Try our new research platform with insights from 80,000+ expert users

Microsoft Defender for Endpoint vs Symantec Endpoint Security vs ZoneAlarm comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Mindshare comparison

Endpoint Protection Platform (EPP)
Endpoint Protection Platform (EPP)
Anti-Malware Tools
 

Featured Reviews

Sudhen Swami - PeerSpot reviewer
Easy to update with good protection and a useful cloud portal
We've mainly used it for endpoints. However, we've also used it for DLP as well. We're also in the process of implementing it for cloud and identity as well. However, it's very good for endpoints, and that's our main focus. The malware protection is good. The visibility it provides is very useful. We can combine visibility with wider security features and alerts around malware, misconfiguration, or any other kinds of threats. The cloud portal is quite good. From there, we are able to see alerts and have colleagues review issues and monitor to see if any patterns arise. It's serving us quite well overall. It allows us to look at other items, like application and browser control. It helps us prioritize threats. We have a process in place now where we can review issues and remediate them effectively. We have been able to integrate a variety of Microsoft security products together. We use Azure AD, for example, and we've begun to implement DLP, among other items. We're looking at labeling and tagging and will expand into that soon. Defender has more stringent system requirements than, for example, Check Point. So when we implemented the Check Point Endpoint agent, that solution didn't mind what version of Windows you were using. When we moved to Defender, Defender had certain system prerequisites that had to be met. So we had to make sure that we're on a minimum version of Windows when we're utilizing Office, and Office has to be a particular version as well. It has more stringent system requirements that have to be met before you can implement it. It works natively together with other Microsoft solutions. Once you get more and more of those different components across the environment, then you start to get better visibility. So, rather than having lots of different solutions, you have fewer solutions and a single vendor solution. That way, you start getting into a position where you get better visibility and integration as well. The standardization is good. It's important. It's helping me with monitoring and learning. Updates and upgrades are quite smooth and seamless. Defender helps us automate routine tasks. Quite a lot of Microsoft is straightforward for us now. Previously, we didn't have enough resources and were unable to look at the alerts. Having this in place makes things a lot more straightforward for us. We have both the technology and the people in place now, alongside the process. We do see the benefits in that, and that's why we're continuing our adoption across the estate in terms of client and server as well. It's helping us avoid looking at multiple dashboards and centralized monitoring. We're not fully there yet. We're getting there. While we haven't witnessed time saving yet, once it's fully deployed, it will. By then, we'll have standardized processes across a single solution. We have saved money, however, as we continue to reduce non-Mircosft systems. Since we won't be using various competing technologies, we can save on licensing costs. We've likely so far saved 15%. While it's hard to estimate exactly how much, the solution has helped us decrease time to detection and time to respond.
MohammadAlshatreet - PeerSpot reviewer
Resolve support issues promptly while optimizing system resource usage
I use the solution primarily for scanning and identifying threats, which is essential in determining the percentage of resources used, such as CPU and hard disk. It's important to balance resource consumption to maintain operational efficiency. Furthermore, the incident response capabilities allow me to resolve authentication and support issues promptly, ensuring the system operates without downtime.
Nagendra Nekkala - PeerSpot reviewer
A highly stable solution that protects computers from viruses, spyware, and hackers
ZoneAlarm doesn't require much maintenance. You only need to update the application when there are any latest updates. ZoneAlarm is deployed on-cloud in our organization. With an increase in the bring your own device concept, ZoneAlarm should be part of every device to help us make the operational work very easy. Overall, I rate ZoneAlarm a nine out of ten.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"In my opinion, the most valuable aspects are the reporting analytics and integration with Sentinel. Defender does an excellent job of correlating the different entities that comprise threat analysis, analytics data, and log analytics. It helps to piece together investigations into any exploit or malicious activity within a specific tenant. AI and analytics tools are probably the most valuable components."
"Microsoft Defender for Endpoint is quite good. We haven't really experienced any issues with it."
"The solution is highly scalable."
"The solution has an easy-to-use interface, is always updated, and is user-friendly."
"One of the valuable features of the solution is the small updates that keep my machine relatively clean from any infections."
"Real-time detection and cloud-based delivery of detections are highly efficient."
"It's very easy to scale because it comes built-in with Windows 10, and you just need to enable it. This can be done on scale using group policies or through Endpoint Manager on cloud or Intune."
"Defender for Endpoint has one dashboard with security-related information, vulnerability-related information, and basic recommendations from Microsoft, all in different tabs. That's helpful because if we want to fix only the recommended ones, we can go fix all of them..."
"The most valuable feature is that I don't feel that it is there. It works in the background and doesn't interfere with my daily work. All the scans are done in the background. This is the biggest advantage of this product. It works because I have never been infected since I have been using this solution. Its interface is also very good."
"All Symantec Endpoint Protection (SEP) features, such as anti-malware, zero-day attack protection, and IPS features, are valuable."
"One important feature is the EDR function, necessary for many public customers due to upcoming laws in Germany, which is available through Symantec Endpoint Security Complete."
"The antivirus and antimalware features are good."
"I have found the central control console the most valuable feature."
"Helps to protect our organization from known attacks."
"Some important features that are included are the built-in firewall and device control."
"Offers good antivirus and local firewall."
"Personally, I find the Game Mode of the Firewall very useful."
"ZoneAlarm protects all computers from viruses, spyware, and hackers."
"This antivirus is regularly updated, and the updates can be scheduled."
"The solution really focused on giving more security than an antivirus."
"It is easy to use through interfaces and easy to configure each of the customizations we created based on the characteristics that we wanted."
"The product's most valuable feature is the detection engine due to its ability to identify threats."
"It gives us security for the users' mobiles and ends up protecting us in a significant way."
"The phone access scan stands out as the most valuable feature for me."
 

Cons

"The central management console should be improved because it provides limited options to configure Windows Defender."
"Microsoft Defender for Endpoint can improve by providing more and different types of reports."
"Some of the integrations that Defender should include involve the use of the web app."
"They can improve it on the online protection front since people nowadays are moving online and working from home."
"It needs to improve the cybersecurity for lateral movements. For example, when a hacker tries to enter a machine, they try to get the password by doing a lateral movement."
"Right now, the solution provides some recommendations on the dashboard but we don't have any priorities. It's a mix of all the vulnerabilities and all the security recommendations. I would like to see some priority or categorization of high, medium, and low so that we can fix the high ones first."
"Defender for Endpoint is complex, and the documentation is detailed. At the same time, it's hard to navigate sometimes."
"The pricing could be a bit better."
"I would like to see improvements in the anti-virus and the device control features."
"It seems that its not working very well with VMWare."
"There could be definition updates installed and running for the product, similar to new EDR solutions that receive updates from the internet."
","
"Is not a full anti-ransomware solution."
"We must have complete dissolution with advance care protection but we are finding out that we need more Symantec technical specialists. We have identified a need to hire at least one more technical specialist familiar with Symantec to improve our solutions capabilities."
"Since the division of the company, we have experienced a lack of support."
"I would like to see improvements in the scanning part of the solution, specifically to enhance the CPU and hard disk usage during scanning and updates to prevent disruption during work hours."
"The support is not always so effective."
"Currently, the client is only available for the Windows Operating System but it would be good if it were released for Mac OS as well."
"Perhaps the primary area for potential enhancement is to make it faster, ensuring a more seamless experience while maintaining robust security features."
"The solution's efficiency in threat containment and overall protection needs improvement."
"We'd like better performance of the network equipment. There are high-speed environments where an immediate response is required."
"They should release a single update with all the necessary characteristics to avoid being in a cycle of consecutive updates."
"ZoneAlarm should be a light application that does not take too much memory in mobile phones."
"Some of our users say that the interface is a little bit outdated for 2020, and want it to be more modern and cozy."
 

Pricing and Cost Advice

"I pay for it through the Windows Professional or Standard license. It is a one-time cost for me, and I use the same license."
"Defender doesn't cost that much. When you use Microsoft technology, you can start with the free version and see how much the technology helps your organization solve security problems before you use the subscription. They also do this pay-as-you-go model, so you only pay when you use it."
"Licenses depend upon what you are looking for and what kind of security do you want to implement. There are costs in addition to the standard licensing fees. When we used to buy Symantec, we used to spend on 100 licenses. We used to spend approximately $2,700 for those many licenses, and they came in packs. To add one more license, I had to buy a pack with a minimum of 10 licenses. I had to spend on nine extra licenses because I can't get a single license, whereas when we go for Microsoft, we can get as many licenses as we want. If I have 100 users today, and tomorrow, I have 90 users, I can release my 10 licenses next month. With any other software vendor, you buy licenses for one year, and you have to stick with that. If today you have 100 licenses, and tomorrow, you have 50, you have already paid for one year's license. You can't go back and tell them that I don't require these 50 licenses because I have lost my 50 users, but with Microsoft Defender, licensing is on a monthly basis. It gives you both options. You can go yearly and save on it, or you can go monthly. You will, again, save on it. It is very fair everywhere."
"The price is higher than others because it is doing more than what the others are doing."
"It is built into Windows 10. If our clients are using Microsoft Defender, the cost goes away for them."
"There are different licenses, such as E3 and E5."
"Microsoft Defender for Endpoint comes with Windows 10, and it's free. But for you to be able to manage it in the cloud and use the console, you need to have either an Office 365 E5 subscription or a Microsoft M365 subscription. You need to buy an extra license."
"The licensing costs for Microsoft Defender for Endpoint are reasonable."
"They're on the reasonable side. They are at mid-level. They're not too expensive as compared to their competitors. They're also not too cheap. In terms of price structure, hopefully, they could do a subscription."
"The licensing terms can range from subscription-based to perpetual, to annual, to tri-annual."
"It is the better product, even if it is a little on the higher side."
"Pricing and licensing are important to us when choosing a product."
"The price of the solution could be less expensive."
"Licensing is per user. Therefore, it makes it easy to do licensing."
"This is not the cheapest product and I know others that are most cost-effective, although it is difficult to compare because it depends on the features."
"We receive a discounted price for this solution because we are a non-profit organization."
"This is a freeware product and I recommend using it."
"I rate the product pricing a seven out of ten."
"We have to pay a yearly licensing fee for ZoneAlarm, which is cheap."
"We use the free version of the software, but it can be upgraded to the paid Extreme Security edition."
"The pricing is reasonable, with a yearly renewal license costing seventy dollars."
report
Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.
860,745 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
13%
Educational Organization
11%
Financial Services Firm
8%
Government
8%
Computer Software Company
14%
Financial Services Firm
12%
Manufacturing Company
10%
Comms Service Provider
8%
Computer Software Company
17%
Comms Service Provider
12%
Hospitality Company
9%
Educational Organization
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
Which offers better endpoint security - Symantec or Microsoft Defender?
We use Symantec because we do not use MS Enterprise products, but in my opinion, Microsoft Defender is a superior sol...
How does Microsoft Defender for Endpoint compare with Crowdstrike Falcon?
The CrowdStrike solution delivers a lot of information about incidents. It has a very light sensor that will never pu...
Which is better - Cortex XDR or Symantec End-User Endpoint Security?
Aqua Security is easy to use and very manageable. Its main focus is on Kubernetes and Docker. Security is a very valu...
What do you like most about Symantec End-User Endpoint Security?
Symantec have everything – documentation, videos, data sheets.
What is your experience regarding pricing and costs for Symantec End-User Endpoint Security?
Symantec Endpoint Security's pricing is better than most offerings based on my research. It seems to be half the cost...
What do you like most about ZoneAlarm?
ZoneAlarm protects all computers from viruses, spyware, and hackers.
What needs improvement with ZoneAlarm?
As for improvements, ZoneAlarm enhances Check Point’s solution by having a very efficient engine. The engine checks a...
 

Also Known As

Microsoft Defender ATP, Microsoft Defender Advanced Threat Protection, MS Defender for Endpoint, Microsoft Defender Antivirus
Symantec EPP, Symantec Endpoint Protection (SEP)
No data available
 

Interactive Demo

Demo not available
 

Overview

 

Sample Customers

Petrofrac, Metro CSG, Christus Health
Audio Visual Dynamics, Red Deer Advocate, Asia Pacific Telecom Co. Ltd., Kibbutz Ein Gedi, and AMETEK, Inc.
Terma, Optix, Samsung Research Amercia, SF Police Credit Union, Independence Care System, Mattias Thomsen, Carmel Partners, Desert Research Institute, CRIF, FXCM Inc, US State Agency
Find out what your peers are saying about Microsoft, CrowdStrike, SentinelOne and others in Endpoint Protection Platform (EPP). Updated: July 2025.
860,745 professionals have used our research since 2012.