No more typing reviews! Try our Samantha, our new voice AI agent.

Darktrace vs Microsoft Defender for Office 365 comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jun 3, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare One
Sponsored
Ranking in Email Security
20th
Average Rating
8.6
Reviews Sentiment
6.5
Number of Reviews
23
Ranking in other categories
Secure Web Gateways (SWG) (12th), Data Loss Prevention (DLP) (21st), Cloud Access Security Brokers (CASB) (13th), Distributed Denial-of-Service (DDoS) Protection (8th), Software Defined WAN (SD-WAN) Solutions (12th), Access Management (11th), Bot Management (3rd), ZTNA as a Service (9th), ZTNA (4th), Secure Access Service Edge (SASE) (10th), Remote Browser Isolation (RBI) (3rd)
Darktrace
Ranking in Email Security
10th
Average Rating
8.2
Reviews Sentiment
7.1
Number of Reviews
84
Ranking in other categories
Intrusion Detection and Prevention Software (IDPS) (2nd), Network Traffic Analysis (NTA) (1st), Network Detection and Response (NDR) (1st), Extended Detection and Response (XDR) (7th), Cloud Security Posture Management (CSPM) (10th), Cloud-Native Application Protection Platforms (CNAPP) (9th), Attack Surface Management (ASM) (4th), AI-Powered Cybersecurity Platforms (5th), AI Observability (6th)
Microsoft Defender for Offi...
Ranking in Email Security
2nd
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
61
Ranking in other categories
Email Archiving (1st), Advanced Threat Protection (ATP) (2nd), Microsoft Security Suite (8th), Secure Email Gateway (SEG) (2nd)
 

Mindshare comparison

As of June 2026, in the Email Security category, the mindshare of Cloudflare One is 1.6%, up from 1.6% compared to the previous year. The mindshare of Darktrace is 1.9%, down from 3.0% compared to the previous year. The mindshare of Microsoft Defender for Office 365 is 6.3%, down from 12.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Email Security Mindshare Distribution
ProductMindshare (%)
Microsoft Defender for Office 3656.3%
Darktrace1.9%
Cloudflare One1.6%
Other90.2%
Email Security
 

Featured Reviews

CV
Network Architect at IP Dimension
Cloud security has improved remote access and has reduced costs for smaller client sites
I have used Cloudflare One's Identity-Aware Proxy, and it is quite straightforward from what I have seen so far. The app registration on the Azure side integrates fully into Cloudflare, and I am very satisfied with that part because it is easy to set up. The integration of Cloudflare One's Secure Web Gateway and Zero Trust Network Access works without any issues. That part is pretty automatic, and if you complete the rest of the setup, it comes together by itself with no issues from my side. What makes it nice is that we can actually start replacing on-site firewalls at this stage for the smaller clients because it does not matter if they go to a coffee shop or work from home; they are still secured by the same connection. The hops get shorter and you get better latency. We have done testing to see if it is better. One thing that we did notice with our proof of concept with our current client is that they have people connecting from the UK. When they used their previous VPN solution, uploading CAD drawings and other files to the server took a long time. They mentioned that it is much quicker on Cloudflare One's solution. I definitely believe that is part of the improved performance, and I am satisfied with that as well. What is nice about Cloudflare One is that it makes the setup easier and also easier to train technicians to maintain it. Compared to legacy systems, we do not need to get fancy firewalls in place that are costly. That is definitely also a cost-saver with Cloudflare One.
Pasan Jayarathna - PeerSpot reviewer
Network Security Engineer at Cyberwell Solution
Monitoring has improved data loss detection and now spots abnormal internal file transfers quickly
In my understanding, the best feature Darktrace offers is the identification of copying files, which acts as a DLP, and it is a main concern for companies because users sometimes copy data outside without knowing, especially those without a technical background. When I mention the DLP-like feature and file copying detection, the alerts have been very timely, as we get an alert within a couple of minutes, which is excellent. Even if some developers are working after hours and copying files, our SOC team detects this, and most of the time they call us so we can identify the users. The alerts are quite accurate and proactive.
Emeka Ndulu - PeerSpot reviewer
Cloud Solutions Architect at a tech services company with 201-500 employees
Improves threat visibility and response while reducing manual tasks and training users against phishing
I appreciate the attack simulation feature whereby I get to train users and educate them on how to identify phishing emails and spam emails, as well as the anti-spam protection. It gives me visibility into my threat environment and threat landscape to ensure that I am one step ahead of any likelihood of threats within my environment. I get to detect it and respond, so the threat intelligence is very effective. Microsoft security solutions save my time. It saves money because once I protect my environment, I don't lose money. It has decreased my detection time and my time to respond.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Cloudflare DDoS mitigates DDoS attacks."
"For Cloudflare Access, I am using the free plan...The most valuable feature is their protection."
"Cloudflare is simple to use."
"Cloudflare DDoS is better than its competitors for its security, deployment, and scalability."
"The blocking feature is very good."
"It's a perfect solution from my perspective; it's easy to understand and easy to configure."
"Enables me to work from two locations."
"Clover is the best product globally."
"The most valuable part of the product is the whole package, as the features included in the Enterprise Immune System are complete and effective and its detection engine is ridiculously good."
"The product is extremely stable and mature."
"It is a very simple product to use."
"The scalability of Darktrace is very high."
"I find it very good in the way that they show the past events, including the attack history, and you are able to visualize all of the attack paths and connectivity to see what's happened."
"It's beneficial to me and I can see that with more time and energy put into optimizing it and personalizing the unit, it can be much more powerful than the way I am using it now."
"We liked their approach to identifying intrusions or network anomalies using AI."
"The most beneficial feature in Darktrace is identifying phishing emails with the help of the AI engine and machine learning."
"My experience with customer support and technical support for Microsoft Defender for Office 365 has been excellent."
"My experience deploying Microsoft Defender for Office 365 was seamless."
"Microsoft Defender for Office 365 saves me time; it does save a lot of time, especially with the automation."
"There are several features that I consider valuable."
"Our customers are satisfied with Defender for 365 because Microsoft products are easy to use and customize to meet the client's needs. Everything is in one place, so we can adjust policies as needed for phishing, DLP, ATP, or any other security features that our clients want to apply."
"The feature of Microsoft Defender for Office 365 that I like the most is probably the email features specifically, because those are the ones that a typical end user will accidentally click on a link not knowing what it is, and it'll catch it, and then it'll feed it over to Defender and stop the attack from happening before it actually can."
"I appreciate the attack simulation feature whereby I get to train users and educate them on how to identify phishing emails and spam emails, as well as the anti-spam protection."
"Threat Explorer is an invaluable tool for me, and it plays a crucial role in helping me discern the origins of various email campaigns, pinpointing where they emanate from, and identifying the individuals within our organization who are affected."
 

Cons

"Feedback could be enhanced."
"The tool should provide on-premise versions. Currently, all versions are cloud-based."
"Cloudflare Zero Trust Platform needs to improve its documentation. It took time to do the implementation."
"Feedback could be enhanced. While I work efficiently with Clover as a partner in Mexico City, sometimes the information and requests are easier to manage with more concrete solutions."
"Our customers no longer use Cloudflare because its service is subpar."
"Our subscription plan for the solution has a limitation of bot signatures."
"I would like them to include a VPN feature to provide a secure connection to the data center."
"Cloudflare One is not very powerful, but for what we require, it is basic and sufficient."
"We want to continue using Darktrace but it's very expensive."
"In terms of improvements, fine-tuning is the area where we have to spend some time because it works on unsupervised machine learning."
"With Darktrace, at the moment, I have to almost put in a date and tell them that I want you to give me data from this date to this date."
"In terms of improvements, fine-tuning is the area where we have to spend some time because it works on unsupervised machine learning. It would be good if they can improve their algorithm or technical functionality to reduce the fine-tuning effort. They can also come up with something at the endpoint level. So far, Darktrace has been a network detection response (NDR) solution. It does not offer much at the endpoint level or on user-client devices or servers. There should be more visibility at the endpoint level. It would be good to have the detection and response at the endpoint level by Darktrace. It should also have integration with an agile environment so that we can have continuous development and continuous integration in the application development environment. This is currently not there. It should also have internet-facing platform visibility, which is currently missing. They also need to improve the reporting and management dashboards. Currently, these are not so easy for a non-technical person. All these features would make Darktrace much better, and they would also be helpful in selling more solutions."
"The user interface and the configuration are a bit complex and should be improved or simplified."
"Darktrace could improve its features, such as monitoring and detecting ransomware."
"Darktrace needs significant improvement in its notification capabilities."
"There are numerous false positives."
"I am generally satisfied with how it currently is. If I could improve anything, I would reduce the cost."
"Specifically, within Microsoft Defender for Office 365, I want it to improve the DLP capabilities."
"In the areas of improvement for Microsoft Defender for Office 365, the console is the biggest challenge for me."
"Microsoft Defender for Office 365 could improve by giving customers information on techniques to prevent threats."
"The cost of Security Copilot is up there right now, and I think it needs to come down for more people to adopt."
"We are waiting for better software to block viruses."
"The phishing and spam filters could use some improvement."
"The pre-sales cost calculations could be more transparent."
 

Pricing and Cost Advice

"Cloudflare Zero Trust Platform's pricing is good."
"The prices are slightly expensive."
"The pricing is somewhere in the middle. I would rate the pricing a seven out of ten."
"The pricing of the solution is cheap. The licensing cost is also very low. I rate the cost and pricing a three out of ten."
"My company has to make yearly payments towards the licensing costs attached to the solution. There are no hidden charges apart from the licensing costs of the solution."
"The solution is not that expensive."
"The solution's pricing lacks transparency."
"The price tag is no longer $200,000, but rather $300,000 to $400,000. It's twice."
"If you consider the features and the cost of market leaders, we are satisfied with the pricing."
"The pricing is expensive. It costs over $100,000 a year."
"The pricing is reasonable."
"When it comes to large installations, it can be expensive, but for small accounts it's fine."
"We had an issue with pricing initially and had to cancel some of the features of the projects to fit the budget. I would like to see pricing that is not broken up into parts so that we can buy the whole package once. Darktrace is more expensive than an average solution, but it's functionality won't match that of an average solution."
"Darktrace is pricey, but the price is reasonable for what the solution does, and it's comparable to other products."
"This solution is expensive."
"It is a very expensive product."
"I was working in the government and it was too expensive for us to use our Microsoft products."
"Defender is a little bit more expensive as compared to others. We are in the manufacturing environment. So, we don't have a high budget for all of our endpoint devices. Its cost is a major concern for us."
"For licensing, it's usually a yearly package for customers who are subscribed to Office 365, but they can also pay on a monthly basis."
"Microsoft Defender for Office 365 comes with Microsoft Windows. It is free with the operating system."
"The product is very expensive."
"It is much more expensive than using another solution because we have had to include some options and upgrade our license."
"Microsoft Defender for Office 365 is an add-on to the Office license. Many customers are purchasing this solution."
"I know that the product is incredibly expensive."
report
Use our free recommendation engine to learn which Email Security solutions are best for your needs.
900,644 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
19%
Comms Service Provider
10%
Financial Services Firm
9%
Manufacturing Company
8%
Manufacturing Company
10%
Financial Services Firm
9%
Computer Software Company
9%
Government
7%
Computer Software Company
12%
Manufacturing Company
9%
Financial Services Firm
9%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business10
Midsize Enterprise1
Large Enterprise12
By reviewers
Company SizeCount
Small Business44
Midsize Enterprise20
Large Enterprise29
By reviewers
Company SizeCount
Small Business24
Midsize Enterprise11
Large Enterprise32
 

Questions from the Community

What needs improvement with Cloudflare Zero Trust Platform?
In my opinion, Cloudflare One can be improved mainly through compatibility, as the integration should be much simpler...
What is your primary use case for Cloudflare Zero Trust Platform?
Cloudflare One's primary use case for my organization is to protect servers and to provide remote access with the VPN...
How does Crowdstrike Falcon compare with Darktrace?
Both of these products perform similarly and have many outstanding attributes. CrowdStrike Falcon offers an amazing u...
Which is better - SentinelOne or Darktrace?
Which solution is better depends on which is more suitable specifically for your company. Darktrace, for example, is ...
What is your experience regarding pricing and costs for Darktrace?
Concerning pricing for the product, I would say it is somewhat expensive.
What is your experience regarding pricing and costs for Microsoft Defender for Office 365?
My experience with pricing, setup, and licensing is that it's actually quite reasonable even on the licensing side as...
What needs improvement with Microsoft Defender for Office 365?
I think Microsoft Defender for Office 365 can be improved by creating more educational pieces about not just looking ...
What is your primary use case for Microsoft Defender for Office 365?
My main use cases for Microsoft Defender for Office 365 include email hygiene.
 

Also Known As

Cloudflare Area 1 Email Security, Cloudflare Bot Management, Cloudflare Gateway, Cloudflare Zero Trust Platform, Cloudflare DDoS, Cloudflare SASE & SSE Platform
No data available
MS Defender for Office 365
 

Overview

 

Sample Customers

23andMe
Irwin Mitchell, Open Energi, Wellcome Trust, FirstGroup plc, Virgin Trains, Drax, QUI! Group, DNK, CreaCard, Macrosynergy, Sisley, William Hill plc, Toyota Canada, Royal British Legion, Vitol, Allianz, KKR, AIRBUS, dpd, Billabong, Mclaren Group.
Microsoft Defender for Office 365 is trusted by companies such as Ithaca College.
Find out what your peers are saying about Darktrace vs. Microsoft Defender for Office 365 and other solutions. Updated: June 2026.
900,644 professionals have used our research since 2012.