Microsoft Defender for Cloud Reviews & Product Details

I like that it works with the rest of our Microsoft stuff. We didn't have to rip out our existing setup or learn a completely new tool.

The dashboards are clean and easy to use, and the threat detection actually catches real issues. If you're already in the Microsoft ecosystem, it's a good choice without a lot of friction. Review collected by and hosted on G2.com.

The pricing structure isn't really transparent, and you might end up spending more than you budgeted for, if not careful...

The interface has a lot going on and takes time to learn like with other MS prods. We also get a fair amount of alert noise that requires manual tuning to make useful.

It's solid if you're fully committed to Microsoft's ecosystem, but if you've got multiple cloud providers, I personally think you won't get as much out of it. Review collected by and hosted on G2.com.

I like Microsoft Defender for Cloud because the dashboard is simple and not confusing, so it's easy to check security status without spending too much time. It also works well with other Microsoft tools we already use, which makes things easier. I haven't noticed any performance issues while using it. The AI based recommendations are helpful for spotting security risks quickly. Support articles are also easy to follow whenever I need help. It may not be the cheapest option, but for keeping client files and work data secure, I think it's worth the cost. Review collected by and hosted on G2.com.

I think the biggest downside is that some features take time to understand, especially if you are not from an IT or security background. At first, some alerts and recommendations felt too technical for me. The pricing can also become expensive for smaller teams. Sometimes the dashboard has a lot of information, so finding exactly what you need is not always quick. I also wish the onboarding guides had more simple examples for non technical users who just want to manage their work securely. Review collected by and hosted on G2.com.

What I like most about Microsoft Defender for Cloud is how it centralizes security alerts and helps security teams investigate potential threats more efficiently. It integrates smoothly with the broader Microsoft security ecosystem, which makes it easier to correlate alerts, review indicators like IP addresses, hashes, and other security artifacts, and better understand suspicious behavior. The platform also supports faster incident investigation by providing helpful telemetry and added context. From a SOC analyst’s perspective, it fits well alongside XDR, SIEM, and ticketing tools, helping improve detection, triage, and incident response while maintaining strong visibility across the environment. Review collected by and hosted on G2.com.

As a new user, I think Microsoft Defender for Cloud has a learning curve because it includes many security features, dashboards, and recommendations. It takes time to understand how everything works, especially for beginners. While the Microsoft documentation is helpful, I would appreciate more structured learning resources, such as an official YouTube tutorial series, step-by-step guided labs, real-world investigation scenarios, and interactive walkthroughs. These would help new users become productive more quickly and make the onboarding experience much smoother. Review collected by and hosted on G2.com.

I appreciate how Microsoft Defender for Cloud strengthens our cloud security posture across Azure and hybrid environments. It continuously assesses security configuration, identifies vulnerabilities, monitors compliance, and detects potential threats. I find the continuous visibility into security risks, identification of misconfigurations and vulnerabilities, and the prioritization of remediation based on risk highly beneficial. It also helps us proactively identify and remediate security risks before they can be exploited, which reduces our attack surface. The platform's integration with other Microsoft security and cloud services is seamless, and basic onboarding for Azure resources is straightforward because it natively integrates. Review collected by and hosted on G2.com.

I find the initial setup and configuration complex, especially in multi-cloud or hybrid environments. Additionally, while it provides comprehensive detection, I find that it can generate a large number of alerts, which makes it difficult to focus on the most critical threats without better correlation, prioritization, and noise reduction. Review collected by and hosted on G2.com.

I like Microsoft Defender for Cloud because it gives clear cloud security visibility.

It shows risks in one place.

It helps improve secure score.

It detects threats quickly.

It supports Azure, AWS, GCP, and hybrid workloads.

It gives useful recommendations.

It helps teams fix issues before they become incidents. Review collected by and hosted on G2.com.

I dislike that Microsoft Defender for Cloud can feel complex at first.

Some settings are spread across different areas.

Pricing can be confusing.

Recommendations may need tuning.

Some alerts can be noisy. Review collected by and hosted on G2.com.

Microsoft Defender for Cloud provides a highly centralized and robust dashboard for managing our security posture. The "Secure Score" feature is extremely helpful; it gives a clear, immediate baseline of where our vulnerabilities lie and prioritizes which misconfigurations we need to fix first. Additionally, if your organization is already deeply invested in the Microsoft Azure ecosystem, the native integration is practically seamless. The automated regulatory compliance tracking is also a strong out-of-the-box feature that saves us time during audits. Review collected by and hosted on G2.com.

My main contention is that it lacks a truly cloud-agnostic approach. While Microsoft has made strides in adding multi-cloud support (such as connecting to AWS and GCP), the platform is fundamentally built for and biased toward Azure. Managing non-Azure resources often feels clunky, less intuitive, or like an afterthought compared to how native Azure resources are handled. If you are running a highly balanced or predominantly non-Microsoft multi-cloud environment, you will feel this friction. Review collected by and hosted on G2.com.

What I value most is the single pane of visibility it gives across a multi-cloud estate. We run workloads in AWS, Azure, and GCP, and Defender for Cloud lets me see posture and threats across all three in one place rather than jumping between native consoles. The Secure Score is genuinely useful — it turns a sprawling set of findings into a prioritised, measurable target, so I can show progress over time and focus effort where it actually reduces risk. The built-in regulatory compliance dashboards are another standout for us; mapping our environment against standards like PCI DSS out of the box saves a lot of manual work at audit time. And because it plugs into the wider Microsoft Defender ecosystem, the alerts don't sit in isolation — they correlate with the rest of our signals, which makes triage and incident response faster and more coherent. Review collected by and hosted on G2.com.

Nothing to be honestly. But it can be more simple. Review collected by and hosted on G2.com.

What I like most about Microsoft Defender for Cloud is its unified approach to security. It brings together posture management, threat protection, and actionable remediation in a single platform, and it works consistently across Azure, AWS, GCP, and hybrid environments. Review collected by and hosted on G2.com.

One drawback of Microsoft Defender for Cloud is that managing alerts, pricing, and the many security recommendations can feel complicated and a bit overwhelming, especially for smaller teams or organizations that are new to cloud security. Review collected by and hosted on G2.com.

The unified dashboard is a massive time-saver for our team. We run a hybrid environment primarily on Azure but with quite a few workloads over in AWS. Being able to look at our Secure Score in one centralized pane rather than jumping between native cloud portals makes security posture management way easier. The regulatory compliance tracking is incredibly thorough it maps our infrastructure against CIS and NIST standards automatically, which saves us weeks of manual prep during audit season Review collected by and hosted on G2.com.

The alert fatigue is real. Out of the box, it throws an overwhelming volume of recommendations, and a lot of them turn out to be minor false positives or things that don't apply to our specific architecture. You have to spend serious time upfront creating custom exemption rules, or your team will get completely desensitized to the notifications. Also, the consumption-based billing can be unpredictable if your serverless infrastructure scales rapidly. Review collected by and hosted on G2.com.

I prefer the tools that Microsoft Defender for Cloud brings compared to other Microsoft products because it's a cross-platform solution that provides an end-to-end solution portfolio, allowing me to secure a vast area with just one product. I like how it secures storage by adding Defender for Cloud data. It brings a multi-versatile experience throughout the environment. Setting it up is very easy; you can start using it after a couple of hours of configuration through the Edge portal. Review collected by and hosted on G2.com.

I find it challenging that Defender for containers or Kubernetes has implementation issues with local AKS, and this is an area where I believe improvements are needed. When it comes to containerization, which is widely used, I feel that more improvements should be made to enhance Microsoft Defender for Cloud in this regard. Furthermore, there is some overlap between Microsoft Defender for Endpoint and Defender for Cloud, especially concerning Defender for servers, which can get a bit confusing. This overlap between SKUs could use some clarification to avoid redundancy. Review collected by and hosted on G2.com.