Try our new research platform with insights from 80,000+ expert users

Microsoft Defender Threat Intelligence vs ThreatConnect Threat Intelligence Platform (TIP) comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Aug 11, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Microsoft Defender Threat I...
Ranking in Threat Intelligence Platforms
4th
Average Rating
8.4
Reviews Sentiment
7.4
Number of Reviews
31
Ranking in other categories
Advanced Threat Protection (ATP) (11th), Microsoft Security Suite (18th)
ThreatConnect Threat Intell...
Ranking in Threat Intelligence Platforms
6th
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
6
Ranking in other categories
Security Orchestration Automation and Response (SOAR) (17th)
 

Mindshare comparison

As of April 2025, in the Threat Intelligence Platforms category, the mindshare of Microsoft Defender Threat Intelligence is 2.7%, up from 2.1% compared to the previous year. The mindshare of ThreatConnect Threat Intelligence Platform (TIP) is 5.8%, down from 7.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Threat Intelligence Platforms
 

Featured Reviews

Nim Nadarajah - PeerSpot reviewer
A native Microsoft solution the provides great ROI and continuously improves its offering
We have Microsoft bias. We generally don't have any significant negative feedback or improvement points around Defender, EDR and CMDR platforms. It does a good job across the board. The price point is something they can improve slightly for those who don't have an M 365 E5. I believe it's a $2.80 cents add-on. In Canadian, that's expensive. If they can drop it to a dollar, for those who don't have M 365 E5, they're going to open up market share and increase affordability for an entire market segment in the medium business category. Other than that, we have no major negative feedback.
Aadarsh Dawn - PeerSpot reviewer
Offers features like response capabilities and automation response and automation orchestration
ThreatConnect aggregates and operationalizes Threat intelligence data and sources across internal client environments. It leverages Automation and built in Case Management to streamline and automate threat intelligence-driven processes and investigations within client environments ThreatConnect…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The product is stable."
"I rate the tool's stability a ten out of ten."
"The product provides efficient email security for sending links and file attachments."
"The solution is well integrated with other Microsoft security products."
"The technical support services are excellent."
"The product's anti-spam and malware-scanning features are useful. We scan email attachments, documents, and malicious codes."
"The product is useful when the end user downloads malware files."
"Microsoft collects trillions of signals from all over the world, which is incredibly valuable. It helps us identify zero-day vulnerabilities and global threats."
"We have been able to see a return on investment as our clients believe in us more."
"The product automatically generated a threat score based on the maliciousness of an IP."
"It's a solid platform and is stable enough. It is not complicated and is easy to use."
"ThreatConnect has a highly user-friendly interface."
"I like their customer support."
"The tool's installation, integration, and playbooks are very straightforward."
"The most valuable features are ease of use and the ability to customize it."
 

Cons

"It's a bit complicated to manage because you have many dependencies of servers, many dependencies in queue, and so on. Entries or different endpoints, and you make different configuration topics for each one. So that's a major problem."
"Microsoft Defender Threat Intelligence should integrate with different platforms."
"Having up-to-date documentation and real-time reflections in all portals would be beneficial to keep users informed about any changes. Additionally, the frequent changes in Microsoft's UI and the movement of features between different products in the set pose difficulties."
"Some of the customization features could be improved by providing a portion of it as open source."
"The tool's onboarding of users that use on-premise or hybrid environments needs to be improved."
"Non-Microsoft products may not integrate as smoothly."
"One area that can be improved is reducing false positives."
"While the current setup meets our needs, Microsoft can constantly improve customization and adaptability to rapidly evolving cybersecurity threats."
"It would be good to have more feeds and more integrated sources for enrichment."
"Sometimes, when using the solution, it slows down, affecting our ability to mitigate threats."
"I couldn’t get any training videos online when I was working with the tool."
"Support is an area with which nobody is ever fully satisfied, so it can be improved."
"Integration is an area that could use some improvement."
"I would like to see improvements in the time zone support of their customer service, considering users are from different time zones."
"They should make it a little bit easier to generate events and share them with the community"
 

Pricing and Cost Advice

"It is an expensive product."
"The solution's pricing is reasonable and not very expensive."
"The product is a part of my Microsoft 365 subscription, so there is no additional cost. It is cost-effective."
"I use the product's default version, which is a free one and not the licensed version."
"The solution is relatively expensive; however, our status as a gold partner provides us with several complimentary licenses, which offsets the cost."
"They offer two license plans: Microsoft Defender for endpoints and Microsoft Defender for businesses."
"The tool is expensive as a stand-alone solution. However, it is not cheap when you purchase it as a bundle."
"It's reasonably priced, though there's room for further improvement."
"The price could be better."
"The price of this product is in the mid-range, not too expensive, nor inexpensive."
"The tool is expensive."
"I rate the product price as six on a scale of one to ten, where one is extremely expensive, and ten means it is cheap."
report
Use our free recommendation engine to learn which Threat Intelligence Platforms solutions are best for your needs.
845,040 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
17%
Financial Services Firm
12%
Educational Organization
11%
Government
10%
Financial Services Firm
16%
Computer Software Company
14%
Government
10%
Manufacturing Company
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Microsoft Defender Threat Intelligence?
It just runs in the background. I don't have to worry about, making sure it's Intelligence. So, you know, this kind of makes it very easy, have to worry about installing. It is easy to use.
What needs improvement with Microsoft Defender Threat Intelligence?
Some of the customization features could be improved by providing a portion of it as open source. This would allow integration with other solutions, enhancing Threat Intelligence. Providing code cu...
What is your primary use case for Microsoft Defender Threat Intelligence?
We are using Microsoft Defender ATP specifically as an email security solution, as well as for our critical servers as a web security solution. We have almost eleven hundred users utilizing it for ...
What do you like most about ThreatConnect Threat Intelligence Platform (TIP)?
The product automatically generated a threat score based on the maliciousness of an IP.
What is your experience regarding pricing and costs for ThreatConnect Threat Intelligence Platform (TIP)?
The pricing seems a bit high for smaller companies. It would be beneficial if they had pricing tailored to different client sizes.
What needs improvement with ThreatConnect Threat Intelligence Platform (TIP)?
I would like to see improvements in the time zone support of their customer service, considering users are from different time zones. Additionally, the pricing is high for smaller organizations, so...
 

Interactive Demo

Demo not available
 

Overview

 

Sample Customers

Information Not Available
Oracle, IBM, General Dynamics, Scotiabank, Sony, Athena Health, Berkshire Hathaway Energy, Workday, TikTok
Find out what your peers are saying about Microsoft Defender Threat Intelligence vs. ThreatConnect Threat Intelligence Platform (TIP) and other solutions. Updated: March 2025.
845,040 professionals have used our research since 2012.