Microsoft Defender for Endpoint vs Microsoft Purview Data Loss Prevention comparison

Microsoft Defender for Endpoint vs. Microsoft Purview Data Loss Prevention

Download the complete report

Helped 832,138 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Microsoft Defender for Endp...

Ranking in Microsoft Security Suite

6th

Average Rating

8.0

Reviews Sentiment

7.1

Number of Reviews

190

Ranking in other categories

Endpoint Protection Platform (EPP) (1st), Advanced Threat Protection (ATP) (2nd), Anti-Malware Tools (1st), Endpoint Detection and Response (EDR) (2nd)

Microsoft Purview Data Loss...

Ranking in Microsoft Security Suite

13th

Average Rating

8.0

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

Data Loss Prevention (DLP) (1st)

Mindshare comparison

As of February 2025, in the Microsoft Security Suite category, the mindshare of Microsoft Defender for Endpoint is 9.0%, up from 6.1% compared to the previous year. The mindshare of Microsoft Purview Data Loss Prevention is 2.6%, up from 2.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Microsoft Security Suite

Featured Reviews

AnuragSrivastava

Information Security Engineering Lead at a energy/utilities company with 10,001+ employees

Provides detailed visibility into threats but the ability to add exceptions needs improvement

One major item for improvement is the ability to add exceptions. We can add some exceptions, but not at the level we need to. The second major area for improvement involves enhanced capabilities for different operating systems or platforms. That is, even though we have coverage for different operating systems or platforms such as Linux, we don't get all of the controls and enhanced capabilities that are available with Windows devices. Reporting could also be improved because, at present, we get limited results at times. For example, in an environment with more than 100,000 devices, you may just get 10,000 results when you run a report.

Read full review

Roby Skariah

Solution Architect : Corporate wide systems at a healthcare company with 10,001+ employees

Automation has given us consistent analytics and improved quality of insights into user activity

One of the valuable features of Purview is the ability to create a legal hold on a user's account within the compliance portal. That's pretty useful when it comes to any litigation or if you want to redeem the content within a mailbox, OneDrive, or a generic public SharePoint site. If you want to retain the user's data until the case is resolved, you can use the legal hold feature. Also, it's important that Purview can connect to iOS, Mac, and Android devices. With smartphone involvement, so many applications can now be accessed through them and it is important to apply Purview across operating systems and platforms. Purview's natively integrated compliance across Azure Dynamics and Office 365 is also significant because within Microsoft 365 there are multiple applications. Irrespective of whether it's Dynamics or Azure, it's very important that it has native support. The data connectivity should be efficient enough to support and secure their own platform's data. In addition, with varying regulations in different industries and matters, Purview lets you create rules and conditions based on industry standards around the world. That is important. Our company is in pharmaceuticals and the rules and conditions are different from other industries. It is important to be able to keep track of all these regulations and have a tool that is flexible enough to create the regulatory rules and conditions we need. And when it comes to data loss protection, Purview has features that can recognize patterns and detect any sort of data loss, where the data is being transferred from its platform to a different one. The default settings that come with it are pretty nice for identifying data transfer or data loss across the platform. It also comes with a lot of training materials, with use cases and examples, to help educate users and make them familiar with the tool.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"One of the main features is the solution is very light on resources and we do not have any problems with it."

"It is a very advanced system based on AI. It has a very large database of places or sites on the internet where you should not go. It is continuously online."

"The solution has good performance, I have not seen a problem."

"Offers good protection."

"Microsoft Defender for Endpoint's WCS function, a content filtering solution, has proven to be the most useful, stable, and reliable option for our current needs."

"Microsoft Defender for Endpoint comes pre-installed in Microsoft Windows."

"The solution's threat protection is mostly AI and machine-learning based. That is the most important feature of the product. It also offers centralized management so I can remotely manage devices."

"Ensures that I'm working with a product that gets updated regularly without me having to remember to do it. Since it's a Microsoft product, I'm confident that it requires a low use of system resources. The benefit of that being that my computer isn't constantly being drained."

More Microsoft Defender for Endpoint pros

"It has helped our clients to reduce the time to action on insider threats because it can be integrated."

"The product can block the uploads to cloud services."

"The solution's IDM (Indexed Document Matching), EDM (Exact Data Matching), and DCM (Described Content Matching) features have been most effective in identifying and mitigating potential data leaks."

"The most valuable features are identifying sensitive data and issuing alerts."

"One of the valuable features of Purview is the ability to create a legal hold on a user's account within the compliance portal. That's pretty useful when it comes to any litigation or if you want to redeem the content within a mailbox, OneDrive, or a generic public SharePoint site."

"When you are going to use Microsoft Purview Data Loss Prevention, most of the setup is already done by default as per your needs."

"It's secure and can be integrated with an existing Forcepoint DLP setup."

"I rate Microsoft Purview Data Loss Prevention's stability a ten out of ten."

More Microsoft Purview Data Loss Prevention pros

Cons

"The product itself does not necessarily need improvement, but the support and implementation of the product are the disaster cases."

"Defender could be more secure and stable."

"Microsoft Defender for Endpoint could improve by adding more security features."

"The second major area for improvement involves enhanced capabilities for different operating systems or platforms. That is, even though we have coverage for different operating systems or platforms such as Linux, we don't get all of the controls and enhanced capabilities that are available with Windows devices."

"It should support non-Windows products better. Microsoft is now one of the leading vendors in the security area. So, they should be product-independent."

"The solution could use improvement on the interface."

"If a threat actor comes in, and creates a global administrative account, they can gain access to everything and whitelist then block everything else. Having everything, including Defender, under one brand is like having all of your eggs in one basket."

"The solution can be more user-friendly."

More Microsoft Defender for Endpoint cons

"There is a lot of ambiguity when you are setting up labels, such as sensitive information labels. It is a little daunting at first if you don't have prior knowledge, and there is a little bit of a learning curve for setting up the labels. Some of the setup wizards could be more helpful from an AI perspective. They can streamline the setup through more AI technologies so that you don't have to jump through so many hoops and different menus and dropdowns. It would be useful to have a setup wizard that is more hands-off and engaging for setting up the information type labels. If you tell them this is what we're trying to protect, it should basically start to lead you down that path of best practices. Such a feature would be great."

"The AI advancements can improve the false positives."

"The tool's user interface and document fingerprinting have been very poor for my customers because uploading files manually can be problematic."

"A major improvement is required in the solution's incident handling and alerting."

"The platform can be challenging to navigate and has the potential for improvement."

"All the security operations are better defined in Forcepoint, while in Microsoft Purview Data Loss Prevention, you will have to use a specific workflow and then an application to release blocked emails."

"They do not provide language options beyond the ones already available, so our language option is missing."

"Some main features are limited in comparison to other solutions."

More Microsoft Purview Data Loss Prevention cons

Pricing and Cost Advice

"I don't know the standalone costs. It is my understanding that the M365 E5 is $56 a month or something close to that pricing. That would be for the full suite. Just Defender might be $8 a month. I can't say for sure."

"It is so expensive. It isn't cheaper than McAfee or other solutions."

"When compared with other vendors, the pricing is very high."

"It is affordable and comes in the Office 365 bundle."

"Pricing can always be lower."

"We pay a yearly license for Microsoft Defender. We also have a support contract with them."

"You do not need to pay any additional costs for antivirus and anti-malware solutions for endpoint protection."

"We went for Microsoft Defender once we were informed that it would be part of our Office 365 package. So, we combined the licensing for the OS with Office 365. Yeah. We thought it was a good bargain."

More Microsoft Defender for Endpoint pricing and cost advice

"If one is very cheap and ten is very expensive, I rate the price as one out of ten."

"The pricing is reasonable."

"You get the solution in a bundle if you get the E5 suite."

"The cost works out to about $15 per user per month."

"I am satisfied with the tool's pricing."

"It is a part of our Microsoft licensing. We pay for a yearly renewal. Its price is reasonable for the size of the organization we are. It is fairly competitive, and you get what you pay for. We have an E5 license, and a part of understanding the E5 license is to see what all you get with it. If you really look at it from that standpoint, you get a lot of value. You have Defender and all its security features in there as well. Their licensing is fairly flexible. They have different programs. We've seen ones where you could pay for up to three to five years in advance. There is also a monthly pay-as-you-go type of deal, but we're doing a yearly renewal and fixing the budget."

"The product has the best price-to-performance ratio."

"It's a little bit pricey compared to competitors, but it's not too high."

More Microsoft Purview Data Loss Prevention pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Microsoft Security Suite solutions are best for your needs.

See recommendations

832,138 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Educational Organization

27%

Computer Software Company

11%

Government

Financial Services Firm

17%

Computer Software Company

12%

Manufacturing Company

Retailer

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface, applies behavioral-based endpoint protection and response, and includes risk-ba...

Which offers better endpoint security - Symantec or Microsoft Defender?

We use Symantec because we do not use MS Enterprise products, but in my opinion, Microsoft Defender is a superior solution. Microsoft Defender for Endpoint is a cloud-delivered endpoint security s...

How does Microsoft Defender for Endpoint compare with Crowdstrike Falcon?

The CrowdStrike solution delivers a lot of information about incidents. It has a very light sensor that will never push your machine hardware to "test", you don't have the usual "scan now" feature ...

What do you like most about Microsoft Purview Data Loss Prevention?

The most valuable features are identifying sensitive data and issuing alerts.

What is your experience regarding pricing and costs for Microsoft Purview Data Loss Prevention?

It is quite expensive for us as the shift to E5 licenses represents a significant increase in cost. The cost works out to about $15 per user per month.

What needs improvement with Microsoft Purview Data Loss Prevention?

There isn't anything specific off the top of my head for improvements. However, more training for end users on how it works would be beneficial.

CrowdStrike Falcon vs Microsoft Defender for Endpoint

Comparisons

Compared 8% of the time

Symantec Endpoint Security vs Microsoft Defender for Endpoint

Compared 5% of the time

Microsoft Intune vs Microsoft Defender for Endpoint

Compared 5% of the time

Cortex XDR by Palo Alto Networks vs Microsoft Defender for Endpoint

Compared 4% of the time

Trellix Endpoint Security vs Microsoft Defender for Endpoint

Compared 4% of the time

More Microsoft Defender for Endpoint Competitors

Forcepoint Data Loss Prevention vs Microsoft Purview Data Loss Prevention

Compared 14% of the time

Symantec Data Loss Prevention vs Microsoft Purview Data Loss Prevention

Compared 14% of the time

Zscaler Zero Trust Exchange Platform vs Microsoft Purview Data Loss Prevention

Compared 13% of the time

Amazon Macie vs Microsoft Purview Data Loss Prevention

Compared 11% of the time

Google Cloud Data Loss Prevention vs Microsoft Purview Data Loss Prevention

Compared 2% of the time

More Microsoft Purview Data Loss Prevention Competitors

Product Reports

Microsoft Defender for Endpoint

Download Microsoft Defender for Endpoint product report

Microsoft Purview Data Loss Prevention

Download Microsoft Purview Data Loss Prevention product report

Microsoft Purview Data Loss Prevention report

Also Known As

Microsoft Defender ATP, Microsoft Defender Advanced Threat Protection, MS Defender for Endpoint, Microsoft Defender Antivirus

Microsoft Endpoint Data Loss Prevention, MS Endpoint DLP, Microsoft Endpoint DLP

Interactive Demo

Demo not available

Overview

Microsoft Defender for Endpoint is a comprehensive security solution that provides advanced threat protection for organizations. It offers real-time protection against various types of cyber threats, including malware, viruses, ransomware, and phishing attacks.

With its powerful machine-learning capabilities, it can detect and block sophisticated attacks before they can cause any harm. The solution also includes endpoint detection and response (EDR) capabilities, allowing organizations to quickly investigate and respond to security incidents. It provides detailed insights into the attack timeline, enabling security teams to understand the scope and impact of an incident.

Microsoft Defender for Endpoint also offers proactive threat hunting, allowing organizations to proactively search for and identify potential threats within their network. It integrates seamlessly with other Microsoft security solutions, such as Microsoft Defender XDR, to provide a unified and holistic security approach. With its centralized management console, organizations can easily deploy, configure, and monitor the security solution across their entire network.

Microsoft Defender for Endpoint is a robust and scalable security solution that helps organizations protect their endpoints and data from evolving cyber threats.

At Microsoft, our mission is to empower every person and every organization on the planet to achieve more. Our mission is grounded in both the world in which we live and the future we strive to create. Today, we live in a mobile-first, cloud-first world, and the transformation we are driving across our businesses is designed to enable Microsoft and our customers to thrive in this world.

Sample Customers

Petrofrac, Metro CSG, Christus Health

Information Not Available

Microsoft Defender for Endpoint vs. Microsoft Purview Data Loss Prevention