Try our new research platform with insights from 80,000+ expert users

Microsoft Defender for Endpoint vs Microsoft Purview Data Lifecycle Management comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Microsoft Defender for Endp...
Ranking in Microsoft Security Suite
5th
Average Rating
8.2
Reviews Sentiment
7.1
Number of Reviews
194
Ranking in other categories
Endpoint Protection Platform (EPP) (1st), Advanced Threat Protection (ATP) (2nd), Anti-Malware Tools (1st), Endpoint Detection and Response (EDR) (3rd)
Microsoft Purview Data Life...
Ranking in Microsoft Security Suite
32nd
Average Rating
8.0
Reviews Sentiment
7.7
Number of Reviews
2
Ranking in other categories
Data Governance (25th)
 

Mindshare comparison

As of May 2025, in the Microsoft Security Suite category, the mindshare of Microsoft Defender for Endpoint is 8.9%, up from 6.7% compared to the previous year. The mindshare of Microsoft Purview Data Lifecycle Management is 0.1%, down from 0.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Microsoft Security Suite
 

Featured Reviews

AnuragSrivastava - PeerSpot reviewer
Provides detailed visibility into threats but the ability to add exceptions needs improvement
One major item for improvement is the ability to add exceptions. We can add some exceptions, but not at the level we need to. The second major area for improvement involves enhanced capabilities for different operating systems or platforms. That is, even though we have coverage for different operating systems or platforms such as Linux, we don't get all of the controls and enhanced capabilities that are available with Windows devices. Reporting could also be improved because, at present, we get limited results at times. For example, in an environment with more than 100,000 devices, you may just get 10,000 results when you run a report.
Al Mcpherson - PeerSpot reviewer
Provides clear visibility into our entire information estate, reduces our time to action, and saves us time
The integration across Azure is straightforward. Microsoft Purview Data Lifecycle Management has been a game-changer for our data governance. We now have clear visibility into our entire information estate, allowing us to pinpoint data location and implement effective classification. Even though real-time compliance isn't a current need, Microsoft Purview Data Lifecycle Management offers that capability for future requirements. Purview Data Lifecycle Management has reduced our time to action – since we previously lacked such a tool, it's effectively cut our response time in half. Purview Data Lifecycle Management has saved us one working day per month.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"We have just started to implement it. It is useful for protection from malware and ransomware."
"It is a straightforward setup."
"I like that Defender is integrated and doesn't have a third-party payload trying to advertise subscription renewal."
"In my opinion, the most valuable aspects are the reporting analytics and integration with Sentinel. Defender does an excellent job of correlating the different entities that comprise threat analysis, analytics data, and log analytics. It helps to piece together investigations into any exploit or malicious activity within a specific tenant. AI and analytics tools are probably the most valuable components."
"We have very good visibility on our endpoints. The level of information it throws back is helpful."
"Microsoft Defender is always running. It is doing its job, so it is fine. I don't have any issues with the way it was implemented or how we are running it. We have been upgrading IT throughout the years, but there have been no issues."
"It has Kusto Query Language (KQL), so we can use our own queries to find anything."
"For threat-hunting, I'll put some threats in a test scenario. I've downloaded known viruses that are out in the public for testing. They're not really a virus but they've got a signature. Defender for Endpoint will automatically find those, quarantine them for me, and alert me to what it did. It gives me "automated eyes.""
"The UI is the most valuable feature."
"The automatic data labeling is compelling, and we are investigating its use."
"Purview's built-in functionality provides immediate access to reports, streamlining the entire process."
 

Cons

"There is a need for improvement in reducing false positives."
"It seems there are challenges associated with IP addresses at times."
"I would like the solution to be able to prevent unauthorized programs from installing and to block unauthorised URLs which is similar to web filtering product."
"I have accounts for administrators and corporate employees, but I also have accounts for students. I can't split these types of accounts. I need a separate configuration for both... I need to research how I can get alerts for only the administrative machines."
"The GUI is very complex and could be more user friendly."
"It would be helpful if they offered video tutorial guides."
"The initial support process can be lacking as first-line support is sometimes not well-versed technically, resulting in repeated exchanges to finally engage a knowledgeable support person."
"The central management console should be improved because it provides limited options to configure Windows Defender."
"Microsoft Purview Data Lifecycle Management can be challenging to implement due to its complexity and dense documentation, making it difficult to get started."
"Microsoft Purview Data Lifecycle Management can be challenging to implement due to its complexity and dense documentation, making it difficult to get started."
"Microsoft's Purview Data Lifecycle Management preview features can be unreliable, hindering their usefulness."
 

Pricing and Cost Advice

"I do not have to purchase antivirus solutions anymore because Microsoft Defender for Endpoint is integrated into Windows and comes free."
"Given our extensive Microsoft licensing, transitioning to Defender for Endpoint did not affect licensing costs."
"We are required to pay for the data we ingest, and increasing the data amount incurs additional expenses."
"Microsoft Defender for Endpoint is more affordable compared to some other endpoint solutions."
"This is an expensive product and licensing for all Microsoft products is a big issue."
"The E5 license is the one that I recommend because it comes with Cloud App Security, which is a good thing to have on top of Microsoft Defender."
"The solution is included with Microsoft Windows."
"We have a bundle where the price includes all Microsoft products."
"The service operates on a pay-as-you-go basis, charging an extra one cent per field of metadata scanned in our data."
report
Use our free recommendation engine to learn which Microsoft Security Suite solutions are best for your needs.
850,028 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
25%
Computer Software Company
12%
Government
7%
Financial Services Firm
7%
Computer Software Company
15%
Manufacturing Company
10%
Financial Services Firm
10%
Insurance Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface, applies behavioral-based endpoint protection and response, and includes risk-ba...
Which offers better endpoint security - Symantec or Microsoft Defender?
We use Symantec because we do not use MS Enterprise products, but in my opinion, Microsoft Defender is a superior solution. Microsoft Defender for Endpoint is a cloud-delivered endpoint security s...
How does Microsoft Defender for Endpoint compare with Crowdstrike Falcon?
The CrowdStrike solution delivers a lot of information about incidents. It has a very light sensor that will never push your machine hardware to "test", you don't have the usual "scan now" feature ...
What is your experience regarding pricing and costs for Microsoft Purview Data Lifecycle Management?
We opted for Purview Data Lifecycle Management due to its significant cost advantage over competitors. At a 95 percent price reduction, it was a clear winner. The service operates on a pay-as-you-g...
What needs improvement with Microsoft Purview Data Lifecycle Management?
Microsoft Purview Data Lifecycle Management can be challenging to implement due to its complexity and dense documentation, making it difficult to get started.
What is your primary use case for Microsoft Purview Data Lifecycle Management?
We use Microsoft Purview Data Lifecycle Management for labeling our data.
 

Also Known As

Microsoft Defender ATP, Microsoft Defender Advanced Threat Protection, MS Defender for Endpoint, Microsoft Defender Antivirus
Microsoft Information Governance
 

Interactive Demo

Demo not available
 

Overview

 

Sample Customers

Petrofrac, Metro CSG, Christus Health
Information Not Available
Find out what your peers are saying about Microsoft Defender for Endpoint vs. Microsoft Purview Data Lifecycle Management and other solutions. Updated: April 2025.
850,028 professionals have used our research since 2012.