Try our new research platform with insights from 80,000+ expert users

Microsoft Defender for Endpoint vs OPSWAT Filescan Sandbox comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Microsoft Defender for Endp...
Ranking in Anti-Malware Tools
1st
Average Rating
8.2
Reviews Sentiment
7.1
Number of Reviews
198
Ranking in other categories
Endpoint Protection Platform (EPP) (1st), Advanced Threat Protection (ATP) (3rd), Endpoint Detection and Response (EDR) (3rd), Microsoft Security Suite (4th)
OPSWAT Filescan Sandbox
Ranking in Anti-Malware Tools
30th
Average Rating
8.0
Reviews Sentiment
7.5
Number of Reviews
1
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of September 2025, in the Anti-Malware Tools category, the mindshare of Microsoft Defender for Endpoint is 14.2%, down from 20.3% compared to the previous year. The mindshare of OPSWAT Filescan Sandbox is 0.9%, up from 0.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Anti-Malware Tools Market Share Distribution
ProductMarket Share (%)
Microsoft Defender for Endpoint14.2%
OPSWAT Filescan Sandbox0.9%
Other84.9%
Anti-Malware Tools
 

Featured Reviews

NaySan @ Suraj Verma - PeerSpot reviewer
Has effectively blocked sophisticated attacks and malicious activities while providing excellent support
Microsoft Defender for Endpoint is very good, but one suggestion is that in some products, we may need to configure security-related settings, whereas Microsoft Defender for Endpoint works completely differently, providing automatic recommendations and actions that we may need to perform ourselves. Regarding the pricing of Microsoft Defender for Endpoint, during the last three years, we set up the product and sold it, but we faced difficulties because Microsoft pricing is always the same. For example, whether I purchase Microsoft Defender for Endpoint for one year or for the next three years, the pricing remains constant with no discounts available. In contrast, competing products offer reduced pricing for long-term commitments, which makes it difficult for us in that environment. Microsoft should consider this option to remain competitive, but otherwise, everything else is fine.
reviewer2390334 - PeerSpot reviewer
An easily integratable solution that helps scan files
I recommend leveraging the data and using case transcripts to understand how the tool can address your needs. Additionally, testing the solution in your environment can be helpful. If we keep it updated and ensure that the engines and the latest definitions are up-to-date, the solution functions without problems. It continues scanning without any delays. I rate the product an 8 out of 10. With OPSWAT Filescan Sandbox, we can scan various file types, including IOCs, Python compressors, and QR codes from images. All the configuration settings are user-dependent and can be modified over time. It's highly configurable—you can easily navigate to the console, click on any option, and quickly adjust settings, including the default size.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"DFE organizational security posture has been a positive experience. We're a Microsoft house. It works. Once it's deployed and once it's configured, it works and our clients tend to be happy with it. I haven't really experienced anyone who has been so unsatisfied with the platform that they wanted to go a couple of different directions, that has never happened to me."
"It's stable."
"It comes included with the Windows license."
"I like the real-time protection features. Windows Defender will detect if there's a threat like a Trojan or something like that but Kaspersky lets it run normally."
"Microsoft Defender for Endpoint's WCS function, a content filtering solution, has proven to be the most useful, stable, and reliable option for our current needs."
"Defender for Endpoint has significantly improved our security posture."
"The endpoint detection of threats is valuable. The initial detection of things like ransomware and viruses and being able to shut down machines immediately and stop a threat is valuable. We can stop a threat at a source versus allow it to propagate it across the network."
"It's pretty easy to use, works with compliance issues, and is reliable."
"What I find most valuable about it is the design interface."
 

Cons

"In active mode, it's great that it gives you so much information, but it does record every keystroke so you have a lot of logs... that amount of data logging started to add up in the cost."
"Its user interface (UI) can be improved. Currently, in the console, you have to dig down for certain things. They've got many different layers to get to things instead of having it all on the surface. You have to go three folds lower to get to specific functionality or click a particular option. It would be good if we can manage the console through menus and instead of three clicks, we can do things in one click. They need to change the UI and work on it in terms of a better user experience."
"The solution could always be more secure."
"I have accounts for administrators and corporate employees, but I also have accounts for students. I can't split these types of accounts. I need a separate configuration for both... I need to research how I can get alerts for only the administrative machines."
"Its detection is not as quick. There should also be more frequent updates."
"On the Mac OS platform, there is no parity between Windows and Mac OS. The solution is very feature-rich and very well-integrated into Windows, and I guess baked into Windows 10 and Windows 11. Whereas, on the Mac OS platform, there is still some work there to give it a more feature-reach platform."
"I would like Microsoft to have some kind of direct integration for USB controls. They have GPO and other controls to control the access of the USB drives on devices, but if there is something that can be directly implemented into the portal, it would be good. There should be a way to control via a cloud portal or something like that in a dynamic way. USB control for data exfiltration would be a good feature to implement. Currently, there are ways to do it, but it involves too many different things. You have to implement it via GPOs and other stuff, and then you move or copy those big files via Defender ATP. If there is a simple way of implementing those features, it would be great."
"It is using a large space in your memory all the time. While an antivirus will use some of your memory, if they could reduce the load of the antivirus to some extent that would be good."
"There's a size limitation, allowing us to scan only small files."
 

Pricing and Cost Advice

"We have the E5 security license, and the solution comes with that."
"Licensing options vary. Some customers buy it as an enterprise agreement and pay yearly. Others buy it as a CSP, so they pay per month. It completely depends on the customer's needs."
"I don't know the standalone costs. It is my understanding that the M365 E5 is $56 a month or something close to that pricing. That would be for the full suite. Just Defender might be $8 a month. I can't say for sure."
"Given our extensive Microsoft licensing, transitioning to Defender for Endpoint did not affect licensing costs."
"It is free."
"You do not need to pay any additional costs for antivirus and anti-malware solutions for endpoint protection."
"I pay for it through the Windows Professional or Standard license. It is a one-time cost for me, and I use the same license."
"It's all pretty easy. For some clients, it's an easier sell because it's just an add-on to their existing Microsoft licensing and Office 365 licensing."
"The tool is free, but there's a size limitation, allowing us to scan only small files."
report
Use our free recommendation engine to learn which Anti-Malware Tools solutions are best for your needs.
867,370 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
13%
Government
8%
Manufacturing Company
8%
Financial Services Firm
8%
Financial Services Firm
12%
Computer Software Company
12%
Insurance Company
8%
Comms Service Provider
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business79
Midsize Enterprise34
Large Enterprise87
No data available
 

Questions from the Community

How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface, applies behavioral-based endpoint protection and response, and includes risk-ba...
Which offers better endpoint security - Symantec or Microsoft Defender?
We use Symantec because we do not use MS Enterprise products, but in my opinion, Microsoft Defender is a superior solution. Microsoft Defender for Endpoint is a cloud-delivered endpoint security s...
How does Microsoft Defender for Endpoint compare with Crowdstrike Falcon?
The CrowdStrike solution delivers a lot of information about incidents. It has a very light sensor that will never push your machine hardware to "test", you don't have the usual "scan now" feature ...
What do you like most about OPSWAT Filescan Sandbox?
What I find most valuable about it is the design interface.
What is your experience regarding pricing and costs for OPSWAT Filescan Sandbox?
The tool is free, but there's a size limitation, allowing us to scan only small files.
 

Also Known As

Microsoft Defender ATP, Microsoft Defender Advanced Threat Protection, MS Defender for Endpoint, Microsoft Defender Antivirus
No data available
 

Interactive Demo

Demo not available
 

Overview

 

Sample Customers

Petrofrac, Metro CSG, Christus Health
Information Not Available
Find out what your peers are saying about Microsoft, SentinelOne, VirusTotal and others in Anti-Malware Tools. Updated: January 2025.
867,370 professionals have used our research since 2012.