Microsoft Defender for Endpoint vs. Microsoft Defender XDR

Microsoft Defender XDR

Overview
Product	Rating	Most Used By	Product Summary	Starting Price
Microsoft Defender for Endpoint	Score 8.7 out of 10	N/A	Microsoft Defender for Endpoint (formerly Microsoft Defender ATP) is a holistic, cloud delivered endpoint security solution that includes risk-based vulnerability management and assessment, attack surface reduction, behavioral based and cloud-powered next generation protection, endpoint detection and response (EDR), automatic investigation and remediation, managed hunting services, rich APIs, and unified security management.	$2.50 per user/per month
Microsoft Defender XDR	Score 8.9 out of 10	N/A	Microsoft 365 Defender combines SIEM and XDR capabilities for Microsoft 365 environments, encompassing threat detection, post-breach detection, automated investigation, and response for endpoints. Additionally, it protects cloud apps, emails and documents, and employee identities.	N/A

Pricing

Microsoft Defender for Endpoint

Microsoft Defender XDR

Editions & Modules

Academic: $2.50
per user/per month
Standalone: $5.20
per user/per month

No answers on this topic

Offerings

Pricing Offerings
Microsoft Defender for Endpoint	Microsoft Defender XDR
Free Trial
Yes	Yes
Free/Freemium Version
No	No
Premium Consulting/Integration Services
No	No

Entry-level Setup Fee

No setup fee

Additional Details

—

More Pricing Information

Pricing Info

Community Pulse
	Microsoft Defender for Endpoint	Microsoft Defender XDR
Considered Both Products	Microsoft Defender for Endpoint Verified User Anonymous Chose Microsoft Defender for Endpoint It's very convenient and very well integrated with our environment. Incentivized Helpful? Verified User Anonymous Chose Microsoft Defender for Endpoint Majorly because our suite is Microsoft, so make totally sense to have this in the company and the price. It is Microsoft is better than CrowdStrike. Incentivized Helpful? Verified User Anonymous Chose Microsoft Defender for Endpoint Sophos. Because of the integration with Microsoft ecosystem, we selected Defender. Incentivized Helpful? Verified User Anonymous Chose Microsoft Defender for Endpoint We have not used anything else other than Microsoft Defender for Endpoint. Maybe we've used other antivirus software like Sophos and things like that. They're just not all encompassing and that's why we moved to use this product. Incentivized Helpful? GG Gustavo Gonzalez Cybersecurity Senior Engineer Chose Microsoft Defender for Endpoint I have been working with customers that they are transitioning from Sentinel One, CrowdStrike to Defender for Endpoint, right? So I think it's because they see the value in the product and also they see how much they can save in terms of the cost for companies because they … Incentivized Helpful? PH Paolo Heuer Cybersecurity Director Chose Microsoft Defender for Endpoint We previously used CrowdStrike on our servers. However, the seamless integration of Microsoft Defender (MD) with XDR and the entire Microsoft ecosystem led us to choose Microsoft Defender for Endpoint (MDE). Incentivized Helpful? Verified User Anonymous Chose Microsoft Defender for Endpoint What we love more about this product is the way this pro gets integrated into the other family of solutions, especially Defender for Identity or the XDR solutions. We think that the market, the customers are full of unattended consults coming out from different vendors and that … Incentivized Helpful? SD Sid Desai Managing Partner Chose Microsoft Defender for Endpoint The technical features, usability and the support was nice as compared to the other products. Incentivized Helpful? Joy Dutta Lead Engineer Chose Microsoft Defender for Endpoint Microsoft Defender for Endpoint is more advantageous in our windows heavy infrastructure and it was unparalled in the ease of integration with windows endpoints. Security breaches, system crashes and outages with other competitors like Crowdstrike made it easier for us to go … Incentivized Helpful? GS Gaurav Sharma Sales Head Chose Microsoft Defender for Endpoint Norton is much much more expensive and difficult to use. Microsoft Defender for Endpoint is easy to use and can be operated by a new joiner as well. Incentivized Helpful? SU Shital Ulagadde Senior Cyber Security Consultant Chose Microsoft Defender for Endpoint CrowdStrike Falcon is also a good solution for endpoint protection which offer EDR Soultion, threat hunting and AI driven threat protection. Sophos Intercept X combines next-gen antivirus with advanced EDR capabilities with its deep learning technology, exploit prevention, and … Incentivized Helpful? Verified User Anonymous Chose Microsoft Defender for Endpoint Microsoft Defender for Endpoint is unique for its effortless deployment into the Microsoft ecosystem, where it taps the broadest set of threat intelligence from more than 1.5 billion endpoints. Its state-of-the-art AI-powered automated investigation and remediation minimize … Incentivized Helpful? Verified User Anonymous Chose Microsoft Defender for Endpoint We started onboarding macOS devices on jamf and started managing it. Because Defender for Endpoint is not working as expected for and compared to price and functionality we are switching from it. Incentivized Helpful? RL Raju Lokhande Assistant Professor Chose Microsoft Defender for Endpoint Kaspersky Endpoint Security Incentivized Helpful? Verified User Anonymous Chose Microsoft Defender for Endpoint CrowdStrike and SentinelOne. CrowdStrike, you have to deploy it, but it's the defender, it's already baked into the operating system. Same thing with SentinelOne. Incentivized Helpful? Verified User Anonymous Chose Microsoft Defender for Endpoint Easier to integrate, less hidden fees, easier to maintain, and easier to update. Support is much better on the Microsoft side than CrowdStrike. Incentivized Helpful? Verified User Anonymous Chose Microsoft Defender for Endpoint I don't think, it's not really something that we were just using Microsoft and it was just an easy thing to do. Incentivized Helpful? Verified User Anonymous Chose Microsoft Defender for Endpoint I'm not familiar. It's just been one year plus that I started using, so I've just started using Defender, so I really don't know how to compare it with others. Incentivized Helpful? Verified User Anonymous Chose Microsoft Defender for Endpoint I would say at the end all they are doing the same, but with the benefit that we don't need to install anything. So it's just kind of enabling and then the functionality is available, so other products need to be installed, which is not necessary with the defend Incentivized Helpful? Verified User Anonymous Chose Microsoft Defender for Endpoint We use Defender in the cloud. We are currently using Defender in the cloud and also evaluating the XDR solution for programmatic. It's just arguments, the defense in depth. You have Defender Endpoint and then you have what you have in the cloud as well, so it's just augmenting … Incentivized Helpful? AM Akshay Mahajan Application Evaluator Chose Microsoft Defender for Endpoint Before using Defender for Endpoint, we basically had the starter version of the Microsoft product, which comes prebuilt into the system. We had them using in the initial run, but then what usually happened was the employees started disabling it, and that usually made, we guys … Incentivized Helpful? Verified User Anonymous Chose Microsoft Defender for Endpoint I am a big fan of Tanium actually, so I think it is good. Tanium seemed like it was maybe a little bit easier, but maybe the capability was lacking. Maybe that's the reason why it seems like Defender for Endpoint might be a little harder to understand. There might just be more … Incentivized Helpful? Verified User Anonymous Chose Microsoft Defender for Endpoint CrowdStrike Falcon, and Sentinel One are other big ones that we use a bit. Cisco Secure Endpoint we've evaluated as well. Cisco Secure endpoint capability-wise doesn't match up to Defender, SentinelOne, and CrowdStrike both do, but the cost profiles are a bit higher. So most of … Incentivized Helpful? Verified User Anonymous Chose Microsoft Defender for Endpoint I would say not to name specific company names, because I'm a partner with one of them and that's the account that I work with. But I use some competing solutions that I would say are pretty heavy from an overhead perspective with the agent that has to be installed in the … Incentivized Helpful? JN Jamil Niazi CIO Chose Microsoft Defender for Endpoint Because this product is easier to use and has a lot of development and Microsoft's behind it. Incentivized Helpful?	Microsoft Defender XDR LL Lian Lopreiato Manager Chose Microsoft Defender XDR We saw CrowdStrike but Microsoft Defender XDR was already in our computer. It was cheaper too cause we had Micrsoft license. CrowdStrike look cool but had many buttons and hard to read. My team like Microsoft Defender XDR because it looks same like other Microsoft thing. We … Incentivized Helpful? Verified User Anonymous Chose Microsoft Defender XDR Our product in that area, for instance as a security platform and for us it is for the moment really bad point. We started to move in that direction that there is that disconnect from the client management. So if there is some action that needs to be executed detected by … Incentivized Helpful? NS Nikhil Sharma Account Manager Chose Microsoft Defender XDR As a business already using Microsoft 365 and Azure, the seamless integration with Microsoft Defender XDR provided a unified security approach, streamlining management and operations. Incentivized Helpful? HP Hemant Patel Manager Chose Microsoft Defender XDR Avast had very limited capabilities, especially in terms of automation. We had to have some employees available 24/7 to monitor and take necessary actions. Microsoft Defender is so much more advanced. Incentivized Helpful? Verified User Anonymous Chose Microsoft Defender XDR We have a microsoft ecosystem and we can easily implement Microsoft Defender XDR in a breeze. Using few option, we can actually start logging and managing all the data. Incentivized Helpful? Alfiya Mukadam Software Engineer Chose Microsoft Defender XDR CrowdStrike Falcon Incentivized Helpful? Harshit Lal security consultant Chose Microsoft Defender XDR Microsoft Defender XDR deployment process is seamless as compared to proofpoint Incentivized Helpful? Verified User Anonymous Chose Microsoft Defender XDR I've used Trend Micro, but it's not exactly the same because Trend Micro is equivalent to one of the parts of Defender XDR, which is Defender for Endpoint. But Trend Micro has also a portal that combines all the incidents like Defender XDR, but I think the Microsoft one is much … Incentivized Helpful? Verified User Anonymous Chose Microsoft Defender XDR Microsoft Defender XDR is more seamless than Sophos Intercept X as it is better integrated into the Microsoft 365 suite. Sophos Intercept X is a little bit cheaper per year than Microsoft Defender XDR though, and definitely worth looking into if you are looking for a security … Incentivized Helpful? Verified User Anonymous Chose Microsoft Defender XDR Well, we're actually evaluating the other products now. We had selected Defender XDR because at the time we just got a good deal on it. Incentivized Helpful? JH Jany Harber System Engineer Chose Microsoft Defender XDR Azure AI Vision Incentivized Helpful? Shubham Jurail IT Consultant Chose Microsoft Defender XDR It was easy to implement in comparison to Palo Alto, and cost-saving can integrate well with Windows products. Incentivized Helpful? Mario Urrutia CITO (Chief Information Technology Officer) Chose Microsoft Defender XDR It really was the first and most logical option since it is an integral part of the platform that we want to protect and so far the results have been optimal. Incentivized Helpful? Verified User Anonymous Chose Microsoft Defender XDR We used the MS XDR as this is a bundle that we bought when we subscribed to the M365 platform, so having it was a bonus as we stated earlier, but due to limitation on licenses in Sentinelone, having this is just a blessing for us, so we can reduce around 200 licenses and can … Incentivized Helpful? CB Caridad Buenaventura Senior Financial Analyst Chose Microsoft Defender XDR The Microsoft 365 Defender is a product that has a lot of advantages over other similar products. This is because Microsoft 365 Defender integrates seamlessly with both Microsoft 365 services, is capable of detecting threats in real time, and has the capability of automating … Incentivized Helpful? Abdrhman Arar . Systems Engineer Chose Microsoft Defender XDR For the Identity Protection, Microsoft 365 Defender helps me to have fewer headaches from resetting passwords and securing the hacked account, it forces the security layers that help to achieve this solution.For the Endpoint, I have bought too many apps to secure endpoints but … Incentivized Helpful? Rudy Fulmer System Engineer Chose Microsoft Defender XDR We use sophos endpoint protection and xg firewalls in conjunction with microsoft 365 defender. We dont believe defender is robust enough to be our only security solution but it works well as another line of defense from threats to our organization especially our ever growing … Incentivized Helpful? Verified User Anonymous Chose Microsoft Defender XDR beats cylance protect, crowstrike is solid but at a costly product cannot use kapersky due to embargo norton not good enough now Incentivized Helpful? WP William Press Cloud Project Manager Chose Microsoft Defender XDR We have used and find great value with competitors to Microsoft 365 Defender. Many of these services were utilized before customers began the total cloud shift that has been seen with certain industries. It is difficult to compare these products apples to apples. What I will … Incentivized Helpful? Verified User Anonymous Chose Microsoft Defender XDR As already stated, the main advantage of Defender is being able to use a single console to manage it and all the other 365 applications. I can state that it provides a more effective protection than Bitdefender MDR and Trend Micro Apex One while I consider CrowdStrike on the … Incentivized Helpful? Anirudh Srinivas Lead Enterprise Architect Chose Microsoft Defender XDR The integration into our office suite and email system is really a breeze with the Microsoft 365 Defender Incentivized Helpful? Verified User Anonymous Chose Microsoft Defender XDR Trend Micro Vision One is much more expensive and there is so much more to configure. For our use case it was to big. Incentivized Helpful? Verified User Anonymous Chose Microsoft Defender XDR We use Microsoft products and have a large group of users. It works easily with our system. There is a great deal of knowledge base out there, often a little overwhelming. But we feel it's the best tool for our network to use parallel to the rest of our back-end. Incentivized Helpful? Verified User Anonymous Chose Microsoft Defender XDR Firstly Microsoft 365 Defender offers effortless integration with other Microsoft solutions over the products evaluated. Compared to Microsoft 365 Defender the evaluated products should improve the integration and its web interfaces. Few challenges were encountered when … Incentivized Helpful? Verified User Anonymous Chose Microsoft Defender XDR Microsoft is a known leader in the cyber security space and the trust microsoft has is greater than any other product. The pricing though bit on the higher side , but it ensures a proper support with using the product which makes it more preferred in our organisation.it is … Incentivized Helpful?

Features

Microsoft Defender for Endpoint

Microsoft Defender XDR

Endpoint Security

Comparison of Endpoint Security features of Product A and Product B
	Microsoft Defender for Endpoint 8.4 Ratings 2% below category average	Microsoft Defender XDR - Ratings
Anti-Exploit Technology	7.80 Ratings	00 Ratings
Endpoint Detection and Response (EDR)	9.10 Ratings	00 Ratings
Centralized Management	8.90 Ratings	00 Ratings
Hybrid Deployment Support	7.10 Ratings	00 Ratings
Infection Remediation	9.30 Ratings	00 Ratings
Vulnerability Management	7.40 Ratings	00 Ratings
Malware Detection	8.80 Ratings	00 Ratings

Best Alternatives
	Microsoft Defender for Endpoint	Microsoft Defender XDR
Small Businesses	ThreatLocker Score 9.5 out of 10	Bitdefender GravityZone Score 9.1 out of 10
Medium-sized Companies	BlackBerry Protect (CylancePROTECT) Score 9.1 out of 10	CrowdStrike Falcon Score 9.0 out of 10
Enterprises	BeyondTrust Endpoint Privilege Management Score 9.8 out of 10	CrowdStrike Falcon Score 9.0 out of 10
All Alternatives	View all alternatives	View all alternatives

User Ratings
	Microsoft Defender for Endpoint	Microsoft Defender XDR
Likelihood to Recommend	8.4 (0 ratings)	8.6 (0 ratings)
Likelihood to Renew	8.4 (0 ratings)	7.7 (0 ratings)
Usability	- (0 ratings)	9.0 (0 ratings)
Support Rating	9.0 (0 ratings)	9.0 (0 ratings)
In-Person Training	- (0 ratings)	9.1 (0 ratings)
Online Training	- (0 ratings)	9.1 (0 ratings)
Implementation Rating	- (0 ratings)	9.0 (0 ratings)

User Testimonials
	Microsoft Defender for Endpoint	Microsoft Defender XDR
Likelihood to Recommend	Because of its integration with Windows, it is very easy to deploy and manage. Any IT department should be able to leverage the software and interface. The admin portal provides weighted recommendations that comprise the Secure Store, offering admins, security teams, and business owners valuable insights into their security footprint without requiring a strong security background. The software would be ideal for small and mid-sized businesses that cannot dedicate resources to security. Larger enterprises would also benefit, but may require the enhanced license. Incentivized MM Michael Miller IT Engineer Read full review	Suit Really in everything, what is modern cloud work especially really if you work in a global company where your IT team is not always operational hour of the business users so that everything is really in the cloud can be managed from everywhere, but we do not access to local resources anymore. That's really a good point. What is always a little bit the pressure point is that general things in cloud things are moving fast so it's always difficult to keep the teams that is using these words up to date Incentivized Verified User Anonymous Read full review
Pros	One, it's crazy lightweight, so compared to some of the competitors that we also have used with our security services, it's really lightweight and so I don't have a lot of overhead on the system that it's running on. It does really fantastic PowerShell integration. Incentivized Verified User Anonymous Read full review	The software uses advanced AI and machine learning algorithms to monitor activities and detect any anomalies immediately, protecting our financial data. Automated responses to known threats reduce the impact of possible incidents and improve our security posture. Microsoft 365 Defender easily combines with other Microsoft 365 services and external security solutions, providing a complete and unified security solution. Incentivized CB Caridad Buenaventura Senior Financial Analyst Read full review
Cons	So the fact that Defender for Endpoint still works with signatures is actually, I don't know, a little difficult for us because, I mean, since Microsoft trusts those signatures, you can easily inject code. And we've done it many times. To show that you can inject code through vulnerabilities like CV 2013, 99, and 33 but still keep the signature. So because of the trust of those signatures, the malware just kind of slides into the environment without Defender knowing. That's the first part. The second part is that the behavioral analysis is not precisely its Prime. It's not Defender's best capability for endpoints. So, Defender does not identify all behaviors considered by other EDRs in the market. Incentivized Verified User Anonymous Read full review	Microsoft 365 Defenders risk assessment and remediation tool can be improved while tackling and preventing the attack. As there are multiple new attacks are getting discovered to prevent and remediate those attacks the Microsoft 365 Defenders database should be keep updated and ready. The Microsoft 365 Defenders capability to identify the insider attacker can be improved. Automate response generated to remediate the attack can be strengthen. Incentivized Verified User Anonymous Read full review
Likelihood to Renew	Microsoft Defender is closely catching -up in market with existing competitors they have added DLP endpoint & DLP Network and Cloud DLP solution last year with OCR capabilities. I would say Microsoft Defender is not legacy Vendor in end point security, the need to learn from other vendors in market and focus on new XDR technologies, which is going to be new battle for all vendors Incentivized Bhuwan Chandra Business Development Manager Read full review	All though most of the features are upto mark, there are certain times where there have been misses to detect spam, phising emails. this might be due to the subject and content of the email being more sophisticated than standard . Incentivized Anirudh Srinivas Lead Enterprise Architect Read full review
Usability	Because in terms of the usability is easy to understand, it's easy to manage, obviously you need to have specific skills to do that, but I would say that even the console and the product is walking through the flow that you are looking for on this console. Incentivized GG Gustavo Gonzalez Cybersecurity Senior Engineer Read full review	The product is easy to deploy and very customisable. Available if a simple UI and seamless software implementation process. Microsoft Defender XDR integrates well with various security systems. Software compatibility and scalability. Ability of the software in efficiently analysing and detecting threats in both the system and Website. MK Molka Kouki vice prsidente de la Confdration Read full review
Reliability and Availability	Microsoft Defender for Endpoint chugs along just fine no matter what we throw at it and what systems it's running on. It doesn't take up a lot of resources either, so that's welcomed. Incentivized Verified User Anonymous Read full review	No answers on this topic
Performance	Microsoft Defender for Endpoint is easy on memory and resources on clients. Incentivized Verified User Anonymous Read full review	No answers on this topic
Support Rating	Overall support is really good for this product. Since it's a Microsoft product, you will get good support from a number of different resources, including knowledgebase articles on the web, support from Microsoft technicians, and documentation (which tends to very thorough). Also, there is a vast user support community for this product, so user support forums would also be another valuable channel to get help if needed. I don't envision too many people will have issues/problems with the product, as it tends to run good overall. Incentivized Verified User Anonymous Read full review	Their support throughout our onboarding of the product was fabulous. They not only took the time to carefully explain to teams not as well equipped with the lingo but explained to the tech team how to teach the other teams to be successful. They never once seemed impatient or annoyed with basic questions and didn’t pretend to know something when they needed to research an answer Incentivized Morgan Thompson Account Executive Read full review
In-Person Training	No answers on this topic	Good and hard to find someonme who can explain everything for you beside Microsoft they provide you everything you need. Incentivized Abdrhman Arar . Systems Engineer Read full review
Online Training	No answers on this topic	Microsoft Provides a good training for the Microsoft 365 Defender and has a good learning paths to learn and take the exams and get your Certifications. Incentivized Abdrhman Arar . Systems Engineer Read full review
Implementation Rating	Deployment was handled by our team here and everything went pretty smoothly. We did have a few hiccups in our test group, but that only took a bit to get ironed out. Incentivized Verified User Anonymous Read full review	seemless and almost transparent. can be deployed by script if needed so every endpoint on our system get's it. if you have intune it gets dumped on the the endpoint by policy so nothing escapes it Incentivized Verified User Anonymous Read full review
Alternatives Considered	Microsoft Defender for Endpoint offers strong integration with Microsoft 365 and Azure services, which provide a unified security experience. While McAfee Trellix is known for solid antivirus, Microsoft Defender excels in integration in the ecosystem. Incentivized Verified User Anonymous Read full review	We chose Microsoft Defender XDR for the ability to correlament the dangers in the Microsoft Ecosystem, Strong Automation, and email, Identification, Estruction, Establishment Points and Cloud Apps in the same platform. This gave us the end-to-end visibility without the need to sew several devices simultaneously. Incentivized Verified User Anonymous Read full review
Scalability	Microsoft Defender for Endpoint is easily scaled from small orgs to giant enterprises. Incentivized Verified User Anonymous Read full review	No answers on this topic
Return on Investment	Reduced incidents of security breaches lead to lower remediation costs and avoid potential financial losses and reputational damage. Reduces the need for additional third-party security solutions and training, thereby lowering overall security management costs. Increased efficiency and productivity of IT staff lead to better allocation of resources and cost savings. Reduces the risk of fines and sanctions associated with non-compliance, ensuring business continuity and protecting revenue. Incentivized CF Carlos Eduardo Faquinello IT Solutions Architect Read full review	Cost-Efficiency: Microsoft Defender XDR often proves cost-effective compared to implementing multiple standalone security solutions, consolidating threat detection and response capabilities. Time Savings: Its centralized dashboard and automated features can save time for security teams, allowing them to focus on critical tasks Incentivized SH stephen Hobson scrm Read full review
ScreenShots	Microsoft Defender for Endpoint Screenshots	Microsoft Defender XDR Screenshots