Try our new research platform with insights from 80,000+ expert users

Microsoft Defender XDR vs Microsoft Purview Information Protection comparison

 

Comparison Buyer's Guide

Executive Summary
 

Categories and Ranking

Microsoft Defender XDR
Ranking in Microsoft Security Suite
2nd
Average Rating
8.4
Reviews Sentiment
7.1
Number of Reviews
96
Ranking in other categories
Endpoint Detection and Response (EDR) (5th), Extended Detection and Response (XDR) (5th)
Microsoft Purview Informati...
Ranking in Microsoft Security Suite
20th
Average Rating
8.0
Reviews Sentiment
6.9
Number of Reviews
10
Ranking in other categories
Data Governance (9th), Data Privacy Management Software (2nd)
 

Mindshare comparison

As of December 2024, in the Microsoft Security Suite category, the mindshare of Microsoft Defender XDR is 5.0%, down from 11.1% compared to the previous year. The mindshare of Microsoft Purview Information Protection is 1.1%, down from 1.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Microsoft Security Suite
 

Featured Reviews

Gabor Nyerd - PeerSpot reviewer
Includes four services and four products, which can help organizations a lot
We found that sometimes integrations work, but testing them can take some time. Sometimes, configurations take much longer than expected. We have a configuration in place that needs to be synchronized with another server. However, the servers are four hours apart, so this can cause delays. In general, I believe that the time it takes to configure and test a service should be shorter. Sometimes, it can take a couple of hours to test a single configuration setting. Other times, it is only ten or fifteen minutes, which is normal. However, sometimes, even immediate actions can be triggered by configuration changes, and some settings can take up to eight hours to complete. I believe that this time can be improved. Microsoft is making a lot of improvements to its services in a short period of time. This is a good thing, as it means that the services are constantly being updated and improved. However, it can be challenging for customers to keep up with the changes. For example, a customer may read about an update, understand it, and share it with their colleagues and boss. However, it may take days or weeks to test the update and get the necessary approvals. This can be especially challenging for large customers with many users or machines. In some cases, Microsoft may change a service before the customer has had a chance to implement the previous update. This can be frustrating for customers, as it means that they have to constantly learn new things and adjust their workflows. On the one hand, it is important for Microsoft to keep updating and improving its services. This helps to ensure that the services are meeting the customers' needs and that they are staying ahead of the competition. Microsoft should also be mindful of the challenges that these changes can create for customers. One way to address this challenge is to provide customers with more time to implement changes. Microsoft could also provide more information about upcoming changes so that customers can plan ahead. Ultimately, Microsoft needs to strike a balance between keeping its services up-to-date and providing customers with a smooth transition to new features.
JohnAssouline - PeerSpot reviewer
A single solution for information protection that offers enterprise-grade AI
The reporting capabilities of Microsoft Purview are crucial. They provide insights into potentially non-compliant situations and suggest ways to rectify them. The solution helps to automate many tasks, allowing human operators to focus on areas where they offer the most value. Microsoft Copilot is an advantage because it's enterprise-grade AI. Customers can't use a generic AI and risk having their IP disseminated in the general public version of the AI engine. Purview's data classification features are excellent for Microsoft shops using SharePoint, OneDrive, and Microsoft 365. It's a great tool to assess everything. It's more complicated if the customers are using third-party tools.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"What I like most about the product is its all-in-one solution. With Microsoft Defender XDR, we get coverage for various aspects like endpoint security, cloud security, and image-related cases, all within a single platform. This eliminates the need for multiple products or technical controls to address incidents. The main benefit became evident immediately after deployment, especially in its ability to analyze files and phishing emails quickly. By submitting suspicious files or emails, we receive quick results on whether they are legitimate, suspicious, or malicious, saving time."
"You can configure the product very easily."
"Defender XDR can stop advanced attacks, like ransomware or business email compromise."
"The integration, visibility, vulnerability management, and device identification are valuable."
"Defender XDR has a feature called the timeline that lets you track all activities. It helps a lot with investigations."
"Microsoft Defender XDR is scalable."
"Microsoft Defender XDR is a complete package of different Defender solutions, including Defender for Endpoint, Defender for Office 365, Defender for Cloud, and Sentinel SIEM, among others."
"The product integrates security into one tool instead of having third-party security tools."
"I think Purview is incredibly stable."
"The scalability of Microsoft Purview Information Protection is excellent."
"I created training materials for end users on applying different labels, explaining their purposes, and providing examples. This was crucial since end users would apply the labels in different protection scenarios. The implementation helped the organization in several ways."
"The reporting capabilities of Microsoft Purview are crucial. They provide insights into potentially non-compliant situations and suggest ways to rectify them. The solution helps to automate many tasks, allowing human operators to focus on areas where they offer the most value."
"Incorporating data loss prevention capabilities built into the Microsoft platform to endpoints, such as Windows 10 and Windows 11 computers, can also help prevent data loss and is highly advantageous."
"Before using it, we had a lot of unlabeled data, and the tool helped us quickly and accurately label a large number of documents."
"Purview is about auditing and discoverability. We need to ensure people aren't releasing information that they shouldn't and that they're doing multi-factor authentication or accessing it from the correct devices. It aids in reducing silos within organizations, enabling staff to easily find documents and contacts without exhausting human resources."
"We can restrict access or specify who can see sensitivity labels, which can be based on the classification level. We can encrypt restricted content and limit who can see that from an internal view, too, so Purview is a powerful tool."
 

Cons

"There are a few technical issues with Defender XDR that can be improved. Sometimes, the endpoint devices are not reporting properly to the Defender 365 portal. When you're getting all the information from the Microsoft portal, the devices are sometimes not in sync. We have hundreds of endpoint devices, some needing to be onboarded again."
"Microsoft Defender XDR is not a full-fledged EDR or XDR."
"The cost can be high if you want to build custom license packages. Another area for improvement is the policies. In Azure, we need to implement policies in JSON format, but in 365 Defender 365, it would be helpful to use a different format so we can customize the platform."
"There is no comprehensive visibility, making it less user-friendly."
"From an integration standpoint, it is always improving overall. With Security Copilot coming out, as partners, we are waiting for the GDAP support so that we can actually see Security Copilot on behalf of customers if they subscribe to it."
"At times, when we have an incident email and we click on the link for that incident, it opens a pop-up, but there is nothing. It has happened a couple of times."
"There is no common area where we can manage all the policies for the EDR, third-party solutions, devices, servers, Windows, Mac, etc., but it's on the road map, and we ware waiting for that feature."
"There are other SIEM solutions that are easier to use, mainly based on the creation of rules, use cases, and groups."
"Purview could better integrate with third-party tools, but I don't have a specific use case for that because It's currently integrated into the managed services we offer to Microsoft customers using E5 licenses."
"I rate Microsoft support six out of 10. Response times are a challenge. It's hard to be an ambassador for a product when you know it will be hard to get support."
"Microsoft can improve the affordability of Purview Information Protection by offering it at a lower cost."
"I had experience with previous versions of Microsoft Purview Information Protection as well. The new version doesn't have all the features that were present in the previous native clients and functionalities. For example, the ability to track documents - knowing where your document is, who is accessing it, when and where. You could even revoke access to a particular document if needed, which was a cool feature. These aren't available right now, although Microsoft is working on bringing them back, which might take some time."
"Our primary concern is third-party application visibility. Many people choose other DLP tools, as they can search the Office 365 suite and detect sensitive information across thousands of other apps. The product is weak compared to the competitors on the DLP front, but the classification is good; the tool needs a bit more maturation."
"Microsoft customer service is hit or miss. Sometimes, I get a fast and knowledgeable response, while other times, I've experienced delays and received no resolution."
"There is potential for more integration in the use of AI."
"There should be more training and communication regarding new features. I may be missing those communications, but it often seems like changes happen in the Purview portal without notice. Having a roadmap or updates about new releases would be helpful for demonstrating to clients. If things are constantly changing, I sometimes look silly when I log in, and things have moved or changed."
 

Pricing and Cost Advice

"Microsoft Defender falls within a mid-tier price range compared to other security solutions."
"The functionality is fantastic, but for medium and small-sized companies it's overpriced. It would be better if it were a little bit cheaper."
"The most valuable licensing option is expensive, so pricing could be improved. Licensing options for this solution also need to be consolidated, because they frequently change."
"The price of the solution is high compared to others and we have lost some customers because of it."
"Microsoft is not competitive with the pricing of the solution. The competitors are able to offer lower discounts. The price of the solution is higher."
"Licensing is somewhat confusing, particularly when presenting our pitch decks to stakeholders and leveraging key features in premium SKUs, but we managed with some assistance from Microsoft."
"We have a lot of problems in Latin America regarding the price of Microsoft 365 Defender, because the relationship between dollars and the money of the different countries, it's is a lot. Many customers that have small businesses say that they would like the solution but it is too expensive. However, large companies do not find the cost an issue."
"There are no issues with pricing, but sometimes, the clarity in licensing is a concern."
"The price is determined by the enterprise licensing, either the E3 or E5 licensing or the EMS plus security and other feature licensing."
"The tool's pricing is not a problem for customers because they often purchase it as part of a bundle. With an E5 license, for example, users get access to the entire functionality. This is one of the main reasons why many customers are choosing Microsoft."
"The tool's pricing is fairly low, less than 100,000 for a year."
"Initially, Purview's cost seemed quite high because it was for personal use. I was scanning a tiny tenant and thinking, "If I extrapolate this to an enterprise-scale tenant, it will be quite costly." However, I talked to people who had compared it to other products on the market, and they're spending five figures to get started. At least, Purview has a free trial, so you can try some of the features early on."
"The product is affordable, and our clients agree. Sensitivity labels come with the MIP license at an additional $2 a month per user, an excellent deal for auto-labeling capabilities."
"The pricing and setup costs are transferred to my clients, who find it affordable and are satisfied with what they receive."
report
Use our free recommendation engine to learn which Microsoft Security Suite solutions are best for your needs.
823,875 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
17%
Financial Services Firm
10%
Government
8%
Manufacturing Company
8%
Financial Services Firm
19%
Computer Software Company
12%
Government
8%
Retailer
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Microsoft 365 Defender?
Microsoft Defender XDR provides strong identity protection with comprehensive insights into risky user behavior and potential indicators of compromise.
What is your experience regarding pricing and costs for Microsoft 365 Defender?
The pricing is a little high, however, it is on par with other competitive tools in the market.
What needs improvement with Microsoft 365 Defender?
Microsoft could improve on threat hunting and build more on threat detection and handling. The cybersecurity and cloud security posture features are a bit lesser than standard security products.
What do you like most about Microsoft Purview Information Protection?
It ensures that sensitive data is automatically safeguarded, even for email attachments, regardless of the user or device.
What is your experience regarding pricing and costs for Microsoft Purview Information Protection?
As a service provider, we do not handle licensing directly. Our focus is on helping customers maximize their software investment. If the customer already has an E5 agreement, we help them get the m...
What needs improvement with Microsoft Purview Information Protection?
Purview could better integrate with third-party tools, but I don't have a specific use case for that because It's currently integrated into the managed services we offer to Microsoft customers usin...
 

Also Known As

Microsoft 365 Defender, Microsoft Threat Protection, MS 365 Defender
Microsoft Information Protection
 

Overview

 

Sample Customers

Accenture, Deloitte, ExxonMobil, General Electric, IBM, Johnson & Johnson and many others.
Information Not Available
Find out what your peers are saying about Microsoft Defender XDR vs. Microsoft Purview Information Protection and other solutions. Updated: October 2024.
823,875 professionals have used our research since 2012.