Try our new research platform with insights from 80,000+ expert users

Microsoft Defender Threat Intelligence vs Microsoft Purview Insider Risk Management comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Microsoft Defender Threat I...
Ranking in Microsoft Security Suite
16th
Average Rating
8.4
Reviews Sentiment
7.4
Number of Reviews
31
Ranking in other categories
Advanced Threat Protection (ATP) (10th), Threat Intelligence Platforms (TIP) (4th)
Microsoft Purview Insider R...
Ranking in Microsoft Security Suite
29th
Average Rating
8.0
Reviews Sentiment
5.4
Number of Reviews
4
Ranking in other categories
Insider Risk Management (2nd)
 

Mindshare comparison

As of October 2025, in the Microsoft Security Suite category, the mindshare of Microsoft Defender Threat Intelligence is 0.9%, up from 0.4% compared to the previous year. The mindshare of Microsoft Purview Insider Risk Management is 1.9%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Microsoft Security Suite Market Share Distribution
ProductMarket Share (%)
Microsoft Defender Threat Intelligence0.9%
Microsoft Purview Insider Risk Management1.9%
Other97.2%
Microsoft Security Suite
 

Featured Reviews

TapabrataSamanta - PeerSpot reviewer
A cost-effective solution for monitoring and security but lacks supports for non-Microsoft products
There are weaknesses, and Microsoft is working on addressing them. Over the past three to four years, the ATP and other components have improved significantly, and the integration has also advanced. We are using third-party services. While we have Microsoft Threat Intelligence, which leverages Microsoft's facilities, we also utilize additional third-party threat intelligence. As of today, we don't completely rely on Microsoft for certain regions. This is an area where Microsoft needs to improve. Consequently, we use Anomali, a third-party threat intelligence provider. We integrate our product's intelligence with Anomali, from which we obtain threat insights. Microsoft products offer significant advantages, especially in the realm of threat intelligence. It works very well with Microsoft products. However, you might need additional services if you have non-Microsoft products in your environment. For instance, if you use Apple or Linux, Microsoft's solutions alone might not be sufficient. If they can work more effectively, especially with zero-day attack speed and other sophisticated threats, it will help us provide our customers with timely newsletters about new attacks.
Karthik Ekambaram - PeerSpot reviewer
Have consistently built secure internal environments while implementing compliance tools for diverse customer needs
The customizable alerts system needs improvement. The detection rules are not extensive enough. There should be more possibilities for creating alerts based on additional criteria. While rules can be customized, the available criteria for creating detection rules should be expanded. Microsoft's pricing is very expensive. The Business Premium offering should be extended to enterprise customers, as it's currently limited to 300 users. There should be a tier below E5 that includes Microsoft Purview and other features. Currently, E5 licensing costs approximately 6,000 INR per user per month including taxes. Competitive solutions offer similar functionality at about 50% of Microsoft's cost. Email DLP is included in Business Premium or P1 licenses, while P2 licenses cover endpoint DLP and additional channels. Microsoft should introduce an intermediate tier below E5 that covers all P1 licenses, as customers often need coverage across the entire M365 suite.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Offers easy integration with a cloud-based infrastructure"
"Microsoft collects trillions of signals from all over the world, which is incredibly valuable. It helps us identify zero-day vulnerabilities and global threats."
"It is very scalable. There are approximately 2,000 endpoints and up to 200 servers in our company."
"The solution is well integrated with other Microsoft security products."
"The solution is one suite covering everything from email protection to threat intelligence and vulnerability scanning."
"They have a very transparent roadmap for the product."
"It helps to monitor by providing the best 24/7 monitoring integrated with Sentinel and IBM systems."
"The global review and remediation of malicious code is probably the most valuable feature."
"Microsoft Purview Insider Risk Management was helpful in performing investigations after alerts were received."
"The scoring mechanism is exceptional because it eliminates the need to reinvent criteria for identifying risks, misconfigurations, or vulnerabilities."
"The best thing about Purview is that it's easy to integrate with our day-to-day environment. We have Active Directory, and Word and Excel. Using a third-party vendor and trying to integrate with our existing environment would be much more challenging."
"Insider Risk Management's graphing is highly specific and useful. You can see the last six months of data for the Microsoft tenant. You can easily find what you need. For example, you can filter for alerts about devices, emails, etc."
 

Cons

"The price of the solution is an area of concern where improvements are required. In general, the solution's price needs to be reduced."
"It takes time for the support team to understand the issue, and they then respond with a delay at times, which causes a lot of trouble."
"The price point is something they can improve slightly for those who don't have an M 365 E5."
"I would like to see more integration with other solutions. For example, integration well with Microsoft but not with other solutions."
"One area that can be improved is reducing false positives."
"Non-Microsoft products may not integrate as smoothly."
"Technical support could be a bit better."
"There could be a better notification system."
"Microsoft's pricing is very expensive. The Business Premium offering should be extended to enterprise customers, as it's currently limited to 300 users."
"The user interface also isn't user-friendly. When we introduce Insider Risk Management to our clients, they often find it difficult to understand. There is too much information, and the UI is not scalable. Also, entry-level IT technicians are not always interested in learning something new. It should be clearer and easier to understand."
"For certain things, you need to install an agent. I understand it's for integrity, but if there could be a clientless solution for certain aspects, it would make life easier."
"The reporting capabilities sometimes leave a little to be desired. It could be improved in terms of producing reports to provide information to the C-suite or others."
 

Pricing and Cost Advice

"The solution's pricing is reasonable and not very expensive."
"On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing a six or seven out of ten."
"The product has multiple subscription models."
"I use the product's default version, which is a free one and not the licensed version."
"The product’s pricing is worth it."
"It's reasonably priced, though there's room for further improvement."
"The solution is relatively expensive; however, our status as a gold partner provides us with several complimentary licenses, which offsets the cost."
"I rate the product's price a six or seven on a scale of one to ten, where one is expensive, and ten is cheap."
Information not available
report
Use our free recommendation engine to learn which Microsoft Security Suite solutions are best for your needs.
869,513 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
16%
Computer Software Company
13%
Educational Organization
10%
Manufacturing Company
9%
Computer Software Company
37%
Financial Services Firm
8%
Manufacturing Company
5%
Comms Service Provider
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise2
Large Enterprise15
No data available
 

Questions from the Community

What do you like most about Microsoft Defender Threat Intelligence?
It just runs in the background. I don't have to worry about, making sure it's Intelligence. So, you know, this kind of makes it very easy, have to worry about installing. It is easy to use.
What needs improvement with Microsoft Defender Threat Intelligence?
From the telemetry data standpoint, I would prefer Defender data to be more open in future updates.
What is your primary use case for Microsoft Defender Threat Intelligence?
We have tried Microsoft Defender Threat Intelligence. I have expertise with Microsoft Defender products. I am not familiar with Microsoft Defender for IoT because we did not use that in our environ...
What needs improvement with Microsoft Purview Insider Risk Management?
The reporting capabilities sometimes leave a little to be desired. It could be improved in terms of producing reports to provide information to the C-suite or others.
What is your primary use case for Microsoft Purview Insider Risk Management?
The primary use case for Microsoft Purview Insider Risk Management was data loss prevention. This was my main objective.
What advice do you have for others considering Microsoft Purview Insider Risk Management?
I would recommend Microsoft Purview Insider Risk Management to others. I would rate the overall solution as a nine.
 

Also Known As

No data available
Microsoft Insider Risk Management
 

Overview

Find out what your peers are saying about Microsoft Defender Threat Intelligence vs. Microsoft Purview Insider Risk Management and other solutions. Updated: September 2025.
869,513 professionals have used our research since 2012.