I use Microsoft Defender for Endpoint to protect my computer when downloading files. Whether it's documents from my email or web browser, this is the first thing I use the solution for. It also provides protection against ransomware. Additionally, the monthly report indicates the number of infected files that were blocked during that month.
Technical Account Manager at a comms service provider with 201-500 employees
Helps prioritize threats, and protects against ransomware, but threat detection could use some improvement
Pros and Cons
- "The ransomware and malware protection is the most valuable feature."
- "Microsoft Defender for Endpoint is effective for validating work, but not ideal for investigations."
What is our primary use case?
How has it helped my organization?
Microsoft Defender for Endpoint provides excellent visibility into known threats, thanks to their comprehensive database of malware information.
Microsoft Defender for Endpoint helps us prioritize threats across our enterprise according to our needs. We focus on protecting against malware first, followed by email protection, and URLs.
Microsoft Defender for Endpoint has helped protect our organization against malware.
What is most valuable?
The ransomware and malware protection is the most valuable feature.
What needs improvement?
When there is a significant amount of malware, I believe that Microsoft Defender for Endpoint may not be as effective as other firewall solutions. I tested Microsoft Defender for Endpoint and found that it allowed me to download files infected with malware from certain sites, and its protection did not work as expected in that aspect of my work. I suspect this is because I use a GRAPH file with a password, and the solution only detects a file when it's related to clean files or open files. It doesn't seem to recognize encrypted log files that require a password for access.
Microsoft Defender for Endpoint does not assist in automating routine tasks or identifying high-value alerts. Therefore, we had to turn to other solutions like Cortex XDR by Palo Alto Networks. Additionally, Microsoft Defender for Endpoint lacks the capability to upload a list of IPs for blocking.
Microsoft Defender for Endpoint is effective for validating work, but not ideal for investigations. As a result, our experts have to dedicate more time when investigating threats using Microsoft Defender for Endpoint compared to other solutions.
The zero-day detection, as well as the sandboxing for unknown malware and URL detection, needs to be improved. These settings were not functional when we tested the solution.
Buyer's Guide
Microsoft Defender for Endpoint
September 2026
Learn what your peers think about Microsoft Defender for Endpoint. Get advice and tips from experienced pros sharing their opinions. Updated: September 2026.
915,325 professionals have used our research since 2012.
For how long have I used the solution?
I have been using Microsoft Defender for Endpoint for one year.
What do I think about the stability of the solution?
I give the stability an eight out of ten.
What do I think about the scalability of the solution?
I give the scalability a ten out of ten.
How was the initial setup?
The deployment is straightforward.
What's my experience with pricing, setup cost, and licensing?
Microsoft Defender for Endpoint is more affordable compared to some other endpoint solutions.
Which other solutions did I evaluate?
We evaluated Cortex XDR by Palo Alto Networks and Fortinet. We found that Microsoft Defender for Endpoint was easier to deploy and offered a better price.
What other advice do I have?
I would rate Microsoft Defender for Endpoint a seven out of ten. The solution is stable, easy to deploy, and scalable. However, threat detection could use some improvement.
Our organization is a cybersecurity company, and after using Microsoft Defender for Endpoint for one year, we found that it lacked features such as endpoint detection and response. Additionally, it was weak in certain areas, like detecting a set of malware and providing email protection. As a result, we started exploring other solutions, even though they may be more costly.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Founder & CEO at Pathbreaker Pty Ltd
Free, integrated with Windows, and no installation needed
Pros and Cons
- "Microsoft Defender for Endpoint comes pre-installed in Microsoft Windows."
- "Microsoft Defender for Endpoint should have more transparency. In the latest edition of Windows, Windows 11, it is a compulsory requirement to connect to a Microsoft account, which in turn has implications for Defender. This should be removed."
- "Microsoft Defender for Endpoint is a basic endpoint protection solution. If you do not combine it with another solution then you will leave yourself open to vulnerabilities."
What is our primary use case?
Microsoft Defender for Endpoint is a basic endpoint protection solution. If you do not combine it with another solution then you will leave yourself open to vulnerabilities. I used Microsoft Defender for Endpoint in conjunction with other solutions, such as Cylance.
What needs improvement?
Microsoft Defender for Endpoint should have more transparency. In the latest edition of Windows, Windows 11, it is a compulsory requirement to connect to a Microsoft account, which in turn has implications for Defender. This should be removed.
For how long have I used the solution?
I have been using Microsoft Defender for Endpoint for a few years.
How are customer service and support?
I have not called Microsoft technical support.
How was the initial setup?
Microsoft Defender for Endpoint comes pre-installed in Microsoft Windows.
What's my experience with pricing, setup cost, and licensing?
The solution comes as part of Microsoft Windows.
What other advice do I have?
I wouldn't call Microsoft Defender for Endpoint a solution, I'd call it part of a solution. I don't think I would be going around recommending it.
I rate Microsoft Defender for Endpoint an eight out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Buyer's Guide
Microsoft Defender for Endpoint
September 2026
Learn what your peers think about Microsoft Defender for Endpoint. Get advice and tips from experienced pros sharing their opinions. Updated: September 2026.
915,325 professionals have used our research since 2012.
Chief Technology Officer at a financial services firm with 1-10 employees
Easy to use, good support, but more visibility is needed
Pros and Cons
- "The most valuable features of Microsoft Defender for Endpoint are the ease of use and it was available within the operating system."
- "The biggest issue I had with Microsoft Defender for Endpoint was the antivirus and ransomware. I wanted central visibility over all the machines that we operate."
What is our primary use case?
We use Microsoft Defender for Endpoint for threat protection.
What is most valuable?
The most valuable features of Microsoft Defender for Endpoint are the ease of use and it was available within the operating system.
What needs improvement?
The biggest issue I had with Microsoft Defender for Endpoint was the antivirus and ransomware. I wanted central visibility over all the machines that we operate.
For how long have I used the solution?
I have used Microsoft Defender for Endpoint within the past 12 months.
What do I think about the scalability of the solution?
We have approximately 10 to 15 people using the solution in my organization.
How are customer service and support?
The technical support from Microsoft is good.
How was the initial setup?
The initial installation could have been easier.
What's my experience with pricing, setup cost, and licensing?
There is an annual license required.
What other advice do I have?
I rate Microsoft Defender for Endpoint a seven out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Systems Administrator at The Port Authority of Jamaica
It's a cost-effective solution for Microsoft shops
Pros and Cons
- "We are a Microsoft shop, and Defender is a Microsoft solution that provides some security at a reasonable cost."
- "I want Microsoft Defender to have the ability to deal with some issues automatically, so I don't need to address that issue manually."
What is our primary use case?
We use Defendor for endpoint monitoring. It alerts us when a machine has issues, and we take the necessary steps to resolve them.
What is most valuable?
We are a Microsoft shop, and Defender is a Microsoft solution that provides some security at a reasonable cost.
What needs improvement?
I want Microsoft Defender to have the ability to deal with some issues automatically, so I don't need to address that issue manually.
For how long have I used the solution?
We started testing our endpoints and preparing to deploy Microsoft Defender about two months ago.
What do I think about the scalability of the solution?
I would say yes, it is.
How are customer service and support?
Microsoft support is excellent.
How was the initial setup?
Deploying Microsoft Defender took some time because we had to push it through. You can install Symantec using the GUI, but we have to use the GPO to push the agent. It would be nice if Defender streamlined that.
Defender isn't 100 percent deployed yet, but it's working for some employees. When a machine comes on board, Defender will deploy an agent on that device when the script runs. A person logs on, the agent installs, and the device is onboarded.
What other advice do I have?
I rate Microsoft Defender for Endpoint eight out of 10. It's a cost-effective solution for Microsoft shops.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
IT RM at KNV
It runs in the background
Pros and Cons
- "Defender works in the background monitoring the traffic for viruses."
- "Defender could be more secure and stable."
What is our primary use case?
Defender is an antivirus solution deployed on all Microsoft PCs. Thousands of employees at my company use it.
What is most valuable?
Defender works in the background monitoring the traffic for viruses.
What needs improvement?
Defender could be more secure and stable.
For how long have I used the solution?
We've been using Microsoft Defender for a couple of years.
How was the initial setup?
Setting up Defender is straightforward. My administrator takes care of all that.
What other advice do I have?
I rate Microsoft Defender eight out of 10.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Senior Manager at Ernst & Young
Reliable with good features but needs improvements on some of the technical aspects
Pros and Cons
- "The solution can scale as needed."
- "For companies that are Microsoft shops, I would recommend the product."
- "In India at least, it seems to be a bit more expensive than other options."
What is most valuable?
The stability has been good so far.
If I compare its features to the other solutions in the market, it has some good features. It's comparable to others.
The solution can scale as needed.
What needs improvement?
In India at least, it seems to be a bit more expensive than other options.
For how long have I used the solution?
I've just recently been introduced to the product. I haven't used it for very long.
What do I think about the stability of the solution?
The stability has been fine. There are no bugs or glitches and it doesn't crash or freeze.
What do I think about the scalability of the solution?
The scalability has been great. If you need to expand, you can.
How are customer service and support?
I have never needed to contact technical support. I can't speak to how helpful or responsive they are.
What's my experience with pricing, setup cost, and licensing?
The pricing is a bit high for the Indian market.
What other advice do I have?
We are a partner and we consult clients on security solutions. It's one of the solutions we take to our clients.
For companies that are Microsoft shops, I would recommend the product. It saves a lot of integration requirements as compared to other solutions. It's a good product that does what it says it will do.
I would rate the product a seven out of ten. There are improvement opportunities in terms of the overall tech and commercial aspects of the product. It needs to be more competitive and technical.
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
Senior Software Architect at Instirute of public health
Provides good, user-friendly protection
Pros and Cons
- "Defender is stable, I haven't had any problems with viruses when using it, and it's easy to update."
- "Defender's cloud integration could be improved."
What is our primary use case?
I use Defender for protection.
What is most valuable?
The most valuable features are that Defender is user-friendly and part of Microsoft Windows.
What needs improvement?
Defender's cloud integration could be improved.
What do I think about the stability of the solution?
Defender is stable, I haven't had any problems with viruses when using it, and it's easy to update.
How was the initial setup?
The initial setup was easy.
What other advice do I have?
I would recommend Defender to anyone thinking of using it, and I rate it as eight out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Stable, embedded in Microsoft Windows, and high performance
Pros and Cons
- "The performance of Microsoft Defender for Endpoint has been good."
- "Microsoft Defender for Endpoint could improve by providing more user-friendly dashboards. They may be complicated for some."
- "The technical from Microsoft could be better. It is not as good as other solutions."
What is our primary use case?
Microsoft Defender for Endpoint is used for securing endpoints from threats.
What is most valuable?
The performance of Microsoft Defender for Endpoint has been good.
What needs improvement?
Microsoft Defender for Endpoint could improve by providing more user-friendly dashboards. They may be complicated for some.
In a future release, they should add a feature for patch management.
For how long have I used the solution?
I have been using Microsoft Defender for Endpoint for one year.
What do I think about the stability of the solution?
Microsoft Defender for Endpoint has been stable.
What do I think about the scalability of the solution?
The scalability of Microsoft Defender for Endpoint has been good.
We have approximately five clients using the solution. We have thousands of licensees for this solution within my company.
How are customer service and support?
The technical from Microsoft could be better. It is not as good as other solutions.
How was the initial setup?
The implementation of Microsoft Defender for Endpoint because it is pre-installed with Microsoft Windows. Other solutions you have to install separately, such as Check Point.
What's my experience with pricing, setup cost, and licensing?
The license for Microsoft Defender for Endpoint is included in the license for the Microsoft Windows operating system.
What other advice do I have?
I would recommend this solution to others.
I rate Microsoft Defender for Endpoint a nine out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
IT Operations Lead at a energy/utilities company with 5,001-10,000 employees
Basic protection, better central management needed, but simple setup
Pros and Cons
- "The solution has good performance, I have not seen a problem."
- "The price of Microsoft Defender for Endpoint is reasonable, as other solutions, such as ClowdStrike, are more expensive."
- "Microsoft Defender for Endpoint could provide us with a more holistic approach, such as collaboration. They can provide us with an environment from where we can manage all the endpoints from one central location, such as overall management."
- "Microsoft Defender for Endpoint only provides a basic level of security. I don't find it overly useful or appealing."
What is our primary use case?
I use Microsoft Defender for Endpoint for an antivirus solution.
What needs improvement?
Microsoft Defender for Endpoint could provide us with a more holistic approach, such as collaboration. They can provide us with an environment from where we can manage all the endpoints from one central location, such as overall management.
For how long have I used the solution?
I have used Microsoft Defender for Endpoint within the last 12 months.
What do I think about the stability of the solution?
The solution has good performance, I have not seen a problem.
Which solution did I use previously and why did I switch?
I have used ClowdStrike previously.
How was the initial setup?
The initial setup is easy.
What about the implementation team?
I did the implementation of Microsoft Defender for Endpoint.
What's my experience with pricing, setup cost, and licensing?
The price of Microsoft Defender for Endpoint is reasonable. Other solutions are more expensive, such as ClowdStrike.
What other advice do I have?
Microsoft Defender for Endpoint only provides a basic level of security. I don't find it overly useful or appealing. I can trade it with another endpoint security solution. It's an addition to other endpoint security solutions.
I rate Microsoft Defender for Endpoint a five out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer. partner
Sr. Consultant at a computer software company with 51-200 employees
Expandable and reliable with helpful technical support
Pros and Cons
- "The stability keeps getting better and better."
- "The stability is great, it just keeps getting more and more stable and as it matures it's going to be very good."
- "It's not quite a mature solution just yet. It needs more time to grow and develop."
- "Sometimes it's complicated. It's not intuitive in terms of installation and deployment."
What is our primary use case?
We're using it in the backend, just for securing our environment. We're not an end-user, we are a Microsoft partner and we are using it as a B2B solution. It's more for customers. From the software side, we provide solutions that are mainly Microsoft-based.
What is most valuable?
It's a solution that can exist in the cloud, which makes it very scalable.
The stability keeps getting better and better.
What needs improvement?
Sometimes it's complicated. It's not intuitive in terms of installation and deployment. When we are making some POCs for customers before engaging and we are testing all the Microsoft security solutions for our customers. We've found it hard so far.
It's not quite a mature solution just yet. It needs more time to grow and develop.
The setup can be a bit difficult. This is expected. We sometimes deal with difficult environments.
For how long have I used the solution?
I've been using the solution for two years now. It hasn't been too long.
What do I think about the stability of the solution?
The stability is great. It just keeps getting more and more stable. As it matures, it's going to be very good.
What do I think about the scalability of the solution?
The scalability in general is quite good. If a company needs to expand it, it can do so.
Today, we have dozens of clients using the solution and we're expecting to add more. This is our target - to increase the number of customers using the solution.
How are customer service and support?
So far, technical support is okay. We have no complaints.
How was the initial setup?
The initial setup can be a bit difficult. I have had some feedback from engineers that say sometimes they are struggling and it's not as easy as we would hope. That said, we are dealing with quite complicated solutions, and it's normal to not be as easy. This is not a plug-and-play product. You need to configure it and to add and change parameters and you have to adapt it to the different environments.
How big your technical team needs to be varies according to each deployment. It depends on what is expected and what needs to be done.
What about the implementation team?
We tend to implement the solution for our clients.
What's my experience with pricing, setup cost, and licensing?
Clients do need to pay for a license. They vary. Some are charged monthly, others, yearly. There are various options.
What other advice do I have?
While I cannot speak to the exact version number, we are likely on the latest version. We have an administrative team that makes sure it is updated and takes care of everything for us.
I would recommend the solution to others. So far, it has been a good product.
I'd rate it overall at an eight out of ten.
Which deployment model are you using for this solution?
Hybrid Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
Buyer's Guide
Download our free Microsoft Defender for Endpoint Report and get advice and tips from experienced pros
sharing their opinions.
Updated: September 2026
Product Categories
Endpoint Protection Platform (EPP) Advanced Threat Protection (ATP) Anti-Malware Tools Endpoint Detection and Response (EDR) Microsoft Security SuitePopular Comparisons
Cortex XDR by Palo Alto Networks
CrowdStrike Falcon
Microsoft Intune
Microsoft Entra ID
SentinelOne Singularity Endpoint
Microsoft Defender for Cloud
IBM Security QRadar
Microsoft Sentinel
Elastic Security
Microsoft Defender for Office 365
Huntress Managed EDR
TrendAI Vision One
Trellix Endpoint Security Platform
WatchGuard Firebox
Buyer's Guide
Download our free Microsoft Defender for Endpoint Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- Compare Microsoft Windows Defender and Symantec Endpoint Protection. How Do I Choose?
- Which product would you choose: Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks?
- What do you think of the integration of Azure AD Services, Defender for Endpoint, and Intune as comprehensive security solutions?
- CrowdStrike Falcon vs Microsoft Defender ATP: Comparison of features and performance
- How does Microsoft Defender for Endpoint compare with Crowdstrike Falcon?
- Running Carbon Black Defense Along with Windows Defender
- How is Cortex XDR compared with Microsoft Defender?
- Which offers better endpoint security - Symantec or Microsoft Defender?
- How does Microsoft Defender for Endpoint compare with Carbon Black CB Defense?
- How would you compare between Microsoft Defender for Endpoint and Tanium EDR?
















