Community Insights for Microsoft Defender for Cloud
Synthesised from 12 verified reviews.
Overview
Synthesised from 12 reviews | Last Published April 24, 2026
This product overview is based on an analysis of 12 recent reviews of Microsoft Defender for Cloud, examining overall satisfaction across multiple dimensions. Microsoft Defender for Cloud is primarily used to enhance security and protection across various cloud platforms, with 75% of reviewers (9 of 12) highlighting its role in safeguarding data, reducing risks, and improving infrastructure efficiency. While policy creation and management is valued, integration and feature completeness are areas needing improvement, with 25% of reviewers (3 of 12) citing difficulties with initial setup, data integration, and cross-platform consistency, particularly for Linux servers. Another 25% noted feature gaps, including incomplete endpoint scanning and a need for more region-specific compliance models. Environments range from fully Azure-centric to hybrid and multi-cloud, with half of the reviewers (6 of 12) using Azure cloud services, and 25% utilizing both on-prem resources and multi-cloud environments including AWS and Google Cloud. Reviewers offer mixed perspectives on threat reduction, with some finding it effective in reducing threats and allowing focus on actual risks, while others note the presence of false positives. A significant portion of reviewers, 42% (5 of 12), indicate that Defender for Cloud reduces the need for third-party security tools, and half of the reviewers (6 of 12) cite cost savings, with some estimating savings between $20,000 and $50,000 annually.
Pros
- Enhances security and protection across cloud platforms.
- Reduces reliance on third-party security tools.
- Offers potential cost savings, estimated between $20,000 and $50,000 annually by some users.
- Provides immediate responses to suspicious activities and blocks potential information theft.
- Facilitates policy creation and management for cloud endpoints.
Cons
- Integration can be challenging, especially for initial setup and cross-platform consistency (e.g., Linux servers).
- Feature gaps exist, including incomplete endpoint scanning.
- Lacks comprehensive region-specific compliance models.
- Generates false positive threat alerts.
- Threat reduction capabilities are perceived differently among users.