Try our new research platform with insights from 80,000+ expert users

Microsoft Defender for Endpoint vs ZoneAlarm comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Apr 20, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Microsoft Defender for Endp...
Ranking in Anti-Malware Tools
1st
Average Rating
8.2
Reviews Sentiment
7.1
Number of Reviews
197
Ranking in other categories
Endpoint Protection Platform (EPP) (1st), Advanced Threat Protection (ATP) (2nd), Endpoint Detection and Response (EDR) (3rd), Microsoft Security Suite (5th)
ZoneAlarm
Ranking in Anti-Malware Tools
21st
Average Rating
8.0
Reviews Sentiment
7.2
Number of Reviews
13
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of May 2025, in the Anti-Malware Tools category, the mindshare of Microsoft Defender for Endpoint is 16.7%, down from 22.1% compared to the previous year. The mindshare of ZoneAlarm is 2.3%, up from 1.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Anti-Malware Tools
 

Featured Reviews

AnuragSrivastava - PeerSpot reviewer
Provides detailed visibility into threats but the ability to add exceptions needs improvement
One major item for improvement is the ability to add exceptions. We can add some exceptions, but not at the level we need to. The second major area for improvement involves enhanced capabilities for different operating systems or platforms. That is, even though we have coverage for different operating systems or platforms such as Linux, we don't get all of the controls and enhanced capabilities that are available with Windows devices. Reporting could also be improved because, at present, we get limited results at times. For example, in an environment with more than 100,000 devices, you may just get 10,000 results when you run a report.
Nagendra Nekkala - PeerSpot reviewer
A highly stable solution that protects computers from viruses, spyware, and hackers
ZoneAlarm doesn't require much maintenance. You only need to update the application when there are any latest updates. ZoneAlarm is deployed on-cloud in our organization. With an increase in the bring your own device concept, ZoneAlarm should be part of every device to help us make the operational work very easy. Overall, I rate ZoneAlarm a nine out of ten.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It has Kusto Query Language (KQL), so we can use our own queries to find anything."
"It is easy to use because it is already pre-installed in Windows 10. We don't have to do anything to configure it. You can also configure the firewall by using a group policy so that it can be easily adopted in an environment."
"Technical support has been great."
"Coming from an organization where the EDR wasn't strong, it has always been a case of basically searching through the information you already have and looking for something. It was basically trying to find the needle in a haystack. What the Defender platform does is that it reduces the size of the haystack, and it'll say that the needle is over here. Minutes matter, and it certainly zeros you in on the events that are concerning. It also simplifies the effort of trying to get some kind of correlation of behaviors or actions you see in the environment and confirming if something is benign or a threat."
"What I like most is the protection against phishing emails and anti-spam."
"It comes included with the Windows license."
"There are a couple of features, such as isolating the devices or connecting the device and connecting live response."
"We can react to threats faster and stop them from spreading from one machine to another. It protects from suspicious email attachment downloads. It will lock down the SOC and the workstations."
"This antivirus is regularly updated, and the updates can be scheduled."
"It is quick and easy to configure."
"Personally, I find the Game Mode of the Firewall very useful."
"The solution maintains reasonable scalability."
"The solution really focused on giving more security than an antivirus."
"The product's most valuable feature is the detection engine due to its ability to identify threats."
"It is easy to use through interfaces and easy to configure each of the customizations we created based on the characteristics that we wanted."
"The phone access scan stands out as the most valuable feature for me."
 

Cons

"Microsoft Defender for Endpoint does not provide much flexibility in terms of threats."
"There could be an increase in security for the solution."
"Where we stand right now, compared to other products that are there in the market, they still have to work on their threat intelligence and the overall maturity of detecting the malware."
"It can get a bit laggy sometimes. Other than that, we don't have any issues. They constantly tweak it and fix it up based on users' feedback. It has improved a lot over the past four years. Defender for Endpoint never really used to be a good endpoint security solution, but over the past couple of years, Microsoft has invested heavily in it. So, it has come a long way in all aspects of endpoint security. If they want to make it better, they should just continue investing in the current path of what they've been doing over the past couple of years."
"The onboarding and deployment could be more user-friendly, and there is room to grow in some of the reports. I don't want them to be oversimplified or overly complex, but there is room for improvement in the reporting it can do. It's relatively minor."
"We encountered some issues when we were trying to enable automatic updates from our group policy."
"Auto recovery is the most important feature that we would need from this solution. For decryption, similar to Malwarebytes, there should be something to be able to recover the data up to the last normal status. Its ability to recover data to the last normal copy must not exceed 5 to 10 minutes."
"Microsoft Defender for Endpoint could improve by providing more user-friendly dashboards. They may be complicated for some."
"ZoneAlarm should be a light application that does not take too much memory in mobile phones."
"We'd like better performance of the network equipment. There are high-speed environments where an immediate response is required."
"I would like it to be integrated with the Check Point centralization solution like Infinity Portal. It would be great to be able to manage it through the same website."
"The solution's efficiency in threat containment and overall protection needs improvement."
"Perhaps the primary area for potential enhancement is to make it faster, ensuring a more seamless experience while maintaining robust security features."
"Some of our users say that the interface is a little bit outdated for 2020, and want it to be more modern and cozy."
"They should release a single update with all the necessary characteristics to avoid being in a cycle of consecutive updates."
"They need to update and improve the features available for Mac."
 

Pricing and Cost Advice

"Microsoft Defender for Endpoint is an expensive solution."
"Microsoft Defender for Endpoint is cost-effective because there's one unified license, and with this unified license, you get the capabilities for your cloud applications, servers, and endpoints as well. Therefore, it saves us a lot of money because the cost with other solutions is for just one piece of OS or maybe an urban environment. The licensing process is not complex as well."
"The nice thing about Defender and Sentinel is that the cost is based on the data logs that you ingest from the Defender endpoints and data connectors. I don't have to buy a 25- or 50- or 1,000-user or enterprise license. I can buy one license at a time."
"It came with Windows."
"If you don't purchase the advanced threat protection then there is no additional charge."
"The solution is free."
"We have been using the free version."
"The solution is included with Microsoft Windows."
"I rate the product pricing a seven out of ten."
"This is a freeware product and I recommend using it."
"The pricing is reasonable, with a yearly renewal license costing seventy dollars."
"We have to pay a yearly licensing fee for ZoneAlarm, which is cheap."
"We use the free version of the software, but it can be upgraded to the paid Extreme Security edition."
report
Use our free recommendation engine to learn which Anti-Malware Tools solutions are best for your needs.
851,604 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
24%
Computer Software Company
12%
Government
7%
Financial Services Firm
7%
Computer Software Company
19%
Comms Service Provider
12%
Hospitality Company
9%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface, applies behavioral-based endpoint protection and response, and includes risk-ba...
Which offers better endpoint security - Symantec or Microsoft Defender?
We use Symantec because we do not use MS Enterprise products, but in my opinion, Microsoft Defender is a superior solution. Microsoft Defender for Endpoint is a cloud-delivered endpoint security s...
How does Microsoft Defender for Endpoint compare with Crowdstrike Falcon?
The CrowdStrike solution delivers a lot of information about incidents. It has a very light sensor that will never push your machine hardware to "test", you don't have the usual "scan now" feature ...
What do you like most about ZoneAlarm?
ZoneAlarm protects all computers from viruses, spyware, and hackers.
What needs improvement with ZoneAlarm?
As for improvements, ZoneAlarm enhances Check Point’s solution by having a very efficient engine. The engine checks all components of the device, such as the memory process, to detect and stop thre...
 

Also Known As

Microsoft Defender ATP, Microsoft Defender Advanced Threat Protection, MS Defender for Endpoint, Microsoft Defender Antivirus
No data available
 

Interactive Demo

 

Overview

 

Sample Customers

Petrofrac, Metro CSG, Christus Health
Terma, Optix, Samsung Research Amercia, SF Police Credit Union, Independence Care System, Mattias Thomsen, Carmel Partners, Desert Research Institute, CRIF, FXCM Inc, US State Agency
Find out what your peers are saying about Microsoft Defender for Endpoint vs. ZoneAlarm and other solutions. Updated: April 2025.
851,604 professionals have used our research since 2012.