Microsoft Defender for Endpoint Reviews & Product Details

Integration with the rest of the tools through E5 means everything can be managed through Office 365. In addition, real-time threat detection and event correlation make monitoring more proactive and allow more focused containment actions to be defined based on the risks posed by your endpoints. Review collected by and hosted on G2.com.

For better analysis, you need a license such as E3 or E5, or at least an integration with a SIEM, since the Defender console alone tends to lack sufficient event detail when there are so many events. Review collected by and hosted on G2.com.

The best part is that it is natively built into Windows and integrates seamlessly with the Microsoft ecosystem. It provides a solid baseline of protection and is very cost-effective for organizations already using Microsoft 365. Review collected by and hosted on G2.com.

The management console feels clunky and difficult to navigate. It is also too reactive; it lacks the advanced autonomous response and automated rollback features that we needed, which led to a lot of alert fatigue and manual intervention for our team. Review collected by and hosted on G2.com.

Microsoft Defender for Endpoint seamlessly fits into Microsoft ecosystem, it just works well without needing much extra setup. The UI is clean enough once you get used to it, and performance has been solid with no noticeable impact on devices. The threat detection is actually useful, not overly noisy, and the built-in intelligence helps catch things early. It also feels worth the cost if you are already using Microsoft tools, since everything is integrated. Review collected by and hosted on G2.com.

Initial setup and configuration can feel a bit complex, especially if you are new to Microsoft ecosystem. The interface, while clean, isn't aways intuitive, so finding specific settings or detailed reports can take some time. Review collected by and hosted on G2.com.

What I like best about Microsoft Defender for Endpoint is the depth of integration with the Microsoft security ecosystem. It gives strong visibility across endpoints, ties alerts into Microsoft Sentinel and Defender XDR, and makes investigation much easier by correlating device, user, identity, and email-related signals. The automated investigation and response features are also valuable because they help reduce manual triage effort and speed up containment. Review collected by and hosted on G2.com.

What I dislike about Microsoft Defender for Endpoint is that it can be complex to configure and tune properly, especially in larger or more mature environments. Some alerts can require careful suppression or tuning to avoid noise, and the portal experience can feel fragmented because related information is sometimes spread across multiple Microsoft security areas. Reporting and advanced hunting are powerful, but they can take time to learn and use effectively. Review collected by and hosted on G2.com.

Ease of configuration and management integrates natively with Windows with no additional agent Review collected by and hosted on G2.com.

For the enduser this is the best solution without MAJOR overhead. Do Not buy 3rd party and save your money Review collected by and hosted on G2.com.

We can easily deploy the microsoft defender for endpoints agent throughout the environment Review collected by and hosted on G2.com.

Sometimes it shows non complient devices with irrelevant issues. Review collected by and hosted on G2.com.

I like the simplicity of Microsoft Defender for Endpoint, its low overhead, and its reliability. It's easy to deploy and provides fundamental security for endpoints. It does a majority of what I need in a simple, lightweight manner. Review collected by and hosted on G2.com.

I think they need to reduce its footprint, efficiency, and speed. It's already pretty good, but there is room for improving efficiency. It would be good to see it bundled with other things and having a lightweight version built in. Review collected by and hosted on G2.com.

What I like best about Microsoft Defender for Endpoint is its strong integration with the Microsoft ecosystem and its visibility. It provides actionable insights through real-time threat detection, advanced investigation, and automated response capabilities. Review collected by and hosted on G2.com.

In more complex environments, advanced configuration and troubleshooting is less intuitive and certain features require navigating multiple portals or having deep Microsoft expertise to use effectively. The real issue is knowing where to go to create a policy. Between Entra, Intune, Defender, and Perview, I have a hard time knowing where to go or how to keep track of my policies. Most significantly though, I've seen way to many tests/comparisons on how Defender performs on Zero Day or viruses and I'm not sure if they are bias or not but Microsoft does not fair well in blocking these attacks. Review collected by and hosted on G2.com.

We like that Microsoft Defender for Endpoint is tightly integrated with Microsoft 365, Azure, and Defender XDR. For organizations already running a suite of Microsoft cloud products, it delivers in-depth telemetry, supports automated response, and enables a more unified investigation experience across the environment. Review collected by and hosted on G2.com.

Detection quality on macOS and Linux is improving, but it still lags behind Windows. Also, some of the more advanced response capabilities require E5 licensing, which can be a limitation depending on your setup. Review collected by and hosted on G2.com.

I appreciate the deep integration of Microsoft Defender for Endpoint with the Microsoft ecosystem. This integration enhances its automated response capabilities, which is invaluable in providing a comprehensive defense strategy. The solution effectively correlates signals across various services such as endpoints, identities, cloud applications, and email. This unified signal sharing system ensures prompt detection and action, such as instantly connecting the dots when a phishing email detected in Outlook is associated with lateral movement attempts on an endpoint. Moreover, the initial setup of Microsoft Defender for Endpoint was smooth and posed no specific challenges, which makes the onboarding process efficient and hassle-free. Review collected by and hosted on G2.com.

I find challenges with third-party integration on non-Microsoft platforms. Additionally, the licensing complexity and limitations in centralized management are areas that I believe need improvement. Review collected by and hosted on G2.com.