Microsoft Defender for Endpoint vs Webroot Business Endpoint Protection comparison

Microsoft Defender for Endpoint vs. Webroot Business Endpoint Protection

Download the complete report

Helped 845,040 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Microsoft Defender for Endp...

Ranking in Endpoint Protection Platform (EPP)

1st

Average Rating

8.2

Reviews Sentiment

7.1

Number of Reviews

192

Ranking in other categories

Advanced Threat Protection (ATP) (2nd), Anti-Malware Tools (1st), Endpoint Detection and Response (EDR) (3rd), Microsoft Security Suite (5th)

Webroot Business Endpoint P...

Ranking in Endpoint Protection Platform (EPP)

42nd

Average Rating

7.8

Reviews Sentiment

5.8

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of April 2025, in the Endpoint Protection Platform (EPP) category, the mindshare of Microsoft Defender for Endpoint is 10.9%, down from 14.8% compared to the previous year. The mindshare of Webroot Business Endpoint Protection is 0.7%, down from 0.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Protection Platform (EPP)

Featured Reviews

AnuragSrivastava

Information Security Engineering Lead at a energy/utilities company with 10,001+ employees

Provides detailed visibility into threats but the ability to add exceptions needs improvement

One major item for improvement is the ability to add exceptions. We can add some exceptions, but not at the level we need to. The second major area for improvement involves enhanced capabilities for different operating systems or platforms. That is, even though we have coverage for different operating systems or platforms such as Linux, we don't get all of the controls and enhanced capabilities that are available with Windows devices. Reporting could also be improved because, at present, we get limited results at times. For example, in an environment with more than 100,000 devices, you may just get 10,000 results when you run a report.

Read full review

Rick Cassel

Owner at R. A. Cassel & Associates

Lightweight and not hard to set up however, does not offer good reporting

We've had a couple of events both this year and last year where it just didn't seem to catch ransomware, which is impossible to do if someone has hands-on with the system. There were some things that they had or used to have or don't have that I still haven't figured out called journaling. And it was supposed to be a way to roll back changes that were made. However, they're telling me they don't have that. That's not in the system. It’s my understanding that it doesn’t actually scan any files at all. They just look at their database of files they've scanned previously, and either it matches or doesn't. That might be where the shortcoming is, is that it just can't stay up-to-date fast enough to stop new things that are coming in. It's an after-the-fact anti-virus. It doesn't do anything proactive. The virus has to hit the machine before it detects it. There is one thing that is deplorable with the product that I would change as soon as I found a better one. However, the reports are worthless. You go and look at a scan report and cannot get a log of machines. I can log into a console and see the files were scanned every day at 2:00 AM, and they all passed green or something was detected and removed. However, you have to go to the console. I don't have anything that I can send to my client on reports. What they give you is a bunch of bar graphs with no details. You can't drill down. It'll say two infections. However, it doesn't tell you what machines. You've just really got several different reports, and they're all just a bunch of graphs and wasted paper. There's nothing really substantial. The reports that I can use for client-facing, once a month, to say, "Here, we scanned all these workstations. Here are our results," don’t exist. They've got fake reports. I've screamed about that for years, and they just won't do anything. Therefore, I created my own little up-to-date or not ask fail-type report. I send that to them in place of a report directly from a product.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The most valuable feature of Microsoft Defender for Endpoint is its ability to bring together all the data, providing more information than just antivirus hits."

"Technical support is good."

"The most valuable aspect is information, specifically the automatic investigation of packages."

"It comes included with the Windows license."

"The solution's main antivirus capabilities are okay. So far, they have kept us safe."

"It is stable and easy to use. Everything is okay, and there are no performance issues."

"A few years ago, when I was using a different product, I was affected by a virus that destroyed everything. Since using Microsoft Defender, I have not had this kind of problem."

"Overall, I recommend Microsoft Defender for Endpoint due to its features and capabilities, which cover more loopholes than other EDR solutions."

More Microsoft Defender for Endpoint pros

"Auto-Remediation"

"The most valuable features of the solution include the endpoint navigation protection, the protection related to the EMS service, as well as the control and the cloud integration capabilities."

"It is very lightweight on the workstations, not slowing them down while still doing its job very well."

"The solution has many features. It is very easy to define and set the policies based on the user groups, it does not take up a lot of resources in operation, and has provided us with a good track record of protection."

"The feature we found most valuable is the AI functionality for maintaining endpoint security. This is very powerful."

"The main reason we had Webroot is that it was cost-effective for our clients."

"The traffic security monitoring, traffic application access feature called the agent, the main feature which is the endpoint security feature are the ones I found valuable. And it also had the in branch security in kind of SD WAN, good three hundred and sixty protection. It is specific and there is ease of deployment also present."

"The Webroot cloud console is very powerful."

More Webroot Business Endpoint Protection pros

Cons

"They should come up with pre-built inner workflows."

"I would just like them to have more consistency, and that's a comment that's across the board with Microsoft. They change things a lot."

"Its interface can be improved a little bit. We would like to have some sort of centralization. It should have something like a central server that is managing all the other clients. There are solutions from Kaspersky or ESET NOD32 that are really doing this kind of thing currently. We would like to see something similar from Microsoft."

"The dashboard customization could be improved."

"I would like to see online updates for patches for this solution. I would also like to see online information about what is trending in the market in terms of spams, viruses, or trojans. It takes some time to understand how this solution works. A few things are unclear at the beginning, such as whether it actually restricts the virus or spam at the initial stage, or when there is a security update, how will we come to know and how will it get synchronized. It would be really helpful if there is some kind of knowledge base in the form of video, audio, or document that can explain in a user-friendly way the setup, features, risks, and process to mitigate the risks. Currently, I have installed endpoint security for every individual system. I could not install it like other endpoint solutions where we have a server and a client. It would be really helpful if Microsoft Windows Defender has a server-client based model so that I can save some bandwidth when it downloads or uploads features. It will be helpful if we have a LAN-based or WAN-based controlling system."

"The anti-ransomware features need to be improved upon."

"I personally haven't experienced any pain points, but some of my coworkers feel that it isn't secure enough."

"It is not very scalable from the eyes of an MSP because there is no dashboard that you can use to see all of your devices that have Windows Defender unless you have your own dashboard or an RMM tool to actually look at it. So, you might not get to know that a particular computer of a client is doing something, and it might have got a virus. That person might know that, but unless you set it up to actually send you the information, you won't get to know that. That's one of the things that is hard with Microsoft Defender. It is not made for the MSP world where you have one pane of glass to see all of your clients with Microsoft Defender on it unless your RMM tool already has that built-in and it can see the telemetry from Microsoft Defender."

More Microsoft Defender for Endpoint cons

"It needs to improve the problems with the faster connection, and have a huge reduction in false positives."

"Since they're dealing with multi-core environments now, the best option would be for them to enhance the product so that the product can automatically do an assessment on the machine."

"The reporting is the weakest part of the Webroot console. Frequently, I export to Excel to massage something into it to pass on to others."

"There should be a Webroot Business Endpoint Protection mobile app."

"It doesn't do anything proactive. The virus has to hit the machine before it detects it."

"There needs to be more advanced analytics. It would make it a more powerful antivirus solution within the marketplace."

"Their customer support should be better. We started having some issues with it, and we didn't get the required support."

"An updated UI would be nice, but is not hardly used."

More Webroot Business Endpoint Protection cons

Pricing and Cost Advice

"The license for Microsoft Windows covers Microsoft Defender for Endpoint."

"We are using the free version."

"As we operate in the educational sector, we are eligible for an educational discount."

"The cost is competitive and reasonable because most of the expense is log analytics, storage, and data consumption and ingestion. These things can be throttled and controlled, so they are highly flexible. Defender has a lot of advantages over competing products."

"For me, the pricing is very good, but for management it's very expensive. Other solutions are less expensive. But when I present all the information and all the reports they say, "Well, it's expensive, but the cost-benefit is very good.""

"If we are acquiring everything in a single place, the front end becomes cost-effective."

"I got it with the Microsoft Windows license."

"Pricing for Microsoft Defender for Endpoint is competitive. Out of the bundle, you will get a lot of security, if I talk about Microsoft E5, for example, and get a lot of benefits. If the customer goes and purchases a different solution, it will cost more, so pricing for Microsoft Defender for Endpoint is quite reasonable at the moment. There isn't any challenge in terms of pricing, for example, I didn't see a customer who pulled back because of the price. Some prices could be negotiable, and sometimes, as a sales point, the two become negotiable, but they don't bill one and pull back because of the pricing. If you have an E5 license, you get everything."

More Microsoft Defender for Endpoint pricing and cost advice

"With Webroot Business Endpoint Protection, I can select a yearly billing cycle."

"Its cost is not much per month. Our price is a couple of bucks a user."

"I think the price is fairly reasonable. I was really prepared to pay more, but the price is fine."

"It is relatively cheap."

"Get a trial, then a multi-year license."

"Work on a price tier plan."

"The pricing is high."

"Webroot is less expensive than SentinelOne."

More Webroot Business Endpoint Protection pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.

See recommendations

845,040 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Educational Organization

27%

Computer Software Company

11%

Government

Financial Services Firm

Computer Software Company

19%

Real Estate/Law Firm

13%

Comms Service Provider

Financial Services Firm

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface, applies behavioral-based endpoint protection and response, and includes risk-ba...

Which offers better endpoint security - Symantec or Microsoft Defender?

We use Symantec because we do not use MS Enterprise products, but in my opinion, Microsoft Defender is a superior solution. Microsoft Defender for Endpoint is a cloud-delivered endpoint security s...

How does Microsoft Defender for Endpoint compare with Crowdstrike Falcon?

The CrowdStrike solution delivers a lot of information about incidents. It has a very light sensor that will never push your machine hardware to "test", you don't have the usual "scan now" feature ...

What do you like most about Webroot Business Endpoint Protection?

I haven't observed any of the instabilities in the solution. It is a stable solution.

What is your experience regarding pricing and costs for Webroot Business Endpoint Protection?

Webroot Business Endpoint Protection is probably on the cheaper side, so I would rate their pricing a one or a two out of ten.

What needs improvement with Webroot Business Endpoint Protection?

Webroot Business Endpoint Protection needs to improve its ability to detect threats. It does not do what it's advertised to do. Real-time threat detection also doesn't work as it should.

CrowdStrike Falcon vs Microsoft Defender for Endpoint

Comparisons

Compared 8% of the time

Microsoft Intune vs Microsoft Defender for Endpoint

Compared 5% of the time

Symantec Endpoint Security vs Microsoft Defender for Endpoint

Compared 5% of the time

F-Secure Total vs Microsoft Defender for Endpoint

Compared 4% of the time

HP Wolf Security vs Microsoft Defender for Endpoint

Compared 4% of the time

More Microsoft Defender for Endpoint Competitors

CrowdStrike Falcon vs Webroot Business Endpoint Protection

Compared 23% of the time

Huntress Managed EDR vs Webroot Business Endpoint Protection

Compared 16% of the time

HP Wolf Security vs Webroot Business Endpoint Protection

Compared 16% of the time

SentinelOne Singularity Complete vs Webroot Business Endpoint Protection

Compared 9% of the time

Cynet vs Webroot Business Endpoint Protection

Compared 4% of the time

More Webroot Business Endpoint Protection Competitors

Product Reports

Microsoft Defender for Endpoint

Download Microsoft Defender for Endpoint product report

Webroot Business Endpoint Protection

Download Webroot Business Endpoint Protection product report

Webroot Business Endpoint Protection report

Also Known As

Microsoft Defender ATP, Microsoft Defender Advanced Threat Protection, MS Defender for Endpoint, Microsoft Defender Antivirus

Webroot SecureAnywhere Business Endpoint Protection

Interactive Demo

Microsoft

Demo not available

OpenText

Overview

Microsoft Defender for Endpoint is a comprehensive security solution that provides advanced threat protection for organizations. It offers real-time protection against various types of cyber threats, including malware, viruses, ransomware, and phishing attacks.

With its powerful machine-learning capabilities, it can detect and block sophisticated attacks before they can cause any harm. The solution also includes endpoint detection and response (EDR) capabilities, allowing organizations to quickly investigate and respond to security incidents. It provides detailed insights into the attack timeline, enabling security teams to understand the scope and impact of an incident.

Microsoft Defender for Endpoint also offers proactive threat hunting, allowing organizations to proactively search for and identify potential threats within their network. It integrates seamlessly with other Microsoft security solutions, such as Microsoft Defender XDR, to provide a unified and holistic security approach. With its centralized management console, organizations can easily deploy, configure, and monitor the security solution across their entire network.

Microsoft Defender for Endpoint is a robust and scalable security solution that helps organizations protect their endpoints and data from evolving cyber threats.

Microsoft

Webroot Business Endpoint Protection provides comprehensive endpoint protection, antivirus, and security features across devices like mobiles, computers, and servers to prevent malware and other threats.

Webroot Business Endpoint Protection helps businesses manage endpoint security through its robust cloud application and integrates with RMM tools for improved management and pricing. It offers EMS service, automatic updates, and a lightweight agent, ensuring ease of use and minimal resource consumption across all devices. This solution maintains a cloud-based database for real-time threat recognition and delivers strong performance with low resource usage, leveraging heuristic AI for threat detection. Companies use it for its antivirus, firewall functions, device location and wiping, and security policy applications, contributing to effective security management.

What are the key features?

Endpoint Protection: Safeguards computers, mobiles, and servers from threats.
Cloud Integration: Manages security through a robust cloud application.
Automatic Updates: Ensures devices are consistently protected with the latest updates.
Lightweight Agent: Minimizes resource usage while delivering high performance.
Heuristic AI: Provides advanced threat detection and prevention capabilities.
EMS Service: Manages security effectively across all endpoints.

What benefits should you look for?

Efficiency: Low resource usage for optimal device performance.
Ease of Use: Simplified installation and configuration processes.
Real-Time Threat Detection: Immediate response to potential threats.
Cost-Effectiveness: Affordable pricing with clear, transparent models.
Comprehensive Protection: Complete security measures for various devices.

Webroot Business Endpoint Protection is implemented across industries to ensure robust endpoint security. Its integration with RMM tools allows for seamless management in IT environments, while its cloud-based threat detection provides essential cybersecurity for sectors such as healthcare, finance, and education.

OpenText

Sample Customers

Petrofrac, Metro CSG, Christus Health

Mytech Partners

Microsoft Defender for Endpoint vs. Webroot Business Endpoint Protection