![Microsoft Defender Threat Intelligence [EOL] Logo](https://images.peerspot.com/image/upload/c_scale,dpr_3.0,f_auto,q_100,w_64/GqfBeX9zWxZG3rC5hyrUo9Aq.jpeg?_a=BACAGSGT)

ThreatLocker Zero Trust Platform and Microsoft Defender Threat Intelligence compete in the cybersecurity category, focusing on endpoint protection and threat management. ThreatLocker seems to have the upper hand in direct security incident prevention with its zero-trust model, while Microsoft Defender benefits from its deep integration within the Microsoft suite, enabling advanced threat intelligence capabilities.
Features: ThreatLocker Zero Trust Platform offers robust application allowlisting, enabling fine control over software execution. Its elevation request feature allows for user-initiated app access without IT intervention, and it provides real-time visibility and granular control over applications and USB devices. Microsoft Defender Threat Intelligence benefits from seamless integration with Microsoft's ecosystem, utilizing global telemetry data for advanced threat detection and intelligence. It includes features such as superior email security and integration with other Microsoft security solutions.
Room for Improvement: ThreatLocker could enhance its platform by incorporating identity management features and expanding compatibility with more devices, including mobile and Apple products. Users suggest improvements to its Learning Mode and deeper integration with third-party tools. Microsoft Defender could improve non-Microsoft system integration, reduce false positives, and enhance hybrid cloud support. Licensing complexities and multi-vendor integration pose additional challenges for SMBs.
Ease of Deployment and Customer Service: ThreatLocker is versatile, deployable across on-premises, hybrid, and cloud environments, with highly praised responsive customer support. Microsoft Defender is aimed at cloud-focused deployments, offering easy integration within Microsoft environments. However, its customer service does not consistently match ThreatLocker’s level of personalized support, and onboarding for non-Microsoft environments can be improved.
Pricing and ROI: ThreatLocker is viewed as cost-effective, consolidating security tools into one solution, thus reducing costs and enhancing ROI. Its pricing includes long-term support, appealing to smaller enterprises. Microsoft Defender, included in the Microsoft 365 ecosystem, offers competitive pricing but has higher standalone costs with complex licensing models, impacting SMBs. Both products show tangible ROI, with ThreatLocker providing cost reductions and Microsoft leveraging its extensive feature set.
It's a value-for-money product.
If something were to happen without ThreatLocker, the cost would be huge, and thus, having it is definitely worth it.
Based on what we use ThreatLocker Zero Trust Endpoint Protection Platform for with the same functionalities and packaging, it was around 13 or 14 hours.
We have the MDR package as well, and just knowing someone is watching those endpoints at 3:00 a.m. is a lifesaver that you cannot put a dollar figure on.
Level two support is knowledgeable and knows how the product works, which is very good.
I would give Microsoft an eight for their technical support.
They have been very responsive, helpful, and knowledgeable.
I would rate their customer support a ten out of ten.
Their support is world-class.
If there were some customizations available, I would rate its scalability as nine out of ten.
I started off with just the servers, and within a month and a half, I set up the entire company with ThreatLocker.
It seems to primarily operate on the endpoints rather than at a central location pushing out policies.
ThreatLocker Zero Trust Endpoint Protection Platform scales very smoothly with our growing needs.
It provides a high level of security and avoids phishing and scam emails.
For five years, we have not had a problem.
Once deployed, it downloads the policies locally, so even if the computer doesn't have internet, it doesn't matter.
It has been very stable, reliable, and accessible.
Providing code customization would help keep pace with new vulnerabilities and threats.
The main area of improvement for Microsoft Defender Threat Intelligence is related to how information is conveyed.
From the telemetry data standpoint, I would prefer Defender data to be more open in future updates.
Controlling the cloud environment, not just endpoints, is crucial.
ThreatLocker Zero Trust Endpoint Protection Platform could improve by being a little more hands-off, perhaps by having a team inside ThreatLocker that does all the vetting of patches; having one person hired by ThreatLocker to check out patches means that a million other industries using ThreatLocker Zero Trust Endpoint Protection Platform do not have to vet the same patch, ultimately saving time and money around the world.
This feedback would help us understand what is learned in real-time, especially during a one-hour learning mode setup, ensuring we remain aware of potentially unnecessary learned items.
After conversations with other partners, it became clear we underpriced it initially, which caused most of our issues.
We are moving towards the Unified solution, where they basically bundle everything together, providing us better stability with the ability to bring in new product offerings without having to go back to the customer and say, 'This is going to cost you.'
Money is saved because it is not costly, and I would suggest it for other companies.
If it wasn't for that real-time threat detection on the vulnerability, I think we would not have survived the attack.
One of the best features is that it provides a certain level of customization, allowing us to set our spam confidence levels.
Our threat detection is enhanced due to the AI agents in Microsoft Defender Threat Intelligence, which helps in detecting automatically.
ThreatLocker Zero Trust Endpoint Protection Platform's ability to block access to unauthorized applications has been excellent.
It protects our customers.
The major benefit is fewer breaches overall, as nothing can be run without prior approval. This helps my company protect its data and secure itself effectively.

| Company Size | Count |
|---|---|
| Small Business | 17 |
| Midsize Enterprise | 2 |
| Large Enterprise | 15 |
| Company Size | Count |
|---|---|
| Small Business | 56 |
| Midsize Enterprise | 14 |
| Large Enterprise | 13 |
Microsoft Defender Threat Intelligence [EOL] offers comprehensive security by integrating with Microsoft platforms, retaining data within tenants, and providing real-time threat detection and collaboration. It's designed for both enterprise and SMB environments.
Microsoft Defender Threat Intelligence enhances cybersecurity operations by integrating with Azure Sentinel and Microsoft products like Intune and Azure. Its capabilities in endpoint, email, and cloud security ensure robust protection against a wide range of threats. With global threat data, anti-spam features, and customization options, it addresses threat prevention and vulnerability management. Seamless scaling and proactive incident prevention make it a reliable choice for enterprises looking for collaborative, efficient security management.
What are the key features of Microsoft Defender Threat Intelligence?Microsoft Defender Threat Intelligence is crucial for industries that value data retention and comprehensive threat analyses in safeguarding their operations. Financial institutions, healthcare providers, and technology firms implement this solution to secure their environments by updating security protocols and ensuring compliance with various industry standards. The focus on integration and customization helps these organizations adapt to evolving cybersecurity threats effectively.
Gain proactive, industry leading Zero Trust cybersecurity capabilities with ThreatLocker. By employing a deny-by-default approach, you will greatly enhance your security and operational efficiency. Solutions from ThreatLocker are focused on precise application control and
streamlined access management without administrative rights.
ThreatLocker Application Control solutions include Zero Trust Alllowlisting, Zero Trust Ringfencing and Privilege Access Management, significantly reducing any unauthorized software activities in your environment. Granular controls improve your overall security, while ringfencing enhances application behavior monitoring. Elevation requests will allow users to gain administrative access without IT intervention. The platform's ease of policy management and real-time threat visibility contribute to reduced help desk tickets and operational costs, ensuring protection against ransomware and
unauthorized applications.
What are the key features of ThreatLocker Zero Trust Platform?
What benefits and ROI should users expect?
Organizations often deploy ThreatLocker to ensure endpoint security in industries requiring stringent application control and administrative access management. Its functionalities are critical for managing Shadow IT, creating policies, and overseeing software installation approvals. Common usage spans sectors demanding robust security and compliance, such as finance and healthcare, where maintaining high
security and efficiency is crucial.
We monitor all Advanced Threat Protection (ATP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.