Try our new research platform with insights from 80,000+ expert users

Microsoft Defender for Endpoint vs Microsoft Entra External ID comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Microsoft Defender for Endp...
Ranking in Microsoft Security Suite
5th
Average Rating
8.2
Reviews Sentiment
7.1
Number of Reviews
192
Ranking in other categories
Endpoint Protection Platform (EPP) (1st), Advanced Threat Protection (ATP) (2nd), Anti-Malware Tools (1st), Endpoint Detection and Response (EDR) (3rd)
Microsoft Entra External ID
Ranking in Microsoft Security Suite
26th
Average Rating
7.6
Reviews Sentiment
6.7
Number of Reviews
8
Ranking in other categories
Identity and Access Management as a Service (IDaaS) (IAMaaS) (13th), Customer Identity and Access Management (CIAM) (7th)
 

Mindshare comparison

As of April 2025, in the Microsoft Security Suite category, the mindshare of Microsoft Defender for Endpoint is 9.1%, up from 6.5% compared to the previous year. The mindshare of Microsoft Entra External ID is 0.6%, up from 0.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Microsoft Security Suite
 

Featured Reviews

AnuragSrivastava - PeerSpot reviewer
Provides detailed visibility into threats but the ability to add exceptions needs improvement
One major item for improvement is the ability to add exceptions. We can add some exceptions, but not at the level we need to. The second major area for improvement involves enhanced capabilities for different operating systems or platforms. That is, even though we have coverage for different operating systems or platforms such as Linux, we don't get all of the controls and enhanced capabilities that are available with Windows devices. Reporting could also be improved because, at present, we get limited results at times. For example, in an environment with more than 100,000 devices, you may just get 10,000 results when you run a report.
Corrado Vigano - PeerSpot reviewer
Solution integrates well with existing systems while being easy to use
The fact that it is quite integrated into the entire Microsoft environment makes it quite easy to use. Furthermore, Microsoft's reliability in providing a clear roadmap for the solution is very important, especially at a time when cybersecurity is a risk in every company. The solution is easy to reuse and not difficult to find expertise for in the market because it is widespread. It is gaining attention even from partners and from the market on the offering side. This serves as a good starting point for customers who can develop internal competence on the solution. Additionally, the presence of reliable partners who know the solution and can provide internal knowledge is the best aspect for them.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It's a very complete application. I have all the controls in one site. I can track emails, attacks, and threats, and I can research information. I really like this configuration because I have all the information in place."
"Investigators can trace back to find the root cause."
"The fact that it's from Microsoft, you don't have many false positives, unlike products from other vendors might have."
"One of the features which differentiates it from other EDR providers is the Automated Investigation and Response, which reduces the workload of SOC analysts or engineers. They don't have to manually investigate each and every alert on the endpoint, since it does so automatically. And you can automate the investigation part."
"The EDR feature is most valuable."
"It can reach our applications and PC activities in the cloud."
"The endpoint detection of threats is valuable. The initial detection of things like ransomware and viruses and being able to shut down machines immediately and stop a threat is valuable. We can stop a threat at a source versus allow it to propagate it across the network."
"Updates and upgrades are quite smooth and seamless."
"The fact that it is quite integrated into the entire Microsoft environment makes it quite easy to use."
"It's similar to using a Microsoft account to create accounts on other websites. We are also using Microsoft Entra to monitor which applications our guests are using. This allows us to filter, block, or adjust permissions for these applications as needed for our collaborators."
"I have not encountered any stability issues with Microsoft Entra External ID."
"Microsoft Entra External ID is more secure, offering a secure environment."
"The most valuable feature for me is the firewall capabilities."
"The single sign-on access is the most useful feature we use."
"The fact that it is quite integrated into the entire Microsoft environment makes it quite easy to use."
"The most valuable feature for me is the firewall capabilities."
 

Cons

"Reporting could be improved. I would like to see how many security incidents occurred in the last six months, how many devices were highly exposed to security risks, and how many devices were actually compromised."
"It is currently more suitable for end-users rather than enterprises with lots of other processes and third-party tools. It needs improvement on that front. We had many issues while integrating it with our enterprise solutions, such as Splunk, and third-party tools. It provides everything via APIs. Other vendors provide integration with third-party tools, but Microsoft doesn't do that. It is also logging too much and is not serialized from the process aspect. It has all the data, but it is not in a proper format or not properly indexed, which doesn't make it easier for enterprises to use this data. Other vendors provide troubleshooting information that can be used to troubleshoot issues, but Microsoft doesn't provide anything like that."
"The solution could be even more secure and provide an even higher level of security."
"Microsoft Defender for Endpoint does not offer default templates for alerts, requiring us to configure everything ourselves to avoid numerous false positives."
"There are alternative solutions that offer a greater range of dashboard insights when compared to Microsoft Defender for Endpoint."
"Integrating this with third-party systems has some complexity involved."
"In the next release, I would like to see better management reporting."
"Lacks some additional integration."
"The cost is very high."
"There is room for improvement in AI technology for Microsoft Entra External ID, particularly in providing detailed alerts."
"Technical support needs improvement."
"I would like to see faster synchronization."
"The problem with Microsoft products is that they often cater to enterprise-level needs, which can be too costly for medium-sized businesses."
"The quality of Microsoft customer support varies. With an enterprise contract, good resources are usually provided, especially in regions like Saudi Arabia or UAE. However, we have faced challenges with support quality, especially in some subcontinent areas where the resources might not be as experienced."
"Microsoft's pricing is complex and difficult to fathom due to a range of different licensing options."
"Single sign-on for external applications such as Oracle could be improved to be a little bit cheaper."
 

Pricing and Cost Advice

"The E5 license is the one that I recommend because it comes with Cloud App Security, which is a good thing to have on top of Microsoft Defender."
"The license cost is around $35 per machine, which is not expensive compared to other products."
"The product is free of charge and comes integrated into Windows."
"When compared with other vendors, the pricing is very high."
"Microsoft Defender for Endpoint is cost-effective because there's one unified license, and with this unified license, you get the capabilities for your cloud applications, servers, and endpoints as well. Therefore, it saves us a lot of money because the cost with other solutions is for just one piece of OS or maybe an urban environment. The licensing process is not complex as well."
"The solution comes free with Microsoft Windows 10."
"AV solutions are pretty expensive because they are necessary, not just for protection, but many businesses need them to comply with regulatory bodies and receive accreditation. We recently purchased an E5 license, which gives us access to the entire Microsoft suite. I would say the pricing is competitive; most tools of this kind are similarly priced. There are minor differences between the competitors, but they aren't spectacularly different. Defender for Endpoint makes sense because all our solutions are in the same place, paid for with a single license. The subscription price is around £50 per user per month, though it may have increased slightly."
"We are required to pay for the data we ingest, and increasing the data amount incurs additional expenses."
"We don't pay separately for Microsoft Entra External ID as it's part of our Microsoft Exchange subscription."
report
Use our free recommendation engine to learn which Microsoft Security Suite solutions are best for your needs.
846,617 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
27%
Computer Software Company
11%
Government
7%
Financial Services Firm
7%
Computer Software Company
15%
Financial Services Firm
12%
Manufacturing Company
11%
Healthcare Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface, applies behavioral-based endpoint protection and response, and includes risk-ba...
Which offers better endpoint security - Symantec or Microsoft Defender?
We use Symantec because we do not use MS Enterprise products, but in my opinion, Microsoft Defender is a superior solution. Microsoft Defender for Endpoint is a cloud-delivered endpoint security s...
How does Microsoft Defender for Endpoint compare with Crowdstrike Falcon?
The CrowdStrike solution delivers a lot of information about incidents. It has a very light sensor that will never push your machine hardware to "test", you don't have the usual "scan now" feature ...
What is your experience regarding pricing and costs for Microsoft Entra External ID?
The cost can be a factor for Microsoft Entra External ID, but in general, it offers a scalable and efficient solution compared to deploying individual solutions.
What needs improvement with Microsoft Entra External ID?
Some areas where Microsoft Entra External ID could improve include cost and enhanced security for integration with federated logins like LinkedIn and Gmail.
What is your primary use case for Microsoft Entra External ID?
I am working on a project for a university where we are trying to create a digital twin of a coral reef restoration project in Saudi Arabia. This involves using a big data platform and developing a...
 

Also Known As

Microsoft Defender ATP, Microsoft Defender Advanced Threat Protection, MS Defender for Endpoint, Microsoft Defender Antivirus
Azure Active Directory External Identities
 

Interactive Demo

Demo not available
 

Overview

 

Sample Customers

Petrofrac, Metro CSG, Christus Health
Information Not Available
Find out what your peers are saying about Microsoft Defender for Endpoint vs. Microsoft Entra External ID and other solutions. Updated: March 2025.
846,617 professionals have used our research since 2012.