Try our new research platform with insights from 80,000+ expert users

Microsoft Defender for Identity vs Microsoft Purview Information Protection comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
5.7
Microsoft Defender for Identity improves incident management, reduces costs, enhances ROI, and saves time despite unclear financial benefits.
Sentiment score
7.4
Microsoft Purview enhances protection, automates compliance, reduces response time, and supports growth, though exact savings are hard to quantify.
Purview can do a quick scan, and it doesn't use human resources, so it gets time to do things that we need humans to focus on.
The E5 license comes with different solutions like data discovery classification, CASB, DLP solutions, and Defender for Cloud.
The cost of data loss and your data going to a competitor is potentially massive.
 

Customer Service

Sentiment score
8.5
Microsoft Defender for Identity's support receives mixed feedback, with users praising premium service but noting poorer lower-tier support responses.
Sentiment score
4.4
Users experience inconsistent Microsoft Purview support, citing slow responses and unresolved issues, despite some improvements in visibility and engagement.
Generally, the support is more effective than other providers like Oracle.
The quality of support is very good, but troubleshooting can take time due to complex setups and the need to provide many logs.
Sometimes, I get a fast and knowledgeable response, while other times, I've experienced delays and received no resolution.
It's hard to be an ambassador for a product when you know it will be hard to get support.
After our issues are reported, it takes a long time to find a resolution.
 

Scalability Issues

Sentiment score
8.5
Microsoft Defender for Identity is scalable, efficiently supports large networks, and integrates well into Microsoft-centric environments with minimal effort.
Sentiment score
7.4
Microsoft Purview Information Protection is praised for scalability despite some concerns with data analytics speed and policy update intervals.
In a Microsoft-centric organization, especially with Azure infrastructure and Office 365, Microsoft Defender for Identity is scalable.
It can be scaled across different departments organization-wide very quickly and easily.
It can handle large collections of data without issues.
Scalability can be improved by reducing these intervals.
 

Stability Issues

Sentiment score
7.5
Microsoft Defender for Identity is stable and reliable, though occasional sensor restarts occur, generally scoring 6-9/10 in stability.
Sentiment score
7.4
Microsoft Purview is stable and reliable, with minor delays and occasional drawbacks, fostering user trust and wide deployment.
Microsoft Defender for Identity is quite robust and built on Azure hyperscale infrastructure, with a 99% availability.
We do not see any issues with the stability of Microsoft Defender for Identity.
Having recently started using it, reliability is affirmed, but manual investigation is often performed to verify if alerts identified by auto-remediation are accurate.
Once implemented, I haven't had issues with its consistency.
The product is stable, and whatever it does, it does better than any other thing.
The solution is stable overall.
 

Room For Improvement

Microsoft Defender for Identity needs better integration, usability, and support, with improved detection and cost efficiency highlighted by users.
Microsoft Purview requires better integration, pricing, navigation, and feature enhancements to address user concerns about functionality and support.
If Microsoft could develop a feature that indicates when impossible travel is caused by VPN connections, it would prevent unnecessary password resets and session disruptions, especially for VIP users in organizations.
One improvement I would recommend is the integration of an admin application within Teams, allowing easy access to attack information on a mobile platform.
Reducing false positives is something we've been working on with Microsoft.
Effectiveness in Microsoft Purview Information Protection means enforcing the policy and making sure it works consistently across non-Microsoft products as well.
Having a roadmap or updates about new releases would be helpful for demonstrating to clients.
Clarifying product features and use cases would help avoid such confusion.
 

Setup Cost

Microsoft Defender for Identity is cost-effective within E5, offering flexibility compared to standalone purchases or E3 add-ons.
Microsoft Purview offers competitive pricing, flexible enterprise licenses, and cost-effective bundled solutions, despite some complexity in licensing options.
If they can reduce the costs, organizations will be happy, and it will compensate for using the Azure environment, which is more expensive on the infrastructure as a service side.
Ensuring a fair price according to market standards.
From an organization perspective, using E5 licenses is value for money, especially if Azure and Office 365 are already in use.
I talked to people who had compared it to other products on the market, and they're spending five figures to get started.
The E5 license covers most of the solutions for different technologies, so that way, it is good and more affordable compared to any other solution.
Our focus is on helping customers maximize their software investment.
 

Valuable Features

Microsoft Defender for Identity excels in integration, real-time detection, privilege management, AI analytics, and comprehensive security monitoring features.
Microsoft Purview enhances data protection with encryption, automated labeling, and compliance, excelling in Microsoft ecosystem integration and management.
We receive an advance report of risky users, allowing us to take preemptive action before an attack causes damage to organization details.
The most valuable feature is its hybrid artificial intelligence, which gathers forensic data to track and counteract security threats, much like the CSI series in effect.
The advanced threat protection is one of the strengths of Microsoft Defender for Identity, as it utilizes user and entity analytics and can detect indicative attacks.
Microsoft Copilot is an advantage because it's enterprise-grade AI.
It's paramount to have a single solution for information protection.
Regardless of the education, the employee might share the information anyway, so the AI shouldn't be the first point of failure. It should be a human making good decisions.
 

Categories and Ranking

Microsoft Defender for Iden...
Ranking in Microsoft Security Suite
5th
Average Rating
8.8
Reviews Sentiment
7.3
Number of Reviews
24
Ranking in other categories
Advanced Threat Protection (ATP) (5th), Identity Threat Detection and Response (ITDR) (3rd)
Microsoft Purview Informati...
Ranking in Microsoft Security Suite
13th
Average Rating
8.0
Reviews Sentiment
6.8
Number of Reviews
14
Ranking in other categories
Data Governance (5th), Data Privacy Management Software (2nd)
 

Mindshare comparison

As of July 2025, in the Microsoft Security Suite category, the mindshare of Microsoft Defender for Identity is 6.9%, up from 6.7% compared to the previous year. The mindshare of Microsoft Purview Information Protection is 1.2%, down from 1.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Microsoft Security Suite
 

Featured Reviews

ROBERT-CHRISTIAN - PeerSpot reviewer
Integration within the ecosystem enhances collaboration and automates functionalities
The integration into the Microsoft Defender ecosystem is the most valuable feature of Microsoft Defender for Identity. It fits very nicely with all the other Defender tools, allowing for excellent collaboration among them. It also fits seamlessly into Microsoft Sentinel SIEM. Furthermore, Microsoft security solutions can save time as they allow the automation of numerous functionalities, and the reporting inside the Microsoft ecosystem is commendable.
Abhi T - PeerSpot reviewer
Achieve comprehensive data protection with reliable performance and room for enhanced discovery accuracy
The product is still in a growing phase. I could see that many use cases in their product are not capable enough in terms of detecting or protecting. Compared to other products, they are in the middle of bringing their solution up to the mark, so it is not a full-grown solution. They have to get more accurate results in terms of data discovery and classification. The second thing is their support; support from Microsoft takes a lot of time to get a response from their support team. The third thing is their OCR capability is not that great in terms of identifying the documents. We would love to see response times of less than 24 hours. Additionally, there is no way to check the policy's current status in terms of whether it got synced or not. You have to wait and test the use cases after 24 hours or after 48 hours, and once it starts working, then it appears the policy got implemented.
report
Use our free recommendation engine to learn which Microsoft Security Suite solutions are best for your needs.
860,592 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Financial Services Firm
13%
Government
7%
Manufacturing Company
7%
Financial Services Firm
19%
Computer Software Company
12%
Retailer
7%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Microsoft Defender for Identity?
Microsoft Defender for Identity provides excellent visibility into threats by leveraging real-time analytics and data intelligence.
What needs improvement with Microsoft Defender for Identity?
For improvement, I need to complete the testing. We are currently in the initial phase. Improvement insights will be shared post the thorough testing phase. We have just started using it a month ag...
What is your primary use case for Microsoft Defender for Identity?
We are performing testing under Microsoft Defender for Identity ( /products/microsoft-defender-for-identity-reviews ). The implementation is very recent, as we started using it about a month ago.We...
What do you like most about Microsoft Purview Information Protection?
It ensures that sensitive data is automatically safeguarded, even for email attachments, regardless of the user or device.
What is your experience regarding pricing and costs for Microsoft Purview Information Protection?
The pricing is not very high and is considered fine. Microsoft offers different licensing options. AIP Plan 2 is used for critical users. The AIP is included in the business standard license for cl...
What needs improvement with Microsoft Purview Information Protection?
I am concerned about its accuracy levels. Sometimes it throws a lot of false positives. Microsoft Purview Information Protection needs to increase effectiveness and ensure compatibility. Effectiven...
 

Also Known As

Azure Advanced Threat Protection, Azure ATP, MS Defender for Identity
Microsoft Information Protection
 

Overview

 

Sample Customers

Microsoft Defender for Identity is trusted by companies such as St. Luke’s University Health Network, Ansell, and more.
Information Not Available
Find out what your peers are saying about Microsoft Defender for Identity vs. Microsoft Purview Information Protection and other solutions. Updated: June 2025.
860,592 professionals have used our research since 2012.