--- title: Microsoft Defender for Cloud Reviews meta_title: 'Microsoft Defender for Cloud Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 350 reviews by the users' company size, role or industry to find out how Microsoft Defender for Cloud works for a business like yours. aggregate_rating: rating_value: 4.4 review_count: 350 scale: '5' date_modified: '2026-07-13' parent_category: name: Cloud Security url: https://www.g2.com/categories/cloud-security --- # Microsoft Defender for Cloud Reviews **Vendor:** Microsoft **Category:** [Cloud Security Posture Management (CSPM) Software](https://www.g2.com/categories/cloud-security-posture-management-cspm) **Average Rating:** 4.4/5.0 **Total Reviews:** 350 ## About Microsoft Defender for Cloud Microsoft Defender for Cloud is a cloud native application protection platform for multicloud and hybrid environments with comprehensive security across the full lifecycle, from development to runtime. ## Microsoft Defender for Cloud Pros & Cons **What users like:** - Users appreciate the **robust security features** of Microsoft Defender for Cloud, effectively protecting against various cyber threats. (121 reviews) - Users value the **comprehensive security features** of Microsoft Defender for Cloud, effectively protecting against various cyber threats. (92 reviews) - Users praise the **robust security features** of Microsoft Defender for Cloud, enhancing protection against various cyber threats. (71 reviews) - Users value the **vulnerability detection** in Microsoft Defender for Cloud, enjoying its continuous monitoring and threat analysis capabilities. (63 reviews) - Users value the **effective threat detection** capabilities of Microsoft Defender for Cloud, enhancing their security posture significantly. (57 reviews) - Users value the **continuous real-time monitoring** by Microsoft Defender for Cloud, ensuring robust protection against cyber threats. (55 reviews) - Users value the **comprehensive security features** of Microsoft Defender for Cloud, ensuring effective protection for cloud applications and servers. (53 reviews) - Users appreciate the **top-notch ease of use** of Microsoft Defender for Cloud, simplifying routine security management. (51 reviews) - Cloud Services (50 reviews) - Real-time Monitoring (50 reviews) **What users dislike:** - Users find Microsoft Defender for Cloud's **complexity in configurations** challenging, often requiring extensive knowledge and adjustment. (27 reviews) - Users note that the product can be **expensive** , particularly for small to medium-sized businesses, affecting affordability. (24 reviews) - Users report **delayed detection** of threats, sometimes missing suspicious emails and failing to meet security expectations. (22 reviews) - Users experience **false positives** with Microsoft Defender for Cloud, leading to confusion and concerns over legitimate files being flagged. (19 reviews) - Users notice **improvement needed** in Microsoft Defender for Cloud, particularly in policy generation and malware detection capabilities. (19 reviews) - Learning Curve (18 reviews) - Complex Configuration (17 reviews) - Difficult Configuration (17 reviews) - Complex Setup (16 reviews) - Improvements Needed (16 reviews) ## Microsoft Defender for Cloud Reviews ### 1. Centralized, Real-Time Cloud Security with Actionable Insights **Rating:** 4.5/5.0 stars **Reviewed by:** Ishita S. | Student, Small-Business (50 or fewer emp.) **Reviewed Date:** July 03, 2026 **What do you like best about Microsoft Defender for Cloud?** What I like most about Microsoft Defender for Cloud is how it centralizes security monitoring across different cloud environments. It continuously evaluates security risks, provides clear, actionable recommendations, and helps detect threats in real time. Its integration with Microsoft Azure and other cloud services also streamlines security management and makes the overall process much more efficient. **What do you dislike about Microsoft Defender for Cloud?** One thing I dislike is that the platform can feel complex for new users because there are so many security features and configuration options to navigate. Some of the more advanced security capabilities can also drive up costs, and making sense of all the alerts and recommendations takes time and comes with a learning curve. **What problems is Microsoft Defender for Cloud solving and how is that benefiting you?** Microsoft Defender for Cloud helps me manage and secure cloud resources across complex environments. It makes it easier to identify vulnerabilities, monitor compliance, detect security threats, and receive recommendations that improve my overall security posture. For me, this translates into reduced security risk, better visibility into my cloud infrastructure, and more confidence that my applications and data stay protected against cyber threats. ### 2. Unified Cloud Security Across Azure, AWS, GCP, and Hybrid Environments **Rating:** 4.5/5.0 stars **Reviewed by:** Subrajit B. | Deputy Manager, Information Technology and Services, Enterprise (> 1000 emp.) **Reviewed Date:** July 08, 2026 **What do you like best about Microsoft Defender for Cloud?** What I like most about Microsoft Defender for Cloud is its unified approach to security. It brings together posture management, threat protection, and actionable remediation in a single platform, and it works consistently across Azure, AWS, GCP, and hybrid environments. **What do you dislike about Microsoft Defender for Cloud?** One drawback of Microsoft Defender for Cloud is that managing alerts, pricing, and the many security recommendations can feel complicated and a bit overwhelming, especially for smaller teams or organizations that are new to cloud security. **What problems is Microsoft Defender for Cloud solving and how is that benefiting you?** Microsoft Defender for Cloud solves cloud security challenges by continuously identifying misconfigurations, vulnerabilities, and threats across multi-cloud and hybrid environments. It benefits me by improving visibility, strengthening security posture, reducing risk, and providing actionable remediation guidance through a single platform. ### 3. Seamless Microsoft Ecosystem Integration with Proactive Cloud Security Alerts **Rating:** 4.0/5.0 stars **Reviewed by:** Maha Prathyumnan P. | Endpoint Engineer, Small-Business (50 or fewer emp.) **Reviewed Date:** July 10, 2026 **What do you like best about Microsoft Defender for Cloud?** What I like most about Microsoft Defender for Cloud is how seamlessly it integrates with the Microsoft ecosystem. Since we already use Azure and Microsoft 365, it’s been much easier to manage cloud security from a single platform rather than switching between multiple security tools. I also appreciate the continuous monitoring and security alerts, which help us spot misconfigurations and potential threats early, before they turn into bigger issues. and support for microsoft is also good if we face an issues **What do you dislike about Microsoft Defender for Cloud?** When it comes to Microsoft Defender for Cloud, I don’t really see any specific downsides. That said, it can sometimes feel expensive for small and medium-sized businesses. **What problems is Microsoft Defender for Cloud solving and how is that benefiting you?** The biggest benefit for us is being able to proactively address security risks before they turn into serious incidents. The centralized dashboard provides clear, at-a-glance visibility into the overall health of our cloud environment, which makes it much easier to prioritize what matters most and resolve issues efficiently. ### 4. Secure Score Cuts Alert Fatigue with a Clear, Intuitive Multi-Cloud Dashboard **Rating:** 4.0/5.0 stars **Reviewed by:** Lee S. | IT Manager, Mid-Market (51-1000 emp.) **Reviewed Date:** July 09, 2026 **What do you like best about Microsoft Defender for Cloud?** The best aspect of Microsoft Defender for Cloud is how effectively it reduces alert fatigue through its Secure Score framework. Rather than dumping thousands of unprioritized vulnerabilities on infrastructure teams, it translates overall security posture into a clear, percentage-based metric. It also makes it obvious which remediations will deliver the highest security ROI, which has significantly improved our engineering workflow. On top of that, its multi-cloud integration really does provide a “single pane of glass.” The agentless connectors for AWS and GCP help normalize security insights and compliance tracking (such as SOC 2 and ISO 27001) across different environments, bringing everything into a centralized, highly intuitive UI without requiring complex or clunky configuration. **What do you dislike about Microsoft Defender for Cloud?** The main drawback is the complexity of the pricing. While the foundational posture management delivers strong value, turning on advanced Cloud Workload Protection Plans (CWPP) for containers or databases scales costs on a per-resource basis. In large-scale environments, this can lead to significant budget unpredictability. Moving to a more predictable, flat-rate tiering model would materially improve overall Pricing/ROI. On Integrations and UI/UX, multi-cloud visibility has improved, but automated remediation workflows still heavily favor native Azure resources. Achieving the same level of quick-fix remediation in AWS or GCP often feels less intuitive and tends to require additional configuration. Bringing full feature and workflow parity to non-Azure clouds would make the multi-cloud experience feel truly seamless. **What problems is Microsoft Defender for Cloud solving and how is that benefiting you?** Before implementing Microsoft Defender for Cloud, we struggled with fragmented visibility across our multi-cloud infrastructure and constant alert fatigue, which often delayed critical security patching. Since deploying the platform, we can monitor and assess our overall security posture across Azure, AWS, and GCP from a single, centralized dashboard. As a result, our engineering team spends far less time triaging vulnerabilities, and we’ve effectively cut our average time to remediate in half. The biggest practical benefit is that we’re no longer burning expensive engineering hours chasing low-priority alerts. Instead, the clear UI and the prioritized Secure Score give us an immediate view of the highest-impact risks, which has significantly improved our day-to-day operational efficiency and helped us get more value from our security investment. ### 5. Effective Security Enhancements with Microsoft Defender for Cloud **Rating:** 4.5/5.0 stars **Reviewed by:** Laxmi M. | Cyber Security Engineer, Small-Business (50 or fewer emp.) **Reviewed Date:** July 09, 2026 **What do you like best about Microsoft Defender for Cloud?** I like using Microsoft Defender for Cloud because it helps me monitor our cloud environment to keep everything secure. It does a great job at spotting vulnerabilities, detecting potential threats, and providing practical recommendations for fixes. The deep investigation with security services is very thorough. I particularly appreciate the secure score feature since it shows areas for security improvement clearly. This feature, along with the clear actionable security recommendations, makes it easy to spot risk priorities and keep track of our overall security posture. **What do you dislike about Microsoft Defender for Cloud?** Some alerts and recommendations can be overwhelming in larger environments. It takes time to fine-tune the alerts and the onboarding process needs improvement to be easier. Some advanced features can be a little complex to configure, which made the initial setup a bit complex, especially when understanding and fine-tuning advanced features and policies took a bit of time. **What problems is Microsoft Defender for Cloud solving and how is that benefiting you?** Microsoft Defender for Cloud helps us monitor our cloud environment, spot vulnerabilities, and get practical recommendations. It identifies security gaps, improves compliance, and enhances our security posture, allowing for faster threat detection and response. ### 6. Powerful Multi-Cloud CSPM with Time-Saving Attack Path Analysis **Rating:** 4.0/5.0 stars **Reviewed by:** Shrawan Kumar B. | Senior Operations Manager, Mid-Market (51-1000 emp.) **Reviewed Date:** June 24, 2026 **What do you like best about Microsoft Defender for Cloud?** For Microsoft Defender for Cloud, the thing I like best is continuous Cloud Security Posture Management + attack path analysis. *Why it stands out:* 1. It finds the "blast radius" before attackers do - Instead of just flagging "VM has open port 22", it maps how that misconfig + weak identity + exposed storage = full path to your crown jewels. The attack path visualization saves tons of time triaging. 2. One pane for AWS, Azure, GCP : Most teams are multi-cloud now. Defender lets you see secure score, recommendations, and alerts across all 3 clouds without jumping dashboards. That’s rare. 3. DevSecOps shift-left : The code-to-cloud integration means it scans IaC templates, containers, and CI/CD pipelines before you even deploy. Fixing a bad ARM/Bicep/Terraform template in PR is way cheaper than fixing it in prod. 4. Agentless scanning for VMs + databases - No agents needed for vulnerability assessment on Azure VMs and SQL. Less overhead, less "please install this agent" friction with infra teams. The secure score is gamified but actually useful too - it gives CISOs something to track quarter-over-quarter. **What do you dislike about Microsoft Defender for Cloud?** Pricing can be confusing, and it’s easy to end up with surprise charges from “Defender plans” when you thought you were just using the free CSPM features. The alerts can also be very noisy at first, with lots of false positives and brute-force warnings until you spend time tuning the settings. Overall it feels Azure-first, with AWS and GCP getting weaker features compared with Azure. Finally, Secure Score doesn’t always reflect real risk in practice—teams can end up chasing the score instead of focusing on fixing the actual attack paths. **What problems is Microsoft Defender for Cloud solving and how is that benefiting you?** It helps me tackle four big cloud security problems. First, cloud misconfigurations: it finds insecure storage, open ports, and weak IAM policies across Azure/AWS/GCP before attackers do. Second, lack of visibility: instead of juggling three separate tools, I get one dashboard that shows a secure score and active threats across multi-cloud. Third, late security fixes: it scans IaC and containers in CI/CD so issues are caught pre-deploy, not after something goes wrong. Fourth, alert overload: it correlates raw logs into real attack chains with attack path analysis, which cuts down the noise. For me, the benefits are practical. I do less firefighting because the attack path view makes it clear which ~5% of alerts actually lead to data/crown jewels, so I’m not burning time on low-risk items. Audits are faster since the secure score and compliance dashboards map out CIS controls and PCI-DSS in a way auditors respond well to. Dev teams also move faster because “shift left” means they fix IaC issues in the PR, rather than me opening tickets after a production deploy. And it simplifies the stack and cost: it replaced separate CSPM, WAF, and container scanning tools, with one agent/connector instead of five. Overall, it turns cloud security from reactive, ticket-queue work into proactive risk prioritization. ### 7. All-in-One Security with Easy Setup and Real-Time Monitoring **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Enterprise (> 1000 emp.) **Reviewed Date:** July 07, 2026 **What do you like best about Microsoft Defender for Cloud?** Microsoft Defender for Cloud has been an “all-in-one” security application for our company. It works across both our on-premises environment and our cloud resources, such as VMs and Azure AD. We also appreciate the straightforward setup and the user-friendly interface. Real-time monitoring is essential for us, since it helps us proactively prevent security breaches and reduce risks. **What do you dislike about Microsoft Defender for Cloud?** I wouldn’t necessarily call this a dislike, but I would appreciate more in-depth training on the AI models and processes offered by Microsoft Defender for Cloud. That would help me gain a clearer understanding and, in turn, make the tools more useful for the company. **What problems is Microsoft Defender for Cloud solving and how is that benefiting you?** Microsoft Defender for Cloud solves a multitude of problems by working across all infrastructure environments within the company, instead of having to manage multiple AV applications. Its real-time monitoring updates quickly when there’s an issue, and most of the time it can remediate the problem on its own without human intervention. ### 8. Unified Multi-Cloud Security with Clear Recommendations and Strong Performance **Rating:** 4.5/5.0 stars **Reviewed by:** Jeni J. | Software Dev , Ai Agents Builder, Information Technology and Services, Mid-Market (51-1000 emp.) **Reviewed Date:** June 30, 2026 **What do you like best about Microsoft Defender for Cloud?** I like how it gives a single place to monitor security across cloud resources. It helps identify vulnerabilities, provides clear recommendations to improve security, and continuously monitors for threats. The integration with Azure and support for hybrid and multi-cloud environments makes it easier to manage security without using multiple tools. The perfomance was very good **What do you dislike about Microsoft Defender for Cloud?** One thing I dislike is that the pricing can become expensive as more workloads and advanced features are enabled. Some alerts also require investigation to separate real issues from less important ones, and the interface can feel overwhelming for new users because there are many security settings and recommendations to review. **What problems is Microsoft Defender for Cloud solving and how is that benefiting you?** Microsoft Defender for Cloud helps solve the challenge of managing security across cloud environments by providing continuous monitoring, vulnerability assessments, and threat detection in one place. It helps us identify security risks early, prioritize remediation, and maintain compliance with security standards. This has improved our overall security posture, reduced manual effort, and given us greater confidence that our cloud resources are protected. the ai is now very responsive nowdays ### 9. Unified Cloud Security with Actionable Insights and Deep Visibility **Rating:** 4.0/5.0 stars **Reviewed by:** datha s. | Data Loss Prevention (DLP) Specialist, Mid-Market (51-1000 emp.) **Reviewed Date:** April 13, 2026 **What do you like best about Microsoft Defender for Cloud?** What I like best about Microsoft Defender for Cloud is how it brings security posture management and threat protection into a single, unified platform. It gives clear, actionable recommendations to improve security across Azure, hybrid, and even multi-cloud environments, which makes it very practical for day-to-day operations. The secure score feature is especially helpful in quickly understanding where we stand and what to fix next. I also appreciate how well it integrates with other Microsoft security tools, reducing the need for multiple dashboards. Overall, it simplifies cloud security while still offering deep visibility and control. **What do you dislike about Microsoft Defender for Cloud?** What I dislike about Microsoft Defender for Cloud is that it can sometimes feel overwhelming, especially with the volume of recommendations and alerts it generates. Not all alerts are equally actionable, so it takes effort to filter out the noise and focus on what really matters. The pricing model can also be a bit complex and difficult to predict, particularly in larger or multi-cloud environments. Additionally, some advanced features require deeper expertise to configure properly, which can be a learning curve for new users. **What problems is Microsoft Defender for Cloud solving and how is that benefiting you?** It helps solve the challenge of maintaining a strong and consistent security posture across cloud and hybrid environments. It continuously identifies misconfigurations, vulnerabilities, and compliance gaps that could otherwise go unnoticed. By providing prioritized recommendations and built-in threat protection, it reduces the risk of breaches and helps us respond to incidents faster. This benefits us by saving time on manual security checks, improving overall visibility, and ensuring we stay aligned with security best practices and regulatory requirements. ### 10. A Reliable Partner for Simplifying Cloud Security **Rating:** 5.0/5.0 stars **Reviewed by:** Sai K. | Manager, Small-Business (50 or fewer emp.) **Reviewed Date:** June 26, 2026 **What do you like best about Microsoft Defender for Cloud?** What I like most about Microsoft Defender for Cloud is how practical and reassuring it feels when I’m managing cloud resources. Rather than just throwing a bunch of alerts at me, it helps me understand what’s actually wrong and what I should fix first. The security recommendations are clear and well prioritized, which makes it easier to focus on what truly matters instead of getting overwhelmed by everything at once. **What do you dislike about Microsoft Defender for Cloud?** Another point is the pricing. It’s a powerful tool, but many of the more advanced features (like workload protection plans) cost extra. For smaller teams or companies, it can end up feeling a bit expensive, especially compared to simpler tools. **What problems is Microsoft Defender for Cloud solving and how is that benefiting you?** From a practical point of view, one big problem it tackles is lack of visibility. In cloud environments, especially when you have multiple services, VMs, databases, and even multi-cloud setups, it’s easy to lose track of what’s secure and what isn’t. Defender for Cloud brings everything into one place and gives a clear picture of your security posture, which makes life much easier. ## Microsoft Defender for Cloud Discussions - [Is Azure security Center a SIEM?](https://www.g2.com/discussions/is-azure-security-center-a-siem) - 1 comment, 1 upvote - [What is Microsoft Defender for Cloud used for?](https://www.g2.com/discussions/what-is-microsoft-defender-for-cloud-used-for) - 1 comment - [What are the three security services provided by Windows Azure?](https://www.g2.com/discussions/what-are-the-three-security-services-provided-by-windows-azure) - 2 comments - [What is Azure security management?](https://www.g2.com/discussions/what-is-azure-security-management) - 1 comment - [View Microsoft Defender for Cloud pricing details and edition comparison](https://www.g2.com/products/microsoft-defender-for-cloud/reviews/microsoft-defender-for-cloud-review-7558259?section=pricing&secure%5Bexpires_at%5D=2026-07-13+11%3A30%3A13+-0500&secure%5Bsession_id%5D=eb04577c-bff1-4f32-9366-9fcaba9b6d1a&secure%5Btoken%5D=9861a4c08bd1db2cfa99e3efc4aa6489474a1677d24bdfce6e77d2ca448f2d86&format=llm_user) ## Microsoft Defender for Cloud Integrations - [Azure Monitor](https://www.g2.com/products/azure-monitor/reviews) - [Azure Portal](https://www.g2.com/products/azure-portal/reviews) - [Jira](https://www.g2.com/products/jira/reviews) - [Microsoft 365](https://www.g2.com/products/microsoft365/reviews) - [Microsoft Entra ID Governance](https://www.g2.com/products/microsoft-entra-id-governance/reviews) - [Microsoft Purview Data Loss Prevention](https://www.g2.com/products/microsoft-purview-data-loss-prevention/reviews) - [Microsoft Sentinel](https://www.g2.com/products/microsoft-sentinel/reviews) - [Rapid7 Next-Gen SIEM](https://www.g2.com/products/rapid7-next-gen-siem/reviews) ## Microsoft Defender for Cloud Features **Management** - Dashboards and Reports - Workflow Management - Administration Console **Administration** - Risk Scoring - Secrets Management - Security Auditing - Configuration Management **Security** - Compliance Monitoring - Anomoly Detection - Data Loss Prevention - Cloud Gap Analytics **Functionality - Software Composition Analysis ** - Language Support - Integration - Transparency **Activity Monitoring** - Usage Monitoring - Database Monitoring - API Monitoring - Activity Monitoring **Documentation** - Feedback - Prioritization - Remediation Suggestions **Configuration** - DLP Configuration - Configuration Monitoring - Unified Policy Management - Adaptive Access Control - API / Integrations **Alerts management** - Multi-mode alerts - Opimization alerts - Incident alerts **Security - Cloud-Native Application Protection Platform (CNAPP)** - Workload and container security - Threat detection and response - DevSecOps Integrations - Unified Visibility **Model Protection - AI Security Solutions** - Input Hardening - Input/Output Inspection - Integrity Monitoring - Model Access Control **Functionality - AI Security Posture Management (AI-SPM) Tools** - Security Ecosystem Integration - AI Asset Discovery - Adaptive Policy Updates - Access and Permissions Monitoring - Policy Enforcement **Cloud Visibility** - Data Discovery - Cloud Registry - Cloud Gap Analytics **Operations** - Governance - Logging and Reporting - API / Integrations **Monitoring** - Continuous Image Assurance - Behavior Monitoring - Observability **Compliance** - Governance - Data Governance - Sensitive Data Compliance **Effectiveness - Software Composition Analysis** - Remediation Suggestions - Continuous Monitoring - Thorough Detection **Security** - Compliance Monitoring - Risk Analysis - Reporting **Security** - False Positives - Custom Compliance - Agility **Visibility** - Multicloud Visibility - Asset Discovery **Monitoring** - Resource utilization - Real-time monitoring - Performance baseline - API monitoring **Artificial Intelligence - Cloud-Native Application Protection Platform (CNAPP)** - Intelligent remediations and suggestions - Risk prioritization - Anomaly detection using machine learning **Runtime Monitoring - AI Security Solutions** - AI Behavior Anomaly Detection - Audit Trail **Risk Assessment - AI Security Posture Management (AI-SPM) Tools** - AI Risk Assessment - AI Asset Posture Scoring **Automation** - Resolution automation - Automation **Security** - Data Security - Data loss Prevention - Security Auditing **Security Controls ** - Anomaly Detection - Data Loss Prevention - Security Auditing - Cloud Gap Analytics **Protection** - Dynamic Image Scanning - Runtime Protection - Workload Protection - Network Segmentation **Administration** - Policy Enforcement - Auditing - Workflow Management **Administration** - Security Automation - Security Integration - Multicloud Visibility **Vulnerability Management** - Threat Hunting - Vulnerability Scanning - Vulnerability Intelligence - Risk-Prioritization **Cloud Configuration Management - Cloud-Native Application Protection Platform (CNAPP)** - Multi-cloud visibility - Cloud Security Posture Management (CSPM) **Policy Enforcement and Compliance - AI Security Solutions** - Scalable Governance - Integrations - Shadow AI - Policy‑as‑Code for AI Assets **Governance & Compliance - AI Security Posture Management (AI-SPM) Tools** - AI‑Generated Content Controls - Audit Trails **Identity** - SSO - Governance - User Analytics **Analysis** - Search - Reporting - Visualization - Track trends **Agentic AI - Cloud Security Monitoring and Analytics** - Autonomous Task Execution - Proactive Assistance - Decision Making **Agentic AI - Cloud-Native Application Protection Platform (CNAPP)** - Autonomous Task Execution - Adaptive Learning **Agentic AI - Cloud Detection and Response (CDR)** - Autonomous Task Execution - Proactive Assistance - Decision Making **Issue Resolution** - Root cause identification - Resolution guidance - Proactive identification **Services - Cloud Detection and Response (CDR) ** - Managed Services ## Top Microsoft Defender for Cloud Alternatives - [Wiz](https://www.g2.com/products/wiz-wiz/reviews) - 4.7/5.0 (820 reviews) - [Orca Security](https://www.g2.com/products/orca-security/reviews) - 4.7/5.0 (295 reviews) - [Cortex Cloud](https://www.g2.com/products/cortex-cloud/reviews) - 4.1/5.0 (120 reviews)