Try our new research platform with insights from 80,000+ expert users

Microsoft Defender Vulnerability Management vs XM Cyber comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 9, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Zafran Security
Sponsored
Ranking in Vulnerability Management
27th
Average Rating
9.6
Reviews Sentiment
8.1
Number of Reviews
3
Ranking in other categories
Continuous Threat Exposure Management (CTEM) (6th)
Microsoft Defender Vulnerab...
Ranking in Vulnerability Management
14th
Average Rating
8.0
Reviews Sentiment
6.9
Number of Reviews
12
Ranking in other categories
Advanced Threat Protection (ATP) (17th), Microsoft Security Suite (22nd), Risk-Based Vulnerability Management (5th)
XM Cyber
Ranking in Vulnerability Management
30th
Average Rating
8.0
Reviews Sentiment
7.7
Number of Reviews
2
Ranking in other categories
Continuous Controls Monitoring (7th), Cloud Security Posture Management (CSPM) (25th), Continuous Threat Exposure Management (CTEM) (4th)
 

Mindshare comparison

As of April 2025, in the Vulnerability Management category, the mindshare of Zafran Security is 0.4%. The mindshare of Microsoft Defender Vulnerability Management is 3.2%, up from 2.8% compared to the previous year. The mindshare of XM Cyber is 1.1%, up from 0.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Vulnerability Management
 

Featured Reviews

Israel Cavazos Landini - PeerSpot reviewer
Weekly insights and risk analysis facilitate informed security decisions
I appreciate the weekly insights Zafran provides, which include critical topics for networks and IT security, allowing us to evaluate which insights apply to our environment. The organization score feature is valuable to keep the leadership team updated on how our infrastructure fares security-wise. The applicable risk level versus base risk level feature is beneficial because prior to Zafran, we only used the base risk level, but now understand that risk depends on the asset itself. Zafran is an excellent tool.
TakayukiUmehara - PeerSpot reviewer
Ease of management and integration supports operations, but has high resource consumption
A valuable feature is the ease of management and integration with Microsoft products. I appreciate that I can click on a server in the Defender Console, notice a risk, and retrieve all necessary information. Speed is a key feature as it is very quick to administer and allows for manual configuration from the portal.
HolgerHeimann - PeerSpot reviewer
Reliable with no false-positives and helpful support
There's a lot of improvement possible, however, most of it is in the details. I personally like the concept, as it's pretty straightforward and the product is not trying to overload functionality. It's a clean and straightforward approach. You know what you get. Most of the improvements are detail improvements. They're pretty open to future requests as well, so we send them a lot of suggestions. For example, at the moment, they have something called Battleground. That's a visualization of the network, and it's a visualization of the attack paths that are possible. The program uses so-called scenarios, and we say, "Okay, I'm watching traffic for maybe 24 hours," and then you get a result for that scenario, what happens in that time with what the attack paths are, et cetera. The result of the same scenario yesterday or tomorrow may be different as something might change. In that, one of the things I'm currently missing, which is on the list to be added, is some kind of diff visualization. For example, showing a two-screen split of activity. On the left side of the screen, that's how it was yesterday; on the right side, that's how it is today; and here are the differences. We'd like to see a cheaper price.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"We are able to see the real risk of a vulnerability on our environment with our security tools."
"Zafran is an excellent tool."
"Zafran has become an indispensable tool in our cybersecurity arsenal."
"A valuable feature is the ease of management and integration with Microsoft products."
"The most valuable aspect is the kind of assessment results I get, and the recommendations provided in Microsoft products really help in taking care of the resources."
"The solution is highly scalable."
"Microsoft Defender Vulnerability Management provides regular advisories and recommendations that help improve our security posture."
"Microsoft Defender Vulnerability Management is versatile and assesses vulnerabilities, providing detailed information on CVEs, their categories, and exploit statuses."
"The solution is up-to-date and helps prevent zero-day attacks."
"The integration with Sentinel has been one of the most valuable features for my organization."
"The integration with Sentinel has been one of the most valuable features for my organization."
"The platform's most valuable feature is attack simulation."
"What I personally like very much, from my experience, is that it is very reliable."
 

Cons

"Initially, we were somewhat concerned about the scalability of Zafran due to our large asset count and the substantial amount of information we needed to process."
"The setup phase of the product is not that easy and needs a person to have a certain level of expertise."
"It is challenging to extract and customize reports from the system."
"Integration can be improved."
"The constant changes in the product configuration or the console setup can sometimes be challenging."
"There is a good solution from Microsoft, however, there is a gap between Windows and Linux management."
"Sometimes the stability of the agents could be improved."
"We have experienced some logging issues, including a few hours of downtime initially. Despite this, I would rate the overall stability as an eight."
"It is expensive."
"We'd like to see a cheaper price."
"XM Cyber could identify all areas of vulnerability. They could expand the identification span for different areas."
 

Pricing and Cost Advice

Information not available
"The licensing model follows a per-user per-month structure."
"I rate the product's price a three on a scale of one to ten, where one is a low price, and ten is a high price."
"The tool is a bit costly."
"The product’s pricing is medium."
"The licensing costs are reasonable."
"We have to pay standard licensing fees."
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
848,253 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
14%
Financial Services Firm
11%
Manufacturing Company
7%
Retailer
5%
Financial Services Firm
13%
Computer Software Company
13%
Government
10%
Manufacturing Company
8%
Computer Software Company
15%
Financial Services Firm
14%
Manufacturing Company
10%
Government
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Zafran Security?
I find that the pricing for Zafran aligns well with the comprehensive features it offers. The asset and user-based li...
What needs improvement with Zafran Security?
While Zafran Security is already a powerful tool, there are areas where it could be further improved to provide even ...
What is your primary use case for Zafran Security?
Our primary use case for Zafran involves leveraging it to enhance our vulnerability risk scoring methodology. In toda...
What is your experience regarding pricing and costs for Microsoft Defender Vulnerability Management?
I would rate the price as a three for us due to the partnership discounts. For non-partners, however, the cost could ...
What needs improvement with Microsoft Defender Vulnerability Management?
For our current usage, we do not have any complaints, but a potential improvement could be the introduction of a more...
What do you like most about XM Cyber?
The platform's most valuable feature is attack simulation.
What is your experience regarding pricing and costs for XM Cyber?
We have to pay standard licensing fees. There are no additional costs. It is an expensive product. I rate the pricing...
What needs improvement with XM Cyber?
XM Cyber could identify all areas of vulnerability. They could expand the identification span for different areas.
 

Overview

 

Sample Customers

Information Not Available
Information Not Available
Hamburg Port Authority, Plymouth Rock Corporation
Find out what your peers are saying about Microsoft Defender Vulnerability Management vs. XM Cyber and other solutions. Updated: April 2025.
848,253 professionals have used our research since 2012.