Try our new research platform with insights from 80,000+ expert users

Cybersixgill vs Microsoft Defender Threat Intelligence comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Aug 11, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cybersixgill
Ranking in Threat Intelligence Platforms
21st
Average Rating
8.8
Reviews Sentiment
7.6
Number of Reviews
4
Ranking in other categories
Vulnerability Management (66th), Digital Risk Protection (6th), Attack Surface Management (ASM) (29th)
Microsoft Defender Threat I...
Ranking in Threat Intelligence Platforms
4th
Average Rating
8.4
Reviews Sentiment
7.4
Number of Reviews
32
Ranking in other categories
Advanced Threat Protection (ATP) (10th), Microsoft Security Suite (15th)
 

Mindshare comparison

As of June 2025, in the Threat Intelligence Platforms category, the mindshare of Cybersixgill is 2.2%, down from 2.6% compared to the previous year. The mindshare of Microsoft Defender Threat Intelligence is 2.7%, up from 2.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Threat Intelligence Platforms
 

Featured Reviews

reviewer1528356 - PeerSpot reviewer
Provides early detection of imminent attacks, and speeds up addressing of vulnerabilities internally because it makes them real
They're a newer company, so they're working on their UI a lot. Sometimes the UI is a little glitchy. They're working on different things and making efforts, so that's totally forgivable. But regarding their scraping abilities, things could be solidified. There are definitely improvements that could be made on the specificity for setting certain queries. Step-by-step videos would be useful, instead of a book of instructions, because they're a new tool. They're now getting to the point where video training would be useful, or even live training. More digestible video instructions or opportunities for training, so that you actually learn hands-on, would help.
TapabrataSamanta - PeerSpot reviewer
A cost-effective solution for monitoring and security but lacks supports for non-Microsoft products
There are weaknesses, and Microsoft is working on addressing them. Over the past three to four years, the ATP and other components have improved significantly, and the integration has also advanced. We are using third-party services. While we have Microsoft Threat Intelligence, which leverages Microsoft's facilities, we also utilize additional third-party threat intelligence. As of today, we don't completely rely on Microsoft for certain regions. This is an area where Microsoft needs to improve. Consequently, we use Anomali, a third-party threat intelligence provider. We integrate our product's intelligence with Anomali, from which we obtain threat insights. Microsoft products offer significant advantages, especially in the realm of threat intelligence. It works very well with Microsoft products. However, you might need additional services if you have non-Microsoft products in your environment. For instance, if you use Apple or Linux, Microsoft's solutions alone might not be sufficient. If they can work more effectively, especially with zero-day attack speed and other sophisticated threats, it will help us provide our customers with timely newsletters about new attacks.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The solution’s approach of using limited open source intelligence and focusing, instead, on the Deep Web and Dark Web is what seals the deal. That is why I like them. I have other tools that I can aggregate all the open source intelligence from. I value Cybersixgill because it provides access to things that no one else does."
"The advanced analysis has made our security operations more efficient. It has also potentially given us quicker access to data that we might not have otherwise located."
"To be diligent for the customer, we usually go into Cybersixgill Investigative Portal to analyze and search things. The solution tells us the reputation of cyber threat actors. So, if someone has a reputation of one, it is a really bad idea to care about what that person is saying. However, if you find someone with a reputation of nine, then there is a high probability that we need to address the problem. You can get information about these type of actors in Cybersixgill Investigative Portal. They have a huge collection, which is like having the rules/goals of the dark web and deep web without having to go there. Our analysts avoid going dark web because they have Cybersixgill Investigative Portal and can get the news from their browser, searching wherever they want."
"They also provide some of the greatest notification capabilities. I put in a customer's company name and domain names, or sometimes I put in their IP addresses as a keyword. Once Sixgill collects information that includes those keywords, they then provide us email notifications. That means we can catch information related to our customers as soon as possible."
"I would rate Microsoft Defender ATP as nine out of ten."
"The product is useful when the end user downloads malware files."
"Microsoft Defender Threat Intelligence helps to make sure that our systems are intact and not vulnerable."
"The tool is managed from the cloud, because of which the maintenance is very low."
"The solution blocks incoming threats on the local PC or any cloud-based threats."
"One of the best features is that it provides a certain level of customization, allowing us to set our spam confidence levels."
"Microsoft's integration into the security stack works quite well."
"You can use it to monitor third parties and ensure they are not under threat attacks. It is beneficial in the GRC model."
 

Cons

"Regarding their scraping abilities, things could be solidified. There are definitely improvements that could be made on the specificity for setting certain queries."
"Sixgill has strong capabilities based on search queries, but there is some difficulty in using Sixgill. Their querying is very powerful but it can be difficult. It's not hugely complex but you need some skill to use Sixgill querying."
"We need real-time updated information. If we could have this, it would be amazing. For example, if someone was posting something, then ten second later, it was on the platform. Sometimes, it takes a minute or hours right now, depending on the forum."
"The breadth of access to data is good, but there are gaps. More data would be my suggestion because the platform is good and I have no complaints about the system. I think it is just a case of always trying to get more data sources."
"From the telemetry data standpoint, I would prefer Defender data to be more open in future updates."
"Having up-to-date documentation and real-time reflections in all portals would be beneficial to keep users informed about any changes. Additionally, the frequent changes in Microsoft's UI and the movement of features between different products in the set pose difficulties."
"The solution could be more stable and precise because, at times, the threats detected are not legitimate."
"The stability of the product is an area of concern where improvements are required."
"The price could be improved."
"I would like to see more integration with other solutions. For example, integration well with Microsoft but not with other solutions."
"Technical support could be a bit better."
"Microsoft itself is a major target for attacks and threats due to its size and popularity. That could be considered Microsoft's Achilles heel."
 

Pricing and Cost Advice

"The pricing is cheap compared with Recorded Future. Sixgill's cost-effectiveness is very good."
"The pricing and licensing are good. It is expensive for us because the US dollar is quite strong compared to our dollar. Otherwise, it is quite reasonable for what it is. All the tools in the market are around the same price from my experience."
"Sometimes, Cybersixgill Investigative Portal is cheaper than its competitors."
"The tool is expensive as a stand-alone solution. However, it is not cheap when you purchase it as a bundle."
"I rate the product's price a six or seven on a scale of one to ten, where one is expensive, and ten is cheap."
"The solution is relatively expensive; however, our status as a gold partner provides us with several complimentary licenses, which offsets the cost."
"The product’s pricing is worth it."
"The solution's pricing is reasonable and not very expensive."
"I use the product's default version, which is a free one and not the licensed version."
"On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing a six or seven out of ten."
"Considering Microsoft is constantly changing licensing, I would give it a seven out of ten. It can be difficult to get your head around it, especially for small to medium-sized enterprises (SMEs)."
report
Use our free recommendation engine to learn which Threat Intelligence Platforms solutions are best for your needs.
857,028 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Manufacturing Company
14%
Financial Services Firm
11%
Educational Organization
7%
Computer Software Company
16%
Financial Services Firm
14%
Educational Organization
11%
Government
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

Ask a question
Earn 20 points
What do you like most about Microsoft Defender Threat Intelligence?
It just runs in the background. I don't have to worry about, making sure it's Intelligence. So, you know, this kind of makes it very easy, have to worry about installing. It is easy to use.
What needs improvement with Microsoft Defender Threat Intelligence?
From the telemetry data standpoint, I would prefer Defender data to be more open in future updates.
What is your primary use case for Microsoft Defender Threat Intelligence?
We have tried Microsoft Defender Threat Intelligence. I have expertise with Microsoft Defender products. I am not familiar with Microsoft Defender for IoT because we did not use that in our environ...
 

Overview

 

Sample Customers

Current customers include large enterprises, financial services, manufacturing, GSIs, MSSPs, government and law enforcement entities.
Information Not Available
Find out what your peers are saying about Cybersixgill vs. Microsoft Defender Threat Intelligence and other solutions. Updated: June 2025.
857,028 professionals have used our research since 2012.