Try our new research platform with insights from 80,000+ expert users

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the report

Prominent pros & cons

PROS

Morphisec provides deterministic attack prevention that does not require human intervention, simplifying security operations.
Morphisec integrates seamlessly with Microsoft Defender, offering enhanced security management.
Morphisec's approach changes the memory locations where applications run, enhancing protection against memory-based attacks.
Morphisec has reduced administrative workload, saving significant time for engineers.
Morphisec's in-memory protection detects and stops malicious activity before it can execute.

CONS

Users have struggled with cloud deployment and rely on SCCM for updates.
More customer interaction and updates from account executives throughout the year are desired.
Licensing confusion exists between Linux and Windows platforms, suggesting a need for a unified enterprise license.
Integration with other traditional antivirus solutions beyond Microsoft Defender is requested.
There is a demand for built-in solutions for alerts and vulnerability resolutions to reduce dependence on support teams.
 

Morphisec Pros review quotes

BW
Sr. Network Engineer at Wilson County Schools - NC
Jun 1, 2021
It provides full visibility into security events and from both solutions in one dashboard. I'm not a big security guy, if I have a threat that looks like there's a problem, I will ask Morphisec to dissect it for me, and tell me what might be happening. Because it tends to be all hash codes, so I can tell what's going on. They've been pretty good with that.
it_user1592379 - PeerSpot reviewer
VP IT at a retailer with 501-1,000 employees
Jun 1, 2021
Morphisec makes use of deterministic attack prevention that doesn’t require investigation of security alerts. It changes the memory locations of where certain applications run. If you think of Excel, opening a PDF, running an Excel macro, or opening a webpage and clicking on a link, all of those actions run in a certain area of memory. Morphisec changes the memory locations of where those run.
reviewer1594032 - PeerSpot reviewer
Sr. Security Lead at a healthcare company with 10,001+ employees
Jun 3, 2021
The fact that Morphisec uses deterministic attack prevention that does not require human intervention has affected our security team's operations by making things much simpler. We don't have to really track down various alerts anymore, they've just stopped. At that point, we can go in and we can clean up whatever needs to be cleaned up. There are some things that Morphisec detects that we can't really remove, it's parts of Internet Explorer, but it's being blocked anyway. So we're happy with that.
Learn what your peers think about Morphisec. Get advice and tips from experienced pros sharing their opinions. Updated: December 2025.
879,310 professionals have used our research since 2012.
JM
Sr. IT Architect at Yaskawa Motoman Robotics
Jun 3, 2021
Since using Morphisec we have seen a downturn in attacks because Morphisec protects us versus Defenders and whatnot that are signature-based. I know we have not had any issues with ransomware or other zero-day attacks that we've seen with machines that, all of a sudden, have become before we instituted the product. Now the machine had to be re-imaged and there was a loss of data because something was on the machine. You couldn't really determine what was on the machine because nothing was picking it up. The products we were using weren't picking it up.
MC
Director of IT at Clune Construction
Jun 4, 2021
The biggest feature is that it hides everything from your operating system that's running in-memory from anything to try to run against it. That's the most unique thing that's on the market. There's nothing else out there that's quite like that. That's a big selling point and why we went with it. It does exactly what the design does. If you can't find it, you can't execute against it.
reviewer1598802 - PeerSpot reviewer
Systems Administrator at a transportation company with 5,001-10,000 employees
Jun 10, 2021
What's valuable is really the whole kit and caboodle of the Morphisec agent. What it does is genius, in a way, until the bad guys get wise to it. You set it up and then you watch the dashboard. There isn't really much tinkering.
it_user1602465 - PeerSpot reviewer
IT Operation Manager at Citizens Medical Center
Jun 15, 2021
Morphisec also provides full visibility into security events for Microsoft Defender and Morphisec in one dashboard... in the single pane of glass provided by Morphisec, it's all right there at your fingertips: easy to access and easy to understand. And if you choose to go down further to know everything from the process to the hash behind it, you can.
it_user1609965 - PeerSpot reviewer
Chief Information Officer at Houston Eye Associates
Jun 23, 2021
I really like the integration with Microsoft Defender. In addition to having third-party endpoint protection, we're also enabling Defender... I like the reporting that we get from Defender, when it comes in. I like that it's one console showing both Morphisec and Defender where it provides me with full visibility into security events from Defender and Morphisec.
BL
Director, Technical Services and Information Security at SECURA Insurance
Jul 13, 2021
Morphisec provides full visibility into security events from Microsoft Defender and Morphisec in one dashboard. Defender and Morphisec are integrated. It's important because it lowers the total cost of maintenance on the engineer's time, more or less. So the administrative time is dramatically reduced in maintaining the product. This saves an engineer around four to five hours a week.
it_user1633371 - PeerSpot reviewer
Information Technology Manager at a financial services firm with 11-50 employees
Jul 22, 2021
Morphisec stops attacks without needing to know what type of threat it is, just that it is foreign. It is based on injections, so it would know when a software launches. If a software launches and something else also launches, then it would count that as anomalous and block it. Because the software looks at the code, and if it executes something else that is not related, then Morphisec would block it. That is how it works.
 

Morphisec Cons review quotes

BW
Sr. Network Engineer at Wilson County Schools - NC
Jun 1, 2021
I haven't been able to get the cloud deployment to work. When there's an update, I'm supposed to be able to roll it out for the cloud solution, but right now I'm continuing to use our SCCM solution to update it.
it_user1592379 - PeerSpot reviewer
VP IT at a retailer with 501-1,000 employees
Jun 1, 2021
From a company standpoint, a little more interaction with the customers throughout the year might be beneficial. I would like check-ins from the Morphisec account executives about any type of Morphisec news as well as a bit more interaction with customers throughout the year to know if anything new is coming out with Morphisec, e.g., what they are working on in regards to their development roadmap. We tend not to get that up until the time that we go for a yearly renewal. So, we end up talking to people from Morphisec once a year, but it is usually at renewal time.
reviewer1594032 - PeerSpot reviewer
Sr. Security Lead at a healthcare company with 10,001+ employees
Jun 3, 2021
Some of the filters for the console need improvement. There are alerts that show up and just being able to acknowledge that we've seen those and not turn them off, but dismiss them, would be a huge benefit.
Learn what your peers think about Morphisec. Get advice and tips from experienced pros sharing their opinions. Updated: December 2025.
879,310 professionals have used our research since 2012.
JM
Sr. IT Architect at Yaskawa Motoman Robotics
Jun 3, 2021
Those are some of the features that I was looking for on my on-prem platform that they've already instituted in the cloud and that I'm sure will be instituting on their on-prem platform as well. Having to have an on-prem server required a lot of administration. Being able to push that to the cloud and have it managed up there for us is a real nice addition.
MC
Director of IT at Clune Construction
Jun 4, 2021
Automating reports needs improvement. I would like to have better reporting capabilities within it or automated reporting to be a little bit more dynamic. That's something I know they're working on. We literally are in the process. We started the process a week and a half ago of going to their latest version, so I've not seen their latest one up and running yet.
reviewer1598802 - PeerSpot reviewer
Systems Administrator at a transportation company with 5,001-10,000 employees
Jun 10, 2021
We have only had four attacks in the last year, "attacks" being some benign PDF from a vendor that, for some reason, were triggered. There were no actual attacks. They were just four false positives, or something lowly like adware. There have been false positives with both the on-premises solution and the cloud solution.
it_user1602465 - PeerSpot reviewer
IT Operation Manager at Citizens Medical Center
Jun 15, 2021
In the Windows Defender integration, they have put in a report of computers that need Windows Defender updates. If those updates could be kicked off directly from the dashboard, instead of having to go to another system entirely, that would be good.
it_user1609965 - PeerSpot reviewer
Chief Information Officer at Houston Eye Associates
Jun 23, 2021
If anything, tech support might be their weakest link. The process of getting someone involved sometimes takes a little time. It seems to me that they should have all the data they need to let me know whether an alert is legitimate or not, but they tend to need a lot of information from me to get to the bottom of something. It usually takes a little longer than I would expect.
BL
Director, Technical Services and Information Security at SECURA Insurance
Jul 13, 2021
We started in the Linux platform and we deployed to Linux. The licensing of that has been kind of confusing between Linux licensing and Windows licensing. The overall simplicity of licensing or offering an enterprise license to just cover everything and then we don't have to count needs improvement.
it_user1633371 - PeerSpot reviewer
Information Technology Manager at a financial services firm with 11-50 employees
Jul 22, 2021
Right now, it's just their auto-update feature. I know they are currently working on that. When they release a new version of the threat prevention platform, I do have to update that, rolling out to every computer. They have said, "From version 5, you would be able to do an auto-update." While this is very minor, that is the only thing that I would say needs to be upgraded. It would just make life a lot easier for other IT teams. However, I have simplified the process, so all I need to do is just download one file.