Microsoft Defender for Cloud Reviews & Product Details

What I like best about Microsoft Defender for Cloud is its centralized cloud security management and continuous posture assessment across hybrid and multi-cloud environments. It provides actionable recommendations, automated threat protection, and compliance monitoring from a single dashboard, helping organizations quickly identify risks, strengthen security, and maintain regulatory compliance while reducing operational overhead. Review collected by and hosted on G2.com.

What I dislike about Microsoft Defender for Cloud is that the licensing and feature tiers can be complex to understand, especially in large environments with multiple cloud services. Some recommendations may also generate alert fatigue or require additional tuning to reduce noise, and costs can increase as more advanced security features and workloads are enabled. Review collected by and hosted on G2.com.

I like Microsoft Defender for Cloud because of its real-time threat alerts and simple security recommendations. The dashboard is easy to use, providing a clear overview of security alerts, recommendations, and resource health all in one place. This helps us quickly identify and fix security issues. It also integrates well with Azure and Microsoft Defender XDR, giving better visibility and effective cloud security management. Review collected by and hosted on G2.com.

I find the setup can be a little complex for new users, and I feel some alerts can be overwhelming at first. Better customization options and a simpler onboarding experience would make it even better. Review collected by and hosted on G2.com.

I like how Microsoft Defender for Cloud assesses my VMs for OS patches and security bugs and provides quick fixes for configuration gaps. The Secure Score feature is especially favorable because it offers a clear percentage score and outlines VM vulnerabilities by risk and overall security status. I also find the product incredibly easy to get started with, requiring just a bit more effort to understand and search the portal, but after that, it's just a 5-minute task to activate basic tiers and start scanning. The native agentless VM scanning and actionable Secure Score are unmatched timesavers, making it an excellent tool for an IT team in an Azure-heavy environment. The deep native integration and seamless deployment reduce manual deployment headaches, and the cost efficiency for Azure-heavy environments provides much more competitive, predictable billing. The zero-agent deployment and simple toggle for enabling advanced protection make setup straightforward. Consolidation of the Microsoft security stack offers instant correlation without custom API piping. Review collected by and hosted on G2.com.

Microsoft Defender for Cloud features seem great, but I find it disturbing with the initial noise like triggering a heavy volume of false positives. It also requires manual effort to build. Additionally, the UI is fragmented; needing to open multiple portals like Azure portal for posture and Secure Score and Defender XDR for threat investigation is a bit cumbersome. Finally, the pricing tiers are rigid. It would be better to have just one plan that covers whatever is required, at a lower price. Review collected by and hosted on G2.com.

What I like most about Microsoft Defender for Cloud is how seamlessly it integrates with the Microsoft ecosystem. Since we already use Azure and Microsoft 365, it’s been much easier to manage cloud security from a single platform rather than switching between multiple security tools. I also appreciate the continuous monitoring and security alerts, which help us spot misconfigurations and potential threats early, before they turn into bigger issues. and support for microsoft is also good if we face an issues Review collected by and hosted on G2.com.

When it comes to Microsoft Defender for Cloud, I don’t really see any specific downsides. That said, it can sometimes feel expensive for small and medium-sized businesses. Review collected by and hosted on G2.com.

What I like about Defender for Cloud is it is native to Microsoft Eco-System. If you are already familiar with Azure Environments, It is very easy to configure and deploy. So, you don't have to go through another security system and learning period. Review collected by and hosted on G2.com.

I think it is the user dashboard. I think it can be improved a lot. for example it is very hard to find the onboarding/ subscription settings. Review collected by and hosted on G2.com.

The best aspect of Microsoft Defender for Cloud is how effectively it reduces alert fatigue through its Secure Score framework. Rather than dumping thousands of unprioritized vulnerabilities on infrastructure teams, it translates overall security posture into a clear, percentage-based metric. It also makes it obvious which remediations will deliver the highest security ROI, which has significantly improved our engineering workflow.

On top of that, its multi-cloud integration really does provide a “single pane of glass.” The agentless connectors for AWS and GCP help normalize security insights and compliance tracking (such as SOC 2 and ISO 27001) across different environments, bringing everything into a centralized, highly intuitive UI without requiring complex or clunky configuration. Review collected by and hosted on G2.com.

The main drawback is the complexity of the pricing. While the foundational posture management delivers strong value, turning on advanced Cloud Workload Protection Plans (CWPP) for containers or databases scales costs on a per-resource basis. In large-scale environments, this can lead to significant budget unpredictability. Moving to a more predictable, flat-rate tiering model would materially improve overall Pricing/ROI.

On Integrations and UI/UX, multi-cloud visibility has improved, but automated remediation workflows still heavily favor native Azure resources. Achieving the same level of quick-fix remediation in AWS or GCP often feels less intuitive and tends to require additional configuration. Bringing full feature and workflow parity to non-Azure clouds would make the multi-cloud experience feel truly seamless. Review collected by and hosted on G2.com.

I like using Microsoft Defender for Cloud because it helps me monitor our cloud environment to keep everything secure. It does a great job at spotting vulnerabilities, detecting potential threats, and providing practical recommendations for fixes. The deep investigation with security services is very thorough. I particularly appreciate the secure score feature since it shows areas for security improvement clearly. This feature, along with the clear actionable security recommendations, makes it easy to spot risk priorities and keep track of our overall security posture. Review collected by and hosted on G2.com.

Some alerts and recommendations can be overwhelming in larger environments. It takes time to fine-tune the alerts and the onboarding process needs improvement to be easier. Some advanced features can be a little complex to configure, which made the initial setup a bit complex, especially when understanding and fine-tuning advanced features and policies took a bit of time. Review collected by and hosted on G2.com.

For Microsoft Defender for Cloud, the thing I like best is continuous Cloud Security Posture Management + attack path analysis.

*Why it stands out:*

1. It finds the "blast radius" before attackers do -

Instead of just flagging "VM has open port 22", it maps how that misconfig + weak identity + exposed storage = full path to your crown jewels. The attack path visualization saves tons of time triaging.

2. One pane for AWS, Azure, GCP :

Most teams are multi-cloud now. Defender lets you see secure score, recommendations, and alerts across all 3 clouds without jumping dashboards. That’s rare.

3. DevSecOps shift-left :

The code-to-cloud integration means it scans IaC templates, containers, and CI/CD pipelines before you even deploy. Fixing a bad ARM/Bicep/Terraform template in PR is way cheaper than fixing it in prod.

4. Agentless scanning for VMs + databases -

No agents needed for vulnerability assessment on Azure VMs and SQL. Less overhead, less "please install this agent" friction with infra teams.

The secure score is gamified but actually useful too - it gives CISOs something to track quarter-over-quarter. Review collected by and hosted on G2.com.

Pricing can be confusing, and it’s easy to end up with surprise charges from “Defender plans” when you thought you were just using the free CSPM features. The alerts can also be very noisy at first, with lots of false positives and brute-force warnings until you spend time tuning the settings. Overall it feels Azure-first, with AWS and GCP getting weaker features compared with Azure. Finally, Secure Score doesn’t always reflect real risk in practice—teams can end up chasing the score instead of focusing on fixing the actual attack paths. Review collected by and hosted on G2.com.

Microsoft Defender helps with security controls thanks to its machine learning and behavior engines, which allows for the reduction of false positives and strengthens endpoint security through its security policies. Additionally, it integrates with other Microsoft platforms, providing a more comprehensive environment for the control and management of security events in your infrastructure. Review collected by and hosted on G2.com.

The granularity of its security rules, its deployment method through custom scripts, and its integration with almost all SIEM tools, in addition to Microsoft's own tools for better event correlation, help the SOC research team take containment and remediation measures. Review collected by and hosted on G2.com.

Microsoft Defender for Cloud has been an “all-in-one” security application for our company. It works across both our on-premises environment and our cloud resources, such as VMs and Azure AD. We also appreciate the straightforward setup and the user-friendly interface. Real-time monitoring is essential for us, since it helps us proactively prevent security breaches and reduce risks. Review collected by and hosted on G2.com.

I wouldn’t necessarily call this a dislike, but I would appreciate more in-depth training on the AI models and processes offered by Microsoft Defender for Cloud. That would help me gain a clearer understanding and, in turn, make the tools more useful for the company. Review collected by and hosted on G2.com.