TrustRadius: an HG Insights company

Microsoft Defender for Endpoint vs. Symantec Advanced Threat Protection

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    Microsoft Defender for Endpoint

    Score8.8 out of 10
    N/AMicrosoft Defender for Endpoint (formerly Microsoft Defender ATP) is a holistic, cloud delivered endpoint security solution that includes risk-based vulnerability management and assessment, attack surface reduction, behavioral based and cloud-powered next generation protection, endpoint detection and response (EDR), automatic investigation and remediation, managed hunting services, rich APIs, and unified security management.

    $2.50

    per user/per month

    Symantec Advanced Threat Protection

    Score9.3 out of 10
    N/ASymantec Advanced Threat Protection is a single unified solution that uncovers, prioritizes, and remediates advanced attacks. The product fuses intelligence from endpoint, network, and email control points, as well as Symantec’s massive global sensor network, to stop threats that evade individual security products. It leverages existing Symantec Endpoint Protection and Symantec Email Security.cloud investments, so it does not require the deployment of any new agents. It includes functionality…N/A
    Pricing
    Microsoft Defender for EndpointSymantec Advanced Threat Protection
    Editions & Modules
    Academic
    $2.50
    per user/per month
    Standalone
    $5.20
    per user/per month
    No answers on this topic
    Offerings
    Pricing Offerings
    Microsoft Defender for EndpointSymantec Advanced Threat Protection
    Free Trial
    YesNo
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    NoNo
    Entry-level Setup FeeNo setup feeNo setup fee
    Additional Details——
    More Pricing Information
    Community Pulse
    Microsoft Defender for EndpointSymantec Advanced Threat Protection
    Considered Both Products
    Microsoft
    Chose Microsoft Defender for Endpoint
    Defender works better for my org. This may depend on your ecosystem, however for me, Defender is a clear winner. I like Defender's ability to utilize multiple sensors and data points to detect possible breaches. I like the built-in EDR functionality. I do not need to purchase a …
    Incentivized
    Chose Microsoft Defender for Endpoint
    MS ATP is lower on system resources and enables us to stretch out our endpoint hardware for an additional year. Also, MS ATP being an MS product fits in very nicely into MS remote management software and MS operating system. We have had little to no issues when hotfixes and …
    Incentivized
    Broadcom
    Chose Symantec Advanced Threat Protection
    The Microsoft product is much better for smaller companies as the setup and maintenance are very much in line with the MS 365 eco-system. With that said the Symantec product is much more mature and with the ability to have local pieces to the infrastructure, you are not …
    Incentivized
    Chose Symantec Advanced Threat Protection
    The software is much better than the Windows Defender Advanced Threat Protection and the others in the market because it is faster, more efficient, and does not affect the final user. This program executes in the background when we are using other software and programs (at the …
    Incentivized
    Key User Insights
    Would buy again
    98%
    Would buy again
    117 Answers
    100%
    Would buy again
    8 Answers
    Delivers good value for the price
    98%
    Delivers good value for the price
    109 Answers
    100%
    Delivers good value for the price
    8 Answers
    Happy with the feature set
    94%
    Happy with the feature set
    113 Answers
    100%
    Happy with the feature set
    8 Answers
    Lived up to sales and marketing promises
    98%
    Lived up to sales and marketing promises
    96 Answers
    100%
    Lived up to sales and marketing promises
    7 Answers
    Implementation went as expected
    95%
    Implementation went as expected
    103 Answers
    100%
    Implementation went as expected
    8 Answers
    Features
    Microsoft Defender for EndpointSymantec Advanced Threat Protection
    Endpoint Security
    Comparison of Endpoint Security features of Microsoft Defender for Endpoint and Symantec Advanced Threat Protection
    Feature
    Microsoft Defender for Endpoint
    8.3
    56 Ratings
    3% below category average
    Symantec Advanced Threat Protection
    -
    Ratings
    Anti-Exploit Technology7.653 Ratings00 Ratings
    Endpoint Detection and Response (EDR)9.155 Ratings00 Ratings
    Centralized Management8.955 Ratings00 Ratings
    Hybrid Deployment Support7.110 Ratings00 Ratings
    Infection Remediation9.454 Ratings00 Ratings
    Vulnerability Management7.252 Ratings00 Ratings
    Malware Detection8.955 Ratings00 Ratings
    Best Alternatives
    Microsoft Defender for EndpointSymantec Advanced Threat Protection
    Small Businesses
    Acronis Cyber Protect Cloud
    Score9.1 out of 10
    No answers on this topic
    Medium-sized Companies
    Watchguard Endpoint Security
    Score8.8 out of 10
    Cisco Identity Services Engine (ISE)
    Score8.7 out of 10
    Enterprises
    ESET PROTECT
    Score9.1 out of 10
    Cisco Identity Services Engine (ISE)
    Score8.7 out of 10
    All AlternativesView all alternativesView all alternatives
    User Ratings
    Microsoft Defender for EndpointSymantec Advanced Threat Protection
    Likelihood to Recommend
    8.4
    (99 ratings)
    6.7
    (14 ratings)
    Likelihood to Renew
    8.4
    (8 ratings)
    7.0
    (2 ratings)
    Usability
    -
    (0 ratings)
    7.0
    (2 ratings)
    Support Rating
    9.0
    (5 ratings)
    8.0
    (2 ratings)
    Implementation Rating
    -
    (0 ratings)
    8.0
    (1 ratings)
    User Testimonials
    Microsoft Defender for EndpointSymantec Advanced Threat Protection
    Likelihood to Recommend
    Microsoft
    Because of its integration with Windows, it is very easy to deploy and manage. Any IT department should be able to leverage the software and interface. The admin portal provides weighted recommendations that comprise the Secure Store, offering admins, security teams, and business owners valuable insights into their security footprint without requiring a strong security background. The software would be ideal for small and mid-sized businesses that cannot dedicate resources to security. Larger enterprises would also benefit, but may require the enhanced license.
    Incentivized
    Read full review
    Broadcom
    It is valuable software for when it comes to a large or medium organization, since it helps to protect the endpoints, but as the number of servers increases its value increases. However, it is important to keep in mind that when it comes to low end devices, its protection can affect their performance. This is because it is not a software with a very light agent.
    Incentivized
    Read full review
    Pros
    Microsoft
    • One, it's crazy lightweight, so compared to some of the competitors that we also have used with our security services, it's really lightweight and so I don't have a lot of overhead on the system that it's running on.
    • It does really fantastic PowerShell integration.
    Incentivized
    Read full review
    Broadcom
    • The incident management piece is the heart and soul of the product. A single area where all data in relation to network and email protection is available.
    • Works well in conjunction with the standard Symantec Endpoint product.
    • URL Protection is advanced and very helpful
    • Technical support is great and definitely the best I have ever seen for a "anti-virus" type product.
    Incentivized
    Read full review
    Cons
    Microsoft
    • So the fact that Defender for Endpoint still works with signatures is actually, I don't know, a little difficult for us because, I mean, since Microsoft trusts those signatures, you can easily inject code. And we've done it many times. To show that you can inject code through vulnerabilities like CV 2013, 99, and 33 but still keep the signature. So because of the trust of those signatures, the malware just kind of slides into the environment without Defender knowing. That's the first part. The second part is that the behavioral analysis is not precisely its Prime. It's not Defender's best capability for endpoints. So, Defender does not identify all behaviors considered by other EDRs in the market.
    Incentivized
    Read full review
    Broadcom
    • I don't like that I have to maintain the client and keep it up to date. Updating the client is not a very easy process.
    • Deploying the client could be easier. They have a deployment tool, but it doesn't really get to all PCs, which means I still have to manually deploy it.
    • Because the product has so much customization, it can also be very difficult to set up and understand.
    Incentivized
    Read full review
    Likelihood to Renew
    Microsoft
    Cost add-ons for Security features is nickel and diming the process to keep pace with cybercrime. Limited Education budgets require us to be more pro-active in finding cost-effective measures to protect our devices, staff and students. Defender is a strong, well-featured product that is pricing itself out of the education market
    Incentivized
    Read full review
    Broadcom
    Symantec Advanced Threat Protection has done a sufficient job at identifying true positives. However, the UI could be improved and the amount of false positives is a little too frequent for my liking
    Incentivized
    Read full review
    Usability
    Microsoft
    It offers multiple security features and integrates well with Microsoft ecosystems. A workflow for threat detection, investigation, automated remediation, and a centralized dashboard is an added advantage. This application is mainly designed for experienced users; new users may feel challenged.
    Incentivized
    Read full review
    Broadcom
    There is a small learning curve, but compared to other AV products it is fairly simple and easy to catch onto
    Incentivized
    Read full review
    Reliability and Availability
    Microsoft
    Microsoft Defender for Endpoint chugs along just fine no matter what we throw at it and what systems it's running on. It doesn't take up a lot of resources either, so that's welcomed.
    Incentivized
    Read full review
    Broadcom
    No answers on this topic
    Performance
    Microsoft
    Microsoft Defender for Endpoint is easy on memory and resources on clients.
    Incentivized
    Read full review
    Broadcom
    No answers on this topic
    Support Rating
    Microsoft
    The first time I tried to onboard my macOS endpoints to MDE I struggled for quite a bit. I had to reach out to Microsoft's MDE support team. The tech was very helpful in walking me through the steps during a screen share session
    Incentivized
    Read full review
    Broadcom
    Support responds fast for higher priority issues, they have always been good at solving the problems we encounter.
    Incentivized
    Read full review
    Implementation Rating
    Microsoft
    Deployment was handled by our team here and everything went pretty smoothly. We did have a few hiccups in our test group, but that only took a bit to get ironed out.
    Incentivized
    Read full review
    Broadcom
    No, besides to review documentation prior to beginning. That is what helped lead to a smooth implementation
    Incentivized
    Read full review
    Alternatives Considered
    Microsoft
    Cylance's policy is to block everything and requires an active person to monitor and unblock legitimate processes. As updates and software continue to evolve, it is a full-time job to be a Cylance administrator. Microsoft Defender for Endpoint is a set-and-forget solution that catches threats when they occur and leaves you to focus on your work unimpeded.
    Incentivized
    Read full review
    Broadcom
    Frankly, the other products were too expensive to make the change from Symantec so we continued with the tried and true protection. We don't have the funding to move to a more expensive product and the manpower that it would take to implement a new solution.
    Incentivized
    Read full review
    Scalability
    Microsoft
    Microsoft Defender for Endpoint is easily scaled from small orgs to giant enterprises.
    Incentivized
    Read full review
    Broadcom
    No answers on this topic
    Return on Investment
    Microsoft
    • Reduced incidents of security breaches lead to lower remediation costs and avoid potential financial losses and reputational damage.
    • Reduces the need for additional third-party security solutions and training, thereby lowering overall security management costs.
    • Increased efficiency and productivity of IT staff lead to better allocation of resources and cost savings.
    • Reduces the risk of fines and sanctions associated with non-compliance, ensuring business continuity and protecting revenue.
    Incentivized
    Read full review
    Broadcom
    • Some digital assets were lost due to failures to detect various threats.
    • We had to use other products in combination in order to trust that all threats were actually detected, taking extra time. We couldn't use just SATP.
    • Ability to quickly manage/deploy via AD made maintenance of the application itself quick and easy.
    Incentivized
    Read full review
    ScreenShots

    Microsoft Defender for Endpoint Screenshots

    Screenshot of blocked activitiesScreenshot of Detects & respondsScreenshot of discovers vulnerabilityScreenshot of Eliminates blind spotsScreenshot of Risk management