Try our new research platform with insights from 80,000+ expert users

Microsoft Defender Threat Intelligence vs Microsoft Purview Data Loss Prevention comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
8.1
Microsoft Defender Threat Intelligence consolidates security, reduces costs, enhances intelligence, and effectively prevents breaches, offering significant ROI.
Sentiment score
6.7
Microsoft Purview DLP offers cost savings, security enhancements, and reduced onboarding time, though ROI varies among users.
 

Customer Service

Sentiment score
7.4
Microsoft Defender support varies, with excellent technical help praised but mixed experiences with contact ease and expertise levels.
Sentiment score
5.1
Microsoft Purview DLP support is inconsistent, with quick responses and clear resources but also delays and monopolistic concerns.
Level two support is knowledgeable and knows how the product works, which is very good.
Once we got to the Microsoft engineers, the experience was great.
 

Scalability Issues

Sentiment score
7.9
Microsoft Defender Threat Intelligence offers scalable security, favored for flexibility, ease of use, and seamless cloud integration despite potential costs.
Sentiment score
7.6
Microsoft Purview Data Loss Prevention offers scalable, flexible cloud solutions, but needs improvements in user-friendliness and device-level scalability.
If there were some customizations available, I would rate its scalability as nine out of ten.
The policy working and detection technology need enhancements.
 

Stability Issues

Sentiment score
8.3
Microsoft Defender Threat Intelligence is praised for stability, performance, security features, and resilience, despite occasional outages and delays.
Sentiment score
7.8
Microsoft Purview Data Loss Prevention is highly stable, reliable, and responsive, though minor real-time issues and internal connection challenges exist.
It provides a high level of security and avoids phishing and scam emails.
Sometimes the solution is not stable when the internal connection is not reliable, so this aspect needs improvement.
 

Room For Improvement

Microsoft Defender Threat Intelligence needs pricing, integration, support, AI, automation, and customization improvements for better affordability and usability.
Microsoft Purview DLP needs better integration, improved UI, enhanced AI features, cost-effective licensing, and better language support.
Providing code customization would help keep pace with new vulnerabilities and threats.
From the telemetry data standpoint, I would prefer Defender data to be more open in future updates.
Implementing a degree of severity ranking is essential.
Endpoint Data Loss Prevention needs to be improved as it is not up to expectations.
 

Setup Cost

Microsoft Defender Threat Intelligence is cost-effective in E5 bundles but can be complex and costly standalone for SMEs.
Microsoft Purview DLP in E5 licenses offers competitive pricing and flexible payment, valued for security features and added services.
 

Valuable Features

Microsoft Defender Threat Intelligence integrates globally informed threat detection with seamless Microsoft product integration for comprehensive, automated protection and analysis.
Microsoft Purview DLP enhances data security with auto-labeling, multi-cloud support, cross-platform protection, and strong compliance features.
One of the best features is that it provides a certain level of customization, allowing us to set our spam confidence levels.
Our threat detection is enhanced due to the AI agents in Microsoft Defender Threat Intelligence, which helps in detecting automatically.
The feature I find most valuable that I'm currently using is the quickness of the emails that the Microsoft Purview Data Loss Prevention solution sends to us, where we get notifications that say a user has potentially breached our data guideline rules, and we get those alerts continuously, allowing us to enforce them manually.
Microsoft Purview Data Loss Prevention usually performs well, except for endpoint Data Loss Prevention, which may need improvements.
 

Categories and Ranking

Microsoft Defender Threat I...
Ranking in Microsoft Security Suite
15th
Average Rating
8.4
Reviews Sentiment
7.4
Number of Reviews
32
Ranking in other categories
Advanced Threat Protection (ATP) (10th), Threat Intelligence Platforms (4th)
Microsoft Purview Data Loss...
Ranking in Microsoft Security Suite
17th
Average Rating
7.8
Reviews Sentiment
6.8
Number of Reviews
22
Ranking in other categories
Data Loss Prevention (DLP) (1st)
 

Mindshare comparison

As of July 2025, in the Microsoft Security Suite category, the mindshare of Microsoft Defender Threat Intelligence is 0.5%, up from 0.4% compared to the previous year. The mindshare of Microsoft Purview Data Loss Prevention is 2.7%, up from 2.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Microsoft Security Suite
 

Featured Reviews

TapabrataSamanta - PeerSpot reviewer
A cost-effective solution for monitoring and security but lacks supports for non-Microsoft products
There are weaknesses, and Microsoft is working on addressing them. Over the past three to four years, the ATP and other components have improved significantly, and the integration has also advanced. We are using third-party services. While we have Microsoft Threat Intelligence, which leverages Microsoft's facilities, we also utilize additional third-party threat intelligence. As of today, we don't completely rely on Microsoft for certain regions. This is an area where Microsoft needs to improve. Consequently, we use Anomali, a third-party threat intelligence provider. We integrate our product's intelligence with Anomali, from which we obtain threat insights. Microsoft products offer significant advantages, especially in the realm of threat intelligence. It works very well with Microsoft products. However, you might need additional services if you have non-Microsoft products in your environment. For instance, if you use Apple or Linux, Microsoft's solutions alone might not be sufficient. If they can work more effectively, especially with zero-day attack speed and other sophisticated threats, it will help us provide our customers with timely newsletters about new attacks.
Roby Skariah - PeerSpot reviewer
Automation has given us consistent analytics and improved quality of insights into user activity
One of the valuable features of Purview is the ability to create a legal hold on a user's account within the compliance portal. That's pretty useful when it comes to any litigation or if you want to redeem the content within a mailbox, OneDrive, or a generic public SharePoint site. If you want to retain the user's data until the case is resolved, you can use the legal hold feature. Also, it's important that Purview can connect to iOS, Mac, and Android devices. With smartphone involvement, so many applications can now be accessed through them and it is important to apply Purview across operating systems and platforms. Purview's natively integrated compliance across Azure Dynamics and Office 365 is also significant because within Microsoft 365 there are multiple applications. Irrespective of whether it's Dynamics or Azure, it's very important that it has native support. The data connectivity should be efficient enough to support and secure their own platform's data. In addition, with varying regulations in different industries and matters, Purview lets you create rules and conditions based on industry standards around the world. That is important. Our company is in pharmaceuticals and the rules and conditions are different from other industries. It is important to be able to keep track of all these regulations and have a tool that is flexible enough to create the regulatory rules and conditions we need. And when it comes to data loss protection, Purview has features that can recognize patterns and detect any sort of data loss, where the data is being transferred from its platform to a different one. The default settings that come with it are pretty nice for identifying data transfer or data loss across the platform. It also comes with a lot of training materials, with use cases and examples, to help educate users and make them familiar with the tool.
report
Use our free recommendation engine to learn which Microsoft Security Suite solutions are best for your needs.
860,592 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
16%
Financial Services Firm
13%
Educational Organization
12%
Manufacturing Company
8%
Financial Services Firm
15%
Computer Software Company
12%
Manufacturing Company
8%
Insurance Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Microsoft Defender Threat Intelligence?
It just runs in the background. I don't have to worry about, making sure it's Intelligence. So, you know, this kind of makes it very easy, have to worry about installing. It is easy to use.
What needs improvement with Microsoft Defender Threat Intelligence?
From the telemetry data standpoint, I would prefer Defender data to be more open in future updates.
What is your primary use case for Microsoft Defender Threat Intelligence?
We have tried Microsoft Defender Threat Intelligence. I have expertise with Microsoft Defender products. I am not familiar with Microsoft Defender for IoT because we did not use that in our environ...
What do you like most about Microsoft Purview Data Loss Prevention?
The most valuable features are identifying sensitive data and issuing alerts.
What is your experience regarding pricing and costs for Microsoft Purview Data Loss Prevention?
My experience with the pricing, setup costs, and licensing is not something I manage directly since I'm the owner operator; my colleagues might be more involved with that aspect as we have other te...
What needs improvement with Microsoft Purview Data Loss Prevention?
Improving Microsoft Purview Data Loss Prevention would involve recognizing that the whole AI path we are all on is going to help, given the massive amount of data we handle; even if there are true ...
 

Also Known As

No data available
Microsoft Endpoint Data Loss Prevention, MS Endpoint DLP, Microsoft Endpoint DLP
 

Overview

Find out what your peers are saying about Microsoft Defender Threat Intelligence vs. Microsoft Purview Data Loss Prevention and other solutions. Updated: June 2025.
860,592 professionals have used our research since 2012.