Microsoft Defender Threat Intelligence Reviews

Name: Microsoft Defender Threat Intelligence
Brand: Microsoft
Rating: 4.2 (31 reviews)

4.2 out of 5

31 reviews
93% willing to recommend

What is Microsoft Defender Threat Intelligence?

Microsoft Defender Threat Intelligence is a comprehensive security solution that provides organizations with real-time insights into the latest cyber threats. Leveraging advanced machine learning and artificial intelligence capabilities, it offers proactive threat detection and response, enabling businesses to stay one step ahead of attackers. With Microsoft Defender Threat Intelligence, organizations gain access to a vast array of threat intelligence data, including indicators of compromise (IOCs), security incidents, and emerging threats. This data is collected from a wide range of sources, such as Microsoft's global sensor network, industry partners, and security researchers, ensuring comprehensive coverage and accuracy. The solution's advanced analytics and machine learning algorithms analyze this threat intelligence data in real-time, identifying patterns, trends, and anomalies that may indicate a potential security breach. By continuously monitoring the network and endpoints, Microsoft Defender Threat Intelligence can quickly detect and respond to threats, minimizing the impact of attacks and reducing the time to remediation.

Get the Microsoft Defender Threat Intelligence Buyer's Guide and find out what your peers are saying about Microsoft Defender Threat Intelligence, CrowdStrike Falcon, Microsoft Intune and more!

Microsoft Defender Threat Intelligence is the #4 ranked solution in top Threat Intelligence Platforms, #10 ranked solution in top Advanced Threat Protection (ATP) solutions, and #18 ranked solution in top Microsoft Security Suite solutions. PeerSpot users give Microsoft Defender Threat Intelligence an average rating of 8.4 out of 10. Microsoft Defender Threat Intelligence is most commonly compared to CrowdStrike Falcon: Microsoft Defender Threat Intelligence vs CrowdStrike Falcon. Microsoft Defender Threat Intelligence is popular among the large enterprise segment, accounting for 64% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 15% of all views.

Buyer's Guide

Microsoft Defender Threat Intelligence

May 2025

Get the report

Helped 851,491 peers since 2012

Featured Microsoft Defender Threat Intelligence reviews

Nim Nadarajah

Partner & Director Advisory Services at Cruciallogics

One of the most valuable aspects is that Defender is a native Microsoft solution. You own your own data. With CrowdStrike and Rapid7, and other products, your log data leaves your tenant, it goes into their system, and they produce the analysis on their technology. Therefore, although you're running the agent instead of giving them the signals, you're really giving up a lot of your data for their own personal gain. Defender's biggest competitive advantage is that your data stays within your tenant, and you own it. It naturally keeps getting better and better. They have a very transparent roadmap for the product. We don't have any concerns or complaints. Defender exceeds expectations, especially for someone who's flipping from CrowdStrike or Falcon XR. This is night and day.

Read full review

ShaheenKapery

Solutions Architect at Altron

You can flag many instances together, and they form one logical entity. For example, if you want to split off a domain for a specific reason, you can do that easily. The flexibility to adjust and expand according to your needs is straightforward and efficient. You can add the device to the Azure platform to add a Microsoft product. The device is virtualized, so you don't pay for the hardware. You're getting a virtualized device in the cloud that works efficiently. We support two of the country's prominent banks and most retailers here. We have thousands of users and around 1,200,000 devices, so the numbers are substantial. I rate the scalability a ten out of ten.

Read full review

Alexander Rozenberg

Head of IT at Broadway Gaming Ltd.

I have experience with other products like Trend Micro, Kaspersky, and a lot of other products in the market. Some companies offer competitive solutions, but I think if you want a one-stop shop for everything, then Microsoft is the best. There is a difference between Trend Micro, Kaspersky, and Microsoft. Trend Micro or Kaspersky offer more niche products. Microsoft offers products to cover most of the area in the company.

Read full review

Microsoft Defender Threat Intelligence mindshare

Product category:

As of May 2025, the mindshare of Microsoft Defender Threat Intelligence in the Advanced Threat Protection (ATP) category stands at 1.6%, up from 1.2% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Advanced Threat Protection (ATP)

PeerResearch reports based on Microsoft Defender Threat Intelligence reviews

Type	Title	Date
Category	Advanced Threat Protection (ATP)	May 19, 2025	Download
Product	Reviews, tips, and advice from real users	May 19, 2025	Download
Comparison	Microsoft Defender Threat Intelligence vs Microsoft Defender for Office 365	May 19, 2025	Download
Comparison	Microsoft Defender Threat Intelligence vs Microsoft Defender for Endpoint	May 19, 2025	Download
Comparison	Microsoft Defender Threat Intelligence vs Palo Alto Networks WildFire	May 19, 2025	Download

Title	Rating	Mindshare	Recommending
CrowdStrike Falcon	4.3	N/A	96%	127 interviews Add to research
Microsoft Intune	4.1	N/A	94%	265 interviews Add to research

Valuable Features

Microsoft Defender Threat Intelligence's most valuable features include data ownership, integration with Microsoft products, and global threat data collection. Its user-friendly interface and efficient threat detection are praised, along with analytics and machine vulnerability assessments. It offers robust email security, sandboxing, and seamless deployment. The platform supports threat identification and protection, proactive incident detection, and integrates well with Azure. It provides security insights, unified management, and customizable spam levels for tenant protection.

"I would rate Microsoft Defender ATP as nine out of ten."
"One of the best features is that it provides a certain level of customization, allowing us to set our spam confidence levels."
"It helps to monitor by providing the best 24/7 monitoring integrated with Sentinel and IBM systems."

Room for Improvement

Microsoft Defender Threat Intelligence requires improvements in pricing and technical support, with a need for better integration with non-Microsoft platforms. Users seek enhanced stability, reduced false positives, and more robust automation. The licensing model and frequent interface changes cause confusion, while the dashboard and reporting features need refinement. There is demand for greater AI capabilities and improved threat detection. Its integration and customization options can be optimized to accommodate varied user environments.

"Some of the customization features could be improved by providing a portion of it as open source."
"Some of the customization features could be improved by providing a portion of it as open source."
"Non-Microsoft products may not integrate as smoothly."

ROI

Organizations report that Microsoft Defender Threat Intelligence effectively consolidates security intelligence and reduces expenses by eliminating the need for third-party platforms, achieving approximately 62% savings. Users appreciate its capability to provide comprehensive protection and prevent costly data breaches. The product efficiently secures resources, minimizing personnel costs, and allows proactive attack detection, preventing potential financial losses. Many note its significant value, especially in handling various security challenges. Feedback indicates an eight out of ten rating for ROI.

Pricing

Enterprise users find Microsoft Defender Threat Intelligence pricing bundled within E5 licenses advantageous, though complex for SMEs favoring E3 licenses. Predominantly annual, pricing ranges from reasonable to expensive depending on acquisition method and existing Microsoft ecosystem involvement. Many see value in threat intelligence capabilities compared to other vendors, citing cost-effectiveness within Microsoft 365 subscriptions. Licensing complexity requires evaluation, as costs vary based on package and usage, with adaptable payment plans offering potential discounts for long-term commitments.

"On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing a six or seven out of ten."
"The product is a part of my Microsoft 365 subscription, so there is no additional cost. It is cost-effective."
"Microsoft's pricing structure involves annual fees."

Popular Use Cases

Organizations primarily use Microsoft Defender Threat Intelligence for cybersecurity measures, including endpoint and email protection, threat detection, and vulnerability management. It integrates with Azure Sentinel for threat intelligence feeds, enabling effective threat monitoring and response. It protects against malware, phishing, and various cyber threats through robust capabilities across enterprise environments. The tool is employed for cloud and identity protection, with widespread deployment in Office 365 environments to secure communications and data.

Service and Support

Many users find Microsoft Defender Threat Intelligence's customer service satisfactory, though some mention response delays. Direct contact can be difficult, yet the community platform is helpful. While level one support needs enhancement, level two support is knowledgeable. Premier partners report positive experiences. Technical support is rated highly by several users, though it varies. A comprehensive knowledge base aids technical concerns and updates happen monthly. Some users rely on integrators or local vendors for additional support.

Deployment

Setting up Microsoft Defender Threat Intelligence varies in complexity, depending on the user's technical skills and environment. Some find the process straightforward and quick, while others note challenges, emphasizing the need for technical expertise. The setup involves structured deployment and licensing, especially in cloud environments. It often requires planning and testing, notably in large organizations, to avoid disruptions. Technical support and vendor assistance are beneficial, especially for those new to Microsoft technologies.

Scalability

Microsoft Defender Threat Intelligence demonstrates strong scalability, accommodating both small businesses and large enterprises. Users appreciate its flexibility, with many praising its seamless cloud-based management that alleviates infrastructure concerns. Despite varying user experiences, a significant number of users rate scalability highly. This adaptability is especially valued in organizations managing thousands of endpoints, making it a reliable choice for expanding operations. Some note increased costs with growth, but the capability to manage vast environments efficiently is frequently highlighted.

Stability

Microsoft Defender Threat Intelligence exhibits high reliability. Users frequently assign ratings between eight and ten, highlighting its steady performance. While some mention occasional outages, particularly in specific regions, the platform generally maintains robust stability. Patching occurs twice a month, contributing to its dependability. Users appreciate its cloud-based nature, noting minimal disruptions. Investing in resilience ensures consistent functionality, making it a reliable choice, though there is potential for minor refinements.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Microsoft Defender Threat Intelligence Buyer's Guide for additional reliable information.