No more typing reviews! Try our Samantha, our new voice AI agent.

Microsoft Defender External Attack Surface Management vs Microsoft Defender for Identity comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Microsoft Defender External...
Ranking in Microsoft Security Suite
33rd
Average Rating
7.6
Reviews Sentiment
6.0
Number of Reviews
2
Ranking in other categories
Attack Surface Management (ASM) (15th)
Microsoft Defender for Iden...
Ranking in Microsoft Security Suite
5th
Average Rating
8.8
Reviews Sentiment
6.8
Number of Reviews
28
Ranking in other categories
Advanced Threat Protection (ATP) (8th), Identity Threat Detection and Response (ITDR) (2nd)
 

Mindshare comparison

As of August 2026, in the Microsoft Security Suite category, the mindshare of Microsoft Defender External Attack Surface Management is 1.3%, up from 0.3% compared to the previous year. The mindshare of Microsoft Defender for Identity is 3.5%, down from 6.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Microsoft Security Suite Mindshare Distribution
ProductMindshare (%)
Microsoft Defender for Identity3.5%
Microsoft Defender External Attack Surface Management1.3%
Other95.2%
Microsoft Security Suite
 

Featured Reviews

AndyChan3 - PeerSpot reviewer
General manager at a tech services company with 201-500 employees
Enhanced visibility and exposes vulnerabilities but needs more integration
I am currently in the pilot stage of implementing Microsoft External Attack Surface Management (EASM). My organization is transitioning to a comprehensive track of Microsoft solutions, and we will move to full-scale production in another year, maybe Microsoft External Attack Surface Management…
Peter Arabomen - PeerSpot reviewer
Security Engineer at Fidelity Bank Plc
Has supported hybrid identity management while integrating well with cloud directory services
The only challenge I have with Microsoft Defender for Identity is the latency. I may not put that entirely on Microsoft, because latency could be network related. At times when trying to authenticate, the prompt is delayed. We tried implementing passwordless authentication, especially for on-premises workloads, but we haven't been able to achieve that. Passwordless authentication is part of the identity functionalities, particularly when it comes to enforcing passwordless for on-premises workloads. In terms of improvements, you can't create OUs on Azure AD. Regarding giving users privileges on what they can do across different OUs, I haven't seen that feature on Microsoft Defender for Identity. Microsoft Defender for Identity needs to be able to plug into third-party applications that are not Microsoft. For instance, with a human resource application used to manage users and leave requests, when staff leaves the organization, they are first exited from that application before AD. Integration between Azure AD and third-party applications would allow automatic syncing when removing staff. The initial setup of Microsoft Defender for Identity is not hard. However, setup is one thing, and getting value from the application end-to-end is another. It can be set up and running from the first day but not functioning optimally. Initially, when we did the setup, it wasn't optimal. Over time, with continuous improvement, which we're still doing, we've gotten to a comfortable level, but there's still room for improvement.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It seems to be better at protecting from cyberattacks."
"Microsoft External Attack Surface Management helps improve the visibility of my exposed vulnerabilities and provides an overview of my security posture across the globe."
"We use AD Connect to sync on-premises AD to Azure AD, and so far, it has been effective."
"I would rate Microsoft Defender for Identity at nine out of ten."
"This solution has advanced a lot over the last few years."
"It gives you a holistic view of everything happening in your organization, and you can use it to do a lot of monitoring."
"The solution’s alerting is fairly efficient."
"I recommend Microsoft Defender for Identity because it is easy to implement."
"Defender for Identity has not affected the end-user experience."
"The most valuable features of Microsoft Defender for Identity include real-time information for threat detection, its inclusion of behavioral analytics, and vulnerability management."
 

Cons

"The integration is not as seamless compared to competitors like Palo Alto."
"With Microsoft, support is always crazy, it's not easy to get support."
"Further integration across different Microsoft products would be an improvement."
"For users operating in mixed environments, while Defender for Identity offers robust protection for on-premises AD, additional solutions or configurations might be necessary to ensure seamless security management across Azure and on-premises AD systems."
"I would like to be able to do remediation from the platform because it is just a scanner right now. If you onboard a device, it shows you what is happening, but you can't use it to fix things. You need to go into the system to fix it instead."
"One improvement I would recommend is the integration of an admin application within Teams, allowing easy access to attack information on a mobile platform to promptly alert affected users and their friends."
"We observe a lot of false positives. Sometimes, when we go for a coffee break, we lock our screens. Locking the screen has a separate Windows event ID and sometimes I see it is detected as a failed login."
"The areas of Microsoft Defender for Identity that can be improved include its cost, which is quite expensive when integrated into Sentinel. Additionally, there is room for improvement in its integration with non-Microsoft applications and systems."
"Microsoft Defender for Identity does not save me time, but I think it is the way that I secure the data."
"And when you are working in a priority IP address, Identity is not able to know that those IPs are from the company. It sees that the IPs are from Taiwan or from Hong Kong or from India, even though they are internal IPs, resulting in a lot of false positives."
"One potential area for improvement could be exploring flexibility in the installation of Microsoft Defender for Identity agents."
 

Pricing and Cost Advice

Information not available
"You won't be able to change your tenants from where you deploy them. For example, if you select Canada, they will charge you based on Canadian pricing. If you are also in London, when you deploy in Canada, the pound is higher than Canadian dollars, but your platform resources are billable in Canadian dollars. Using your pounds to pay for any of these things will be cheaper. Or, if you deploy in London, they will charge you based on your local currency."
"Microsoft Defender for Identity comes as part of the Microsoft E5 licensing stack."
"The product is costly, and we had multiple discussions with accounting to receive a discounted rate. However, on the open market, the tool is expensive."
"Defender for Identity is a little more expensive than other Microsoft products. Identity and Microsoft Defender for Cloud are both a bit costly."
"It is very affordable considering that other SIEM solutions are much more expensive and have many more licensing restrictions and fees."
report
Use our free recommendation engine to learn which Microsoft Security Suite solutions are best for your needs.
909,725 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Outsourcing Company
12%
Computer Software Company
11%
Financial Services Firm
9%
Comms Service Provider
6%
Financial Services Firm
12%
Manufacturing Company
10%
Computer Software Company
10%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise5
Large Enterprise15
 

Questions from the Community

What needs improvement with Microsoft Defender External Attack Surface Management?
Further integration across different Microsoft products would be an improvement. Introduction of more AI automation into the products would also be beneficial. The integration is not as seamless co...
What is your primary use case for Microsoft Defender External Attack Surface Management?
I am currently in the pilot stage of implementing Microsoft External Attack Surface Management (EASM). My organization is transitioning to a comprehensive track of Microsoft solutions, and we will ...
What needs improvement with Microsoft Defender for Identity?
I really would have to sit down to think about how Microsoft Defender for Identity can be improved. I didn't take stock in what needs to be improved because I appreciated having the tools right the...
What is your primary use case for Microsoft Defender for Identity?
My main use cases for Microsoft Defender for Identity include Conditional Access, checking risky users, remediating risky users, and user sign-ins. I can easily remediate or determine what the user...
What advice do you have for others considering Microsoft Defender for Identity?
I don't really use Microsoft Defender for Identity a lot because my new role doesn't allow me to take time to do so. I don't really use the threat intelligence feature of Microsoft Defender for Ide...
 

Also Known As

No data available
Azure Advanced Threat Protection, Azure ATP, MS Defender for Identity
 

Overview

 

Sample Customers

Information Not Available
Microsoft Defender for Identity is trusted by companies such as St. Luke’s University Health Network, Ansell, and more.
Find out what your peers are saying about Microsoft Defender External Attack Surface Management vs. Microsoft Defender for Identity and other solutions. Updated: June 2026.
909,725 professionals have used our research since 2012.