We use Microsoft 365 Defender to help secure threats of the Office package, such as Word, Excel, and PowerPoint. Additionally, it can fix issues.
IT System Administrator at European Space Agency (ESA)
Reliable, good support, and simple upgrading
Pros and Cons
- "Microsoft 365 Defender is simple to upgrade."
- "The user interface of Microsoft 365 Defender could improve. They could make it simpler."
What is our primary use case?
What is most valuable?
Microsoft 365 Defender is simple to upgrade.
What needs improvement?
The user interface of Microsoft 365 Defender could improve. They could make it simpler.
For how long have I used the solution?
I have been using Microsoft 365 Defender for approximately one year.
Buyer's Guide
Microsoft Defender XDR
December 2024
Learn what your peers think about Microsoft Defender XDR. Get advice and tips from experienced pros sharing their opinions. Updated: December 2024.
824,067 professionals have used our research since 2012.
What do I think about the stability of the solution?
Microsoft 365 Defender has been a stable solution.
What do I think about the scalability of the solution?
We have approximately 1,000 people using this solution in my organization. If we expand then we will increase usage.
How are customer service and support?
The support for Microsoft 365 Defender is good.
How was the initial setup?
The installation of Microsoft 365 Defender was automatic when we did the installation of Microsoft Windows.
What about the implementation team?
My internal IT team does the supporting of the solution.
What other advice do I have?
I would recommend this solution to others.
I rate Microsoft 365 Defender a nine out of ten.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Security Analyst at a tech vendor with 5,001-10,000 employees
Enhanced visibility, useful automated routines, and scales wells
Pros and Cons
- "The most valuable features of Microsoft 365 Defender are the combination of all the capabilities and centralized management."
- "The support could be more knowledgable to improve their offering."
What is our primary use case?
We rely on Microsoft 365 Defender for workstation detection across a number of categories, including virus detection, potential unknown application detection, and monitoring for suspicious website interactions, including clicks and access attempts.
I have used Microsoft 365 Defender in the cloud.
How has it helped my organization?
We have experienced significant advantages from implementing Microsoft 365 Defender, as it provides enhanced visibility into workstations and the ability to automatically remediate threats. This means that not every incident requires manual intervention, as certain tasks can be handled automatically, often in conjunction with Microsoft Sentinel.
We are able to ingest collected data from our entire ecosystem. This is an important feature.
We are able to prioritize threats accounts our whole environment.
The solution has helped automate routine tasks and help automate high-value alerts.
The threat intelligence has helped prepare us for potential threats before they hit and we took proactive steps. We are able to check our workstations are well.
We have saved some time by using the solution.
I have found that having solutions from multiple vendors is more helpful than from one.
What is most valuable?
The most valuable features of Microsoft 365 Defender are the combination of all the capabilities and centralized management.
What needs improvement?
The support could be more knowledgable to improve their offering.
For how long have I used the solution?
I have been using Microsoft 365 Defender for approximately one and a half years.
What do I think about the stability of the solution?
The solution is stable.
What do I think about the scalability of the solution?
We have a few thousand people using this solution in my organization.
The scalability of Microsoft 365 Defender is scalable.
How are customer service and support?
I have used the support and they do not know how to fix the issues. Their knowledge could improve.
I rate the support from Microsoft 365 Defender a seven out of ten.
How would you rate customer service and support?
Neutral
Which solution did I use previously and why did I switch?
We have used Microsoft Sentinel. Microsoft Sentinel enables us to investigate threats and respond holistically quickly from one place.
The comprehensive features of Sentinel Security Protection are impressive, particularly its integrated SOIR and UEBA functionalities, as well as its robust threat intelligence capabilities.
I have used McAfee previously and Microsoft 365 Defender is much better.
What other advice do I have?
I rate Microsoft 365 Defender a ten out of ten.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: PeerSpot contacted the reviewer to collect the review and to validate authenticity. The reviewer was referred by the vendor, but the review is not subject to editing or approval by the vendor.
Buyer's Guide
Microsoft Defender XDR
December 2024
Learn what your peers think about Microsoft Defender XDR. Get advice and tips from experienced pros sharing their opinions. Updated: December 2024.
824,067 professionals have used our research since 2012.
Senior IT Executive and Operation at a tech services company with 51-200 employees
A unified enterprise defense suite that's very stable, but the price could be better
Pros and Cons
- "I like that it's stable. It's been stable for a long time, and Microsoft Defender has done a good job there."
- "The price could be better. It'll also help if they can continuously update and upgrade the solution. Every day there's a new virus uploaded into the network, and we have to keep updating it to identify all these things."
What is our primary use case?
The primary use case for Defender is to control the endpoint systems at the user level. On the networking level, we use it to analyze spam and see if any antivirus services are required or if there's a ransomware attack. As of now, I am just using it for monitoring.
What is most valuable?
I like that it's stable. It's been stable for a long time, and Microsoft Defender has done a good job there. I can see a lot of changes to Microsoft 365 Defender when I compare what we have now to what we had from 2007 to 2010. They have implemented a ransomware feature, and if any virus comes into the system, it triggers an alert.
What needs improvement?
The price could be better. It'll also help if they can continuously update and upgrade the solution. Every day there's a new virus uploaded into the network, and we have to keep updating it to identify all these things.
For how long have I used the solution?
I have been using Microsoft 365 Defender since 2007.
What do I think about the stability of the solution?
Microsoft Defender is very stable, and you can see that there is a 99.9% success rate when they give us good service. It's very helpful for configuring anything.
What do I think about the scalability of the solution?
It's definitely easy to scale. However, scalability depends on the plan and requirements.
How are customer service and technical support?
They have their norms and regulations that they use once a ticket is created. Whatever the technical issues are, they normally resolve them within the timeline or some days. They are good at the technical side of things.
How was the initial setup?
The initial setup is totally easy. It's not complex. It takes just a couple of minutes to deploy this solution.
What's my experience with pricing, setup cost, and licensing?
The price could be better. Normally, the costs depend on the country you're located in for the license. When we were in the initial stage, we went with the E5 license they call premium standard. It cost us around $5.20 per month for four users.
What other advice do I have?
I would recommend Microsoft Defender to new users. I would advise them to understand their exact requirements and check if it matches before taking it up.
On a scale from one to ten, I would give Microsoft 365 Defender a seven.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Desktop Architecture and Design at a tech services company with 1-10 employees
Blocks and Monitors for security purposes without needing multiple other products to do different tasks
Pros and Cons
- "We can use Defender to block and monitor for security purposes without needing multiple other products to do different tasks."
- "The logs could be better."
What is our primary use case?
We primarily use the solution for security. We removed all other antivirus products such as McAfee. We removed everything and now use Defender as Defender covers everything all third-party products used to cover.
What is most valuable?
Overall, we are satisfied with the product.
Instead of using three or four tools for security, we can use one. With one product, Defender, we have all of the features we need. We can use Defender to block and monitor for security purposes without needing multiple other products to do different tasks.
It's very user-friendly.
What needs improvement?
The dashboards could be improved. They have to improve something about the dashboard. It is good, however, they need to provide some more information under each account.
The logs could be better.
For how long have I used the solution?
I've been using the solution for two years.
What do I think about the stability of the solution?
The solution is a perfectly stable product.
What do I think about the scalability of the solution?
The scalability of the product is good.
How are customer service and support?
Technical support from Microsoft is good. We haven't had any issues with them. We are quite satisfied so far.
Which solution did I use previously and why did I switch?
We previously used McAfee, however, we wanted to have just one solution, Defender, to cover everything.
How was the initial setup?
The solution's initial setup is not complex yet not easy. We had to use some scripts and policies and a lot of things. If you set up a new environment with Defender, you have to integrate with the old policy and the same policy that was already set up. It needs time.
What about the implementation team?
I handled everything without any consultation from any outside sources.
What's my experience with pricing, setup cost, and licensing?
I don't know the cost. The costs are handled by management. I can't say if the cost is expensive or not. I don't handle that aspect.
What other advice do I have?
We're Microsoft partners.
I'd rate the solution at a ten out of ten. It's a pretty perfect product.
Which deployment model are you using for this solution?
Hybrid Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer: partner
Product Manager at a comms service provider with 501-1,000 employees
Stable and easy to use but could scan attachments faster
Pros and Cons
- "The product is very easy to use."
- "It would be helpful if the solution could scan faster when it comes to scanning attachments to emails."
What is our primary use case?
We primarily use the solution as security for our endpoints. It covers everything.
What is most valuable?
The solution is very useful for scanning email traffic.
Practically every company that is working in Microsoft Cloud can use it with a Microsoft 365 subscription.
The product is very easy to use.
So far, I have found the solution to be very stable. I haven't had any issues with it.
What needs improvement?
It would be helpful if the solution could scan faster when it comes to scanning attachments to emails.
For how long have I used the solution?
I've been using the solution for a bit more than one year.
What do I think about the stability of the solution?
The product is quite stable. It's been problem-free. There are no bugs or glitches. It doesn't crash or freeze. It's reliable.
What do I think about the scalability of the solution?
I do not believe the solution is scalable. It's fixed on my PC and I cannot upgrade it. It may be changed from time to time according to the company, however, beyond that, I have no control over expansion.
We have 250 people in our office using the solution.
How are customer service and technical support?
We have an internal IT department. If I were to have issues, which I haven't, I would go to them. I've never contacted Microsoft's technical support directly. I have no experience dealing with them. I couldn't say if they are helpful or responsive.
How was the initial setup?
I didn't handle the initial setup. That was handled by a technician in my company. It was placed on my PC for me. I don't have any insights in terms of the implementation process.
It may only take one person to install it. They would have to have a bit of knowledge on the product.
What's my experience with pricing, setup cost, and licensing?
We are using the higher-level package which we have to pay a licensing fee for. There are different tiers. Ours includes extended detection with Advanced Threat Protection. It's the most powerful endpoint protection Microsoft offers.
What other advice do I have?
We are using the latest version of the solution.
We sell the product and we use it as well. We are resellers.
We are using advanced endpoint detection in our security for email and a lot of other things, however, it is combined with Cisco solutions, for example, Cisco Umbrella. We have a file solution from IBM, and internally we are using it, however, I am not directly using all of these things. I'm using the administrative part for partnership purposes. I'm not a technical person. I am using them as a customer as part of Microsoft OS.
There is a lot of other tools behind the scenes as well, however, they are working on a network level, on a data center level, to secure the company.
I'd rate the solution at a seven out of ten.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer: Reseller
Senior Cloud Architects at Metro Systems Corporation Public Company Limited
Stable, scalable, but machine learning and AI could improve
Pros and Cons
- "I have found the ability to delete unwanted threats beneficial."
- "The solution could improve by having better machine learning and AI. Additionally, the interface, documentation, and integration could be better."
What is our primary use case?
I use the solution for security against system threats.
What is most valuable?
I have found the ability to delete unwanted threats beneficial.
What needs improvement?
The solution could improve by having better machine learning and AI. Additionally, the interface, documentation, and integration could be better.
For how long have I used the solution?
I have used this solution for approximately one year.
What do I think about the stability of the solution?
The solution is stable.
What do I think about the scalability of the solution?
Microsoft 365 Defender is scalable.
What's my experience with pricing, setup cost, and licensing?
The price of the solution is high compared to others and we have lost some customers because of it.
What other advice do I have?
I rate Microsoft 365 Defender a seven out of ten.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Lead Solutions Architect at a tech vendor with 10,001+ employees
Integrates well, easy to maintain, but data recovery needs improvement
Pros and Cons
- "The solution is well integrated with applications. It is easy to maintain and administer."
- "The data recovery and backup could be improved."
What is our primary use case?
We use the solution to back up our data frequently.
What is most valuable?
The solution is well integrated with applications. It is easy to maintain and administer.
What needs improvement?
The data recovery and backup could be improved.
For how long have I used the solution?
I have been using the solution for a couple of years.
What do I think about the stability of the solution?
The solution is stable.
What do I think about the scalability of the solution?
The solution is scalable, you do not need to worry about resources. I have more than 50 users using the solution in my organization.
How are customer service and technical support?
The support provides a 24 hrs service which I am completely satisfied with.
How was the initial setup?
The installation was straightforward it did not take very long to deploy the backup software on any application.
What about the implementation team?
We have six people that do the maintenance of the solution in my organization.
What's my experience with pricing, setup cost, and licensing?
The solutions price is fair for what they offer.
What other advice do I have?
I recommend this solution to others, it is easy to use and they will enjoy it.
I rate Microsoft 365 Defender a seven out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
Cloud Sales Specialist at a tech vendor with 201-500 employees
Emerging technologies, stable, but expensive
Pros and Cons
- "Microsoft 365 Defender is a stable solution."
- "Microsoft 365 Defender does not have a unique package with emerging endpoint security technologies, such as EDR and XDR."
What needs improvement?
Microsoft 365 Defender offers emerging endpoint security technologies, such as EDR and XDR and Zero trust approach
For how long have I used the solution?
I have been using Microsoft 365 Defender for approximately two years.
What do I think about the stability of the solution?
Microsoft 365 Defender is a stable solution.
How are customer service and support?
I am satisfied with the technical support.
How was the initial setup?
The solution is included in Windows 10.
What's my experience with pricing, setup cost, and licensing?
Microsoft is not competitive with the pricing of the solution. The competitors are able to offer lower discounts. The price of the solution is higher.
What other advice do I have?
Microsoft 365 Defender is Microsofts first try at a security package as part of Windows.
They are offering different services with Zero Trust security, SIAM security, SOAR security with Azure. They converge all products in the same security center. Microsoft 365 Defender is one strong point to the overall security protection.
I rate Microsoft 365 Defender a five out of ten.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer: partner
Buyer's Guide
Download our free Microsoft Defender XDR Report and get advice and tips from experienced pros
sharing their opinions.
Updated: December 2024
Product Categories
Extended Detection and Response (XDR) Endpoint Detection and Response (EDR) Microsoft Security SuitePopular Comparisons
CrowdStrike Falcon
SentinelOne Singularity Complete
Cortex XDR by Palo Alto Networks
IBM Security QRadar
Elastic Security
Trellix Endpoint Security
Vectra AI
Forescout Platform
Trend Vision One
Rapid7 InsightIDR
Mandiant Advantage
Stellar Cyber Open XDR
Fidelis Elevate
Buyer's Guide
Download our free Microsoft Defender XDR Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- What is the best EDR or XDR product for a company with 9000 employees?
- When evaluating Extended Detection and Response (XDR), what aspect do you think is the most important to look for?
- How do you decide about the alert severity in your Security Operations Center (SOC)?
- Which is better for Endpoint Security: EDR or XDR solutions?
- What are the main differences between XDR and SIEM?
- Why is Extended Detection and Response (XDR) important for companies?
- How do you use the MITRE ATT&CK framework for improving enterprise security?
- What tools and solutions do you use for automated incident response in an enterprise in 2022?
- FortiXDR vs Cortex Pro - which is the best?
- What is Cognitive Cybersecurity and what is it used for?