Microsoft Defender Threat Intelligence Reviews

Name: Microsoft Defender Threat Intelligence
Brand: Microsoft
Rating: 4.2 (32 reviews)

Vendor: Microsoft

4.2 out of 5

32 reviews
93% willing to recommend

Start review

What is Microsoft Defender Threat Intelligence?

Microsoft Defender Threat Intelligence is a comprehensive security solution that provides organizations with real-time insights into the latest cyber threats. Leveraging advanced machine learning and artificial intelligence capabilities, it offers proactive threat detection and response, enabling businesses to stay one step ahead of attackers. With Microsoft Defender Threat Intelligence, organizations gain access to a vast array of threat intelligence data, including indicators of compromise (IOCs), security incidents, and emerging threats. This data is collected from a wide range of sources, such as Microsoft's global sensor network, industry partners, and security researchers, ensuring comprehensive coverage and accuracy. The solution's advanced analytics and machine learning algorithms analyze this threat intelligence data in real-time, identifying patterns, trends, and anomalies that may indicate a potential security breach. By continuously monitoring the network and endpoints, Microsoft Defender Threat Intelligence can quickly detect and respond to threats, minimizing the impact of attacks and reducing the time to remediation.

Get the Microsoft Defender Threat Intelligence Buyer's Guide and find out what your peers are saying about Microsoft Defender Threat Intelligence, CrowdStrike Falcon, Microsoft Intune and more!

Microsoft Defender Threat Intelligence is the #4 ranked solution in top Threat Intelligence Platforms, #10 ranked solution in top Advanced Threat Protection (ATP) solutions, and #15 ranked solution in top Microsoft Security Suite solutions. PeerSpot users give Microsoft Defender Threat Intelligence an average rating of 8.4 out of 10. Microsoft Defender Threat Intelligence is most commonly compared to CrowdStrike Falcon: Microsoft Defender Threat Intelligence vs CrowdStrike Falcon. Microsoft Defender Threat Intelligence is popular among the large enterprise segment, accounting for 61% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 16% of all views.

Buyer's Guide

Microsoft Defender Threat Intelligence

May 2025

Get the report

Helped 855,347 peers since 2012

Featured Microsoft Defender Threat Intelligence reviews

TapabrataSamanta

Lead Architect at Zones

Customization was not available before, but now there are many options. You can customize various features. However, there is still a long way to go regarding setting and seasons. Currently, the advanced features are perfect for Microsoft code. Defender and Second Agent Services are about integrating your team and security systems. You need to identify threats, zero-day attacks, and other issues before they occur. Your feeds and other tools can actively prevent security incidents. We have integration with Anomali and IBM. We use Microsoft, but on top of it, we have some additional pay. We use Microsoft 365 and cloud apps, and they are very strong. Overall, I rate the solution a seven to eight out of ten.

Read full review

ShaheenKapery

Solutions Architect at Altron

You can flag many instances together, and they form one logical entity. For example, if you want to split off a domain for a specific reason, you can do that easily. The flexibility to adjust and expand according to your needs is straightforward and efficient. You can add the device to the Azure platform to add a Microsoft product. The device is virtualized, so you don't pay for the hardware. You're getting a virtualized device in the cloud that works efficiently. We support two of the country's prominent banks and most retailers here. We have thousands of users and around 1,200,000 devices, so the numbers are substantial. I rate the scalability a ten out of ten.

Read full review

Renju Varghese

General Manager at a computer software company with 10,001+ employees

We have an available agent running on our PCs that sends us notifications. We have a team that looks through the console, identifies the threats, and determines what needs to be done. The solution enables us to be on top of any upcoming threats. The solution also helps us to be proactive before threats impact several users. Microsoft Defender Threat Intelligence is deployed on the cloud in our organization. I would recommend the solution to other users. They should evaluate other products before choosing Microsoft Defender Threat Intelligence. The solution is good, but there are better products than Microsoft Defender Threat Intelligence. I rate the solution between seven and eight out of ten for its accuracy and the timeline of the threat intelligence data provided by the solution. The main benefit of using the solution is that it works well with a lot of other Microsoft products we are using. Overall, I rate the solution a seven or eight out of ten.

Read full review

Microsoft Defender Threat Intelligence mindshare

Product category:

As of June 2025, the mindshare of Microsoft Defender Threat Intelligence in the Advanced Threat Protection (ATP) category stands at 1.6%, up from 1.2% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Advanced Threat Protection (ATP)

PeerResearch reports based on Microsoft Defender Threat Intelligence reviews

Type	Title	Date
Category	Advanced Threat Protection (ATP)	Jun 10, 2025	Download
Product	Reviews, tips, and advice from real users	Jun 10, 2025	Download
Comparison	Microsoft Defender Threat Intelligence vs Palo Alto Networks WildFire	Jun 10, 2025	Download
Comparison	Microsoft Defender Threat Intelligence vs Microsoft Defender for Office 365	Jun 10, 2025	Download
Comparison	Microsoft Defender Threat Intelligence vs Fortinet FortiSandbox	Jun 10, 2025	Download

Valuable Features

Microsoft Defender Threat Intelligence offers seamless integration with Microsoft products, ensuring data remains within user tenants. Its global threat intelligence and real-time detection provide proactive protection. Users appreciate its efficient scalability, user-friendly interface, and centralized management console. Features like sandboxing, vulnerability assessment, and comprehensive insights enhance security. Customizable spam and phishing protection, combined with automated threat detection, further solidify its value, especially for those utilizing Microsoft cloud services like Azure.

"Microsoft Defender Threat Intelligence helps to make sure that our systems are intact and not vulnerable."
"I would rate Microsoft Defender ATP as nine out of ten."
"One of the best features is that it provides a certain level of customization, allowing us to set our spam confidence levels."

Room for Improvement

Microsoft Defender Threat Intelligence requires improvements in pricing, integration with non-Microsoft tools, stability, and reducing false positives. Enhanced AI features, automated updates, better technical support, and improved documentation are needed. The interface and licensing changes cause confusion. Users suggest allowing more customization and efficient management of configurations. Frequent updates and improved cross-platform functionality are also necessary. The threat detection could be more accurate, and AI-driven reporting and dashboards would be valuable.

"From the telemetry data standpoint, I would prefer Defender data to be more open in future updates."
"Some of the customization features could be improved by providing a portion of it as open source."
"Some of the customization features could be improved by providing a portion of it as open source."

ROI

Microsoft Defender Threat Intelligence offers substantial ROI by consolidating security on a single platform, eliminating third-party expenses, and enhancing security intelligence. Users appreciate its ability to prevent data breaches and secure resources at lower costs, reducing the need for multiple analysts. Rated highly for addressing security issues, it saves companies potentially millions by preventing targeted attacks and provides sufficient protection even for home-based PCs. It eliminates the necessity for additional NC data protection software.

Pricing

Microsoft Defender Threat Intelligence is part of Microsoft's E5 licensing, making it accessible for many enterprises without additional costs. Users note the pricing as competitive, though it can appear complex and is affected by Microsoft's evolving licensing policies. Annual fees are common, with occasional upfront payment discounts. While some view it as expensive standalone, bundled options are more cost-effective. SMEs may find it challenging, yet the overall cost aligns with the extensive threat information provided.

"On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing a six or seven out of ten."
"The product is a part of my Microsoft 365 subscription, so there is no additional cost. It is cost-effective."
"Microsoft's pricing structure involves annual fees."

Popular Use Cases

Microsoft Defender Threat Intelligence is used across various organizations for enterprise and SMB scenarios. The primary use cases include monitoring endpoints, enhancing email security, providing cloud protection, and integrating with SOCs for threat detection and response. Users leverage it for monitoring, malware scanning, and blocking phishing emails. It supports vulnerability management, endpoint protection, and provides robust security insights. The focus is on safeguarding data, identities, and securing cloud-based applications efficiently.

Service and Support

Microsoft Defender Threat Intelligence customer service is seen as responsive and supportive by some, though others find response times slow. Many users commend the technical support team’s knowledge and accessibility through a comprehensive knowledge base. Some experience challenges in direct contact with Microsoft, preferring community platforms for issue resolution. While some describe it as excellent, others feel certain levels need improvement; partnerships with vendors often enhance the support experience, earning high satisfaction from some users.

Deployment

Several users found Microsoft Defender Threat Intelligence's initial setup straightforward and quick, while others noted its complexity and need for technical knowledge. The setup process often involves partner support and requires careful planning, especially in larger infrastructure environments. Deployment can range from days to months depending on the organization's size and existing configurations. Many users emphasized the necessity for skilled personnel to manage and configure the installation and highlighted the importance of integration with existing systems.

Scalability

Microsoft Defender Threat Intelligence excels in scalability, suitable for both small and large enterprises. Managed services eliminate infrastructure concerns, simplifying deployment and expansion. Users appreciate its cloud-managed architecture for automatic scaling. Cost increases with more users, but scalability remains flexible. Organizations with thousands of endpoints and users report high satisfaction. The ability to easily adjust and add devices enhances its appeal, effectively supporting diverse needs. Scalability is often rated eight or higher out of ten.

Stability

Microsoft Defender Threat Intelligence is described as highly stable, with several users giving it ratings of nine or ten out of ten. Despite occasional outages, particularly in certain regions, most users report excellent performance and reliability. Some note minor delays and acknowledge room for stability improvements. With investments in resilience and high availability due to its cloud nature, many users emphasize its effectiveness in maintaining stable operations, essential for security and phishing prevention.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Microsoft Defender Threat Intelligence Buyer's Guide for additional reliable information.