Try our new research platform with insights from 80,000+ expert users

Microsoft Defender for Cloud vs Microsoft Entra Permissions Management [EOL] comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Microsoft Defender for Cloud
Average Rating
8.0
Reviews Sentiment
6.8
Number of Reviews
87
Ranking in other categories
Vulnerability Management (6th), Container Management (7th), Container Security (7th), Cloud Workload Protection Platforms (CWPP) (1st), Cloud Security Posture Management (CSPM) (4th), Cloud-Native Application Protection Platforms (CNAPP) (4th), Data Security Posture Management (DSPM) (5th), Microsoft Security Suite (7th), Compliance Management (4th), Cloud Detection and Response (CDR) (2nd)
Microsoft Entra Permissions...
Average Rating
7.0
Reviews Sentiment
7.0
Number of Reviews
2
Ranking in other categories
No ranking in other categories
 

Featured Reviews

David Birhange - PeerSpot reviewer
Director, Cloud and Modern Workplace at Informanix Technology Group
Brings together cloud security insights through a unified view and supports agentless protection for virtual machines
Copilot and similar features are already being used, though not necessarily for Microsoft Defender for Cloud specifically. We are trying to get more experience before rolling out most of Microsoft Defender for Cloud's AI capabilities. This is definitely on our to-do list, and the priority is urgent as we seek to learn more about these capabilities. The GenAI threat protection from Microsoft Defender for Cloud has not been enabled yet. There are many unknowns with AI applications. AI agents will operate while you're not present, whether you are sleeping or awake, and it's unclear whether there would be any exfiltration of data or how data is being managed. Microsoft Purview is being used extensively, and there is significant development going on with DSPM that will be rolled out to address security concerns. Data labeling and proper demarcation for sensitivity of data before it is received are being actively pursued.
Sameer Bhat - PeerSpot reviewer
Vice President at Goldman Sachs
Provides resource-based access and security, but time-bound access can be a problem
Entra ID is the core of the identity management that we have. This is the key product that we are using. I am currently also looking into Entra Private Access because we are planning to deploy about 50,000 desktops into Azure and use Azure Virtual Desktop. We would like to give access to the users from the desktop to on-premises applications. I learned that Entra Private Access is a good solution. That is not yet GA, but that is what we are looking for. Entra provides a single pane of glass for managing user access, but because our company also integrates with Nebula API, only administrators use Entra's pane. A normal person who wants to get onboarded can do self-service using Nebula. The features for whitelisting and other things are definitely there. That is what we use specifically. Application IDs, enterprise applications, and all those things are already there, so we have more efficiency. There is also security because we usually do not allow user identities to get direct access to Azure resources. Usually, we use the service principles from Entra ID, so this way, it increases security. Entra has helped to save time for our IT administrators. We tend to automate a lot of things. We can do automation using Graph APIs and save time. It is hard to quantify the time savings, but there has been a medium amount of time savings. Entra has helped to save our organization money. We care about security and risk more than money, but it also saves money. We are premium customers, and because we have a commit-to-consume contract with Microsoft of multi-million dollars, the money does not come into it because we have to consume those resources.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The first valuable feature was the fact that it gave us a list of everything that users were surfing on the web. Having the list, we could make decisions about those sites."
"Having the ability to do what we could not before, such as gaining visibility and securing our full estate, is crucial."
"I would like to see more connectors and plugins with other platforms."
"The most valuable feature is the regulatory compliance aspect, where we utilize predefined initiatives like NIST. Alert management is another useful feature. Alerts are directly integrated with our email or DevOps board for easy viewing, allowing us to identify problem areas efficiently."
"It works seamlessly on the Azure platform because it's a Microsoft app. Its setup is similar, so if you already have a Microsoft account, it just flows into it."
"The solution is very easy to deploy."
"It alerts us to our vulnerabilities and ensures compliance by marking off a compliance tool checklist."
"I would rate Microsoft Defender for Cloud a ten."
"Multifactor authentication is valuable."
"The solution integrates well with our infrastructure and other systems without any issues."
 

Cons

"An area where Microsoft Defender for Cloud could be improved is in getting away from having multiple menus that do the same thing, which seems imposing when looking at it."
"The most significant areas for improvement are in the security of our identity and endpoints and the posture of the cloud environment. Better protection for our cloud users and cloud apps is always welcome."
"The product's advanced analytics and reporting features could be improved."
"They could always work to make the pricing a bit lower."
"Microsoft Defender for Cloud is not compatible with Linux machines."
"Sometimes it's very difficult to determine when I need Microsoft Defender for Cloud for a special resource group or a special kind of product."
"I would suggest building a single product that addresses endpoint server protection, attack surface, and everything else in one solution. That is the main disadvantage with the product. If we are incorporating some features, we end up in a situation where this solution is for the server, and that one is for the client, or this is for identity, and that is for our application. They're not bundling it. Commercially, we can charge for different licenses, but on the implementation side, it's tough to help our end-customer understand which product they're getting."
"Comparing Microsoft Defender for Cloud to other solutions on the market, Microsoft needs to push a little bit to improve it."
"We use a third-party API called Nebula API to integrate the account for authorization. The time-bound access area in Entra can be a problem. It can be improved in terms of the granularity of the permissions."
"The solution's pricing and support services need improvement."
 

Pricing and Cost Advice

"I am not involved much with the pricing but the bundle offering is good."
"Security Center charges $15 per resource for any workload that you onboard into it. They charge per VM or per data-base server or per application. It's not like Microsoft 365 licensing, where there are levels like E3 and E5. Security Center is pretty straightforward."
"It is bundled with our enterprise subscription, which makes it easy to go for it. It is available by default, and there is no extra cost for using the standard features."
"There is a helpful cost-reducing option that allows you to integrate production subscriptions with non-production subscriptions."
"The cost of the license is based on the subscriptions that you have."
"Azure Defender is definitely pricey, but their competitors cost about the same. For example, a Palo Alto solution is the same price per endpoint, but the ground strikes cost a bit more than Azure Defender. Still, it's pricey for a company like ours. Maybe well-established organizations can afford it, but it might be too costly for a startup."
"Defender for Cloud is pretty costly for a single line. It's incredibly high to pay monthly for security per server. The cost is considerable for an enterprise with 500-plus virtual machines, and the monthly bill can spike."
"I am not involved in this area. However, I believe its price is okay because even small customers are using Azure Security Center. I don't think it is very expensive."
"The product cost is in the mid to high range."
"We are a Fortune 500 company, so we always negotiate with Microsoft."
report
Use our free recommendation engine to learn which Microsoft Security Suite solutions are best for your needs.
879,422 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
13%
Computer Software Company
12%
Manufacturing Company
9%
Government
6%
Computer Software Company
20%
Financial Services Firm
15%
Government
9%
Healthcare Company
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business27
Midsize Enterprise10
Large Enterprise49
No data available
 

Questions from the Community

How is Prisma Cloud vs Azure Security Center for security?
Azure Security Center is very easy to use, integrates well, and gives very good visibility on what is happening across your ecosystem. It also has great remote workforce capabilities and supports a...
What is your experience regarding pricing and costs for Microsoft Defender for Cloud?
My experience with pricing, setup cost, and licensing for Microsoft Defender for Cloud was pretty straightforward. We did have a consultation with a third party to go over different tiers and produ...
What needs improvement with Microsoft Defender for Cloud?
Microsoft Defender for Cloud can be improved. An additional feature that should be included in the next release is Zero Trust, similar to ThreatLocker software.
What is your experience regarding pricing and costs for Microsoft Entra Permissions Management?
The product cost is in the mid to high range. You need to have a good budget to implement it, so it is considered fairly expensive for our market. I rate the pricing a seven out of ten.
What needs improvement with Microsoft Entra Permissions Management?
The solution's pricing and support services need improvement.
What is your primary use case for Microsoft Entra Permissions Management?
Our clients primarily use the product from a security management perspective.
 

Also Known As

Microsoft Azure Security Center, Azure Security Center, Microsoft ASC, Azure Defender
CloudKnox Permissions Management
 

Interactive Demo

Demo not available
 

Overview

 

Sample Customers

Microsoft Defender for Cloud is trusted by companies such as ASOS, Vatenfall, SWC Technology Partners, and more.
Information Not Available
Find out what your peers are saying about Microsoft and others in Microsoft Security Suite. Updated: December 2025.
879,422 professionals have used our research since 2012.