Try our new research platform with insights from 80,000+ expert users

Microsoft Defender for Business vs Microsoft Defender for Identity comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
8.2
Microsoft Defender for Business boosts ROI with increased productivity, cost savings, improved security, and enhanced business opportunities.
Sentiment score
6.7
Microsoft Defender for Identity effectively prevents incidents, reduces administration time, is cost-effective, and helps satisfy client needs, despite mixed returns.
Using Microsoft Defender for Business results in cost reductions as it consolidates various features under one product, saving around 20% to 30% of the budget.
It is pretty good because it offers various features such as Exchange, OfficeSuite, OneDrive, and SharePoint.
The value I see in Microsoft Defender for Business is in its ability to track and respond to application usage and security threats through its CASB and automation features, which are cost-beneficial.
 

Customer Service

Sentiment score
5.4
Microsoft Defender for Business offers prompt support but lacks efficiency, with slower resolutions and mixed user satisfaction ratings.
Sentiment score
8.4
Microsoft Defender for Identity's support is effective yet inconsistent, with delays and variable service quality across subscription tiers.
It is rated ten out of ten for its quality and assistance.
The onboarding support is exceptional, ensuring seamless integration and implementation.
Faster support is needed for endpoint security solutions.
Generally, the support is more effective than other providers like Oracle.
The quality of support is very good, but troubleshooting can take time due to complex setups and the need to provide many logs.
 

Scalability Issues

Sentiment score
8.1
Microsoft Defender for Business is praised for scalability, with high ratings, despite configuration challenges across sectors like IT and government.
Sentiment score
8.8
Microsoft Defender for Identity is scalable and adaptable, supporting diverse enterprises and seamlessly integrating within Microsoft infrastructures.
The cloud-based nature of the solution ensures high scalability.
The scalability of Microsoft Defender for Business is rated as ten, indicating it is very scalable.
In terms of scalability, I find Microsoft Defender for Business to be good and reliable.
In a Microsoft-centric organization, especially with Azure infrastructure and Office 365, Microsoft Defender for Identity is scalable.
 

Stability Issues

Sentiment score
7.8
Microsoft Defender for Business is stable and reliable, with minimal downtime and occasional bugs, maintaining user satisfaction.
Sentiment score
7.9
Microsoft Defender for Identity is highly stable, credited to Azure's infrastructure, despite occasional regional incidents and initial issues.
No customer complaints about its functionality or reliability.
Although it generally works, there are occasional issues and errors that sometimes require a complete system format to rectify.
Threat detection capabilities could be improved.
Microsoft Defender for Identity is quite robust and built on Azure hyperscale infrastructure, with a 99% availability.
 

Room For Improvement

Microsoft Defender for Business needs enhancements in reporting, integration, support efficiency, and pricing, with user-friendliness and communication issues.
Microsoft Defender for Identity requires enhancements in cloud security, SIEM integration, and user access controls, facing various operational challenges.
Microsoft should provide batch management solutions with the application, integrating pass management with roles.
Features related to Advanced Persistent Threat detection vectors and cyber kill chain integrations are not available out-of-the-box.
There can be improvements in the user interface to make it more intuitive.
One improvement I would recommend is the integration of an admin application within Teams, allowing easy access to attack information on a mobile platform.
Reducing false positives is something we've been working on with Microsoft.
There is room for improvement in delivering knowledge to technical users, especially regarding what we can gain from the solution and how to apply it.
 

Setup Cost

Microsoft Defender for Business offers cost-effective pricing within Office 365 Premium, valued for features and nonprofit discounts, despite some competitors.
Microsoft Defender for Identity, integrated with Microsoft 365 E5, is competitively priced, offering value for Azure and Office 365 users.
Single-year pricing remains good.
The pricing is quite affordable at the enterprise level with no extra expenses noted.
The package with Business Premium is good for what you get for the price.
Ensuring a fair price according to market standards.
From an organization perspective, using E5 licenses is value for money, especially if Azure and Office 365 are already in use.
the Microsoft Defender Suite is quite expensive, especially when integrated into Sentinel.
 

Valuable Features

Microsoft Defender for Business provides scalable, cost-effective security with AI-powered threat detection, easy integration, and user-friendly features.
Microsoft Defender for Identity excels in threat detection, offers customization, and enhances security across environments with synced capabilities and automation.
The threat detection capabilities are robust, with a dedicated research team and a continuously updated threat feed.
Its vulnerability management is regarded as one of the best in the industry.
The most effective features of Microsoft Defender for Business include its threat detection and response capabilities in managing vulnerabilities and ransomware attacks.
The most valuable feature is its hybrid artificial intelligence, which gathers forensic data to track and counteract security threats, much like the CSI series in effect.
The advanced threat protection is one of the strengths of Microsoft Defender for Identity, as it utilizes user and entity analytics and can detect indicative attacks.
The most valuable features of Microsoft Defender for Identity include its automatic remedies, possibilities for avoiding incidents, the privilege manager, and the generation of logs that facilitate a safer environment.
 

Categories and Ranking

Microsoft Defender for Busi...
Ranking in Microsoft Security Suite
15th
Average Rating
7.8
Reviews Sentiment
7.1
Number of Reviews
17
Ranking in other categories
Endpoint Protection Platform (EPP) (24th)
Microsoft Defender for Iden...
Ranking in Microsoft Security Suite
7th
Average Rating
8.8
Reviews Sentiment
7.4
Number of Reviews
21
Ranking in other categories
Advanced Threat Protection (ATP) (5th), Identity Threat Detection and Response (ITDR) (1st)
 

Mindshare comparison

As of May 2025, in the Microsoft Security Suite category, the mindshare of Microsoft Defender for Business is 2.9%, down from 3.1% compared to the previous year. The mindshare of Microsoft Defender for Identity is 6.9%, up from 6.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Microsoft Security Suite
 

Featured Reviews

Syed Abid  - PeerSpot reviewer
Advanced threat protection secures diverse workloads with cost-effective deployment
If I need logs and don't have local storage bundled with Defender, I need to add workspace and log analytics, which is costly for storing logs of 2 GB, 5 GB, 10 GB. A default storage of 5 GB for logs should be included with Defender. There are limitations in whitelisting folders and files, and the whitelisting feature for Defender threat protection was deprecated. A straightforward feature for this should be added.
Sachin Vinay - PeerSpot reviewer
Easily detects advanced attacks based on user behavior
The best feature is security monitoring, which detects and investigates suspicious user activities. It can easily detect advanced attacks based on the behavior. The credentials are securely stored, so it reduces the risk of compromise. It will monitor user behavior based on artificial intelligence to protect the identities in your organization. It will even help secure the on-premise Active Directory. It syncs from the cloud to on-premise, and on-premise modifications will be reflected in the cloud. Identity harvesting is the most common threat. Legacy Microsoft solutions and Amazon face the same issues in the cloud. Users don't implement other security mechanisms in the cloud. In an on-premise environment, we would have multiple security devices like firewalls and several layers of security. Cloud users are less bothered because cloud features are there and only need to be configured. Microsoft Defender for Cloud is the best solution because all threats are completely visible, and it has a great dashboard. The dashboard displays each threat and score, so we can identify the threat rating and act efficiently to avoid compromising user identities. We have a single sign-on feature on the cloud. If we lose a single set of identities, it can compromise the entire organization, including cloud and on-premise. The same identities are being used everywhere. The user activity has to be completely visible on the dashboard, and it has to generate a pattern. It will notify us if there is any security breach. It is a complete monitoring set. Minor changes in the user identity can lead to data leakage. If a password is changed in the cloud, it will be reflected automatically in the on-premise. This minor change will trigger an alert in Microsoft Defender for Identity. It ensures that each cloud identity is well protected from spoofing. It has a comprehensive database of well-known spoofing techniques, enabling us to provide cloud identity protection completely. It has a vast scope because it is completely single sign-on. In the emerging industry, we use single sign-on because users need to authenticate, but it's challenging to remember multiple passwords. Once your user signs in, you can access all the data. An identity compromise would lead to various issues and affect the data on-premises. Defender maintains a constantly updated database with the latest signatures, attack models, and threats. If it detects one threat, it will monitor the suspicious event and give us frequent alerts. Identity protection is vital because we use an identity mechanism for everything, including firewall-related activities. The exact identity used in the cloud is used in the most complex firewalls. We require an excellent migration technique to regain this user credential if something gets compromised. Blocking this requires a massive set of procedures. Microsoft Defender comprehensively monitors identity and provides frequent alerts regarding any issue, so we don't need to think of anything else. Defender's bidirectional sync capabilities are helpful because we need to sync data from multiple directions, including tenant-to-tenant, on-premise-to-cloud, and cloud-to-cloud syncing. As a university, we have multiple tenants, so we need to sync or access data across platforms. That way, everything is more secure, and Microsoft Defender for Cloud also provides ample security for cloud transfers. The bidirectional sync capabilities are flawless—10 out of 10. Our on-premise Active Directory is perfectly synced with the Azure AD. Everything is synced with on-premise, and changes are reflected in minutes. If a problem with identity is addressed on the cloud, the fix will be mirrored on-premise and vice versa. Microsoft Defender for Cloud and Identity are bundled. If we have these two solutions, we don't need to worry about anything else or third-party antivirus. Microsoft Defender for Identity acts as a link to all the Microsoft security features that require identity-based validation. Microsoft Defender instantly provides identity security for all our applications, and users need not worry about typing their passwords. Even in situations with less complex encryption mechanisms, users don't need to worry about typing in their passwords. Defender will check and monitor if there are any flaws in that, and it will let us know if there are any issues. We're a Microsoft shop, so everything works together. If one feature isn't working, everything will be affected. If Defender isn't working, half of our Microsoft security features will be dead. Without identity security, user data can easily be compromised, and data can fall into the hands of intruders or other hackers. The solutions have to complement each other. If anything got wrong, the entire setup would have flaws. Microsoft security has a legacy security mechanism. A while back, we might have gone with Defender for Endpoint, but Microsoft has also grown into the face of the cloud. The same Defender solution is completely maintaining cloud security. We can imagine Microsoft's vast scale and how Defender can protect the cloud environment from vulnerabilities and attacks. We are definitely delighted with Microsoft products. The dashboard features are fantastic because it provides a comprehensive overview. It has a great alert mechanism and log inspector that tracks when users access various servers. With this kind of identity validation, we can control which servers the users can access. We have total visibility from the dashboard. We can track identity usage even if there are no issues. That is an essential advantage.
report
Use our free recommendation engine to learn which Microsoft Security Suite solutions are best for your needs.
850,236 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
18%
Comms Service Provider
8%
Retailer
7%
Government
6%
Computer Software Company
15%
Financial Services Firm
13%
Government
7%
Manufacturing Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Microsoft Defender for Business?
A few things are valuable. One is the alerting we see when any kind of intrusion is happening, any kind of malware is being deployed across the endpoints, or any kind of suspicious activity is goin...
What is your experience regarding pricing and costs for Microsoft Defender for Business?
Microsoft Defender for Business offers the best pricing option in the market and is very cost-effective.
What needs improvement with Microsoft Defender for Business?
The areas where Microsoft Defender for Business could improve include the support, installation process, and wiki. I should be able to find solutions to issues quickly without having to delve too d...
What do you like most about Microsoft Defender for Identity?
Microsoft Defender for Identity provides excellent visibility into threats by leveraging real-time analytics and data intelligence.
What needs improvement with Microsoft Defender for Identity?
There is room for improvement in delivering knowledge to technical users, especially regarding what we can gain from the solution and how to apply it. The documentation provided by Microsoft is oft...
What is your primary use case for Microsoft Defender for Identity?
The primary use case for Microsoft Defender for Identity is to maintain control and privilege inside our organization and revoke rights when they are not needed. The solution is used to keep our or...
 

Also Known As

No data available
Azure Advanced Threat Protection, Azure ATP, MS Defender for Identity
 

Overview

 

Sample Customers

Information Not Available
Microsoft Defender for Identity is trusted by companies such as St. Luke’s University Health Network, Ansell, and more.
Find out what your peers are saying about Microsoft Defender for Business vs. Microsoft Defender for Identity and other solutions. Updated: April 2025.
850,236 professionals have used our research since 2012.