

Find out in this report how the two Microsoft Security Suite solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
Recently, they have been under serious attack with major exploits, such as Log4j, affecting Fortinet and Palo Alto, and even Cisco and VMware.
AI-based recommendations save on time and money.
The biggest return on investment so far has been visibility, knowing what we have in our environment.
As a small team, Microsoft Defender for Cloud Apps allowed us to manage systems with just one or two people.
We have at least saved the costs we had from the Netskope solution this year.
They are good at troubleshooting and configuring things.
I am very satisfied with the response from Microsoft dedicated architects if it happens that I have to call for their support.
I reached out to their support, and they helped me resolve the issue effectively.
Their customer service is pretty good, but it's frustrating to go through three or four channels before reaching the right person.
The support is excellent, and the speed of response is commendable.
There were instances where the engineers were knowledgeable and helpful, but at other times it felt like a ping pong game, with unnecessary transfers until the right person was found.
Some Azure applications, like the web application firewall, require a certain level of SKU for hosting setup.
For our company, Azure Web Application Firewall works effectively for scalability.
For what I know about the log collector and how much data it can take in, it is super scalable and capable of handling high workloads.
Microsoft Defender for Cloud Apps is very scalable, provided you have the right subscription.
In my experience, Microsoft Defender for Cloud Apps is good enough for small to medium businesses.
Very rarely do I see any latency issues.
I would rate it a ten because I have not experienced any stability issues so far with Defender for Cloud Apps.
I would assess the stability and reliability of Microsoft Defender for Cloud Apps as stable
My impression on the stability and reliability of Microsoft Defender for Cloud Apps is that it is very stable.
Upgrading the platform regularly is necessary for security, however, frequent updates every six months or year from Azure can be a maintenance overhead.
The pricing needs improvement, and I think for beginners it will be a little bit complicated, so the ease of use could be enhanced.
For data loss prevention, it would be useful to be able to drill down into the kind of data being transferred over CloudApp.
Defender typically connects to Entra ID, but we have local users on the cloud for database access, SSH, or RDS, and there is nothing produced by Defender regarding those local IAM users.
Microsoft Defender for Cloud Apps would benefit if Microsoft allows users to fine-tune false positives, enabling us to dismiss alerts or make adjustments so that such things don't trigger multiple times in the future.
It is even a lower cost compared to AWS and GCP.
Sometimes, when opting for a higher SKU, it's not the WAF itself that's costly but the additional requirements.
I would place Azure Web Application Firewall at an eight on a scale from one to 10, with one being cheap and 10 being expensive.
The pricing for Microsoft Defender for Cloud Apps is acceptable.
My organization is currently revisiting pricing, but previously, the cost was a bit expensive, yet comparable to other solutions with similar functionalities and features.
It's not the cheapest, but also not the most expensive, placing it in the mid-level range.
With Microsoft, everything is within a single suite, making it easier to configure and plan.
It is almost impossible to access these assets from outside, requiring a very skilled attacker to obtain asset tokens of a customer using Azure.
It integrates effectively with things such as Sentinel and Defender for Cloud, so mostly it's the analytics and now the AI capabilities that have been introduced with Co-pilot.
It provides excellent suggestions and options for configuration; for example, it can track suspicious files getting uploaded to cloud resources on Azure based on their signatures, generating alerts for those files.
The product recommends things that need to be blocked and allows for dynamic configuration, which cuts down on potential issues that might arise from going through lists and understanding what needs to be blocked.
The ability to sanction unsanctioned apps using Secure Score benchmarking, included in Cloud, is also beneficial.
| Product | Mindshare (%) |
|---|---|
| Microsoft Defender for Cloud Apps | 3.4% |
| Azure Web Application Firewall | 1.9% |
| Other | 94.7% |

| Company Size | Count |
|---|---|
| Small Business | 6 |
| Large Enterprise | 12 |
| Company Size | Count |
|---|---|
| Small Business | 15 |
| Midsize Enterprise | 13 |
| Large Enterprise | 19 |
Azure Web Application Firewall provides strong protection, easy setup, and smooth integration with Microsoft services. It excels in request filtering, custom rule creation, and protection against OWASP Top 10 attacks, ensuring scalable and reliable performance for businesses.
Azure Web Application Firewall offers flexible, affordable, and efficient protection against critical security threats like DDoS and SQL injection, with seamless integration with Azure tools, analytics, and AI capabilities. Users appreciate its ability to handle web requests through role-based access, automation features, and custom policies, especially valuable in cloud environments and ecommerce. Despite the need to improve reporting, management, proxy forwarding, and documentation, it remains a reliable choice for securing front-facing applications.
What are the most important features of Azure Web Application Firewall?Azure Web Application Firewall is widely used in ecommerce for securing transactions against cyber threats like phishing and SQL injection. It also supports reverse proxy setups, provides detailed log analytics, and offers layer 7 protection, making it suitable for businesses needing robust security for both front-facing and branch connectivity applications.
Microsoft Defender for Cloud Apps is a robust tool for shadow IT detection, cloud integration, and threat detection, enhancing security management with capabilities in auditing and data protection.
Microsoft Defender for Cloud Apps strengthens cloud security by providing comprehensive insights into user activities, seamlessly integrating with Microsoft security products and platforms like SharePoint, Teams, and OneDrive. Its investigative capabilities enhance threat detection, while real-time alerts and policy applications improve security posture. Organizations benefit from its monitoring, auditing, and privileged identity management features that contribute to enhanced security management and data protection.
What are the key features of Microsoft Defender for Cloud Apps?Microsoft Defender for Cloud Apps implementation varies across industries, crucial for sectors needing stringent data protection and compliance, like finance and healthcare. Firms use it to monitor user activity, enforce data loss prevention policies, and ensure security across multi-cloud environments while integrating with Azure services for comprehensive threat management. These implementations are particularly beneficial in improving compliance efforts and protecting sensitive data.
We monitor all Microsoft Security Suite reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.