We performed a comparison between Microsoft Defender XDR and Microsoft Purview Information Protection based on real PeerSpot user reviews.
Find out in this report how the two Microsoft Security Suite solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."Microsoft Defender XDR provides strong identity protection with comprehensive insights into risky user behavior and potential indicators of compromise."
"Among the most valuable features are the alert timeline, the alert story, which is pretty detailed. It gives us complete insight into what exactly happened on the endpoint. It doesn't just say, "Malware detected." It tells us what caused that malware to be detected and how it was detected. It gives us a complete timeline from beginning to end."
"I like the easy integration and advanced possibilities. We can implement it at customer sites in a few clicks, but we can also dive deep and drill down to extended features. There's a very good starting point to get into this product and all the features from Defender."
"Microsoft 365 Defender is simple to upgrade."
"The most valuable aspect is undoubtedly the exploration capability"
"The ability to hunt that IM data set or the identity data set at the same time is valuable. As incident response professionals, we are very used to EDRs and having device process registry telemetry, but a lot of times, we do not have that identity data right there with us, so we have to go search for it in some other silo. Being able to cross-correlate via both datasets at the same time is something that we can only do in Def"
"The most valuable feature of the solution stems from the fact that Microsoft Defender XDR is easy to integrate with other Microsoft platforms or products."
"There is also one dashboard that shows us the status of many controls at once and the details I can get... It gives a great overview of many areas, such as files, emails, chats, and links. Even with the apps, it gives you a great overview. In one place you can see where you should look into things more deeply..."
"The UI is user-friendly, and I have observed that it improves further each year."
"We can restrict access or specify who can see sensitivity labels, which can be based on the classification level. We can encrypt restricted content and limit who can see that from an internal view, too, so Purview is a powerful tool."
"It ensures that sensitive data is automatically safeguarded, even for email attachments, regardless of the user or device."
"Incorporating data loss prevention capabilities built into the Microsoft platform to endpoints, such as Windows 10 and Windows 11 computers, can also help prevent data loss and is highly advantageous."
"Before using it, we had a lot of unlabeled data, and the tool helped us quickly and accurately label a large number of documents."
"Generally, antivirus products provide a central control to manage every device in terms of who is installing it or who is trying to disable it, but Microsoft doesn't have such a control center for the antivirus product it provides."
"At times, when we have an incident email and we click on the link for that incident, it opens a pop-up, but there is nothing. It has happened a couple of times."
"The support from Microsoft could improve. There are times I have to wait for a response from a qualified specialist."
"The console is missing some features that would be helpful for a managed services provider, like device and user management."
"The abundance of sub-dashboards and sub-areas within the main dashboard can be confusing, even if it all technically makes sense."
"Since all of our databases are updated and located in the cloud, I would like additional support for this."
"There are other SIEM solutions that are easier to use, mainly based on the creation of rules, use cases, and groups."
"Microsoft frequently changes the names of its products, sometimes even renaming entire portals or features."
"Microsoft can improve the affordability of Purview Information Protection by offering it at a lower cost."
"There is potential for more integration in the use of AI."
"Our primary concern is third-party application visibility. Many people choose other DLP tools, as they can search the Office 365 suite and detect sensitive information across thousands of other apps. The product is weak compared to the competitors on the DLP front, but the classification is good; the tool needs a bit more maturation."
"Microsoft Purview Information Protection can improve in terms of scan concurrency and scan processing time."
"There is room for improvement with the policy tips feature."
More Microsoft Purview Information Protection Pricing and Cost Advice →
Microsoft Defender XDR is ranked 1st in Microsoft Security Suite with 80 reviews while Microsoft Purview Information Protection is ranked 21st in Microsoft Security Suite with 5 reviews. Microsoft Defender XDR is rated 8.4, while Microsoft Purview Information Protection is rated 7.8. The top reviewer of Microsoft Defender XDR writes "Includes four services and four products, which can help organizations a lot". On the other hand, the top reviewer of Microsoft Purview Information Protection writes "Provides protection across multiple environments, can classify data and represent it graphically, and has the option for customer-managed teams to encrypt and manage data". Microsoft Defender XDR is most compared with CrowdStrike Falcon, Microsoft Defender for Cloud, Microsoft Purview Compliance Manager, Wazuh and Cisco SecureX, whereas Microsoft Purview Information Protection is most compared with Microsoft Purview Data Governance, Varonis Platform, BigID, Informatica Axon and Securiti. See our Microsoft Defender XDR vs. Microsoft Purview Information Protection report.
See our list of best Microsoft Security Suite vendors.
We monitor all Microsoft Security Suite reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
