For Microsoft Defender for Cloud, the thing I like best is continuous Cloud Security Posture Management + attack path analysis.

*Why it stands out:*

1. It finds the "blast radius" before attackers do -

Instead of just flagging "VM has open port 22", it maps how that misconfig + weak identity + exposed storage = full path to your crown jewels. The attack path visualization saves tons of time triaging.

2. One pane for AWS, Azure, GCP :

Most teams are multi-cloud now. Defender lets you see secure score, recommendations, and alerts across all 3 clouds without jumping dashboards. That’s rare.

3. DevSecOps shift-left :

The code-to-cloud integration means it scans IaC templates, containers, and CI/CD pipelines before you even deploy. Fixing a bad ARM/Bicep/Terraform template in PR is way cheaper than fixing it in prod.

4. Agentless scanning for VMs + databases -

No agents needed for vulnerability assessment on Azure VMs and SQL. Less overhead, less "please install this agent" friction with infra teams.

The secure score is gamified but actually useful too - it gives CISOs something to track quarter-over-quarter. Review collected by and hosted on G2.com.

Pricing can be confusing, and it’s easy to end up with surprise charges from “Defender plans” when you thought you were just using the free CSPM features. The alerts can also be very noisy at first, with lots of false positives and brute-force warnings until you spend time tuning the settings. Overall it feels Azure-first, with AWS and GCP getting weaker features compared with Azure. Finally, Secure Score doesn’t always reflect real risk in practice—teams can end up chasing the score instead of focusing on fixing the actual attack paths. Review collected by and hosted on G2.com.

Microsoft Defender helps with security controls thanks to its machine learning and behavior engines, which allows for the reduction of false positives and strengthens endpoint security through its security policies. Additionally, it integrates with other Microsoft platforms, providing a more comprehensive environment for the control and management of security events in your infrastructure. Review collected by and hosted on G2.com.

The granularity of its security rules, its deployment method through custom scripts, and its integration with almost all SIEM tools, in addition to Microsoft's own tools for better event correlation, help the SOC research team take containment and remediation measures. Review collected by and hosted on G2.com.

Microsoft Defender for Cloud has been an “all-in-one” security application for our company. It works across both our on-premises environment and our cloud resources, such as VMs and Azure AD. We also appreciate the straightforward setup and the user-friendly interface. Real-time monitoring is essential for us, since it helps us proactively prevent security breaches and reduce risks. Review collected by and hosted on G2.com.

I wouldn’t necessarily call this a dislike, but I would appreciate more in-depth training on the AI models and processes offered by Microsoft Defender for Cloud. That would help me gain a clearer understanding and, in turn, make the tools more useful for the company. Review collected by and hosted on G2.com.

I really like having the security alerts and recommendations in one place with Microsoft Defender for Cloud. It makes it much easier for us to quickly understand what needs attention without having to check multiple tools. It gives us a clear view of what requires our focus and helps us prioritize and decide what to work on first. The initial setup was very simple and easy. Review collected by and hosted on G2.com.

I find that alert management could be improved because when there are a lot of alerts, it takes time to sort through them and identify what really needs immediate attention. I would appreciate better grouping of similar alerts and more flexible filtering. Review collected by and hosted on G2.com.

The way it automatically blocks bad content detected during interactions. Most importantly the prompt injection attempts. Everyone is using AI & CoPilot these days. For the Defender to see that a user is trying to ignore previous instructions so quickly, they know that is not the normal user & shut them down. The best part is that this does it on it's own. This free's up my time from having to watch system reports every minute of the day. Review collected by and hosted on G2.com.

I did not like setting up the rules but that is with any product. Once it was done, it was done. Review collected by and hosted on G2.com.

I like Microsoft Defender for Cloud, especially the Microsoft Firewall feature. It's very valuable to my AI company as we use it with Microsoft Cloud on the Azure portal. I'm happy managing Microsoft services in Microsoft Defender and find it very useful for health checking, firewall checking, and networking. The setup is very easy using the documentation on the Microsoft Azure portal, and I can search for Microsoft Defender, make resources, and apply firewall settings with IP addresses effortlessly. Review collected by and hosted on G2.com.

I find that when you uninstall and reinstall PowerShell, the Python packages remain tied to the old version and Microsoft Defender does not identify this issue. It feels like there are some taskbar or related issues that could be improved. I think it should be able to better import these problems. Review collected by and hosted on G2.com.

It is a cloud-based security tool. We use it for servers and users, and also for checking vulnerabilities and remediation. It’s one of the best options for security compliance, and it provides helpful suggestions for remediation. Review collected by and hosted on G2.com.

The features were good, but it feels a little expensive. Also, since we can use one script for five devices, we can generate the script multiple times as needed. Review collected by and hosted on G2.com.

I like how it gives a single place to monitor security across cloud resources. It helps identify vulnerabilities, provides clear recommendations to improve security, and continuously monitors for threats. The integration with Azure and support for hybrid and multi-cloud environments makes it easier to manage security without using multiple tools. The perfomance was very good Review collected by and hosted on G2.com.

One thing I dislike is that the pricing can become expensive as more workloads and advanced features are enabled. Some alerts also require investigation to separate real issues from less important ones, and the interface can feel overwhelming for new users because there are many security settings and recommendations to review. Review collected by and hosted on G2.com.

What I like best about Microsoft Defender for Cloud is how it brings security posture management and threat protection into a single, unified platform. It gives clear, actionable recommendations to improve security across Azure, hybrid, and even multi-cloud environments, which makes it very practical for day-to-day operations. The secure score feature is especially helpful in quickly understanding where we stand and what to fix next. I also appreciate how well it integrates with other Microsoft security tools, reducing the need for multiple dashboards. Overall, it simplifies cloud security while still offering deep visibility and control. Review collected by and hosted on G2.com.

What I dislike about Microsoft Defender for Cloud is that it can sometimes feel overwhelming, especially with the volume of recommendations and alerts it generates. Not all alerts are equally actionable, so it takes effort to filter out the noise and focus on what really matters. The pricing model can also be a bit complex and difficult to predict, particularly in larger or multi-cloud environments. Additionally, some advanced features require deeper expertise to configure properly, which can be a learning curve for new users. Review collected by and hosted on G2.com.

What I like most about Microsoft Defender for Cloud is how practical and reassuring it feels when I’m managing cloud resources.

Rather than just throwing a bunch of alerts at me, it helps me understand what’s actually wrong and what I should fix first. The security recommendations are clear and well prioritized, which makes it easier to focus on what truly matters instead of getting overwhelmed by everything at once. Review collected by and hosted on G2.com.

Another point is the pricing. It’s a powerful tool, but many of the more advanced features (like workload protection plans) cost extra. For smaller teams or companies, it can end up feeling a bit expensive, especially compared to simpler tools. Review collected by and hosted on G2.com.