If you're an Intune user, you can bring in certain capabilities like system-hardening policies, which further enhances the security. Also, Defender's vulnerability checking is very sensitive and automatically checks for and reports on vulnerabilities on all machines that have been on the domain.
Defender's reporting is rather scattered, and its URL filtering mechanism doesn't really work. In the next release, I would like to see more fine-grained URL filter control and more reporting options like the ability to generate a scheduled report.
I've been using Microsoft Defender for Business for a month and a half.
Defender is scalable because it's totally cloud-driven.
Microsoft's technical support is very good, but it's difficult to get in touch with them via phone, so we have to raise an online ticket and get a callback (though they do respond very quickly).
Previously, I used McAfee Endpoint Security.
The initial setup is pretty straightforward, with very little configuration work administratively. Just the basic settings have to be brought online, and then the system takes care of things.
Defender for Business is included by default with an Office 365 premium subscription.
Defender is top class in terms of functional security. I would rate Defender eight out of ten.
