Try our new research platform with insights from 80,000+ expert users

Microsoft Defender Threat Intelligence vs Microsoft Purview Data Loss Prevention comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
8.1
Microsoft Defender Threat Intelligence consolidates security, reduces costs, enhances intelligence, and effectively prevents breaches, offering significant ROI.
Sentiment score
6.7
Microsoft Purview DLP offers cost savings, security enhancements, and reduced onboarding time, though ROI varies among users.
 

Customer Service

Sentiment score
7.4
Microsoft Defender support varies, with excellent technical help praised but mixed experiences with contact ease and expertise levels.
Sentiment score
5.1
Microsoft Purview DLP support is inconsistent, with quick responses and clear resources but also delays and monopolistic concerns.
Level two support is knowledgeable and knows how the product works, which is very good.
Once we got to the Microsoft engineers, the experience was great.
 

Scalability Issues

Sentiment score
7.9
Microsoft Defender Threat Intelligence offers scalable security, favored for flexibility, ease of use, and seamless cloud integration despite potential costs.
Sentiment score
7.6
Microsoft Purview Data Loss Prevention offers scalable, flexible cloud solutions, but needs improvements in user-friendliness and device-level scalability.
If there were some customizations available, I would rate its scalability as nine out of ten.
The policy working and detection technology need enhancements.
 

Stability Issues

Sentiment score
8.3
Microsoft Defender Threat Intelligence is praised for stability, performance, security features, and resilience, despite occasional outages and delays.
Sentiment score
7.8
Microsoft Purview Data Loss Prevention is highly stable, reliable, and responsive, though minor real-time issues and internal connection challenges exist.
It provides a high level of security and avoids phishing and scam emails.
Sometimes the solution is not stable when the internal connection is not reliable, so this aspect needs improvement.
 

Room For Improvement

Microsoft Defender Threat Intelligence needs pricing, integration, support, AI, automation, and customization improvements for better affordability and usability.
Microsoft Purview DLP needs better integration, improved UI, enhanced AI features, cost-effective licensing, and better language support.
Providing code customization would help keep pace with new vulnerabilities and threats.
From the telemetry data standpoint, I would prefer Defender data to be more open in future updates.
Implementing a degree of severity ranking is essential.
Endpoint Data Loss Prevention needs to be improved as it is not up to expectations.
 

Setup Cost

Microsoft Defender Threat Intelligence is cost-effective in E5 bundles but can be complex and costly standalone for SMEs.
Microsoft Purview DLP in E5 licenses offers competitive pricing and flexible payment, valued for security features and added services.
 

Valuable Features

Microsoft Defender Threat Intelligence integrates globally informed threat detection with seamless Microsoft product integration for comprehensive, automated protection and analysis.
Microsoft Purview DLP enhances data security with auto-labeling, multi-cloud support, cross-platform protection, and strong compliance features.
One of the best features is that it provides a certain level of customization, allowing us to set our spam confidence levels.
Our threat detection is enhanced due to the AI agents in Microsoft Defender Threat Intelligence, which helps in detecting automatically.
The feature I find most valuable that I'm currently using is the quickness of the emails that the Microsoft Purview Data Loss Prevention solution sends to us, where we get notifications that say a user has potentially breached our data guideline rules, and we get those alerts continuously, allowing us to enforce them manually.
Microsoft Purview Data Loss Prevention usually performs well, except for endpoint Data Loss Prevention, which may need improvements.
 

Categories and Ranking

Microsoft Defender Threat I...
Ranking in Microsoft Security Suite
15th
Average Rating
8.4
Reviews Sentiment
7.4
Number of Reviews
32
Ranking in other categories
Advanced Threat Protection (ATP) (10th), Threat Intelligence Platforms (4th)
Microsoft Purview Data Loss...
Ranking in Microsoft Security Suite
16th
Average Rating
7.8
Reviews Sentiment
6.8
Number of Reviews
22
Ranking in other categories
Data Loss Prevention (DLP) (1st)
 

Mindshare comparison

As of August 2025, in the Microsoft Security Suite category, the mindshare of Microsoft Defender Threat Intelligence is 0.6%, up from 0.3% compared to the previous year. The mindshare of Microsoft Purview Data Loss Prevention is 2.8%, up from 2.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Microsoft Security Suite
 

Featured Reviews

TapabrataSamanta - PeerSpot reviewer
A cost-effective solution for monitoring and security but lacks supports for non-Microsoft products
There are weaknesses, and Microsoft is working on addressing them. Over the past three to four years, the ATP and other components have improved significantly, and the integration has also advanced. We are using third-party services. While we have Microsoft Threat Intelligence, which leverages Microsoft's facilities, we also utilize additional third-party threat intelligence. As of today, we don't completely rely on Microsoft for certain regions. This is an area where Microsoft needs to improve. Consequently, we use Anomali, a third-party threat intelligence provider. We integrate our product's intelligence with Anomali, from which we obtain threat insights. Microsoft products offer significant advantages, especially in the realm of threat intelligence. It works very well with Microsoft products. However, you might need additional services if you have non-Microsoft products in your environment. For instance, if you use Apple or Linux, Microsoft's solutions alone might not be sufficient. If they can work more effectively, especially with zero-day attack speed and other sophisticated threats, it will help us provide our customers with timely newsletters about new attacks.
HosmanRodriguez - PeerSpot reviewer
Nice dashboard, good data loss prevention, and helps with compliance
The data loss prevention is great. It can prevent things like credit card information from being taken. The data protection is excellent. We can use the solution on Windows and iOS. We mostly use it with Office 365 and ingest data sources from Microsoft. The solution is natively integrated and compliant across Azure. It takes into account critical regulations from around the world. We need to comply with various regulations. For our business case, it's very important. If we can prevent information from going out, eventually, when a regulator is asking about our security measures, we can show what we've been doing. It helps us to reduce the likelihood of potential fines. We can educate users on how to handle sensitive data. By showing the records we keep and explaining the technologies implemented, we can provide awareness to our users. The solution offers good visibility into our environment. Our security team can use the product to monitor and track. Its dashboard allows us to show compliance in real-time. We've been able to reduce the time to action on insider threats. Security permissions are always being monitored. In general, it has saved us time and money when dealing with security. It's made us become more efficient. We've increased our compliance capabilities by 25%.
report
Use our free recommendation engine to learn which Microsoft Security Suite solutions are best for your needs.
865,384 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Computer Software Company
15%
Educational Organization
12%
Manufacturing Company
8%
Financial Services Firm
15%
Computer Software Company
12%
Manufacturing Company
8%
Insurance Company
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Microsoft Defender Threat Intelligence?
It just runs in the background. I don't have to worry about, making sure it's Intelligence. So, you know, this kind of makes it very easy, have to worry about installing. It is easy to use.
What needs improvement with Microsoft Defender Threat Intelligence?
From the telemetry data standpoint, I would prefer Defender data to be more open in future updates.
What is your primary use case for Microsoft Defender Threat Intelligence?
We have tried Microsoft Defender Threat Intelligence. I have expertise with Microsoft Defender products. I am not familiar with Microsoft Defender for IoT because we did not use that in our environ...
What do you like most about Microsoft Purview Data Loss Prevention?
The most valuable features are identifying sensitive data and issuing alerts.
What is your experience regarding pricing and costs for Microsoft Purview Data Loss Prevention?
My experience with the pricing, setup costs, and licensing is not something I manage directly since I'm the owner operator; my colleagues might be more involved with that aspect as we have other te...
What needs improvement with Microsoft Purview Data Loss Prevention?
Improving Microsoft Purview Data Loss Prevention would involve recognizing that the whole AI path we are all on is going to help, given the massive amount of data we handle; even if there are true ...
 

Also Known As

No data available
Microsoft Endpoint Data Loss Prevention, MS Endpoint DLP, Microsoft Endpoint DLP
 

Overview

Find out what your peers are saying about Microsoft Defender Threat Intelligence vs. Microsoft Purview Data Loss Prevention and other solutions. Updated: July 2025.
865,384 professionals have used our research since 2012.