We performed a comparison between Microsoft Defender for Identity and Microsoft Defender Threat Intelligence based on real PeerSpot user reviews.
Find out in this report how the two Advanced Threat Protection (ATP) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."It automates routine testing and helps automate the finding of high-value alerts."
"Microsoft Defender for Identity provides excellent visibility into threats by leveraging real-time analytics and data intelligence."
"This solution has advanced a lot over the last few years."
"The feature I like the most about Defender for Identity is the entity tags. They give you the ability to identify sensitive accounts, devices, and groups. You also have honeytoken entities, which are devices that are identified as "bait" for fraudulent actors."
"All the integration it has with different Microsoft packages, like Teams and Office, is good."
"The solution offers excellent visibility into threats."
"Defender for Identity has not affected the end-user experience."
"One of our users had the same password for every personal and company account. That was a problem because she started receiving phishing emails that could compromise all of her accounts. Defender told us that the user was not changing their password."
"They have a very transparent roadmap for the product."
"I rate the tool's stability a ten out of ten."
"Offers easy integration with a cloud-based infrastructure"
"It is very scalable. There are approximately 2,000 endpoints and up to 200 servers in our company."
"Microsoft's integration into the security stack works quite well."
"The technical support services are excellent."
"Microsoft Defender Threat Intelligence assesses machines for vulnerabilities and gives remediations."
"I value how Threat Intelligence integrates with the different platforms in Microsoft."
"One potential area for improvement could be exploring flexibility in the installation of Microsoft Defender for Identity agents."
"The technical support needs significant improvement. Documentation for more minor issues in the form of guides or walkthroughs could help to resolve this issue. The number of tickets raised would decrease, removing some pressure from the support team and making it easier to clear the remaining tickets."
"And when you are working in a priority IP address, Identity is not able to know that those IPs are from the company. It sees that the IPs are from Taiwan or from Hong Kong or from India, even though they are internal IPs, resulting in a lot of false positives."
"When the data leaves the cloud, there are security issues."
"The solution could be better at using group-managed access and they could replace it with broad-based access controls."
"An area for improvement is the administrative interface. It's basic compared to other administrative centers. They could make it more user-friendly and easier to navigate."
"Defender for Identity gives us visibility, but we often get false positives from Azure that take us down the garden path. We go through 30 incidents each day and most of those are false positives or benign positive alerts. Occasionally, we get true positive alerts."
"The impact of the sensors on the domain controllers can be quite high depending on your loads. I don't know if there's any room for improvement there, but that's one of the things that might be improved."
"A stable licensing model is absent"
"The stability of the product is an area of concern where improvements are required."
"The price point is something they can improve slightly for those who don't have an M 365 E5."
"The software is expensive."
"I would like to see more AI features and capabilities."
"I would like for there to be extra confirmation that there aren't viruses. Even if the virus detection software is always running there could be hidden applications that are using the computer."
"Microsoft Defender Threat Intelligence should integrate with different platforms."
"The price of the solution is an area of concern where improvements are required. In general, the solution's price needs to be reduced."
More Microsoft Defender for Identity Pricing and Cost Advice →
More Microsoft Defender Threat Intelligence Pricing and Cost Advice →
Microsoft Defender for Identity is ranked 6th in Advanced Threat Protection (ATP) with 13 reviews while Microsoft Defender Threat Intelligence is ranked 14th in Advanced Threat Protection (ATP) with 27 reviews. Microsoft Defender for Identity is rated 9.0, while Microsoft Defender Threat Intelligence is rated 8.4. The top reviewer of Microsoft Defender for Identity writes "Offers robust protection from insider threats, but the customer support is poor". On the other hand, the top reviewer of Microsoft Defender Threat Intelligence writes "A tool that offers endpoint protection with low maintenance costs". Microsoft Defender for Identity is most compared with Microsoft Entra ID Protection, Microsoft Defender for Office 365, Microsoft Entra Verified ID, Splunk User Behavior Analytics and Microsoft Defender for Endpoint, whereas Microsoft Defender Threat Intelligence is most compared with Microsoft Sentinel, STAXX, Cisco Threat Grid, VirusTotal and ThreatConnect Threat Intelligence Platform (TIP). See our Microsoft Defender Threat Intelligence vs. Microsoft Defender for Identity report.
See our list of best Advanced Threat Protection (ATP) vendors and best Microsoft Security Suite vendors.
We monitor all Advanced Threat Protection (ATP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.