TrustRadius: an HG Insights company

Microsoft Defender for Endpoint vs. Microsoft Defender XDR

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    Microsoft Defender for Endpoint

    Score8.8 out of 10
    N/AMicrosoft Defender for Endpoint (formerly Microsoft Defender ATP) is a holistic, cloud delivered endpoint security solution that includes risk-based vulnerability management and assessment, attack surface reduction, behavioral based and cloud-powered next generation protection, endpoint detection and response (EDR), automatic investigation and remediation, managed hunting services, rich APIs, and unified security management.

    $2.50

    per user/per month

    Microsoft Defender XDR

    Score8.9 out of 10
    N/AMicrosoft 365 Defender combines SIEM and XDR capabilities for Microsoft 365 environments, encompassing threat detection, post-breach detection, automated investigation, and response for endpoints. Additionally, it protects cloud apps, emails and documents, and employee identities.N/A
    Pricing
    Microsoft Defender for EndpointMicrosoft Defender XDR
    Editions & Modules
    Academic
    $2.50
    per user/per month
    Standalone
    $5.20
    per user/per month
    No answers on this topic
    Offerings
    Pricing Offerings
    Microsoft Defender for EndpointMicrosoft Defender XDR
    Free Trial
    YesYes
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoNo
    Entry-level Setup FeeNo setup feeNo setup fee
    Additional Details——
    More Pricing Information
    Community Pulse
    Microsoft Defender for EndpointMicrosoft Defender XDR
    Considered Both Products
    Microsoft
    Chose Microsoft Defender for Endpoint
    We use Defender in the cloud. We are currently using Defender in the cloud and also evaluating the XDR solution for programmatic. It's just arguments, the defense in depth. You have Defender Endpoint and then you have what you have in the cloud as well, so it's just augmenting …
    Incentivized
    Chose Microsoft Defender for Endpoint
    At the time, Microsoft Defender for Endpoint was a comparable selection with SentinelOne, but won on one important consideration for Educational Use, cost. Microsoft Defender for Endpoint was including in our Microsoft Enterprise agreement meaning that there was no additional …
    Incentivized
    Microsoft
    No answer on this topic
    Key User Insights
    Would buy again
    98%
    Would buy again
    117 Answers
    99%
    Would buy again
    75 Answers
    Delivers good value for the price
    98%
    Delivers good value for the price
    109 Answers
    97%
    Delivers good value for the price
    70 Answers
    Happy with the feature set
    94%
    Happy with the feature set
    113 Answers
    99%
    Happy with the feature set
    75 Answers
    Lived up to sales and marketing promises
    98%
    Lived up to sales and marketing promises
    96 Answers
    98%
    Lived up to sales and marketing promises
    49 Answers
    Implementation went as expected
    95%
    Implementation went as expected
    103 Answers
    92%
    Implementation went as expected
    59 Answers
    Features
    Microsoft Defender for EndpointMicrosoft Defender XDR
    Endpoint Security
    Comparison of Endpoint Security features of Microsoft Defender for Endpoint and Microsoft Defender XDR
    Feature
    Microsoft Defender for Endpoint
    8.3
    56 Ratings
    3% below category average
    Microsoft Defender XDR
    -
    Ratings
    Anti-Exploit Technology7.653 Ratings00 Ratings
    Endpoint Detection and Response (EDR)9.155 Ratings00 Ratings
    Centralized Management8.955 Ratings00 Ratings
    Hybrid Deployment Support7.110 Ratings00 Ratings
    Infection Remediation9.454 Ratings00 Ratings
    Vulnerability Management7.252 Ratings00 Ratings
    Malware Detection8.955 Ratings00 Ratings
    Best Alternatives
    Microsoft Defender for EndpointMicrosoft Defender XDR
    Small Businesses
    Acronis Cyber Protect Cloud
    Score9.1 out of 10
    Sophos Intercept X for Server
    Score7.3 out of 10
    Medium-sized Companies
    Watchguard Endpoint Security
    Score8.8 out of 10
    InsightIDR
    Score9.5 out of 10
    Enterprises
    ESET PROTECT
    Score9.1 out of 10
    Kaspersky EDR Optimum
    Score9.3 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    Microsoft Defender for EndpointMicrosoft Defender XDR
    Likelihood to Recommend
    8.4
    (99 ratings)
    8.5
    (67 ratings)
    Likelihood to Renew
    8.4
    (8 ratings)
    7.7
    (4 ratings)
    Usability
    -
    (0 ratings)
    9.0
    (2 ratings)
    Support Rating
    9.0
    (5 ratings)
    9.0
    (3 ratings)
    In-Person Training
    -
    (0 ratings)
    9.1
    (1 ratings)
    Online Training
    -
    (0 ratings)
    9.1
    (1 ratings)
    Implementation Rating
    -
    (0 ratings)
    9.0
    (1 ratings)
    User Testimonials
    Microsoft Defender for EndpointMicrosoft Defender XDR
    Likelihood to Recommend
    Microsoft
    Because of its integration with Windows, it is very easy to deploy and manage. Any IT department should be able to leverage the software and interface. The admin portal provides weighted recommendations that comprise the Secure Store, offering admins, security teams, and business owners valuable insights into their security footprint without requiring a strong security background. The software would be ideal for small and mid-sized businesses that cannot dedicate resources to security. Larger enterprises would also benefit, but may require the enhanced license.
    Incentivized
    Read full review
    Microsoft
    Microsoft Defender XDR is well suited for organizations already invested in the Microsoft Ecosystem - including Microsoft 365, Azure Ad and INTune. For example, in scenarios where you need to correlament the fishing attacks with the closing point behavior and identity agreement, Microsoft Defender XDR does a big task of sewing the timeline of a full attack simultaneously and even automatically removing.
    This hybrid function is also ideal for the environment, where safety visibility in distance tools, cloud apps and email is important. Microsoft Defender XDR provides centralized insight and response in all these domains without the requirement of many devices.
    However, it is less suitable in the atmosphere with diverse or non-microsoft infrastructure, such as an organization running a mixture of Linux server, Google work area or third-party EDR tools. Cross-platform support is still developing, and integration of the microsoft ecosystem often requires additional configurations or third-party connectors. For companies of that situation, Microsoft Defender XDR cannot give its full value from the XDR box.
    Incentivized
    Read full review
    Pros
    Microsoft
    • One, it's crazy lightweight, so compared to some of the competitors that we also have used with our security services, it's really lightweight and so I don't have a lot of overhead on the system that it's running on.
    • It does really fantastic PowerShell integration.
    Incentivized
    Read full review
    Microsoft
    • The software uses advanced AI and machine learning algorithms to monitor activities and detect any anomalies immediately, protecting our financial data.
    • Automated responses to known threats reduce the impact of possible incidents and improve our security posture.
    • Microsoft 365 Defender easily combines with other Microsoft 365 services and external security solutions, providing a complete and unified security solution.
    Incentivized
    Read full review
    Cons
    Microsoft
    • So the fact that Defender for Endpoint still works with signatures is actually, I don't know, a little difficult for us because, I mean, since Microsoft trusts those signatures, you can easily inject code. And we've done it many times. To show that you can inject code through vulnerabilities like CV 2013, 99, and 33 but still keep the signature. So because of the trust of those signatures, the malware just kind of slides into the environment without Defender knowing. That's the first part. The second part is that the behavioral analysis is not precisely its Prime. It's not Defender's best capability for endpoints. So, Defender does not identify all behaviors considered by other EDRs in the market.
    Incentivized
    Read full review
    Microsoft
    • Enhanced False Positive Mitigation:
    • Improved algorithms to minimize false positives in threat detection, reducing the impact on security teams and preventing unnecessary investigations into non-threatening incidents.
    • Advanced User-Friendly Interface:
    • Streamlined and intuitive user interface for the centralized dashboard, making it more accessible for security professionals with varying levels of expertise.
    • Greater Third-Party Integration:
    • Increased compatibility and integration capabilities with a broader range of third-party security tools
    Incentivized
    Read full review
    Likelihood to Renew
    Microsoft
    Cost add-ons for Security features is nickel and diming the process to keep pace with cybercrime. Limited Education budgets require us to be more pro-active in finding cost-effective measures to protect our devices, staff and students. Defender is a strong, well-featured product that is pricing itself out of the education market
    Incentivized
    Read full review
    Microsoft
    We are likely to renew our used of Microsoft defender XDR due to its comprehensive security features, integration capabilities, and the proactive approach to threat detection and response it enables. It’s often seen as a valuable asset in maintaining robust cybersecurity defenses. The automated responses aids the IT team in our business to respond to threats as soon as they appear.
    Incentivized
    Read full review
    Usability
    Microsoft
    It offers multiple security features and integrates well with Microsoft ecosystems. A workflow for threat detection, investigation, automated remediation, and a centralized dashboard is an added advantage. This application is mainly designed for experienced users; new users may feel challenged.
    Incentivized
    Read full review
    Microsoft
    The product is easy to deploy and very customisable.
    Available if a simple UI and seamless software implementation process.
    Microsoft Defender XDR integrates well with various security systems.
    Software compatibility and scalability.
    Ability of the software in efficiently analysing and detecting threats in both the system and Website.
    Read full review
    Reliability and Availability
    Microsoft
    Microsoft Defender for Endpoint chugs along just fine no matter what we throw at it and what systems it's running on. It doesn't take up a lot of resources either, so that's welcomed.
    Incentivized
    Read full review
    Microsoft
    No answers on this topic
    Performance
    Microsoft
    Microsoft Defender for Endpoint is easy on memory and resources on clients.
    Incentivized
    Read full review
    Microsoft
    No answers on this topic
    Support Rating
    Microsoft
    The first time I tried to onboard my macOS endpoints to MDE I struggled for quite a bit. I had to reach out to Microsoft's MDE support team. The tech was very helpful in walking me through the steps during a screen share session
    Incentivized
    Read full review
    Microsoft
    Their support throughout our onboarding of the product was fabulous. They not only took the time to carefully explain to teams not as well equipped with the lingo but explained to the tech team how to teach the other teams to be successful. They never once seemed impatient or annoyed with basic questions and didn’t pretend to know something when they needed to research an answer
    Incentivized
    Read full review
    In-Person Training
    Microsoft
    No answers on this topic
    Microsoft
    Good and hard to find someonme who can explain everything for you beside Microsoft they provide you everything you need.
    Incentivized
    Read full review
    Online Training
    Microsoft
    No answers on this topic
    Microsoft
    Microsoft Provides a good training for the Microsoft 365 Defender and has a good learning paths to learn and take the exams and get your Certifications.
    Incentivized
    Read full review
    Implementation Rating
    Microsoft
    Deployment was handled by our team here and everything went pretty smoothly. We did have a few hiccups in our test group, but that only took a bit to get ironed out.
    Incentivized
    Read full review
    Microsoft
    seemless and almost transparent. can be deployed by script if needed so every endpoint on our system get's it. if you have intune it gets dumped on the the endpoint by policy so nothing escapes it
    Incentivized
    Read full review
    Alternatives Considered
    Microsoft
    Cylance's policy is to block everything and requires an active person to monitor and unblock legitimate processes. As updates and software continue to evolve, it is a full-time job to be a Cylance administrator. Microsoft Defender for Endpoint is a set-and-forget solution that catches threats when they occur and leaves you to focus on your work unimpeded.
    Incentivized
    Read full review
    Microsoft
    Our product in that area, for instance as a security platform and for us it is for the moment really bad point. We started to move in that direction that there is that disconnect from the client management. So if there is some action that needs to be executed detected by security team, there is not an easy way to make that available to the team that is responsible for managing the identities as users, as the devices
    Incentivized
    Read full review
    Scalability
    Microsoft
    Microsoft Defender for Endpoint is easily scaled from small orgs to giant enterprises.
    Incentivized
    Read full review
    Microsoft
    No answers on this topic
    Return on Investment
    Microsoft
    • Reduced incidents of security breaches lead to lower remediation costs and avoid potential financial losses and reputational damage.
    • Reduces the need for additional third-party security solutions and training, thereby lowering overall security management costs.
    • Increased efficiency and productivity of IT staff lead to better allocation of resources and cost savings.
    • Reduces the risk of fines and sanctions associated with non-compliance, ensuring business continuity and protecting revenue.
    Incentivized
    Read full review
    Microsoft
    • Security incident cannot be measured, once you down you down, hence the security applications like this is just a must have
    • The subscription model will be cheaper and can be a good point if you want to free resources within the IT Team
    • The SaaS model, if measured correctly can and will reduce long term cost in Infrastructure and Man Power
    Incentivized
    Read full review
    ScreenShots

    Microsoft Defender for Endpoint Screenshots

    Screenshot of blocked activitiesScreenshot of Detects & respondsScreenshot of discovers vulnerabilityScreenshot of Eliminates blind spotsScreenshot of Risk management

    Microsoft Defender XDR Screenshots

    Screenshot of AH Advanced ModeScreenshot of AH Guided modeScreenshot of CD exampleScreenshot of CD Supported actions