Try our new research platform with insights from 80,000+ expert users

Azure DDoS Protection vs Microsoft Defender for Identity comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.2
Azure DDoS Protection offers cost-effective security for public IPs, benefiting users with ROI despite varying enterprise costs.
Sentiment score
4.4
Microsoft Defender for Identity is cost-effective and efficient, offering incident prevention and resolution without complex hardware setups.
 

Customer Service

Sentiment score
6.3
Educational institutions commend Azure DDoS Protection's swift support, while others experience slower response times affecting satisfaction.
Sentiment score
6.9
Opinions on Microsoft Defender for Identity support vary, highlighting responsiveness, but issues include delays, contact challenges, and false positives.
The response time is very slow, especially when multiple teams are required to collaborate on a case.
Cloud Architect at Vision Bank
Generally, the support is more effective than other providers like Oracle.
Owner at Alopex ONE UG
The quality of support is very good, but troubleshooting can take time due to complex setups and the need to provide many logs.
Cloud Security & Governance at a financial services firm with 10,001+ employees
The people I normally use for support are very knowledgeable, especially when they help remote in and get to where I need to go and show me much faster and help me understand what I should be doing.
Technology Coordinator at a educational organization with 501-1,000 employees
 

Scalability Issues

Sentiment score
6.9
Azure DDoS Protection excels in scalability and reliability, ideal for large enterprises, enhancing security in extensive environments.
Sentiment score
7.2
Microsoft Defender for Identity efficiently integrates and scales globally, supporting diverse organizational needs within Microsoft’s ecosystem effectively.
In a Microsoft-centric organization, especially with Azure infrastructure and Office 365, Microsoft Defender for Identity is scalable.
Cloud Security & Governance at a financial services firm with 10,001+ employees
 

Stability Issues

Sentiment score
7.6
Azure DDoS Protection is highly stable, rated 8/10, with minimal configuration issues and no downtime or false positives reported.
Sentiment score
7.0
Microsoft Defender for Identity is highly reliable, with minimal incidents, seamless operation, and consistent ratings between seven and nine.
Microsoft Defender for Identity is quite robust and built on Azure hyperscale infrastructure, with a 99% availability.
Cloud Security & Governance at a financial services firm with 10,001+ employees
We do not see any issues with the stability of Microsoft Defender for Identity.
Deputy Manager at Servion Global Solutions
Having recently started using it, reliability is affirmed, but manual investigation is often performed to verify if alerts identified by auto-remediation are accurate.
Instrumentation Engineer at Toyo Engineering Corp
 

Room For Improvement

Azure DDoS Protection requires improved interface consistency, reporting, configuration simplicity, bandwidth optimization, enhanced services, and AI-driven auto-remediation.
Microsoft Defender for Identity users seek improved cloud integration, user-friendly features, better support, and streamlined processes for enhanced threat management.
It would be beneficial to have more detailed insights available directly on the dashboard.
Cloud Architect at Vision Bank
I have noticed some false positives with the Web Application Firewall yet not with DDoS Protection.
Azure Consultant at cloudshift
I suggest adding more services and additional services, which would be beneficial.
Senior Manager at Ernst & Young
If Microsoft could develop a feature that indicates when impossible travel is caused by VPN connections, it would prevent unnecessary password resets and session disruptions, especially for VIP users in organizations.
CyberSecurity Engineer | Information Security Management at Self Employed
One improvement I would recommend is the integration of an admin application within Teams, allowing easy access to attack information on a mobile platform.
Owner at Alopex ONE UG
Reducing false positives is something we've been working on with Microsoft.
Cloud Security & Governance at a financial services firm with 10,001+ employees
 

Setup Cost

Azure DDoS Protection offers expensive but comprehensive protection with trial, special pricing for education, and no extra fees for some uses.
Microsoft Defender for Identity is cost-effective with E5 licenses despite complex pricing and competitive against other security solutions.
If used with Front Door or Web Application Firewall, DDoS Protection is included without additional cost.
Azure Consultant at cloudshift
The pricing is somewhat costly, usually around $3,000 to $4,000 per month.
Cloud Architect at Vision Bank
Compared to competitors, it is good.
Senior Manager at Ernst & Young
If they can reduce the costs, organizations will be happy, and it will compensate for using the Azure environment, which is more expensive on the infrastructure as a service side.
CyberSecurity Engineer | Information Security Management at Self Employed
Ensuring a fair price according to market standards.
Owner at Alopex ONE UG
From an organization perspective, using E5 licenses is value for money, especially if Azure and Office 365 are already in use.
Cloud Security & Governance at a financial services firm with 10,001+ employees
 

Valuable Features

Azure DDoS Protection offers seamless integration, robust security, and scalability, despite higher costs, providing significant ROI for vulnerable environments.
Microsoft Defender for Identity integrates with Azure to offer comprehensive threat detection, identity protection, and advanced real-time security insights.
The security architecture with Azure DDoS Protection is critical for safeguarding our financial organization's infrastructure.
Cloud Architect at Vision Bank
The ability to do research and development quickly without waiting for infrastructure is a plus.
Senior Manager at Ernst & Young
The integration of various tools with Azure Firewall, like DDoS Protection, Web Application Firewall, and Azure Front Door, is quite effective.
Azure Consultant at cloudshift
We receive an advance report of risky users, allowing us to take preemptive action before an attack causes damage to organization details.
Instrumentation Engineer at Toyo Engineering Corp
The most valuable feature is its hybrid artificial intelligence, which gathers forensic data to track and counteract security threats, much like the CSI series in effect.
Owner at Alopex ONE UG
The advanced threat protection is one of the strengths of Microsoft Defender for Identity, as it utilizes user and entity analytics and can detect indicative attacks.
Cloud Security & Governance at a financial services firm with 10,001+ employees
 

Categories and Ranking

Azure DDoS Protection
Ranking in Microsoft Security Suite
27th
Average Rating
8.2
Reviews Sentiment
7.0
Number of Reviews
8
Ranking in other categories
Distributed Denial-of-Service (DDoS) Protection (9th)
Microsoft Defender for Iden...
Ranking in Microsoft Security Suite
4th
Average Rating
8.8
Reviews Sentiment
6.8
Number of Reviews
28
Ranking in other categories
Advanced Threat Protection (ATP) (8th), Identity Threat Detection and Response (ITDR) (3rd)
 

Mindshare comparison

As of January 2026, in the Microsoft Security Suite category, the mindshare of Azure DDoS Protection is 2.1%, down from 2.2% compared to the previous year. The mindshare of Microsoft Defender for Identity is 6.0%, down from 7.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Microsoft Security Suite Market Share Distribution
ProductMarket Share (%)
Microsoft Defender for Identity6.0%
Azure DDoS Protection2.1%
Other91.9%
Microsoft Security Suite
 

Featured Reviews

Dinesh Jaisankar - PeerSpot reviewer
Cloud Architect at Vision Bank
Security architecture shields infrastructure but dashboard needs enhancement
The Azure DDoS Protection plan is essential for environments like ours that are highly exposed to potential attacks, especially since DDoS attacks have become common. The security architecture with Azure DDoS Protection is critical for safeguarding our financial organization's infrastructure. Although implementing it is pricier, it is worth using since our applications are entirely in Azure.
RK
Cloud Security & Governance at a financial services firm with 10,001+ employees
Protect on-premises and hybrid environments with advanced threat detection and seamless integration
Our Active Directory implementation is a hybrid one. The advanced threat protection is one of the strengths of Microsoft Defender for Identity, as it utilizes user and entity analytics and can detect indicative attacks. It identifies lateral movements, privilege escalations, and alerts on potential attacks. The tool is also used for security posture assessment. The seamless integration with other Microsoft solutions within our Microsoft-centric environment is also a major advantage.
report
Use our free recommendation engine to learn which Microsoft Security Suite solutions are best for your needs.
881,082 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
13%
Financial Services Firm
10%
Comms Service Provider
10%
Government
7%
Financial Services Firm
13%
Computer Software Company
12%
Manufacturing Company
8%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business2
Midsize Enterprise3
Large Enterprise3
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise4
Large Enterprise14
 

Questions from the Community

What is your experience regarding pricing and costs for Azure DDoS Protection?
The pricing is somewhat costly, usually around $3,000 to $4,000 per month. Managing this expense is tough, especially since we haven't received everything we need for our capital expenditure manage...
What needs improvement with Azure DDoS Protection?
The dashboard lacks insights and user-friendliness, as most data is logged into metrics like Log Analytics workspaces. It would be beneficial to have more detailed insights available directly on th...
What is your primary use case for Azure DDoS Protection?
We are a bank with Internet banking and corporate banking portals, which exposes multiple applications externally. These exposed applications come under the Azure DDoS Protection plan, integrated w...
What needs improvement with Microsoft Defender for Identity?
I really would have to sit down to think about how Microsoft Defender for Identity can be improved. I didn't take stock in what needs to be improved because I appreciated having the tools right the...
What is your primary use case for Microsoft Defender for Identity?
My main use cases for Microsoft Defender for Identity include Conditional Access, checking risky users, remediating risky users, and user sign-ins. I can easily remediate or determine what the user...
What advice do you have for others considering Microsoft Defender for Identity?
I don't really use Microsoft Defender for Identity a lot because my new role doesn't allow me to take time to do so. I don't really use the threat intelligence feature of Microsoft Defender for Ide...
 

Also Known As

No data available
Azure Advanced Threat Protection, Azure ATP, MS Defender for Identity
 

Overview

 

Sample Customers

Information Not Available
Microsoft Defender for Identity is trusted by companies such as St. Luke’s University Health Network, Ansell, and more.
Find out what your peers are saying about Azure DDoS Protection vs. Microsoft Defender for Identity and other solutions. Updated: December 2025.
881,082 professionals have used our research since 2012.