Microsoft Corporation

Microsoft Defender XDR

Composite Score

7.0 /10

CX Score

7.0 /10

15 Reviews Write a Review

Claim Software

What is Microsoft Defender XDR?

Coordinate cyberthreat response across your entire digital estate and quickly stop cyberattacks with Microsoft Defender XDR (formerly Microsoft 365 Defender), a unified, AI-powered XDR solution. Accelerate security operations center (SOC) response with incident-level visibility and automatic cyberattack disruption with extended detection and response (XDR). Remediate cyberthreats efficiently with a complete view of the cyberattack chain informed by 65 trillion daily signals and prioritized investigation and response at the incident level.

Company Details

Need Assistance?

We're here to help you with understanding our reports and the data inside to help you make decisions.

Get Assistance

Microsoft Defender XDR Ratings

Real user data aggregated to summarize the product performance and customer experience.
Download the entire Product Scorecard to access more information on Microsoft Defender XDR.

Product scores listed below represent current data. This may be different from data contained in reports and awards, which express data as of their publication date.

82 Likeliness to Recommend

1
Since last award

92 Plan to Renew

75 Satisfaction of Cost Relative to Value

2
Since last award

{y}

{name}

Emotional Footprint Overview

Product scores listed below represent current data. This may be different from data contained in reports and awards, which express data as of their publication date.

+70 Net Emotional Footprint

The emotional sentiment held by end users of the software based on their experience with the vendor. Responses are captured on an eight-point scale.

How much do users love Microsoft Defender XDR?

6% Negative

15% Neutral

79% Positive

Pros

Continually Improving Product
Helps Innovate
Includes Product Enhancements
Efficient Service

Cons

Less Generous
Vendor's Interest First

Feature Ratings

Average 74

Real-Time Threat and Anomaly Detection

24/7/365 Security Monitoring

Risk Scoring & Remediation Act

Prevention

Use of the MITRE ATT&CK Framework

Incident Management

Threat Intelligence

Simplified Automation and Integration

IOC Focus and Management

One-click Remediation

Vulnerability Management

Vendor Capability Ratings

Average 73

Breadth of Features

Ease of IT Administration

Usability and Intuitiveness

Business Value Created

Quality of Features

Ease of Implementation

Product Strategy and Rate of Improvement

Vendor Support

Ease of Data Integration

Availability and Quality of Training

Ease of Customization

Microsoft Defender XDR Reviews

Role: Information Technology
Industry: Gaming and Hospitality
Involvement: End User of Application

Validated Review

Anonymous Reviewer

Submitted Dec 2023

The Future of Effective IT Security

Likeliness to Recommend

9 /10

Pros

Helps Innovate
Continually Improving Product
Reliable
Performance Enhancing

Muhammad Waseem A.

Role: Information Technology
Industry: Construction
Involvement: IT Development, Integration, and Administration

Validated Review

Verified Reviewer

Submitted Oct 2023

MS EDR, a good EDR sol for clients protection

Likeliness to Recommend

8 /10

What differentiates Microsoft Defender XDR from other similar products?

Microsoft XDR provides some good features in the product and integrating its features with OS makes it more powerful product. Its better and more appropriate to have a complete suite of Microsoft products to enjoy it's full benefits. Microsoft Intune along with Entra ID are recommended along with it so that remote clients are in complete comtrol of the technical team & centrally monitored for any problems and all of the threat landscape is montored & controlable with the same central team. COntroling the EDR features using Microsoft Intune and ENtra ID make it more powerful product and monitored centrally.

What is your favorite aspect of this product?

Microsoft XDR is evolving product providing many features but with integation of Microsoft Intune it has the real control.

What do you dislike most about this product?

Stability & consistency of features are the things that can be improved to make this product more powerful.

What recommendations would you give to someone considering this product?

If you are switching from another product, do it gradually & don't go for a bing bnag approach.

Pros

Helps Innovate
Continually Improving Product
Reliable
Performance Enhancing

Role: Information Technology
Industry: Banking
Involvement: IT Leader or Manager

Validated Review

Anonymous Reviewer

Submitted Oct 2023

Easy to use, still not mature

Likeliness to Recommend

8 /10

Pros

Helps Innovate
Reliable
Performance Enhancing
Enables Productivity

Microsoft Defender XDR

What is Microsoft Defender XDR?

Company Details

Need Assistance?

Microsoft Defender XDR Ratings

82 Likeliness to Recommend

1 Since last award

92 Plan to Renew

75 Satisfaction of Cost Relative to Value

2 Since last award

Emotional Footprint Overview

+70 Net Emotional Footprint

How much do users love Microsoft Defender XDR?

Pros

Cons

Feature Ratings Average rating of all product features, some of which may not be shown below

Real-Time Threat and Anomaly Detection Real-time or near real time threat detection of attacks and anomalous behavior.

24/7/365 Security Monitoring MDR provider should include a team of experienced security analysts monitoring the network 24/7 to identify abnormal activity and mitigate against threats.

Risk Scoring & Remediation Act Actionable risk mitigation suggestions for each vulnerability discovered.​

Prevention Offers capable next-gen AV (NGAV) and host protection.

Use of the MITRE ATT&CK Framework Threat modeling capabilities and allows for mapping use cases to established TTPs, in order to facilitate rapid incident response.

Incident Management Includes incident diagnosis, escalation, investigation, resolution and recovery, and closure.

Threat Intelligence Security threat intelligence feed integration with ability to update multiple uses and control updating behaviors.

Simplified Automation and Integration XDR simplifies automations and integrations, out of the box functionality without heavy lifting, SIEM+SOAR without the burden of cost and resources.

IOC Focus and Management Should include a wide variety of IOCs, but is more focused on behaviors and behavioral detection; IOCs are not as simple to manage.

One-click Remediation Cross-platform response with minimal interaction for remediation. Focus on speed, detect and turn into policy enforcement..

Vulnerability Management Discover and fix vulnerabilities in the system.

Vendor Capability Ratings Average rating of all vendor capabilities, some of which may not be shown below

Breadth of Features Users prefer feature rich software that enables them to perform diverse series of tasks. This data expresses user satisfaction with the product's breadth of features.

Ease of IT Administration This data indicates whether IT personnel will be able to resolve issues and perform configurations efficiently and effectively.

Usability and Intuitiveness End user learning curves cost the organization money. Pay attention to your end users' technical ability to determine how important UX is in your purchase.

Business Value Created Software needs to create value for employees, customers, partners, and, ultimately, shareholders. This data expresses user satisfaction - or lack thereof - with the product's business value.

Quality of Features Feature quality is just as important as quantity. Use this data to determine if this product will do what you're purchasing it to do, easily, intuitively, reliably, and effectively.

Ease of Implementation Successfully implementing new software is necessary to realize its full value and promote end user adoption. This data indicates whether or not the product is easy to implement.

Product Strategy and Rate of Improvement Vendors who don't stay on top of emerging needs and trends won't enable you to meet your business goals. Use this data to separate innovators from imposters.

Vendor Support The importance of vendor support will vary for each organization depending on internal capabilities, but there will always be issues that only the vendor can resolve.

Ease of Data Integration Use this data to determine whether the product will cause headaches or make data integration easy.

Availability and Quality of Training Effective and readily available training enables users to get the most out of the software you've chosen. Use this section to make sure your vendor's training programs and materials measure up.

Ease of Customization Don't get bogged down in a difficult customization; use this data to make sure you can easily achieve the functionality you need for your particular situation.

Microsoft Defender XDR Reviews

The Future of Effective IT Security

Likeliness to Recommend

Pros

Muhammad Waseem A.

MS EDR, a good EDR sol for clients protection

Likeliness to Recommend

Pros

Easy to use, still not mature

Likeliness to Recommend

Pros

Most Popular Microsoft Defender XDR Comparisons

Crowdstrike Falcon Platform

Trend Vision One

Cynet 360

eSentire

ReliaQuest GreyMatter

Palo Alto Cortex XDR

1
Since last award

2
Since last award

Feature Ratings

Real-Time Threat and Anomaly Detection

24/7/365 Security Monitoring

Risk Scoring & Remediation Act

Prevention

Use of the MITRE ATT&CK Framework

Incident Management

Threat Intelligence

Simplified Automation and Integration

IOC Focus and Management

One-click Remediation

Vulnerability Management

Vendor Capability Ratings

Breadth of Features

Ease of IT Administration

Usability and Intuitiveness

Business Value Created

Quality of Features

Ease of Implementation

Product Strategy and Rate of Improvement

Vendor Support

Ease of Data Integration

Availability and Quality of Training

Ease of Customization