Try our new research platform with insights from 80,000+ expert users

Microsoft Defender for Endpoint vs OPSWAT Filescan Sandbox comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Microsoft Defender for Endp...
Ranking in Anti-Malware Tools
1st
Average Rating
8.2
Reviews Sentiment
7.1
Number of Reviews
197
Ranking in other categories
Endpoint Protection Platform (EPP) (1st), Advanced Threat Protection (ATP) (4th), Endpoint Detection and Response (EDR) (3rd), Microsoft Security Suite (4th)
OPSWAT Filescan Sandbox
Ranking in Anti-Malware Tools
31st
Average Rating
8.0
Reviews Sentiment
7.5
Number of Reviews
1
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of July 2025, in the Anti-Malware Tools category, the mindshare of Microsoft Defender for Endpoint is 15.6%, down from 21.0% compared to the previous year. The mindshare of OPSWAT Filescan Sandbox is 1.0%, up from 0.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Anti-Malware Tools
 

Featured Reviews

John Rallo - PeerSpot reviewer
Offers excellent visibility into vulnerabilities and the attack surface itself
Attack surface reduction and limiting attack surface vectors are valuable features. It's helpful to isolate specific devices and get super granular with the features they offer. The visibility into the attack surface is good. It gets highly granular. I don't work on that side, but the people who do tell me they get more visibility.
reviewer2390334 - PeerSpot reviewer
An easily integratable solution that helps scan files
I recommend leveraging the data and using case transcripts to understand how the tool can address your needs. Additionally, testing the solution in your environment can be helpful. If we keep it updated and ensure that the engines and the latest definitions are up-to-date, the solution functions without problems. It continues scanning without any delays. I rate the product an 8 out of 10. With OPSWAT Filescan Sandbox, we can scan various file types, including IOCs, Python compressors, and QR codes from images. All the configuration settings are user-dependent and can be modified over time. It's highly configurable—you can easily navigate to the console, click on any option, and quickly adjust settings, including the default size.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable features are that it's easy to use and the updates are very simple."
"One of the valuable features of the solution is the small updates that keep my machine relatively clean from any infections."
"The scalability is good."
"The feature I find most valuable in Microsoft Defender for Endpoint is that it blocks the process and keeps the endpoint from getting infected with malware."
"We like that it has a free version available."
"DFE organizational security posture has been a positive experience. We're a Microsoft house. It works. Once it's deployed and once it's configured, it works and our clients tend to be happy with it. I haven't really experienced anyone who has been so unsatisfied with the platform that they wanted to go a couple of different directions, that has never happened to me."
"The main features of this solution are that it handles everything by itself and is well integrated."
"Microsoft Defender for Endpoint is a comprehensive and scalable solution for protecting on-premises and hybrid infrastructure."
"What I find most valuable about it is the design interface."
 

Cons

"Some of the integrations that Defender should include involve the use of the web app."
"It is not very scalable from the eyes of an MSP because there is no dashboard that you can use to see all of your devices that have Windows Defender unless you have your own dashboard or an RMM tool to actually look at it. So, you might not get to know that a particular computer of a client is doing something, and it might have got a virus. That person might know that, but unless you set it up to actually send you the information, you won't get to know that. That's one of the things that is hard with Microsoft Defender. It is not made for the MSP world where you have one pane of glass to see all of your clients with Microsoft Defender on it unless your RMM tool already has that built-in and it can see the telemetry from Microsoft Defender."
"Sometimes, there are difficulties in downloading a file considered as malicious."
"The automation could be simpler on the mitigation side. It has a learning curve. Otherwise, it's pretty easy."
"I miss having an executive dashboard or a simple view for viewing things. Everything is extensive in this solution. Everything is configurable and manageable, but the environment of Microsoft 365 has about 13 administrative dashboards, and in each of the dashboards, there are a gazillion things to set up. It is good for a large enterprise, but for a 200-seat client, you need to see 5% of that."
"The system can always be simplified and have a better integration check. More detailed reports would be good. When it does the integrated check, it just shows if the system is okay but I want to know what happened."
"It would be helpful if they offered video tutorial guides."
"Microsoft Defender for Endpoint could provide us with a more holistic approach, such as collaboration. They can provide us with an environment from where we can manage all the endpoints from one central location, such as overall management."
"There's a size limitation, allowing us to scan only small files."
 

Pricing and Cost Advice

"This product is included in the pricing for Windows."
"We have been using the free version."
"You do not need to pay any additional costs for antivirus and anti-malware solutions for endpoint protection."
"Licenses depend upon what you are looking for and what kind of security do you want to implement. There are costs in addition to the standard licensing fees. When we used to buy Symantec, we used to spend on 100 licenses. We used to spend approximately $2,700 for those many licenses, and they came in packs. To add one more license, I had to buy a pack with a minimum of 10 licenses. I had to spend on nine extra licenses because I can't get a single license, whereas when we go for Microsoft, we can get as many licenses as we want. If I have 100 users today, and tomorrow, I have 90 users, I can release my 10 licenses next month. With any other software vendor, you buy licenses for one year, and you have to stick with that. If today you have 100 licenses, and tomorrow, you have 50, you have already paid for one year's license. You can't go back and tell them that I don't require these 50 licenses because I have lost my 50 users, but with Microsoft Defender, licensing is on a monthly basis. It gives you both options. You can go yearly and save on it, or you can go monthly. You will, again, save on it. It is very fair everywhere."
"I pay for it through the Windows Professional or Standard license. It is a one-time cost for me, and I use the same license."
"If we are acquiring everything in a single place, the front end becomes cost-effective."
"The E5 license is the one that I recommend because it comes with Cloud App Security, which is a good thing to have on top of Microsoft Defender."
"When customers haven't deployed the solution and don't have licenses, it can be expensive to start from scratch."
"The tool is free, but there's a size limitation, allowing us to scan only small files."
report
Use our free recommendation engine to learn which Anti-Malware Tools solutions are best for your needs.
861,524 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
13%
Educational Organization
10%
Financial Services Firm
8%
Government
8%
Computer Software Company
16%
Financial Services Firm
12%
Insurance Company
8%
Energy/Utilities Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface, applies behavioral-based endpoint protection and response, and includes risk-ba...
Which offers better endpoint security - Symantec or Microsoft Defender?
We use Symantec because we do not use MS Enterprise products, but in my opinion, Microsoft Defender is a superior solution. Microsoft Defender for Endpoint is a cloud-delivered endpoint security s...
How does Microsoft Defender for Endpoint compare with Crowdstrike Falcon?
The CrowdStrike solution delivers a lot of information about incidents. It has a very light sensor that will never push your machine hardware to "test", you don't have the usual "scan now" feature ...
What do you like most about OPSWAT Filescan Sandbox?
What I find most valuable about it is the design interface.
What is your experience regarding pricing and costs for OPSWAT Filescan Sandbox?
The tool is free, but there's a size limitation, allowing us to scan only small files.
 

Also Known As

Microsoft Defender ATP, Microsoft Defender Advanced Threat Protection, MS Defender for Endpoint, Microsoft Defender Antivirus
No data available
 

Interactive Demo

Demo not available
 

Overview

 

Sample Customers

Petrofrac, Metro CSG, Christus Health
Information Not Available
Find out what your peers are saying about Microsoft, SentinelOne, VirusTotal and others in Anti-Malware Tools. Updated: January 2025.
861,524 professionals have used our research since 2012.