Try our new research platform with insights from 80,000+ expert users
reviewer2315541 - PeerSpot reviewer
Manager IT Server Operations at a energy/utilities company with 10,001+ employees
Real User
Top 20
Helps to secure workstations, laptops, and servers
Pros and Cons
  • "Microsoft Defender for Endpoint is free and part of the licensing stack of other Microsoft products."
  • "The product should reduce updates since it is hard to keep up."

What is our primary use case?

We use Microsoft Defender for Endpoint to secure our workstations, laptops, and servers. It helps us to do virus scanning and malware protection. 

What is most valuable?

Microsoft Defender for Endpoint is free and part of the licensing stack of other Microsoft products. 

What needs improvement?

The product should reduce updates since it is hard to keep up. 

For how long have I used the solution?

I have been using the product for three to four years. 

Buyer's Guide
Microsoft Defender for Endpoint
April 2025
Learn what your peers think about Microsoft Defender for Endpoint. Get advice and tips from experienced pros sharing their opinions. Updated: April 2025.
850,076 professionals have used our research since 2012.

How was the initial setup?

The tool's deployment was simple. It took about a month to complete since we have over 5000 servers across various platforms. 

What other advice do I have?

Microsoft Defender for Endpoint helps us save time since we don't have to keep a separate semantic console. 

We can see the threats as soon as they come in. Our security team gets notifications. 

I rate it an eight out of ten. 

Which deployment model are you using for this solution?

On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
reviewer1701507 - PeerSpot reviewer
Delivery manager at a computer software company with 201-500 employees
MSP
One-stop solution with data capture, analytics, and threat intelligence
Pros and Cons
  • "It captures data through machine learning, which is built-in on the back-end. It also provides built-in analytics and a threat intelligence feature. It is a one-stop solution that doesn't require an antivirus because it comes prebuilt into Windows 10."
  • "Sometimes, there are different skews. In a basic skew, they should have basic log analysis without the need to integrate with any third-party or SIEM solutions, like Sentinel. This would make it so much easier for users who don't have log collection or log analysis."

What is our primary use case?

I lead a delivery team. I have a team of about 20 technology specialists and we do the deployment for Microsoft Defender.

Instead of having a third-party antivirus, then you can have a Microsoft ecosystem for your entire endpoint protection. 

What is most valuable?

This solution has its own sensors, which is its best feature. It senses the behavior of your endpoints, whether it is logged in from a particular location or external of that location. 

It captures data through machine learning, which is built-in on the back-end. It also provides built-in analytics and a threat intelligence feature. It is a one-stop solution that doesn't require an antivirus because it comes prebuilt into Windows 10.

What needs improvement?

Sometimes, there are different skews. In a basic skew, they should have basic log analysis without the need to integrate with any third-party or SIEM solutions, like Sentinel. This would make it so much easier for users who don't have log collection or log analysis.

For how long have I used the solution?

We have been using it for a year.

What do I think about the stability of the solution?

This solution is very much stable.

What do I think about the scalability of the solution?

This solution is scalable. It is a cloud solution.

If you have the Microsoft Azure ecosystem, you can collect logs and view them through Sentinel. You can also onboard your devices within Intune. 

You can integrate Microsoft Defender for Endpoint with different Microsoft solutions, e.g., Defender for Cloud, Sentinel, Endpoint Manager for onboarding of Intune, and Defender for Office 365.

We have a large number of customers.

How are customer service and support?

Premium support is okay. Professional support is not as good because it is free. You must wait because you are not paying.

How was the initial setup?

The initial setup was straightforward. There was nothing rocket science to it. It didn't take much time as we just enrolled the device and assigned the licenses, then it was done.

You just prepare it, doing a license evaluation licensing and some network configuration, then you can onboard your device.

What about the implementation team?

We do the implementation ourselves. We find it easy to deploy. We help customers adopt the solution and get better ROI.

What's my experience with pricing, setup cost, and licensing?

They have to pay for the Defender license. There are different licenses and skews, such as Plan 1, Plan 2, or the trial.

You do not need to pay any additional costs for antivirus and anti-malware solutions for endpoint protection. 

What other advice do I have?

Anyone on Windows 10 Enterprise should choose this solution.

It really depends on the volume. You need one senior architect who can just define the entire thing: the device, network configuration, etc. You will also need some Level 1 engineers who need to keep on monitoring the devices and do onboarding. If they are using the latest version of Windows 10, then you can do the onboarding via Intune, Endpoint, etc. 

My rating for this solution is an eight out of 10.

Which deployment model are you using for this solution?

Public Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Microsoft Azure
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
PeerSpot user
Buyer's Guide
Microsoft Defender for Endpoint
April 2025
Learn what your peers think about Microsoft Defender for Endpoint. Get advice and tips from experienced pros sharing their opinions. Updated: April 2025.
850,076 professionals have used our research since 2012.
ZakiAhmad - PeerSpot reviewer
Principal Architect at KAS IT Global
Real User
Reliable with a good online community and an easy initial setup
Pros and Cons
  • "It does not make Windows slow, as compared to all of the third part antiviruses."
  • "We would like more customization."

What is our primary use case?

The solution is primarily used for antivirus and malware protection.

How has it helped my organization?

It definitely improves the organization in terms of security and productivity. We integrate the Defender with the Microsoft Cloud platform as well. It provides us with sandboxing and other functionalities in real time, where we can have the protection we need. 

It's integrated with advanced threat analysis so we can see how the threat is coming into our network, what it is doing, and more. We can see everything step by step if a threat comes, including how this threat impacted the organization, et cetera.

What is most valuable?

The first thing which I noticed is that it is completely compatible with Windows. It does not make Windows slow, as compared to all of the third part antiviruses.

The stability has been good.

Technical support is helpful and they have a very robust online community as well.

The product can scale very well.

What needs improvement?

We would like more customization, actually. They're not too customizable. We'd like the flexibility to be able to set some applications on a white list. We need more options. 

For how long have I used the solution?

I've used the solution for approximately five years. 

What do I think about the stability of the solution?

The solution is stable and responsive. 

What do I think about the scalability of the solution?

We have the solution deployed to around 350 users across four different locations.

It can scale to the thousands and thousands. I have seen customers here, some have approximately 12,000 devices and they're running that one program and it's going far without any issues. 

How are customer service and support?

Technical support is good. They know things about the solution. The best part is that if anything happens, the Microsoft community is so big that any problem comes up, you can also just Google it and you will get the solution.

Which solution did I use previously and why did I switch?

We used McAfee and another solution as well and they both are great and amazing, however, they make PCs slow and every time something happens you have to call the vendor and they will help you support. The difference is, with Defender, it doesn't slow things done and you never have to call Microsoft.

How was the initial setup?

The initial setup is very straightforward. IT is actually my default. We actually helped our end-users with system centers, integrated Defender updates, Defender itself, patching, and Defender configuration using the consent and configuration manager. It's simple. It's not complex to set it up or manage.

It's a bulk operation to set it up, therefore, even if you have 100 PCs, it will only take you about an hour and you will be up and running with everyone. You only need one to two percent of your staff to handle the deployment and maintenance tasks. 

What about the implementation team?

We used an integrator during the initial setup. They were quite helpful. Our experience with them was good. 

What was our ROI?

We have seen an ROI.

What's my experience with pricing, setup cost, and licensing?

The solution is free for end-users. 

What other advice do I have?

While we have the solution set up on our private cloud, you can also use a hybrid setup if that's better for your organization. 

I would advise new users to connect it with an endpoint manager and connect it with the cloud and then let the real magic happen.

I'd rate the solution an eight out of ten.

Which deployment model are you using for this solution?

Private Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Microsoft Azure
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
PeerSpot user
Peter Arabomen - PeerSpot reviewer
Security Engineering, Team Lead at Fidelity Bank Plc
Real User
Top 5
Stable solution that protects networks against viruses and malware; good for endpoint management
Pros and Cons
  • "Stable endpoint manager, antivirus, and antimalware, with fast technical support and a straightforward setup."
  • "More integration with different platforms is an area for improvement for this product, and should be included in its next release."

What is our primary use case?

We use Microsoft Defender for Endpoint as an antivirus and antimalware solution. We also use it for endpoint management.

What needs improvement?

What I'd like included in the next release of Microsoft Defender for Endpoint is more integration with different platforms.

For how long have I used the solution?

We've been using Microsoft Defender for Endpoint for four years.

What do I think about the stability of the solution?

Microsoft Defender for Endpoint is stable, except for occasional internet connection issues, but it's stable.

How are customer service and support?

We contact the technical support team for this solution whenever we have an issue, and once you open a ticket, they respond as quickly as possible, though it would still depend on the severity level that you define.

How was the initial setup?

The initial setup for Microsoft Defender for Endpoint was straightforward. It wasn't complicated.

What's my experience with pricing, setup cost, and licensing?

We pay for our Microsoft Defender for Endpoint subscription yearly.

What other advice do I have?

We've been working with various Microsoft solutions, e.g. Microsoft Defender for Endpoint, Microsoft Azure, etc.

Microsoft Defender for Endpoint has been awesome, so far.

I wasn't around during the setup of the solution, so I have no idea on how long setting it up took.

We have 6,000 end users of Microsoft Defender for Endpoint within the company, and it's being used on workstations, servers, and mobile devices.

I'm rating Microsoft Defender for Endpoint nine out of ten. I found it to be a good product. It's a fine product.

Which deployment model are you using for this solution?

Public Cloud
Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
Daniel Bagley - PeerSpot reviewer
Information Security Officer at Church of England
Real User
Scalable, good support, and straightforward implementation
Pros and Cons
  • "The technical support from Microsoft is very good. We are part of the Microsoft Suite, and from being part of this we have consistent news regarding Microsoft Defender for Endpoint."
  • "Microsoft Defender for Endpoint could improve by making the reporting better."

What is our primary use case?

We use Microsoft Defender for Endpoint for network and endpoint protection.

What needs improvement?

Microsoft Defender for Endpoint could improve by making the reporting better.

For how long have I used the solution?

I have been using Microsoft Defender for Endpoint for approximately three years.

What do I think about the stability of the solution?

Microsoft Defender for Endpoint is stable in my usage.

What do I think about the scalability of the solution?

I have found Microsoft Defender for Endpoint to be scalable.

We have approximately 700 people using this solution and we plan to increase usage.

How are customer service and support?

The technical support from Microsoft is very good. We are part of the Microsoft Suite, and from being part of this we have consistent news regarding Microsoft Defender for Endpoint.

Which solution did I use previously and why did I switch?

I have previously used ESET.

How was the initial setup?

The initial setup of Microsoft Defender for Endpoint was straightforward. 

What about the implementation team?

We have two engineers that do the implementation and maintenance of Microsoft Defender for Endpoint.

What other advice do I have?

Microsoft Defender for Endpoint has improved a lot over the years and it is a lot better now.

I would recommend this solution to others.

I rate Microsoft Defender for Endpoint an eight out of ten.

Which deployment model are you using for this solution?

Public Cloud
Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
Cyber Security Specialist at a healthcare company with 10,001+ employees
Real User
Good support and valuable EDR feature, but not stable and not suitable for enterprises with lots of other processes and third-party tools
Pros and Cons
  • "The EDR feature is most valuable."
  • "It is currently more suitable for end-users rather than enterprises with lots of other processes and third-party tools. It needs improvement on that front. We had many issues while integrating it with our enterprise solutions, such as Splunk, and third-party tools. It provides everything via APIs. Other vendors provide integration with third-party tools, but Microsoft doesn't do that. It is also logging too much and is not serialized from the process aspect. It has all the data, but it is not in a proper format or not properly indexed, which doesn't make it easier for enterprises to use this data. Other vendors provide troubleshooting information that can be used to troubleshoot issues, but Microsoft doesn't provide anything like that."

What is our primary use case?

We use it for our endpoint detection and response capability.

What is most valuable?

The EDR feature is most valuable.

What needs improvement?

It is currently more suitable for end-users rather than enterprises with lots of other processes and third-party tools. It needs improvement on that front. We had many issues while integrating it with our enterprise solutions, such as Splunk, and third-party tools. It provides everything via APIs. Other vendors provide integration with third-party tools, but Microsoft doesn't do that.

It is also logging too much and is not serialized from the process aspect. It has all the data, but it is not in a proper format or not properly indexed, which doesn't make it easier for enterprises to use this data.

Other vendors provide troubleshooting information that can be used to troubleshoot issues, but Microsoft doesn't provide anything like that.

For how long have I used the solution?

I have been using this solution for six months.

What do I think about the stability of the solution?

It is still a new product, and there are many reported bugs in terms of stability and impact on the endpoints.

What do I think about the scalability of the solution?

We have around 80,000 users.

How are customer service and technical support?

They are good. They take a little bit of time, but they are good.

How was the initial setup?

It was very complex. We had many issues in integrating it with our enterprise solutions, such as Splunk, and third-party tools.

What about the implementation team?

We have seven or eight engineers for its maintenance.

What other advice do I have?

I would recommend this solution to others if they don't have many third-party tools. It is a very good solution.

I would rate Microsoft Defender for Endpoint a seven out of ten.

Which deployment model are you using for this solution?

On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
Nadeem Abdulla - PeerSpot reviewer
Assistant Manager IT Infrastructure at a manufacturing company with 501-1,000 employees
Real User
Top 20
Stable threat protection with good support but it's expensive and has license restrictions
Pros and Cons
  • "It shows us the risky sign-ins, and if a user's password has been compromised."
  • "I am not sure if I will be using this product in the future because of the price."

What is our primary use case?

We are using this solution for threat detection.

What is most valuable?

It shows us the risky sign-ins, and if a user's password has been compromised.

What needs improvement?

While have been using this solution for two years, I am not completely knowledgable. 

Due to license restrictions, we cannot use all of the features that are offered.

I am not sure if I will be using this product in the future because of the price.

I would like to see better pricing for this solution in the future.

For how long have I used the solution?

I have been working with Microsoft Defender ATP for two years.

We are always using the latest version because it's on the cloud.

What do I think about the stability of the solution?

With what we have seen, it's a stable solution.

What do I think about the scalability of the solution?

We are not using it widely because of the licensing limits.

We have three users only for Defender ATP, and if we are using the Microsoft ATA it applies to 500 users.

How are customer service and technical support?

Technical support is good.

Which solution did I use previously and why did I switch?

We did not use another solution previous to Microsoft Defender ATP.

How was the initial setup?

The initial setup is straightforward. It's included with the Windows 10 Operating System.

There is no time taken for deployment as it is included with the operating system.

What about the implementation team?

We completed the installation ourselves.

We have 15 administrators to deploy and maintain this solution.

What's my experience with pricing, setup cost, and licensing?

Microsoft Defender ATP is expensive.

What other advice do I have?

Because of my lack of knowledge or experience with the solutions full capacity, I cannot recommend this solution or offer any advice.

I would rate this solution a five out of ten.

Which deployment model are you using for this solution?

Public Cloud
Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
‎Microsoft Enterprise administrator at a comms service provider with 1,001-5,000 employees
Real User
Has prevented all viruses since we implemented it
Pros and Cons
  • "It's really stable. I've used a lot of stuff, a lot of products, like ESET and Kaspersky. None of them are comparable with this one. This one is much better."
  • "The end-user also cannot do some advanced actions on it. It's a little bit complicated for our end-user, so it needs to be simplified."

What is most valuable?

The solution is really fast. I have never experienced any viruses since I've been using it.

What needs improvement?

I think the console can be better.

The end-user also cannot do some advanced actions on it. It's a little bit complicated for our end-user, so it needs to be simplified.

I think the solution is complicated. This one is one of the concerns that I like to talk about because some end-users do not know how to navigate through the console and how to work with them. I think this is not such a big deal, but I know that there will be other things that may be important to us like, how we can centrally manage users and reports are really important for us. For example, in Kaspersky, we had a problem where we couldn't detect the attacks that we had in some of our zones in our data center. I think if Microsoft Windows Defender can report these things, it's going to be great.

For how long have I used the solution?

I've been using the solution for six years.

What do I think about the stability of the solution?

It's really stable. I've used a lot of products, like ESET and Kaspersky. None of them are comparable with this one. This one is much better.

What do I think about the scalability of the solution?

To scale the solution, I think you need more licenses but I'm not sure. We have 100 to 1,000 users. We just use it for some end users, not for all the users. The users are mainly end-users and a few admins. We plan to increase users annually.

Which solution did I use previously and why did I switch?

We used other solutions, like ESET and Kaspersky. We had to change at first due to user complaints, especially about Kaspersky, because it used a lot of the resources. So we switched to ESET but after some time we just switched to Windows Defender

How was the initial setup?

The initial setup was really easy, a no brainer.

What about the implementation team?

I installed the solution on my own.

What other advice do I have?

I would recommend the solution because I can confidently tell everyone that this product is working very well and it's stable. You are always sure that they are able to deal with a virus or something else that may interrupt your work.

I would rate this solution nine out of 10.

Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
Buyer's Guide
Download our free Microsoft Defender for Endpoint Report and get advice and tips from experienced pros sharing their opinions.
Updated: April 2025
Buyer's Guide
Download our free Microsoft Defender for Endpoint Report and get advice and tips from experienced pros sharing their opinions.