Defender for Office 365 protects Office 365, which is the industry standard office software suite. It is the only Microsoft security solution we use. We don't use any specialized features. It's a standard deployment.
Co-Founder with 11-50 employees
A highly efficient solution that saves us time
Pros and Cons
- "Defender helps us prioritize threats across our organization."
- "The pre-sales cost calculations could be more transparent."
What is our primary use case?
What is most valuable?
Defender helps us prioritize threats across our organization. Defender for 365 is highly efficient and saves us time. We save about 35 percent compared to other solutions.
What needs improvement?
The pre-sales cost calculations could be more transparent.
For how long have I used the solution?
I have used Defender for Office 365 for the last three years.
Buyer's Guide
Microsoft Defender for Office 365
January 2026
Learn what your peers think about Microsoft Defender for Office 365. Get advice and tips from experienced pros sharing their opinions. Updated: January 2026.
881,821 professionals have used our research since 2012.
How are customer service and support?
We mostly rely on internal support at my organization. They are not certified by Microsoft, but they have some experience with Microsoft solutions. We contact Microsoft if we need additional support. I would rate them highly.
How was the initial setup?
Setting up Defender for 365 is straightforward, and we did it ourselves following the standard Office 365 setup.
What other advice do I have?
I rate Microsoft Defender for Office 365 an eight out of ten.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Microsoft Azure
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Chief Information Security Officer at a outsourcing company with 10,001+ employees
Deployment capability is a great feature but we're getting too many false positives
Pros and Cons
- "The deployment capability is a great feature."
- "Too many false positives and lacks an accurate capability to detect malicious SharePoint sites."
What is our primary use case?
We use Microsoft Defender for Office 365 for email security. We are partners of Microsoft and I'm the company's chief operation security officer.
What is most valuable?
The deployment capability is a great feature. We're able to activate this feature throughout France with a click.
What needs improvement?
I'd like to see fewer false positives and potentially have an accurate capability to detect malicious SharePoint sites. There could also be an improvement in some of the features related to training. In a phishing test campaign, for example, it should be more user-friendly and include the capability to evaluate and assess users' understanding of the content provided.
For how long have I used the solution?
I've been using this solution for several years.
How are customer service and support?
The customer support could be more advanced at the technical level and more responsive. There should also be more communication on updates.
Which solution did I use previously and why did I switch?
We previously had some reinforced email security features with Microsoft; this is just an improvement on what we had.
What's my experience with pricing, setup cost, and licensing?
This is quite an expensive solution and understanding the pricing model and features is quite complicated and it can, in fact, be a nightmare when dealing with Microsoft.
Which other solutions did I evaluate?
We reviewed several on-premise solutions such as Forcepoint that could be integrated with other components within our infrastructure. The reason we didn't go with them is that we have to respond quickly to threats and at an international level. Given the complexity of our situation in terms of architecture, we decided to go with a ready-to-use solution.
What other advice do I have?
We haven't had a review recently, so I can't say that this is the best solution on the market. Things are evolving all the time with new features constantly being added to all solutions. For now, I would rate this solution seven out of 10.
Disclosure: My company has a business relationship with this vendor other than being a customer. partner
Buyer's Guide
Microsoft Defender for Office 365
January 2026
Learn what your peers think about Microsoft Defender for Office 365. Get advice and tips from experienced pros sharing their opinions. Updated: January 2026.
881,821 professionals have used our research since 2012.
Consultant at a tech services company with 1,001-5,000 employees
Good integration, but needs better spam and phishing detection
Pros and Cons
- "The most valuable feature is the integration. It's a single console, so we don't have to switch around between multiple products. Another valuable feature is the ease of operations and maintenance."
- "This product's effectiveness could be improved, in terms of detecting unwanted spam or even malware between the emails, compared to other products."
What is our primary use case?
Our primary use case of Defender is to protect customers' emails. We use this solution for the servers being hosted on Azure. We use it mostly for the emails of Office 365 users, to secure their emails. Some customers already have other email security, complementing Office 365, but smaller customers prefer using a single solution to protect their emails.
This solution is cloud-based.
What is most valuable?
The most valuable feature is the integration. It's a single console, so we don't have to switch around between multiple products. Another valuable feature is the ease of operations and maintenance.
What needs improvement?
This product's effectiveness could be improved, in terms of detecting unwanted spam or even malware between the emails, compared to other products.
For how long have I used the solution?
We have been using this solution for almost a year, just in 2021.
How are customer service and support?
The technical support's response is very good. If you have Premier Support, they can respond within 15 minutes. In terms of their technical team, it's very good as well.
How was the initial setup?
The installation is a key feature, since it's a single product within Microsoft. It's integrated with Office 365, so it's very easy to install. You only need one person for deployment and maintenance—the administrator, which is usually either from the security team or email administrator team.
What about the implementation team?
We implemented this solution ourselves.
What's my experience with pricing, setup cost, and licensing?
For licensing, it's usually a yearly package for customers who are subscribed to Office 365, but they can also pay on a monthly basis.
Which other solutions did I evaluate?
Some of our customers have IronPort or Trend Micro and prefer to use these solutions, complementing Office 365.
What other advice do I have?
I rate Defender a seven out of ten because it's easy to operate and maintain, but it could be improved by spam and phishing detection.
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Microsoft Azure
Disclosure: My company has a business relationship with this vendor other than being a customer. Integrator
Protects from zero-day threats and ensures that attachments and links are safe, but has a lot of false positives and should have only one plan that takes care of everything
Pros and Cons
- "Safe attachments, safe links, policies, and the ability to protect from zero-day threats are the most valuable features."
- "In some situations, it has not been able to pick impersonated emails having no attachments. Technical support definitely has a scope for improvement."
What is most valuable?
Safe attachments, safe links, policies, and the ability to protect from zero-day threats are the most valuable features.
What needs improvement?
In some situations, it has not been able to pick impersonated emails having no attachments. Technical support definitely has a scope for improvement.
For how long have I used the solution?
I have been using this solution for the last one year. I have its latest version.
What do I think about the stability of the solution?
It is stable. We didn't find any issues with that.
What do I think about the scalability of the solution?
It is highly scalable. We have deployed for around 7,000 accounts. Performance is not impacted.
How are customer service and technical support?
Their technical support can definitely be improved. They can avoid using templatized response.
Which solution did I use previously and why did I switch?
We had basic Exchange Online Protection.
How was the initial setup?
It was easy to configure and with one/two skilled the ongoing maintenance can be handled.
What's my experience with pricing, setup cost, and licensing?
It has a simple interface to configure and manage. From the pricing point of view, like any other product in the market, there is scope for negotiation.
Which other solutions did I evaluate?
Before we chose to settle with this product, we experimented with Cisco, Forcepoint, etc.
What other advice do I have?
I would advise others to do a proof of concept for at least a month before taking a decision.
I would rate Microsoft Defender for Office 365 a eight out of ten.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Cybersecurity and Business Continuity Consultant at a tech services company with 201-500 employees
Reliable, simple setup, but best practice information needed
Pros and Cons
- "The most valuable feature of Microsoft Defender for Office 365 is the ease of use."
- "Microsoft Defender for Office 365 could improve by giving customers information on techniques to prevent threats. For example, information about best practices on how to protect their own devices against hackers and scammers, such as educational information or training. This would help others have a better understanding of cyber security. Additionally, there can be more security features added."
What is our primary use case?
We are using Microsoft Defender for Office 365 to defend against computer threats.
What is most valuable?
The most valuable feature of Microsoft Defender for Office 365 is the ease of use.
What needs improvement?
Microsoft Defender for Office 365 could improve by giving customers information on techniques to prevent threats. For example, information about best practices on how to protect their own devices against hackers and scammers, such as educational information or training. This would help others have a better understanding of cyber security. Additionally, there can be more security features added.
For how long have I used the solution?
I have been using Microsoft Defender for Office 365 for approximately five years.
What do I think about the stability of the solution?
Microsoft Defender for Office 365 is a stable solution.
What do I think about the scalability of the solution?
The solution is scalable in my usage.
How are customer service and support?
I have not used the technical support from Microsoft. I managed to fix any issues I had myself.
How was the initial setup?
The implementation is simple and Microsoft Defender for Office 365 because it comes with Microsoft Windows, works as soon as the computer is on.
What's my experience with pricing, setup cost, and licensing?
Microsoft Defender for Office 365 comes with Microsoft Windows. It is free with the operating system.
What other advice do I have?
I rate Microsoft Defender for Office 365 a seven out of ten.
Which deployment model are you using for this solution?
Private Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Co-Founder with 11-50 employees
Simple implementation and reliable
Pros and Cons
- "Microsoft Defender for Office 365 is a stable solution."
- "We are always looking for others tools to increase automation on tasks. There can be better integration with other solutions, such as PowerPoint and email."
What needs improvement?
We are always looking for others tools to increase automation on tasks. There can be better integration with other solutions, such as PowerPoint and email.
For how long have I used the solution?
I have been using Microsoft Defender for Office 365 for approximately five years.
What do I think about the stability of the solution?
Microsoft Defender for Office 365 is a stable solution.
What do I think about the scalability of the solution?
We have approximately 10 people using the solution.
We might increase usage of the solution depending on the market.
How are customer service and support?
We only have had one or two problems over the past two years.
How was the initial setup?
The initial setup was not complicated.
What about the implementation team?
There was no need for help for the implementation, we did it ourselves.
What other advice do I have?
I rate Microsoft Defender for Office 365 a nine out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Sales Account Manager at a tech services company with 51-200 employees
Simple implementation, effective email threat detection, and secure
Pros and Cons
- "The solution is very easy to use. All you have to do is to assign the license to the end-user and it's done. The customer will only have the feature activated, and the solution will monitor the emails to determine if they are a threat or not."
- "They can improve their security in a way where a customer can know if all their attachments are safe or not to open through a report. The solution does its job perfectly, but it never reports to the customer whether those attachments have been stopped before or not."
What is our primary use case?
Microsoft Defender for Office 365 was a product called Advanced Threat Protection(ATP) in the beginning and it was changed. Microsoft Defender for Office 365 is an email security. Our customers should know that it is only email security and not a full security feature solution. It is for checking the attachments of emails, and it will move them on if they are secure, and if they are not secure it will not move them forward.
What is most valuable?
The solution is very easy to use. All you have to do is to assign the license to the end-user and it's done. The customer will only have the feature activated, and the solution will monitor the emails to determine if they are a threat or not.
What needs improvement?
They can improve their security in a way where a customer can know if all their attachments are safe or not to open through a report. The solution does its job perfectly, but it never reports to the customer whether those attachments have been stopped before or not.
For how long have I used the solution?
I have been using Microsoft Defender for Office 365
What do I think about the scalability of the solution?
Microsoft Defender for Office 365 has been scalable.
How was the initial setup?
The implementation is simple, once you have the license you assign it to the end-user.
What was our ROI?
We have seen a return on investment because if we would have received a phishing email, Microsoft Defender for Office 365 would help out to detect the threat instead of crashing down the whole company. The solution keeps emails protected with high security benefiting the company, whether it's an inbound or outbound email.
What's my experience with pricing, setup cost, and licensing?
Microsoft Defender for Office 365 is an add-on to the Office license. Many customers are purchasing this solution.
What other advice do I have?
I would advise every customer who requires email security to purchase Microsoft Defender for Office 365.
I rate Microsoft Defender for Office 365 a ten out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer.
Deputy Chief SAP BASIS Administrator at a comms service provider with 201-500 employees
Easy to use and simple to configure but requires better scanning capabilities
Pros and Cons
- "The basic features are okay and I'm satisfied with the Defender."
- "I'd like some additional features any product can give me to protect our environment in a better way."
What is our primary use case?
We are using Defender to protect different kinds of attachments, emails, and safe links, and things like that.
What is most valuable?
The basic features are okay and I'm satisfied with the Defender.
The initial setup is pretty simple. It's easy to configure.
Microsoft products are always easy to use.
The solution has been stable and reliable.
What needs improvement?
I was looking for some advanced features, like if I would receive an email that contains a legitimate file type, but the content is malicious, how I can protect against that? Normally, we are dealing with so many phishing and spam emails. I'd like some additional features any product can give me to protect our environment in a better way.
There is always a chance to continue to improve the product in some way.
For how long have I used the solution?
We've been using the solution since 2015. It's been a few years now.
What do I think about the stability of the solution?
Microsoft so far and been good. We haven't faced any kind of disruption or anything else. It's a good product and good platform, I must say. Overall, it's a good product and good service and we haven't dealt with bugs or glitches.
What do I think about the scalability of the solution?
It's scalable. It's software as a service, so it's always scalable. You have to just purchase the additional licenses and you can increase your database. It's nothing that would be considered too difficult.
How are customer service and support?
They offer different kinds of support levels. If you have the Premier Support contract with Microsoft you're good. If you have purchased a good support level agreement with Microsoft, then their support is very fantastic. We never faced any kind of issue. The engineer is always available when we create the ticket and the support is good. Due to the fact that we are a big organization, we have a support level agreement with the Microsoft.
Which solution did I use previously and why did I switch?
Earlier, we were using the on-prem solution of Exchange, then we migrated to the cloud, so we cannot just compare the feature set and the price of Defender with any other security software, email security software.
How was the initial setup?
The initial implementation is not very difficult. Microsoft products are always very easy to configure and use. It's not a big deal. It's the philosophy of Microsoft to make it easy for the users. That's why they always attract the users and users happily migrate to them as compared to using any other product or any other service.
What's my experience with pricing, setup cost, and licensing?
I haven't actually evaluated the cost against other products. For example, it's bundled with the licenses that we have procured, so everything is included in that. We haven't purchased the Defender separately.
We cannot just say that it's a product which is costly as compared to the other products available in the market or not, as it's a bundled offer. We can calculate the price of one license or an Office 365 license with any other cloud service partner's license cost, however, we cannot just compare the price of any specific feature with the services available in the market.
Which other solutions did I evaluate?
We are not using any other product, so we are not actually in a position to compare it with other security products.
What other advice do I have?
While the deployment is a hybrid model, we have migrated all the mailboxes to Office 365. We are completely running the services from the cloud.
I'd rate the solution at a seven out of ten. there's always room for improvement.
It's a bundled offer. When we procured the licenses of Office 365, it came up under those licenses. We are not using any other product, so I cannot say or I'm not in a position to say that any other product is good or Defender is not good, as I am not using any other product.
Which deployment model are you using for this solution?
Hybrid Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Buyer's Guide
Download our free Microsoft Defender for Office 365 Report and get advice and tips from experienced pros
sharing their opinions.
Updated: January 2026
Product Categories
Email Security Email Archiving Advanced Threat Protection (ATP) Microsoft Security Suite Secure Email Gateway (SEG)Popular Comparisons
Microsoft Intune
Microsoft Defender for Endpoint
Microsoft Entra ID
Microsoft Defender for Cloud
Microsoft Purview Data Governance
Microsoft Defender XDR
Cloudflare One
Proofpoint Email Protection
Check Point Harmony Email & Collaboration
ESET Endpoint Protection Platform
Palo Alto Networks WildFire
Cisco Secure Email
Microsoft Defender for Cloud Apps
Microsoft Exchange Online Protection (EOP)
Buyer's Guide
Download our free Microsoft Defender for Office 365 Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- Which solution do you prefer: Microsoft Defender for Office 365 or Proofpoint Email Protection?
- Is Defender for Office 365 enough? Or should we be using a product like Mimecast?
- Have you done a comparison between BeyondTrust Endpoint Privilege Management and Microsoft Defender?
- Which product do you prefer: Symantec Messaging Gateway or Microsoft Defender?
- What are the threats associated with using ‘bogus’ cybersecurity tools?
- When evaluating Messaging Security, what aspect do you think is the most important to look for?
- Which Email Security enterprise solution would you choose: Cisco Secure Email vs Forcepoint Email Security vs Barracuda Email Security Gateway?
- What is the best email encryption software for small enterprises using Office 365?
- What security measures should businesses prioritize to support secure remote work?
- When evaluating Email Security tools, what aspects do you think are the most important to look for?









