Microsoft Defender Threat Intelligence vs Morphisec comparison

Microsoft Defender Threat I...

Read 21 Morphisec reviews

150 Views
84 Comparison Views

100% willing to recommend

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Dec 1, 2024

Morphisec and Microsoft Defender Threat Intelligence compete in the cybersecurity space, focusing on threat detection and prevention. Morphisec seems to have the upper hand in preventing in-memory and zero-day attacks, while Microsoft Defender excels in integrated threat detection and data leveraging across Microsoft's ecosystem.

Features: Morphisec provides signatureless protection, seamless integration with Microsoft Defender, and stealth mechanisms to shield vulnerable areas. Microsoft Defender utilizes extensive global threat intelligence data, enables integrated threat detection across Microsoft's ecosystem, and offers comprehensive visibility and event management.

Room for Improvement: Morphisec users suggest enhancements in reporting features, cloud deployment, and better non-Microsoft integration. Occasional false positives and improved customer interaction for updates are also noted. Microsoft Defender could benefit from reduced false positives, better third-party product integration, more transparent licensing, and cost reductions for non-E5 licenses.

Ease of Deployment and Customer Service: Morphisec offers flexible deployment options across cloud environments and on-premises, along with responsive customer support, though tech support efficiency could improve. Microsoft Defender facilitates versatile deployment and generally satisfactory technical support, but integration complexity presents challenges.

Pricing and ROI: Morphisec is noted for competitive pricing and significant ROI due to reduced cybersecurity incidents. Microsoft Defender, bundled with Microsoft 365, is cost-effective for ecosystem users but may present higher costs for SMEs, with complex licensing models. Both solutions positively impact security and operational load.

To learn more, read our detailed Microsoft Defender Threat Intelligence vs. Morphisec Report (Updated: March 2025).

Microsoft Defender Threat Intelligence vs. Morphisec

Download the complete report

Helped 847,625 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Microsoft Defender Threat I...

Ranking in Advanced Threat Protection (ATP)

11th

Average Rating

8.4

Reviews Sentiment

7.4

Number of Reviews

Ranking in other categories

Threat Intelligence Platforms (4th), Microsoft Security Suite (18th)

Morphisec

Ranking in Advanced Threat Protection (ATP)

33rd

Average Rating

9.2

Reviews Sentiment

7.4

Number of Reviews

Ranking in other categories

Vulnerability Management (58th), Endpoint Protection Platform (EPP) (56th), Endpoint Detection and Response (EDR) (59th), Cloud Workload Protection Platforms (CWPP) (36th), Threat Deception Platforms (14th)

Mindshare comparison

As of April 2025, in the Advanced Threat Protection (ATP) category, the mindshare of Microsoft Defender Threat Intelligence is 1.6%, up from 1.3% compared to the previous year. The mindshare of Morphisec is 1.0%, up from 0.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Advanced Threat Protection (ATP)

Featured Reviews

Nim Nadarajah

Partner & Director Advisory Services at Cruciallogics

A native Microsoft solution the provides great ROI and continuously improves its offering

We have Microsoft bias. We generally don't have any significant negative feedback or improvement points around Defender, EDR and CMDR platforms. It does a good job across the board. The price point is something they can improve slightly for those who don't have an M 365 E5. I believe it's a $2.80 cents add-on. In Canadian, that's expensive. If they can drop it to a dollar, for those who don't have M 365 E5, they're going to open up market share and increase affordability for an entire market segment in the medium business category. Other than that, we have no major negative feedback.

Read full review

Islam Shaikh

Senior Manager - IT at IndiGrid Limited

Lightweight, detects everything quickly, and takes corrective action

We sometimes have to depend on the support team to know what action we should take. If the solution for an alert can be built into the report that we are getting, it will save time, and the interaction with support would be less. At times, corrective action is required, but at times, we don't need to take any action. It would be good if we get to know in the report that a particular infection doesn't require any action. It will save us time and effort. Other than that, nothing else is required. They have taken care of everything. We are getting alerts, and we can have multiple admins. We get a good model with this view.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The tool can proactively detect potential incidents."

"It is very scalable. There are approximately 2,000 endpoints and up to 200 servers in our company."

"Microsoft's integration into the security stack works quite well."

"The solution blocks incoming threats on the local PC or any cloud-based threats."

"The most valuable aspects are its integration capabilities with other Microsoft products like Intune, Office 365, and Azure cloud applications."

"I rate the tool's stability a ten out of ten."

"The product's anti-spam and malware-scanning features are useful. We scan email attachments, documents, and malicious codes."

"The global review and remediation of malicious code is probably the most valuable feature."

More Microsoft Defender Threat Intelligence pros

"Morphisec makes use of deterministic attack prevention that doesn’t require investigation of security alerts. It changes the memory locations of where certain applications run. If you think of Excel, opening a PDF, running an Excel macro, or opening a webpage and clicking on a link, all of those actions run in a certain area of memory. Morphisec changes the memory locations of where those run."

"We have seen it successfully block attacks that a traditional antivirus did not pick up."

"Morphisec also provides full visibility into security events for Microsoft Defender and Morphisec in one dashboard... in the single pane of glass provided by Morphisec, it's all right there at your fingertips: easy to access and easy to understand. And if you choose to go down further to know everything from the process to the hash behind it, you can."

"Morphisec Guard enables us to see at a glance whether our users have device control and disk encryption enabled properly. This is important because we are a global company operating with multiple entities. Previously, we didn't have that visibility. Now, we have visibility so we can pinpoint some locations where there are machines that are not really protected, offline, etc. It gives us visibility, which is good."

"All the alerts are on the dashboard, which is quite simple and useful for us. You can easily check all the alerts that are being blocked or allowed, or whatever the action is. You can easily see that and you can take the necessary actions. You can add a PowerShell extension or any activities for blocking at your network level or for endpoints."

"It provides full visibility into security events and from both solutions in one dashboard. I'm not a big security guy, if I have a threat that looks like there's a problem, I will ask Morphisec to dissect it for me, and tell me what might be happening. Because it tends to be all hash codes, so I can tell what's going on. They've been pretty good with that."

"It also provides full visibility into security events from Microsoft Defender and Morphisec in one dashboard. We've always had that capability with Morphisec. The more recent version appears to do that even a little bit more natively and it's given us visibility that we didn't have otherwise."

"Morphisec makes it very easy for IT teams of any size to prevent breaches of critical systems because of the design of their tool. When we evaluated Morphisec, the CIO and I sat and listened. What attracted us to them is the fact that it stops activity at the point of detection. That saves a lot of time because now we are not investigating and trying to trace down what to turn off. We have already prevented it, which makes it very much safer and more secure."

More Morphisec pros

Cons

"I would like for there to be extra confirmation that there aren't viruses. Even if the virus detection software is always running there could be hidden applications that are using the computer."

"The price of the solution is an area of concern where improvements are required. In general, the solution's price needs to be reduced."

"Some of the customization features could be improved by providing a portion of it as open source."

"I would like to see more frequent updates, which is always better for security because of daily threats."

"It takes time for the support team to understand the issue, and they then respond with a delay at times, which causes a lot of trouble."

"The product's dashboard and incident reports functionality needs enhancement."

"Microsoft Defender Threat Intelligence is evolving and needs to fix and enhance numerous issues like stability and licensing. The continuous rebranding and licensing changes are confusing."

"One area that can be improved is reducing false positives."

More Microsoft Defender Threat Intelligence cons

"The only area that really needs improvement is the reporting functionality. Gathering the detailed information that is in the system for an executive, or for me as a director, could be better. Some of the interface and reporting aspects are a little bit dated. They're working on it."

"We have only had four attacks in the last year, "attacks" being some benign PDF from a vendor that, for some reason, were triggered. There were no actual attacks. They were just four false positives, or something lowly like adware. There have been false positives with both the on-premises solution and the cloud solution."

"It might be a bit much to ask, but we are now beginning to use Morphisec Scout, which provides vulnerability information. At this time, it's recognizing vulnerabilities and reporting them to us, but it's not necessarily resolving them. There's still a separate manual process to resolve those vulnerabilities, primarily through upgrades. We have to do that outside of Morphisec. If Morphisec could somehow have that capability built into it, that would be very effective."

"If anything, tech support might be their weakest link. The process of getting someone involved sometimes takes a little time. It seems to me that they should have all the data they need to let me know whether an alert is legitimate or not, but they tend to need a lot of information from me to get to the bottom of something. It usually takes a little longer than I would expect."

"In the Windows Defender integration, they have put in a report of computers that need Windows Defender updates. If those updates could be kicked off directly from the dashboard, instead of having to go to another system entirely, that would be good."

"The dashboard is the area that requires the most improvement. We have about, I would say 5,500 computers currently, and searching through all of those takes some time to filter. So as soon as you apply the filter, it takes a few seconds. It crunches, it thinks, and then it brings up the clients that match."

"Those are some of the features that I was looking for on my on-prem platform that they've already instituted in the cloud and that I'm sure will be instituting on their on-prem platform as well. Having to have an on-prem server required a lot of administration. Being able to push that to the cloud and have it managed up there for us is a real nice addition."

"We have discovered some bugs in the new releases that they've had to fix, so I would like to see more testing and QA on their side before they release."

More Morphisec cons

Pricing and Cost Advice

"The product is a part of my Microsoft 365 subscription, so there is no additional cost. It is cost-effective."

"The tool is expensive as a stand-alone solution. However, it is not cheap when you purchase it as a bundle."

"On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing a six or seven out of ten."

"The product has multiple subscription models."

"It is an expensive product."

"I use the product's default version, which is a free one and not the licensed version."

"I rate the product's price a six or seven on a scale of one to ten, where one is expensive, and ten is cheap."

"There is a need to make yearly payments towards the licensing charges attached to the product."

More Microsoft Defender Threat Intelligence pricing and cost advice

"Our licensing is tied into our contract. Because we have a long-term contract, our pricing is a little bit lower. It is per year, so we don't get charged per endpoint, but we do have a cap. Our cap is 80 endpoints. If we were to go over 80, when we renewed our contract, which is not until three years are over. Then, they would reevaluate, and say, "Well, you have more than 80 devices active right now. This is going to be the price change." They know that we are installing and replacing computers, so the numbers will be all over the place depending on whether you archive or don't archive, which is the reason why we just have to keep up on that stuff."

"Licenses are per endpoint, and that's true for the cloud version as well. The only difference is that there is a little extra charge for the cloud version."

"The pricing is definitely fair for what it does."

"We are still using a separate tool. I know for our 600 or I think we're actually licensed for up to 700 users, it runs me 23 or $24,000 a year. When you're talking to that many users plus servers being protected, that's well worth the investment for that dollar amount."

"It does not have multi-tenants. If South Africa wants to show only the machines that they have, they need their own cloud incidence. It is not possible to have that in a single cloud incidence with multiple tenants in it, instead you need to have multiple cloud incidences. Then, if you have that, it will be more expensive. However, they are going to change that, which is good."

"It is an annual subscription basis per device. For the devices that we have in scope right now, it is about $25,000 a year."

"Morphisec is reasonably priced because our parent company's other subsidiaries use different products like CrowdStrike. CrowdStrike is four or five times more expensive than Morphisec. The competitive pricing saves us money in our overall security stack."

"It is a little bit more expensive than other security products that we use, but it does provide us good protection. So, it is a trade-off."

More Morphisec pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Advanced Threat Protection (ATP) solutions are best for your needs.

See recommendations

847,625 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

15%

Financial Services Firm

12%

Educational Organization

11%

Government

11%

Outsourcing Company

14%

Computer Software Company

12%

Financial Services Firm

11%

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about Microsoft Defender Threat Intelligence?

It just runs in the background. I don't have to worry about, making sure it's Intelligence. So, you know, this kind of makes it very easy, have to worry about installing. It is easy to use.

See all answers

What needs improvement with Microsoft Defender Threat Intelligence?

Some of the customization features could be improved by providing a portion of it as open source. This would allow integration with other solutions, enhancing Threat Intelligence. Providing code cu...

See all answers

What is your primary use case for Microsoft Defender Threat Intelligence?

We are using Microsoft Defender ATP specifically as an email security solution, as well as for our critical servers as a web security solution. We have almost eleven hundred users utilizing it for ...

See all answers

Ask a question

Earn 20 points

Comparisons

Recorded Future vs Microsoft Defender Threat Intelligence

Compared 20% of the time

VirusTotal vs Microsoft Defender Threat Intelligence

Compared 20% of the time

Anomali vs Microsoft Defender Threat Intelligence

Compared 16% of the time

Microsoft Sentinel vs Microsoft Defender Threat Intelligence

Compared 12% of the time

Cisco Threat Grid vs Microsoft Defender Threat Intelligence

Compared 12% of the time

More Microsoft Defender Threat Intelligence Competitors

CrowdStrike Falcon vs Morphisec

Compared 34% of the time

Halcyon vs Morphisec

Compared 13% of the time

SentinelOne Singularity Complete vs Morphisec

Compared 12% of the time

Virsec Security Platform vs Morphisec

Compared 7% of the time

Hyver vs Morphisec

Compared 7% of the time

More Morphisec Competitors

Product Reports

Microsoft Defender Threat Intelligence

Download Microsoft Defender Threat Intelligence product report

Microsoft Defender Threat Intelligence report

Download Morphisec product report

Also Known As

No data available

Morphisec, Morphisec Moving Target Defense

Overview

Microsoft Defender Threat Intelligence is a comprehensive security solution that provides organizations with real-time insights into the latest cyber threats. Leveraging advanced machine learning and artificial intelligence capabilities, it offers proactive threat detection and response, enabling businesses to stay one step ahead of attackers. With Microsoft Defender Threat Intelligence, organizations gain access to a vast array of threat intelligence data, including indicators of compromise (IOCs), security incidents, and emerging threats. This data is collected from a wide range of sources, such as Microsoft's global sensor network, industry partners, and security researchers, ensuring comprehensive coverage and accuracy. The solution's advanced analytics and machine learning algorithms analyze this threat intelligence data in real-time, identifying patterns, trends, and anomalies that may indicate a potential security breach. By continuously monitoring the network and endpoints, Microsoft Defender Threat Intelligence can quickly detect and respond to threats, minimizing the impact of attacks and reducing the time to remediation.

Microsoft

Morphisec integrates seamlessly with platforms like Microsoft Defender, offering signatureless protection against zero-day threats and ransomware. It enhances existing endpoint solutions with minimal maintenance through its set-and-forget deployment, providing heightened security and reduced false positives.

Morphisec strengthens defense strategies by merging memory morphing and signatureless protection to effectively block zero-day attacks and ransomware. It operates efficiently within existing infrastructure, reducing system impact and maintenance needs. Users find its full visibility dashboard invaluable. Despite its strengths, cloud deployment and reporting features can be improved. Stability, alerts, and integration with other systems pose challenges for users, impacting usability and support quality.

What are Morphisec's key features?

Seamless Integration: Works with Microsoft Defender for comprehensive dashboard visibility
Memory Morphing: Hides processes to reduce attack surfaces
Signatureless Protection: Prevents threats without impacting performance
Automatic Threat Blocking: Uses inbuilt intelligence to detect risks
Set-and-Forget Deployment: Simplifies management and reduces maintenance

What benefits should users consider in reviews?

Quick Deployment: Fast setup without disrupting operations
Enhanced Protection: Provides an additional defense layer against advanced threats
Cost-Effectiveness: Works with existing licenses, minimizing extra investments
Improved Compatibility: Integrates smoothly with current antivirus systems
Minimal System Impact: Operates efficiently without overloading resources

In security-focused industries, Morphisec is crucial for protecting workstations and servers against sophisticated attacks like ransomware. Its signatureless technology offers early threat detection, while compatibility with existing systems ensures seamless integration, providing advanced protection without additional licensing costs.

Sample Customers

Information Not Available

Lenovo/Motorola, TruGreen, Covenant Health, Citizens Medical Center

Microsoft Defender Threat Intelligence vs. Morphisec