cloud Apps.
I would assess the stability and reliability of Microsoft Defender for Cloud Apps as stable
My impression on the stability and reliability of Microsoft Defender for Cloud Apps is that it is very stable.
We did not face any downtime on that site, so it is quite reliable.
It has many gaps, so I think some customers take three months and up to six months for the deployment of Skyhigh Security.
It is not as intuitive as the rest of the platform.
We also had a problem with a transition when we upgraded from one appliance of theirs to another, but their engineer lost a good deal of our data.
Our iboss subscription access should be more secure with an OTP or VPN etc.
For data loss prevention, it would be useful to be able to drill down into the kind of data being transferred over CloudApp.
Defender typically connects to Entra ID, but we have local users on the cloud for database access, SSH, or RDS, and there is nothing produced by Defender regarding those local IAM users.
Microsoft Defender for Cloud Apps would benefit if Microsoft allows users to fine-tune false positives, enabling us to dismiss alerts or make adjustments so that such things don't trigger multiple times in the future.
Skyhigh Security is quite simple, but if there is any improvement in the GUI, it will be quite easy for us because it looks a legacy interface.
The solution has room for improvement in its DDoS protection.
The UI is another area where there is room for improvement in the product.
It offers the same features you would get from a vendor that charges 250,000 British pounds for a fraction of the price.
The following year, the cost of just licensing was similar to what was paid the previous year for a new appliance along with the implementation and licensing costs.
Regarding pricing, setup costs, and licensing, iboss is not cheap, and that's my only concern.
The pricing for Microsoft Defender for Cloud Apps is acceptable.
My organization is currently revisiting pricing, but previously, the cost was a bit expensive, yet comparable to other solutions with similar functionalities and features.
It's not the cheapest, but also not the most expensive, placing it in the mid-level range.
The solution's mental health function can detect if someone needs help.
It's given us a lot more visibility into our computer assets that may be infected with viruses and also shows us people who have unusually large uploads or might be engaging in high-risk activities, such as searches or going to sites not categorized by their web crawler.
iboss was the best solution for us because, no matter what domain you were in, everything is under a single pane of glass, which is exactly what we wanted.
It provides excellent suggestions and options for configuration; for example, it can track suspicious files getting uploaded to cloud resources on Azure based on their signatures, generating alerts for those files.
The product recommends things that need to be blocked and allows for dynamic configuration, which cuts down on potential issues that might arise from going through lists and understanding what needs to be blocked.
These features help my team day-to-day, with session control being more valuable as it gives real-time enforcement such as blocking downloads, restricting copy or paste based on device or risk, which directly prevents data leakage.
The cloud security features are the most valuable.
It is actually very flexible, so I think that is the opportunity since it is not resource-intensive.
We operate in a major financial sector in India, and that is why we use Skyhigh Security to reroute all our traffic via proxy for our security.
| Product | Mindshare (%) |
|---|---|
| Microsoft Defender for Cloud Apps | 5.6% |
| iboss | 4.0% |
| Skyhigh Security | 3.9% |
| Other | 86.5% |


| Company Size | Count |
|---|---|
| Small Business | 6 |
| Midsize Enterprise | 7 |
| Large Enterprise | 8 |
| Company Size | Count |
|---|---|
| Small Business | 15 |
| Midsize Enterprise | 12 |
| Large Enterprise | 19 |
| Company Size | Count |
|---|---|
| Small Business | 28 |
| Midsize Enterprise | 6 |
| Large Enterprise | 38 |
Iboss offers a comprehensive cloud-based security platform valued for its scalability and autonomous features, ensuring robust security with easy deployment and management capabilities.
Renowned for its robust security architecture, Iboss integrates seamlessly within diverse networks, delivering efficient granular filtering and advanced content categorization. Its single pane of glass console provides ease of management, allowing rapid scalability suitable for rapidly deploying environments. Operates in BYOD setups due to inline filtering without device installation. Integration with cloud-based applications enhances user control, and features like SASE, SSL inspection, and ChatGPT risk protection stand as highlights. Despite its strengths, users have pointed out areas for enhancement like direct navigation in reports, SSL decryption, and better cloud integration while having room to improve data loss prevention.
What are the most important features of Iboss?The usage of Iboss spans educational institutions, specifically K-12, to enforce internet policies, protect data, and support remote work environments. It provides web filtering and security frameworks to ensure safe browsing. Its platform-as-a-service model offers flexibility for both cloud-based and on-premises requirements, integrating seamlessly to deliver enhanced security features suitable for various deployment needs including zero trust, CASB, and network security for work-from-home setups.
Microsoft Defender for Cloud Apps is a robust tool for shadow IT detection, cloud integration, and threat detection, enhancing security management with capabilities in auditing and data protection.
Microsoft Defender for Cloud Apps strengthens cloud security by providing comprehensive insights into user activities, seamlessly integrating with Microsoft security products and platforms like SharePoint, Teams, and OneDrive. Its investigative capabilities enhance threat detection, while real-time alerts and policy applications improve security posture. Organizations benefit from its monitoring, auditing, and privileged identity management features that contribute to enhanced security management and data protection.
What are the key features of Microsoft Defender for Cloud Apps?Microsoft Defender for Cloud Apps implementation varies across industries, crucial for sectors needing stringent data protection and compliance, like finance and healthcare. Firms use it to monitor user activity, enforce data loss prevention policies, and ensure security across multi-cloud environments while integrating with Azure services for comprehensive threat management. These implementations are particularly beneficial in improving compliance efforts and protecting sensitive data.
Skyhigh Security provides comprehensive protection with features like user behavior analytics, shadow IT identification, and data loss prevention. Its integration with IT infrastructure offers robust security insights and helps maintain compliance.
Skyhigh Security offers a user-friendly interface that simplifies navigation while delivering substantial threat protection. It enhances existing IT infrastructure integration, such as DLP and Active Directory, to strengthen security. Yet, there is room for improvement in report generation speed, interface intuitiveness, and integration with other products. Organizations utilize Skyhigh Security to audit internet behavior, secure cloud environments and control web content. It effectively manages data movement and ensures compliance, while preventing unauthorized access and bandwidth misuse.
What are the key features of Skyhigh Security?In sectors like finance, healthcare, and technology, companies implement Skyhigh Security for its comprehensive monitoring capabilities. It helps secure access to SaaS applications and protects against threats, ensuring adherence to regulatory requirements and preventing data breaches while optimizing performance in cloud environments.
We monitor all Cloud Access Security Brokers (CASB) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.