Defender's endpoint protection is good.
MIS Specialist at a agriculture with 201-500 employees
Stable, scalable, and provides good protection
Pros and Cons
- "Defender is stable. The performance is good."
- "Defender is free for one year. Once that year is over, we will switch to Kaspersky."
What is most valuable?
For how long have I used the solution?
I've been using Defender for less than one year. Defender is free for one year. Once that year is over, we will switch to Kaspersky.
What do I think about the stability of the solution?
Defender is stable. The performance is good.
What do I think about the scalability of the solution?
In terms of scalability, I rate Defender 10 out of 10.
Buyer's Guide
Microsoft Defender for Endpoint
June 2025

Learn what your peers think about Microsoft Defender for Endpoint. Get advice and tips from experienced pros sharing their opinions. Updated: June 2025.
860,168 professionals have used our research since 2012.
How are customer service and support?
I haven't dealt with Microsoft support for this product.
How was the initial setup?
It's easy. Defender came pre-loaded on our computers.
What other advice do I have?
I rate Microsoft Defender for Endpoint eight out 10. I would recommend it to others.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.

Subject Matter Expert at Vision Software
Provides malware and ransomware protection and scales easily
Pros and Cons
- "The most important and the most relevant features of Defender for Endpoint are the malware and ransomware protection."
- "I would like to see the next generation of the tool improved to work with other operating systems, like Linux."
What is our primary use case?
It's used to protect endpoints and, for some customers, it is used to deploy Microsoft 365 suite features. Most of our clients are medium-sized businesses.
What is most valuable?
The most important and the most relevant features of Defender for Endpoint are the malware and ransomware protection.
What needs improvement?
I would like to see the next generation of the tool improved to work with other operating systems, like Linux.
For how long have I used the solution?
I have had about a year's worth of experience with Microsoft Defender for Endpoint. I am a subject matter expert for a Microsoft partner in Colombia. We develop portfolios and solutions for our customers that need Microsoft products in their infrastructure. My role deals with the architecture of solutions.
What do I think about the stability of the solution?
I don't recall any issues with the solution.
What do I think about the scalability of the solution?
It scales easily.
How are customer service and support?
I haven't had to use technical support for the solution.
How was the initial setup?
The setup depends on the customer, but it is generally simple.
What's my experience with pricing, setup cost, and licensing?
Some customers have the licensing of the suite and have all infrastructure prepared for the installation and deployment. But in some cases, when customers haven't deployed the solution and don't have licenses, it can be expensive to start from scratch.
What other advice do I have?
Customers haven't given us any feedback about difficulties with the solution. With its intelligence and tools over cloud infrastructure, it's a good product. We are developing some use cases and projects for customers with Microsoft Defender for Endpoint. It is good for us.
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
Buyer's Guide
Microsoft Defender for Endpoint
June 2025

Learn what your peers think about Microsoft Defender for Endpoint. Get advice and tips from experienced pros sharing their opinions. Updated: June 2025.
860,168 professionals have used our research since 2012.
Cyber Security BA/BSA at a financial services firm with 10,001+ employees
Straightforward to set up with good technical support and good stability
Pros and Cons
- "Technical support is good."
- "There are likely some technical improvements or features that could be added, however, I cannot say, off the top of my head, what they would be."
What is our primary use case?
Usually, the solution is used in relation to keys management. We implemented a program for it, for the lifecycle of the keys. We've also used it for certificate management.
What is most valuable?
The initial setup is very straightforward.
The stability is very good.
Technical support is good.
The solution is in good condition and offers good functionality.
What needs improvement?
There are likely some technical improvements or features that could be added, however, I cannot say, off the top of my head, what they would be.
For how long have I used the solution?
I used the solution in relation to scoping a project. I was doing business analysis.
What do I think about the stability of the solution?
The solution was very stable.
What do I think about the scalability of the solution?
The solution is scalable.
How are customer service and support?
The technical support for Microsoft is very good.
How was the initial setup?
The initial setup is not difficult or complex. It's very simple and straightforward.
What's my experience with pricing, setup cost, and licensing?
I do not know how much it costs per month. I cannot say how it compares against the rates of the competition.
What other advice do I have?
We are a Microsoft Customer.
I'm not sure if I would recommend the solution to others. It depends on their requirements. It needs to fit a company's use cases.
I would rate the solution at an eight out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Senior System Administrator at Debre Markos University
Easy to use interface, user-friendly, and stable
Pros and Cons
- "The solution has an easy-to-use interface, is always updated, and is user-friendly."
- "The solution could improve by providing more integration."
What is our primary use case?
I use Microsoft Defender for Endpoint protection on my personal computer.
What is most valuable?
The solution has an easy-to-use interface, is always updated, and is user-friendly.
What needs improvement?
The solution could improve by providing more integration.
For how long have I used the solution?
I have been using Microsoft Defender for Endpoint for approximately one year.
What do I think about the stability of the solution?
The solution is stable and secure.
What do I think about the scalability of the solution?
I have found the scalability quite good.
How was the initial setup?
The installation is simple.
What about the implementation team?
I did the implementation of the solution.
What's my experience with pricing, setup cost, and licensing?
The solution is free and comes with Windows.
What other advice do I have?
I rate Microsoft Defender for Endpoint a ten out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
It comes preloaded with Windows 10. It does not have a central console.
Pros and Cons
- "Microsoft Defender can block some viruses or malware. So, it can protect my files. It can save files on Office 365 OneDrive. I use encryption for some files, then I can recover them from OneDrive."
- "The central console needs improvement. Both McAfee and Symantec antivirus have dashboards. These integrate with a server and work on my antivirus or some other product. However, with Microsoft Defender, you use Microsoft Group Policy Object. Defender does not provide a central console. Therefore, if you implement Defender, then maybe use another tool for the central view."
What is our primary use case?
I am a Taiwan sole company reseller. We sell commercial software to enterprise customers.
I use the Microsoft Defender for scanning the antivirus or some hacker tools.
How has it helped my organization?
We sell the Microsoft solution for enterprise customers. We recommend to customers that they can use Microsoft Defender Antivirus.
What is most valuable?
Microsoft Defender can block some viruses or malware. So, it can protect my files. It can save files on Office 365 OneDrive. I use encryption for some files, then I can recover them from OneDrive.
What needs improvement?
The central console needs improvement. Both McAfee and Symantec antivirus have dashboards. These integrate with a server and work on my antivirus or some other product. However, with Microsoft Defender, you use Microsoft Group Policy Object. Defender does not provide a central console. Therefore, if you implement Defender, then maybe use another tool for the central view.
For how long have I used the solution?
I have been using Microsoft Defender Antivirus for more than two years.
What do I think about the stability of the solution?
In general, Defender Antivirus can work with my operating system. So, its performance is okay.
What do I think about the scalability of the solution?
Defender can integrate with other Office 365 security products.
How are customer service and technical support?
We just search for knowledge from Google.
Which solution did I use previously and why did I switch?
My company deploys Symantec antivirus. However, when we buy a laptop, it includes Windows 10, which has Defender antivirus installed. Therefore, we use both antivirus software, Symantec and Defender.
How was the initial setup?
We did not deploy Microsoft Defender Antivirus. It simply came preloaded with Windows 10.
I would recommend using Group Policy Object to deploy this solution and enable some functions.
What's my experience with pricing, setup cost, and licensing?
You just pay Windows 10 prices, then you have antivirus software. As a price comparison, Defender's costs are very low.
What other advice do I have?
We sell the Microsoft 365 solution to customers. If a customer wants Windows 10 Defender, they can choose Defender ATP in Office 365.
I would rate this solution as a five or six out of 10.
Disclosure: My company has a business relationship with this vendor other than being a customer. Reseller
Consultor Senior at a consultancy with 51-200 employees
A free solution that performs well
Pros and Cons
- "It performs well. The stability is seamless."
- "A concern is ransomware, whether people can penetrate and encrypt my data or steal my credit card/banking information."
What is most valuable?
I haven't experienced any problems.
What needs improvement?
They could improve the information about how they are dealing with people who could attack minors. This is my main concern.
Another concern is ransomware, whether people can penetrate and encrypt my data or steal my credit card/banking information.
For how long have I used the solution?
I have been using it since 2019.
What do I think about the stability of the solution?
It performs well. The stability is seamless.
What do I think about the scalability of the solution?
Scalability is not a problem because we don't have servers. We don't do anything more with the computers than use them for studies, reading papers and books, watching movies, and communicating with our family. So, we don't need to scale up.
How are customer service and technical support?
If they could send me more information, then I could evaluate, read more, and give them opinions. For example, if someone tells me about a problem, then I can give solutions and also write to Microsoft regarding this information.
Which solution did I use previously and why did I switch?
From the beginning of the pandemic, we received another kind of software when we had to be at home, but it caused us problems with the performance. So, I decided to quit the other software. Then, I installed Windows Defender on all my computers, including my grandchildren's computers.
I was using Sophos previously, but it was causing problems with the performance. For example, when my grandchildren were trying to assume a session, they opened Excel or Word with a 4 GB computer using Windows 10 and then they always lost the connection or the continuities because the computer slowed down. However, when we decided to quit using Sophos and install all the features of Windows Defender, then those problems were resolved.
How was the initial setup?
The initial setup is very easy and straightforward.
My deployment process: I put some checks in the questions that they have. It was very easy. I read about it in the tutorial. I installed it on my entire family's computers (six computers) in less than half an hour.
What's my experience with pricing, setup cost, and licensing?
It is free.
What other advice do I have?
We are totally satisfied with performance and price. However, there is still the question, "Is it safe and secure enough for home, primary-school-age children, and minors?" Despite having a Masters degree in Computer Sciences and Mathematics, I have not been able to say if Microsoft is doing bad or good things.
Many companies may say that they have the best product, but I recommend always watching the news about what a company is doing. Stay informed. Don't be complacent.
The solution is a nine out of 10.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Technical Team Lead at Alepo
Effective firewall capabilities, regular antivirus updates, and it is preinstalled with Windows
Pros and Cons
- "The most valuable features are the Windows Firewall and the regular virus definition updates. These features are very helpful and have helped to improve our security."
- "This solution needs to move beyond relying on virus definitions alone and protect the system using behavioral analysis of the processes that are running."
What is our primary use case?
We use Microsoft Defender Antivirus for antivirus protection as part of our endpoint security solution. It protects our systems against attacks from any virus, malware, or trojan.
How has it helped my organization?
We rely on this product for endpoint protection in our organization because we have not subscribed to any antivirus, apart from Microsoft Defender. It comes for free with our Windows subscription and it has improved the way our organization functions because there have been no virus attacks to date on our laptops.
It has not negatively affected our end-user experience.
What is most valuable?
This solution takes care of most of the infections that are found in the system, and it comes included with Windows. These are the two main advantages of using it.
The most valuable features are the Windows Firewall and the regular virus definition updates. These features are very helpful and have helped to improve our security.
What needs improvement?
Microsoft Defender protects the computer by using virus definitions that we download through regular updates but nowadays, cybersecurity attacks have become more intelligent. This solution needs to move beyond relying on virus definitions alone and protect the system using behavioral analysis of the processes that are running. These can be vulnerable points and if a process causes a glitch in the system, it should be quarantined. Moreover, enhancements of this type should not detract from system performance. There should be no slowdown on the laptop, for example.
For how long have I used the solution?
I have been using Microsoft Defender Antivirus since I started using Windows 7, more than eight years ago.
What do I think about the stability of the solution?
Stability-wise, it is good, and it performs very nicely.
What do I think about the scalability of the solution?
The scalability is fine. We had more than 300 devices that are being protected.
How are customer service and technical support?
I have never had an opportunity to speak with technical support because everything has always worked very smoothly. As we have experienced no issues at all, we never contacted support.
Which solution did I use previously and why did I switch?
Prior to using Microsoft Defender, we used McAfee and Avast Antivirus.
One of the main reasons that we switched away from McAfee is that it required purchasing a subscription. With Microsoft Defender, it is included with Windows. When we install the operating system, it is already there and we don't have to purchase an additional antivirus product.
For security, aside from a traditional antivirus, we have purchased the SentinelOne Endpoint Security solution. This product is more enhanced when compared to an antivirus product. It is modern and has better threat intelligence than other products. I don't know SentinelOne very well yet, as we have just purchased the subscription, but I know that the difference between products is not based on virus definitions.
SentinelOne has intelligence on the cloud and many other security features including the blocking of domain names, and the blocking of USB drives that users plug into their laptops. Although it has many more features than legacy antivirus software, I have no complaints about the performance of Microsoft Defender.
One of the reasons we are more heavily relying on endpoint security is that everybody is working from home and using the internet for work. This transition was made within the last two or three months. When people were working in the office, the firewall afforded them protection. However, as it is now, the endpoints are more vulnerable to attack. This is why we now rely more heavily on SentinelOne.
How was the initial setup?
Microsoft Defender comes preinstalled with the Windows operating system, so we do not have to deploy it separately.
What's my experience with pricing, setup cost, and licensing?
The subscription is part of Windows, so we don't have to pay anything extra for this product.
What other advice do I have?
This is definitely a product that I recommend people use because first of all, you do not have to pay anything extra to use it. The performance is very smooth and it protects your system, which is very much needed. All in all, I would say that this is a good antivirus solution.
I would rate Microsoft Defender Antivirus an eight out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Specialist Consultant in Microsoft Security at a tech services company with 501-1,000 employees
The tamper protection keeps hackers from entering a machine, encrypting it, and changing passwords
Pros and Cons
- "Auto-remediation: When the product sees malware, it resolves the issue immediately. This protects the machine."
- "It needs to improve the cybersecurity for lateral movements. For example, when a hacker tries to enter a machine, they try to get the password by doing a lateral movement."
What is our primary use case?
We use it for antivirus. You can use it for malware and Zero Trust. Some people use it for fact-checking too. I can also use it with Intune, which is good.
We deploy Microsoft Defender on all kinds of devices, including Microsoft, iOS, and Mac.
What is most valuable?
Auto-remediation: When the product sees malware, it resolves the issue immediately. This protects the machine.
I like the tamper protection. For example, if I buy a notebook with Windows 10 and put Microsoft Defender on it, then I can activate the tamper protection. This keeps people from entering the machine, encrypting it, and changing passwords.
Microsoft Defender is fully integrated with Azure Sentinel. In addition, GPO can be connected with Microsoft Defender and Azure AD.
What needs improvement?
It needs to improve the cybersecurity for lateral movements. For example, when a hacker tries to enter a machine, they try to get the password by doing a lateral movement.
With Windows 10, version 18.0.3, I couldn't see the documentation to open the ports. If you don't open the ports, then the machine can't communicate with the console.
What do I think about the stability of the solution?
I like its stability a lot.
What do I think about the scalability of the solution?
You push out all the devices that you want. There is no limitation beyond money and licenses.
Which solution did I use previously and why did I switch?
In the past, I have used McAfee and Kaspersky.
I only work with Microsoft products right now. It integrates well with other products. I also work with Microsoft Defender for Identity.
How was the initial setup?
The deployment process is not difficult because Microsoft Defender comes with Windows 10. You just right click, then it connects you with Azure.
There are other processes that can be connected, e.g., Microsoft Download Center.
What about the implementation team?
I implement Microsoft Defender for Endpoint. It takes me one or two days to design Microsoft Defender for Endpoint. It is easy to do this, and the more you implement, the easier it gets over time.
Sometimes, when I change the configuration, I have to wait six to eight hours.
What's my experience with pricing, setup cost, and licensing?
It is so expensive. It isn't cheaper than McAfee or other solutions.
Which other solutions did I evaluate?
I prefer Microsoft Defender for Endpoint instead of McAfee, Kaspersky, and other products.
What other advice do I have?
I would rate this solution as 10 out of 10.
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner

Buyer's Guide
Download our free Microsoft Defender for Endpoint Report and get advice and tips from experienced pros
sharing their opinions.
Updated: June 2025
Product Categories
Endpoint Protection Platform (EPP) Advanced Threat Protection (ATP) Anti-Malware Tools Endpoint Detection and Response (EDR) Microsoft Security SuitePopular Comparisons
CrowdStrike Falcon
Microsoft Intune
Fortinet FortiEDR
Microsoft Defender for Office 365
Microsoft Sentinel
Microsoft Entra ID
Microsoft Defender for Cloud
SentinelOne Singularity Complete
Microsoft Defender XDR
Microsoft Purview Data Governance
Cortex XDR by Palo Alto Networks
Fortinet FortiClient
HP Wolf Security
Elastic Security
Buyer's Guide
Download our free Microsoft Defender for Endpoint Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- Compare Microsoft Windows Defender and Symantec Endpoint Protection. How Do I Choose?
- Which product would you choose: Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks?
- What do you think of the integration of Azure AD Services, Defender for Endpoint, and Intune as comprehensive security solutions?
- CrowdStrike Falcon vs Microsoft Defender ATP: Comparison of features and performance
- How does Microsoft Defender for Endpoint compare with Crowdstrike Falcon?
- Running Carbon Black Defense Along with Windows Defender
- How is Cortex XDR compared with Microsoft Defender?
- Which offers better endpoint security - Symantec or Microsoft Defender?
- How does Microsoft Defender for Endpoint compare with Carbon Black CB Defense?
- How would you compare between Microsoft Defender for Endpoint and Tanium EDR?