Microsoft Corporation

Microsoft Defender for Endpoint

8.5 /10

What is Microsoft Defender for Endpoint?

Microsoft Defender for Endpoint is an enterprise endpoint security platform designed to help enterprise networks prevent, detect, investigate, and respond to advanced threats. Defender for Endpoint customers need to apply for the Microsoft Threat Experts managed threat hunting service to get proactive Targeted Attack Notifications and to collaborate with experts on demand. Experts on Demand is an add-on service. Targeted Attack Notifications are always included after you have been accepted into Microsoft Threat Experts managed threat hunting service.

Company Details

Need Assistance?

We're here to help you with understanding our reports and the data inside to help you make decisions.

Get Assistance

Microsoft Defender for Endpoint Ratings

Real user data aggregated to summarize the product performance and customer experience.
Download the entire Product Scorecard to access more information on Microsoft Defender for Endpoint.

86 Likeliness to Recommend

2
Since last award

96 Plan to Renew

2
Since last award

82 Satisfaction of Cost Relative to Value

3
Since last award

{y}

{name}

Emotional Footprint Overview

+86 Net Emotional Footprint

The emotional sentiment held by end users of the software based on their experience with the vendor. Responses are captured on an eight-point scale.

How much do users love Microsoft Defender for Endpoint?

6% Negative

5% Neutral

89% Positive

Pros

Respectful
Includes Product Enhancements
Reliable
Enables Productivity

Feature Ratings

Average 78

Endpoint Detection and Response

Dynamic Malware Detection

Centralized Management Portal

Application Containment Mechanisms

System Hardening

Port and Device Control

Kernel Monitoring

Cross Platform Integration

Automated Remediation

Host NGFW Functionality

Ransomware Recovery and Removal

Vendor Capability Ratings

Average 80

Quality of Features

Usability and Intuitiveness

Business Value Created

Product Strategy and Rate of Improvement

Ease of Implementation

Availability and Quality of Training

Ease of IT Administration

Ease of Data Integration

Breadth of Features

Vendor Support

Ease of Customization

Also Featured in...

Endpoint Protection - Enterprise

Score 8.5

View Microsoft Defender for Endpoint in this category (opens in a new tab)

Endpoint Detection & Response

Score 8.5

View Microsoft Defender for Endpoint in this category (opens in a new tab)

Microsoft Defender for Endpoint Reviews

Joe L.

Role: Industry Specific Role
Industry: Technology
Involvement: IT Leader or Manager

Validated Review

Verified Reviewer

Submitted Mar 2021

A no brainer if you invest in the Microsoft stack

Likeliness to Recommend

10 /10

What differentiates Microsoft Defender for Endpoint from other similar products?

Ease of integration with other widely used business MS products such as sharepoint, exchange and teams. Licensing bundled into the E5 license along with other business and security essential tools.

What is your favorite aspect of this product?

Device time line feature. Allowing a full time line of an incident across the whole stack. Tracking a click on an email, to accessing of a malicious file to call outs to C2's

What do you dislike most about this product?

GUI layout is less intuitive than other similar tools such as Cisco AMP

What recommendations would you give to someone considering this product?

Absolutely worth it if you already invest in the MS stack due to licensing costs and the fact that ingesting MS based log sources does not count towards the log storage overhead

Pros

Continually Improving Product
Enables Productivity
Trustworthy
Fair

rohini m.

Role: Information Technology
Industry: Technology
Involvement: End User of Application

Validated Review

Verified Reviewer

Submitted Feb 2021

A budget friendly antivirus solution

Likeliness to Recommend

8 /10

What differentiates Microsoft Defender for Endpoint from other similar products?

->First of all, it comes along with the operating system so if you can periodically update the defender then you dont need to go for any other antivirus program ->The installation process is very simple compared to other antivirus available in global market.

What is your favorite aspect of this product?

->Firewall protection is good enough to safeguard the connection ->Automatic scanning and cleaning of viruses is the best and most valuable feature of this tool

What do you dislike most about this product?

-> Parental control, and like the previous one, the parental controls are only limited to the Microsoft Edge browser and does not allow multi platform protection. ->Some times the threat identification process doesn't seem to be standard for instance any executable file(even any legit file) is considered as threat and highlighted

What recommendations would you give to someone considering this product?

->I would really recommend this solution because it is an in-built Microsoft product, and it is at the OS level.If you need a budget friendly protection system go for it

Pros

Saves Time
Continually Improving Product
Reliable
Performance Enhancing

Cons

Inhibits Innovation

Yuvaraja K.

Role: Information Technology
Industry: Technology
Involvement: End User of Application

Validated Review

Verified Reviewer

Submitted Feb 2021

The best free to use antivirus

Likeliness to Recommend

9 /10

What differentiates Microsoft Defender for Endpoint from other similar products?

Windows Defender Antivirus is an unsurpassed service mainly because it offers very accessible prices so that it is easy for any person to acquire it. It is very light and easy to install, it is really very satisfactory to have this software

What is your favorite aspect of this product?

Defender is already installed in windows machines and configured on the computers was a big time saver The defender knows and alerts you when something besides the ordinary is taking place urging you to take an immediate response.

What do you dislike most about this product?

->At many times, it blocks all types of secure application installations and also some of the genuine exe files ->Microsoft doesn't offer much support to windows defender unlike their other products

What recommendations would you give to someone considering this product?

This software is the default malware protector for windows devices which comes off for free. So if you don't want to spend more then you can go for this.

Pros

Over Delivered
Helps Innovate
Continually Improving Product
Trustworthy

Cons

Less Reliable
Commodity Features
Less Inspiring

Microsoft Defender for Endpoint

What is Microsoft Defender for Endpoint?

Company Details

Need Assistance?

Awards & Recognition

Microsoft Defender for Endpoint Ratings

86 Likeliness to Recommend

2 Since last award

96 Plan to Renew

2 Since last award

82 Satisfaction of Cost Relative to Value

3 Since last award

Emotional Footprint Overview

+86 Net Emotional Footprint

How much do users love Microsoft Defender for Endpoint?

Pros

Feature Ratings Average rating of all product features, some of which may not be shown below

Endpoint Detection and Response Active threat detection that remediates against known and unknown malware and malicious activities, leveraging machine learning techniques.

Dynamic Malware Detection Heuristics are applied to files to identify similarities with known malware and block it.

Centralized Management Portal Includes multiple client management, push install capability, comprehensive policies for different groups, and active directory integration and synchronization.

Application Containment Mechanisms Includes cloud based protection, sandboxing, and local containerization.

System Hardening Automated vulnerability patching and vulnerability assessment.

Port and Device Control Includes USB encryption and endpoint data loss prevention.

Kernel Monitoring Monitoring of processes, memory, and system files at the OS level.

Cross Platform Integration Open API and net sec appliance integration with NGFW, SIEM, IPS/IDS, Automated Network Quarantining, DLP, Data Discovery, and Threat Intelligence.

Automated Remediation Automate remediation of alerts due to exceeding defined thresholds e.g. trigger scripts to address low disk space alerts.

Host NGFW Functionality Includes policy-based default-deny/whitelisting and application verification and trust (VPN/virtualization).

Ransomware Recovery and Removal Recover files removed and/or encrypted by ransomware.

Vendor Capability Ratings Average rating of all vendor capabilities, some of which may not be shown below

Quality of Features Feature quality is just as important as quantity. Use this data to determine if this product will do what you're purchasing it to do, easily, intuitively, reliably, and effectively.

Usability and Intuitiveness End user learning curves cost the organization money. Pay attention to your end users' technical ability to determine how important UX is in your purchase.

Business Value Created Software needs to create value for employees, customers, partners, and, ultimately, shareholders. This data expresses user satisfaction - or lack thereof - with the product's business value.

Product Strategy and Rate of Improvement Vendors who don't stay on top of emerging needs and trends won't enable you to meet your business goals. Use this data to separate innovators from imposters.

Ease of Implementation Successfully implementing new software is necessary to realize its full value and promote end user adoption. This data indicates whether or not the product is easy to implement.

Availability and Quality of Training Effective and readily available training enables users to get the most out of the software you've chosen. Use this section to make sure your vendor's training programs and materials measure up.

Ease of IT Administration This data indicates whether IT personnel will be able to resolve issues and perform configurations efficiently and effectively.

Ease of Data Integration Use this data to determine whether the product will cause headaches or make data integration easy.

Breadth of Features Users prefer feature rich software that enables them to perform diverse series of tasks. This data expresses user satisfaction with the product's breadth of features.

Vendor Support The importance of vendor support will vary for each organization depending on internal capabilities, but there will always be issues that only the vendor can resolve.

Ease of Customization Don't get bogged down in a difficult customization; use this data to make sure you can easily achieve the functionality you need for your particular situation.

Also Featured in...

Endpoint Protection - Enterprise

Endpoint Detection & Response

Microsoft Defender for Endpoint Reviews

Joe L.

A no brainer if you invest in the Microsoft stack

Likeliness to Recommend

Pros

rohini m.

A budget friendly antivirus solution

Likeliness to Recommend

Pros

Cons

Yuvaraja K.

The best free to use antivirus

Likeliness to Recommend

Pros

Cons

Most Popular Microsoft Defender for Endpoint Comparisons

ThreatDown

Trellix Endpoint Security

Kaspersky Endpoint Security for Business

Symantec Endpoint Security

Avast Business Security

Sophos Intercept X Endpoint

2
Since last award

2
Since last award

3
Since last award

Feature Ratings

Endpoint Detection and Response

Dynamic Malware Detection

Centralized Management Portal

Application Containment Mechanisms

System Hardening

Port and Device Control

Kernel Monitoring

Cross Platform Integration

Automated Remediation

Host NGFW Functionality

Ransomware Recovery and Removal

Vendor Capability Ratings

Quality of Features

Usability and Intuitiveness

Business Value Created

Product Strategy and Rate of Improvement

Ease of Implementation

Availability and Quality of Training

Ease of IT Administration

Ease of Data Integration

Breadth of Features

Vendor Support

Ease of Customization