--- title: Microsoft Defender for Endpoint Reviews meta_title: 'Microsoft Defender for Endpoint Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 313 reviews by the users' company size, role or industry to find out how Microsoft Defender for Endpoint works for a business like yours. aggregate_rating: rating_value: 4.4 review_count: 313 scale: '5' date_modified: '2026-11-02' parent_category: name: Endpoint Protection url: https://www.g2.com/categories/endpoint-protection ---

Microsoft Defender for Endpoint Pros and Cons: Top 5 Advantages and Disadvantages

Quick AI Summary Based on G2 Reviews

Generated from real user reviews

Users value the ease of onboarding with Microsoft Defender for Endpoint, benefiting from quick integration and user-friendly design. (20 mentions)
Users value the real-time threat detection and prevention capabilities of Microsoft Defender for Endpoint, enhancing overall security. (18 mentions)
Users appreciate the real-time threat protection of Microsoft Defender for Endpoint, ensuring seamless security against intruders. (17 mentions)
Users value the real-time threat protection provided by Microsoft Defender, ensuring robust security against intruders and vulnerabilities. (15 mentions)
Users value the real-time threat protection offered by Microsoft Defender for Endpoint, enhancing security effortlessly. (14 mentions)
Users face compatibility issues with Linux and older Windows versions, leading to frustration and limited functionality. (8 mentions)
Users find the complexity of managing security policies a challenging aspect of Microsoft Defender for Endpoint. (8 mentions)
Users face difficult configuration challenges with Microsoft Defender for Endpoint, struggling with navigating multiple management portals efficiently. (7 mentions)
Users find configuration and troubleshooting challenging in complex environments, requiring better guidance and intuitive navigation. (7 mentions)
Users find a lack of clarity in navigating multiple portals for effective policy creation in Microsoft Defender for Endpoint. (7 mentions)

5 Pros or Advantages of Microsoft Defender for Endpoint

1. Ease of Use
Users value the ease of onboarding with Microsoft Defender for Endpoint, benefiting from quick integration and user-friendly design.
See 20 mentions

See Related User Reviews

Verified User
A

Verified User

Mid-Market (51-1000 emp.)

4.5/5

"Great Endpoint Manager for Windows"

What do you like about Microsoft Defender for Endpoint?

Ease of configuration and management integrates natively with Windows with no additional agent

Naresh C.
NC

Naresh C.

4.0/5

"Unified Protection, Limited Integration"

What do you like about Microsoft Defender for Endpoint?

I appreciate the deep integration of Microsoft Defender for Endpoint with the Microsoft ecosystem. This integration enhances its automated response ca

2. Threat Detection
Users value the real-time threat detection and prevention capabilities of Microsoft Defender for Endpoint, enhancing overall security.
See 18 mentions

See Related User Reviews

Verified User
A

Verified User

Mid-Market (51-1000 emp.)

2.5/5

"Room to Improve"

What do you like about Microsoft Defender for Endpoint?

What I like best about Microsoft Defender for Endpoint is its strong integration with the Microsoft ecosystem and its visibility. It provides actionab

Muhammad A.
MA

Muhammad A.

Mid-Market (51-1000 emp.)

5.0/5

"Deep Microsoft 365/Azure Integration with In-Depth Telemetry and Automated Response"

What do you like about Microsoft Defender for Endpoint?

We like that Microsoft Defender for Endpoint is tightly integrated with Microsoft 365, Azure, and Defender XDR. For organizations already running a su

3. Security
Users appreciate the real-time threat protection of Microsoft Defender for Endpoint, ensuring seamless security against intruders.
See 17 mentions

See Related User Reviews

Muhammad A.
MA

Muhammad A.

Mid-Market (51-1000 emp.)

5.0/5

"Deep Microsoft 365/Azure Integration with In-Depth Telemetry and Automated Response"

What do you like about Microsoft Defender for Endpoint?

We like that Microsoft Defender for Endpoint is tightly integrated with Microsoft 365, Azure, and Defender XDR. For organizations already running a su

AN

Aarti N.

Enterprise (> 1000 emp.)

5.0/5

"Effortless Management and Robust Threat Protection"

What do you like about Microsoft Defender for Endpoint?

It's easy to manage across our organization, it offers strong protection against malware and cyber threats with advanced threat detection.

4. Protection
Users value the real-time threat protection provided by Microsoft Defender, ensuring robust security against intruders and vulnerabilities.
See 15 mentions

See Related User Reviews

AN

Aarti N.

Enterprise (> 1000 emp.)

5.0/5

"Effortless Management and Robust Threat Protection"

What do you like about Microsoft Defender for Endpoint?

It's easy to manage across our organization, it offers strong protection against malware and cyber threats with advanced threat detection.

Verified User
I

Verified User

Enterprise (> 1000 emp.)

5.0/5

"Edr Defender review"

What do you like about Microsoft Defender for Endpoint?

Detect vulnerability at each point of your endpoint

5. Cybersecurity Protection
Users value the real-time threat protection offered by Microsoft Defender for Endpoint, enhancing security effortlessly.
See 14 mentions

See Related User Reviews

AN

Aarti N.

Enterprise (> 1000 emp.)

5.0/5

"Effortless Management and Robust Threat Protection"

What do you like about Microsoft Defender for Endpoint?

It's easy to manage across our organization, it offers strong protection against malware and cyber threats with advanced threat detection.

Verified User
A

Verified User

Enterprise (> 1000 emp.)

5.0/5

"Endpoint security solution that includes EDR, ASR, Email Security and more"

What do you like about Microsoft Defender for Endpoint?

We use Microsoft Defender for Endpoint on a very large deployment and most of the endpoints were previously running Cortex XDR. Defender provides high

5 Cons or Disadvantages of Microsoft Defender for Endpoint

1. Compatibility Issues
Users face compatibility issues with Linux and older Windows versions, leading to frustration and limited functionality.
See 8 mentions

See Related User Reviews

Naresh C.
NC

Naresh C.

4.0/5

"Unified Protection, Limited Integration"

What do you dislike about Microsoft Defender for Endpoint?

I find challenges with third-party integration on non-Microsoft platforms. Additionally, the licensing complexity and limitations in centralized manag

Waqas F.
WF

Waqas F.

Mid-Market (51-1000 emp.)

5.0/5

"Microsoft Defender - Most preferred for Endpoint users"

What do you dislike about Microsoft Defender for Endpoint?

Too many notifications which makes it dislikable and also if you are using any linux based system you will not able to configure it with full support.

2. Complexity
Users find the complexity of managing security policies a challenging aspect of Microsoft Defender for Endpoint.
See 8 mentions

See Related User Reviews

AN

Aarti N.

Enterprise (> 1000 emp.)

5.0/5

"Effortless Management and Robust Threat Protection"

What do you dislike about Microsoft Defender for Endpoint?

The setup and configuration can be complex, especially for new users. Otherwise it's all good.

Verified User
A

Verified User

Enterprise (> 1000 emp.)

5.0/5

"Endpoint security solution that includes EDR, ASR, Email Security and more"

What do you dislike about Microsoft Defender for Endpoint?

It takes a lot of training and constant learning, managing the security policies for all protection modules is a complex process. There is no Linux su

3. Difficult Configuration
Users face difficult configuration challenges with Microsoft Defender for Endpoint, struggling with navigating multiple management portals efficiently.
See 7 mentions

See Related User Reviews

Verified User
A

Verified User

Mid-Market (51-1000 emp.)

4.5/5

"Great Endpoint Manager for Windows"

What do you dislike about Microsoft Defender for Endpoint?

some of the polocies are difficult to configured

Verified User
A

Verified User

Mid-Market (51-1000 emp.)

2.5/5

"Room to Improve"

What do you dislike about Microsoft Defender for Endpoint?

In more complex environments, advanced configuration and troubleshooting is less intuitive and certain features require navigating multiple portals or

4. Improvements Needed
Users find configuration and troubleshooting challenging in complex environments, requiring better guidance and intuitive navigation.
See 7 mentions

See Related User Reviews

Verified User
A

Verified User

Mid-Market (51-1000 emp.)

2.5/5

"Room to Improve"

What do you dislike about Microsoft Defender for Endpoint?

In more complex environments, advanced configuration and troubleshooting is less intuitive and certain features require navigating multiple portals or

Naresh C.
NC

Naresh C.

4.0/5

"Unified Protection, Limited Integration"

What do you dislike about Microsoft Defender for Endpoint?

I find challenges with third-party integration on non-Microsoft platforms. Additionally, the licensing complexity and limitations in centralized manag

5. Lack of Clarity
Users find a lack of clarity in navigating multiple portals for effective policy creation in Microsoft Defender for Endpoint.
See 7 mentions

See Related User Reviews

Verified User
A

Verified User

Mid-Market (51-1000 emp.)

2.5/5

"Room to Improve"

What do you dislike about Microsoft Defender for Endpoint?

In more complex environments, advanced configuration and troubleshooting is less intuitive and certain features require navigating multiple portals or

Verified User
U

Verified User

Enterprise (> 1000 emp.)

3.0/5

"Industry leading endpoint protection capabilities"

What do you dislike about Microsoft Defender for Endpoint?

Incidents are often lackluster with details. Additional context pulled into the incidents would be nice

Top-Rated Alternatives

ESET PROTECT
ESET PROTECT
4.6/5(1,016)
Sophos Endpoint
Sophos Endpoint
4.6/5(848)
CrowdStrike Falcon Endpoint Protection Platform
CrowdStrike Falcon Endpoint Protection Platform
4.7/5(672)

Microsoft Defender for Endpoint Reviews (313)

View 3 Video Reviews
Reviews

Microsoft Defender for Endpoint Reviews (313)

View 3 Video Reviews
4.4
313 reviews
Search reviews
Filter Reviews
Clear Results
G2 reviews are authentic and verified.
Here's how.
Sumit K.
SK
Sumit K.
Application Support Analyst
Enterprise (> 1000 emp.)
Originally submitted 9/29/2023
"Defender for default security endpoint"
3.5/5
What do you like best about Microsoft Defender for Endpoint?

Microsoft defender very useful in every windows operating system. It's usually blocks the unknown traffic from outside of the environment. And defend the threadsand virus which make impact to workflow and corrupt the windows from outside interfare. Review collected by and hosted on G2.com.

What do you dislike about Microsoft Defender for Endpoint?

There is some downside of using defender it's detect the virus and threads but major virus it's can't fixed . Review collected by and hosted on G2.com.

Kingshuk S.
KS
Kingshuk S.
Senior Security Architect
Mid-Market (51-1000 emp.)
"Threat Detection and Protection for Endpoints"
5/5
What do you like best about Microsoft Defender for Endpoint?

One single agent provides solution for all endpoints

The product has XDR capability and provide threat detection and protection for endpoints either in remote or onprem location

Ease of integration with SIEM solutions and being cloud solution provide protection across geo location

Helps in Endpoint compliance and Risk Management

Protects from malware and ransomware

Ease of implementation across desktop,laptops and servers as well as mobile devices Review collected by and hosted on G2.com.

What do you dislike about Microsoft Defender for Endpoint?

MDE is quite helpful and I dont see any dislikes Review collected by and hosted on G2.com.

Deepanshu P.
DP
Deepanshu P.
Enterprise Analyst
Small-Business (50 or fewer emp.)
Originally submitted 4/4/2024
"Microsoft Defender Review"
5/5
What do you like best about Microsoft Defender for Endpoint?

Microsoft Security is recognized industry leader. Microsoft Defender for endpoints insights into cyberattack. It helps in minimizing vulnerabilities by offering best practices for threat protection. Additionally, it gives solution which automatically disrupts ransomware attacks. It blocks lateral movement and remote encryption across all devices. Review collected by and hosted on G2.com.

What do you dislike about Microsoft Defender for Endpoint?

It takes a lot of time to onboard devices to Microsoft Defender ATP. Review collected by and hosted on G2.com.

Nishant B.
NB
Nishant B.
Deputy Manager | Data Protection and IT Security
Mid-Market (51-1000 emp.)
"Does the what remote admin want"
4/5
What do you like best about Microsoft Defender for Endpoint?

Capability to detect, monitor and prevent external threats. Review collected by and hosted on G2.com.

What do you dislike about Microsoft Defender for Endpoint?

Performance in hybrid AD (on premise AS to Azure) setup. Limitations on logs import to SIEM. Review collected by and hosted on G2.com.

Arunkumar K.
AK
Arunkumar K.
Information Security Analyst
Mid-Market (51-1000 emp.)
"Microsoft Defender for Endpoint: A Rebound"
5/5
What do you like best about Microsoft Defender for Endpoint?

Endpoint Detection and Response feature helps security analysts like myself to investigate and respond to threats effectively. Attack Surface Reduction is an another cool enhancement which I really used a lot to reduce the threats. The entire tool is user friendly and can be implemented with less hassle. Review collected by and hosted on G2.com.

What do you dislike about Microsoft Defender for Endpoint?

In my opinion, Automated Investigation and Response could be more advanced and efficient. Quite a few times, I came cross false positives which were really pain in the neck. Microsoft should really work on their customer support, the wait time and reliable tech engineers. Review collected by and hosted on G2.com.

Daniel L.
DL
Daniel L.
Technical Director
Small-Business (50 or fewer emp.)
Originally submitted 12/21/2023
"Great security tool with minimum user interaction"
4.5/5
What do you like best about Microsoft Defender for Endpoint?

Really easy to setup and deploy using Intune or script. The integration onto Intune with conditional access is perfect to manage resource access. Review collected by and hosted on G2.com.

What do you dislike about Microsoft Defender for Endpoint?

Setup has a lot of menus and hidden items in places you don't expect. Like hiding web filter in the advanced setup area! Review collected by and hosted on G2.com.

Aditya D.
AD
Aditya D.
Associate System Administrator
Mid-Market (51-1000 emp.)
"Microsoft Defender for Endpoint review"
4.5/5
What do you like best about Microsoft Defender for Endpoint?

Quick overview of the potential threats and vulnerabilities via the Dashboard is quite impressive thing that I liked about MS Defender for Endpoint. Review collected by and hosted on G2.com.

What do you dislike about Microsoft Defender for Endpoint?

The visibility of threats still needs improvement a bit compared to other products in the market. Review collected by and hosted on G2.com.

Pranjal M.
PM
Pranjal M.
Software Engineer
Enterprise (> 1000 emp.)
"Peace with MS Defender"
4.5/5
What do you like best about Microsoft Defender for Endpoint?

Realtime protection, Endpoint security are the best thing about the product Review collected by and hosted on G2.com.

What do you dislike about Microsoft Defender for Endpoint?

Customisation and usage with older windows version is somewhat difficult to work with. Review collected by and hosted on G2.com.

Mohsin K.
MK
Mohsin K.
Information Security Manager
Small-Business (50 or fewer emp.)
"MS Defender for Endpoint delivers good for the price, smooth integration and compatibility options."
4/5
What do you like best about Microsoft Defender for Endpoint?

Advanced threat detection, Microsoft really established their defender for endpoint by using cutting edge tech, machine learning, and its ai-driven detection to identify and automated responsd to threats swiftly.

Integration possibilites are endless, creating a more connected secured enviroment.

Automated detection and response saves a lot of time, comes with a whole lot of additional and useful features. Review collected by and hosted on G2.com.

What do you dislike about Microsoft Defender for Endpoint?

MS Defender for Endpoint takes quite a toll on your system resources, especially on older hardware models. The use of upgraded hardware frameworks recommended.

False positives are to be expected with defender, although slowly improving with updates. Review collected by and hosted on G2.com.

DD
David D.
Small-Business (50 or fewer emp.)
"Ease of use, Set it always on!"
5/5
What do you like best about Microsoft Defender for Endpoint?

Ease of use with lots of useful API integrations to enhance projects. One great bolt-on is Hyas Protect to look at the DNS layer for potential threats and risk score websites. Review collected by and hosted on G2.com.

What do you dislike about Microsoft Defender for Endpoint?

Can't think of any right now. Works with a few clicks. Review collected by and hosted on G2.com.
Categories on G2
Explore More