Try our new research platform with insights from 80,000+ expert users
reviewer2282451 - PeerSpot reviewer
SecOps Engineer at a computer software company with 11-50 employees
Real User
Saves investigation time and provides advanced hunting capabilities
Pros and Cons
  • "Advanced hunting is good. I like that. We can drill down to lots of details."
  • "At times, when we have an incident email and we click on the link for that incident, it opens a pop-up, but there is nothing. It has happened a couple of times."

What is our primary use case?

We are using it for incidents and alerts. It is helpful for threat hunting.

We have tied it to Azure AD or Microsoft Entra, and we are trying to implement it for Linux.

How has it helped my organization?

It saves the investigation time. There is a lot of information about the threats and other things.

What is most valuable?

Advanced hunting is good. I like that. We can drill down to lots of details.

It is user-friendly. It has a lot of parts. For me, it was pretty quick to get a sense of it.

What needs improvement?

It protects from phishing emails, but sometimes, some of the emails are not detected. They are getting delivered into the inbox, not in a junk folder or spam folder. Users are reporting them as phishing emails.

At times, when we have an incident email and we click on the link for that incident, it opens a pop-up, but there is nothing. It has happened a couple of times. 

In terms of additional features, it is too early for me. I am still learning all the parts. I am just scratching the surface of the tool. One year is not enough to get every detail of it.

Buyer's Guide
Microsoft Defender XDR
April 2025
Learn what your peers think about Microsoft Defender XDR. Get advice and tips from experienced pros sharing their opinions. Updated: April 2025.
849,963 professionals have used our research since 2012.

For how long have I used the solution?

I have been using Microsoft Defender XDR for about a year.

What do I think about the stability of the solution?

It is stable, but sometimes, we experience an issue. Clicking the link in an incident email opens a small window, but we cannot find anything there. This has happened a couple of times. There is a bug.

Other than that, we have not experienced any downtime or any big issues. It is pretty stable.

What do I think about the scalability of the solution?

We have plans to maximize its usage. We are trying to see how to get the most out of it, but my older colleagues would know more about it. I am still learning it.

How are customer service and support?

I have not contacted them.

Which solution did I use previously and why did I switch?

I am not sure. I am relatively new. I have only been working here for a year. They already had it in place.

I have not worked on a similar tool before. This is my first XDR tool.

How was the initial setup?

It is on the cloud. I am not aware of its deployment because it was already deployed before I joined.

What other advice do I have?

I cannot recommend it because this is the only tool for XDR that I have used. I have not used any other tool, but it is a good tool.

I would rate Microsoft Defender XDR a nine out of ten.

Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
Eusebiu Ciorobatca - PeerSpot reviewer
Information Technology Support Technician at a tech services company with 51-200 employees
Real User
Top 10
Helps with malware detection and browser protection
Pros and Cons
  • "We are connected to Microsoft and have every laptop enrolled. This acts as an endpoint. The tool helps me check security and compliance. I can also check what a device is doing."
  • "We should be able to use the product on devices like Apple, Linux, etc."

What is our primary use case?

We use Microsoft Defender XDR for malware detection and browser protection. We have around 500 devices to protect. We use it to get reports for each of these devices. 

What is most valuable?

We are connected to Microsoft and have every laptop enrolled. This acts as an endpoint. The tool helps me check security and compliance. I can also check what a device is doing. 

What needs improvement?

We should be able to use the product on devices like Apple, Linux, etc. 

For how long have I used the solution?

I have been working with the product for three to four years. 

What do I think about the scalability of the solution?

The tool's scalability is good. 

How are customer service and support?

I research in forums or contact support whenever I encounter issues. We have four types of support plans available. I rate the cheapest plan a two or three out of ten since responses are slow. I rate ten out of ten for an expensive support plan. 

How would you rate customer service and support?

Neutral

What's my experience with pricing, setup cost, and licensing?

We have a vendor who gives us a better price. The product is expensive. Selecting the entire Microsoft suite is cheaper than using random services or products. 

Bitdefender costs around five dollars per month per device. However, Microsoft Defender XDR costs 2500 dollars per month. 

We are evaluating Bitdefender for Windows. 

Microsoft Defender XDR helps us save time for clients. 

What other advice do I have?

Microsoft Defender XDR provides unified identity and access management. It is installed on every computer and checked from the Microsoft security admin center. 

The tool is easy to use. You can use one account to log in to any Microsoft service. 

We are aware of our compliance. We can now check the devices and get reports about it. 

The product can adapt to evolving threats. We use it to manage only one tenant. We have Mac devices where Microsoft Defender XDR cannot help us. 

We have the tool deployed across different locations like Germany and Denmark. 

I rate the product an eight out of ten. You need to follow its guidelines.

 

Which deployment model are you using for this solution?

Private Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Microsoft Azure
Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
Buyer's Guide
Microsoft Defender XDR
April 2025
Learn what your peers think about Microsoft Defender XDR. Get advice and tips from experienced pros sharing their opinions. Updated: April 2025.
849,963 professionals have used our research since 2012.
reviewer2315640 - PeerSpot reviewer
Director of IT at a government with 501-1,000 employees
Real User
Top 20
Integrates security into one tool instead of having third-party security tools
Pros and Cons
  • "The product integrates security into one tool instead of having third-party security tools."
  • "The solution does not offer a unified response and standard data."

What is our primary use case?

We use Microsoft Defender XDR to secure data. 

How has it helped my organization?

Microsoft Defender XDR has reduced our security staff. 

What is most valuable?

The product integrates security into one tool instead of having third-party security tools. 

What needs improvement?

The solution does not offer a unified response and standard data. 

For how long have I used the solution?

I have been using the product for three years. 

What do I think about the stability of the solution?

Microsoft Defender XDR is stable. 

What do I think about the scalability of the solution?

The solution is scalable. 

How are customer service and support?

It takes weeks for the support to respond. They are not helpful. 

How would you rate customer service and support?

Negative

How was the initial setup?

Microsoft Defender XDR's deployment was very easy. 

What was our ROI?

We have seen ROI with the tool's use. 

What's my experience with pricing, setup cost, and licensing?

Microsoft Defender XDR's licensing is complicated. 

What other advice do I have?

Microsoft Defender XDR has helped us reduce two full-time employees. 

The solution is our identity source, which protects our identities through Microsoft Intra ID.

The solution helped us save time by not flipping between the systems.  

I rate it an eight out of ten. 

Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
reviewer909678 - PeerSpot reviewer
Systems Engineer at a consultancy with 201-500 employees
Real User
Top 5
Helps save time, integrates well, and is stable
Pros and Cons
  • "The integration with other Microsoft solutions is the most valuable feature."
  • "The mobile app support for Android and iOS is difficult and needs improvement."

What is our primary use case?

We use Microsoft Defender XDR to centralize our security solutions.

How has it helped my organization?

Microsoft Defender XDR has helped us save some time.

What is most valuable?

The integration with other Microsoft solutions is the most valuable feature.

What needs improvement?

The mobile app support for Android and iOS is difficult and needs improvement. 

For how long have I used the solution?

I am currently using Microsoft Defender XDR.

What do I think about the stability of the solution?

Microsoft Defender XDR is stable.

What do I think about the scalability of the solution?

Microsoft Defender XDR is scalable.

How are customer service and support?

The technical support is good.

How would you rate customer service and support?

Positive

Which solution did I use previously and why did I switch?

In addition to using Microsoft Defender XDR, we also use Fortinet. We implemented Microsoft Defender XDR as part of our organization's policy to use Microsoft solutions because of their integration.

How was the initial setup?

The initial deployment was straightforward. We completed the implementation within one year.

What other advice do I have?

I would rate Microsoft Defender XDR a nine out of ten.

Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
Senior IT Executive and Operation at a tech services company with 51-200 employees
Real User
A unified enterprise defense suite that's very stable, but the price could be better
Pros and Cons
  • "I like that it's stable. It's been stable for a long time, and Microsoft Defender has done a good job there."
  • "The price could be better. It'll also help if they can continuously update and upgrade the solution. Every day there's a new virus uploaded into the network, and we have to keep updating it to identify all these things."

What is our primary use case?

The primary use case for Defender is to control the endpoint systems at the user level. On the networking level, we use it to analyze spam and see if any antivirus services are required or if there's a ransomware attack. As of now, I am just using it for monitoring.

What is most valuable?

I like that it's stable. It's been stable for a long time, and Microsoft Defender has done a good job there. I can see a lot of changes to Microsoft 365 Defender when I compare what we have now to what we had from 2007 to 2010. They have implemented a ransomware feature, and if any virus comes into the system, it triggers an alert.

What needs improvement?

The price could be better. It'll also help if they can continuously update and upgrade the solution. Every day there's a new virus uploaded into the network, and we have to keep updating it to identify all these things.

For how long have I used the solution?

I have been using Microsoft 365 Defender since 2007.

What do I think about the stability of the solution?

Microsoft Defender is very stable, and you can see that there is a 99.9% success rate when they give us good service. It's very helpful for configuring anything.

What do I think about the scalability of the solution?

It's definitely easy to scale. However, scalability depends on the plan and requirements.

How are customer service and technical support?

They have their norms and regulations that they use once a ticket is created. Whatever the technical issues are, they normally resolve them within the timeline or some days. They are good at the technical side of things.

How was the initial setup?

The initial setup is totally easy. It's not complex. It takes just a couple of minutes to deploy this solution.

What's my experience with pricing, setup cost, and licensing?

The price could be better. Normally, the costs depend on the country you're located in for the license. When we were in the initial stage, we went with the E5 license they call premium standard. It cost us around $5.20 per month for four users.

What other advice do I have?

I would recommend Microsoft Defender to new users. I would advise them to understand their exact requirements and check if it matches before taking it up.

On a scale from one to ten, I would give Microsoft 365 Defender a seven.

Which deployment model are you using for this solution?

Public Cloud
Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
reviewer1007844 - PeerSpot reviewer
Product Manager at a comms service provider with 501-1,000 employees
Reseller
Stable and easy to use but could scan attachments faster
Pros and Cons
  • "The product is very easy to use."
  • "It would be helpful if the solution could scan faster when it comes to scanning attachments to emails."

What is our primary use case?

We primarily use the solution as security for our endpoints. It covers everything.

What is most valuable?

The solution is very useful for scanning email traffic.

Practically every company that is working in Microsoft Cloud can use it with a Microsoft 365 subscription.

The product is very easy to use.

So far, I have found the solution to be very stable. I haven't had any issues with it.

What needs improvement?

It would be helpful if the solution could scan faster when it comes to scanning attachments to emails.

For how long have I used the solution?

I've been using the solution for a bit more than one year.

What do I think about the stability of the solution?

The product is quite stable. It's been problem-free. There are no bugs or glitches. It doesn't crash or freeze. It's reliable.

What do I think about the scalability of the solution?

I do not believe the solution is scalable. It's fixed on my PC and I cannot upgrade it. It may be changed from time to time according to the company, however, beyond that, I have no control over expansion.

We have 250 people in our office using the solution.

How are customer service and technical support?

We have an internal IT department. If I were to have issues, which I haven't, I would go to them. I've never contacted Microsoft's technical support directly. I have no experience dealing with them. I couldn't say if they are helpful or responsive.

How was the initial setup?

I didn't handle the initial setup. That was handled by a technician in my company. It was placed on my PC for me. I don't have any insights in terms of the implementation process.

It may only take one person to install it. They would have to have a bit of knowledge on the product.

What's my experience with pricing, setup cost, and licensing?

We are using the higher-level package which we have to pay a licensing fee for. There are different tiers. Ours includes extended detection with Advanced Threat Protection. It's the most powerful endpoint protection Microsoft offers.

What other advice do I have?

We are using the latest version of the solution.

We sell the product and we use it as well. We are resellers.

We are using advanced endpoint detection in our security for email and a lot of other things, however, it is combined with Cisco solutions, for example, Cisco Umbrella. We have a file solution from IBM, and internally we are using it, however, I am not directly using all of these things. I'm using the administrative part for partnership purposes. I'm not a technical person. I am using them as a customer as part of Microsoft OS.

There is a lot of other tools behind the scenes as well, however, they are working on a network level, on a data center level, to secure the company. 

I'd rate the solution at a seven out of ten.

Which deployment model are you using for this solution?

Public Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer: Reseller
PeerSpot user
Senior Cloud Architects at Metro Systems Corporation Public Company Limited
Real User
Stable, scalable, but machine learning and AI could improve
Pros and Cons
  • "I have found the ability to delete unwanted threats beneficial."
  • "The solution could improve by having better machine learning and AI. Additionally, the interface, documentation, and integration could be better."

What is our primary use case?

I use the solution for security against system threats.

What is most valuable?

I have found the ability to delete unwanted threats beneficial.

What needs improvement?

The solution could improve by having better machine learning and AI. Additionally, the interface, documentation, and integration could be better.

For how long have I used the solution?

I have used this solution for approximately one year.

What do I think about the stability of the solution?

The solution is stable.

What do I think about the scalability of the solution?

Microsoft 365 Defender is scalable.

What's my experience with pricing, setup cost, and licensing?

The price of the solution is high compared to others and we have lost some customers because of it.

What other advice do I have?

I rate Microsoft 365 Defender a seven out of ten.

Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
reviewer806577 - PeerSpot reviewer
Cloud Sales Specialist at a tech vendor with 201-500 employees
Consultant
Emerging technologies, stable, but expensive
Pros and Cons
  • "Microsoft 365 Defender is a stable solution."
  • "Microsoft 365 Defender does not have a unique package with emerging endpoint security technologies, such as EDR and XDR."

What needs improvement?

Microsoft 365 Defender  offers emerging endpoint security technologies, such as EDR and XDR and Zero trust approach

For how long have I used the solution?

I have been using Microsoft 365 Defender for approximately two years.

What do I think about the stability of the solution?

Microsoft 365 Defender is a stable solution.

How are customer service and support?

I am satisfied with the technical support.

How was the initial setup?

The solution is included in Windows 10.

What's my experience with pricing, setup cost, and licensing?

Microsoft is not competitive with the pricing of the solution. The competitors are able to offer lower discounts. The price of the solution is higher.

What other advice do I have?

Microsoft 365 Defender is Microsofts first try at a security package as part of Windows.

They are offering different services with Zero Trust security, SIAM security, SOAR security with Azure. They converge all products in the same security center. Microsoft 365 Defender is one strong point to the overall security protection.

I rate Microsoft 365 Defender a five out of ten.

Which deployment model are you using for this solution?

Public Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer: partner
PeerSpot user
Buyer's Guide
Download our free Microsoft Defender XDR Report and get advice and tips from experienced pros sharing their opinions.
Updated: April 2025
Buyer's Guide
Download our free Microsoft Defender XDR Report and get advice and tips from experienced pros sharing their opinions.