Microsoft Defender for Endpoint (formerly Microsoft Defender ATP) is a holistic, cloud delivered endpoint security solution that includes risk-based vulnerability management and assessment, attack surface reduction, behavioral based and cloud-powered next generation protection, endpoint detection and response (EDR), automatic investigation and remediation, managed hunting services, rich APIs, and unified security management.
$2.50
per user/per month
Webroot Antivirus + Internet Security Complete (SecureAnywhere)
Score 8.2 out of 10
N/A
Webroot Security Complete (formerly under the brand name SecureAnywhere) is a suite of antivirus, multi-endpoint security and Internet security solutions available for home offices, and possibly small businesses with limited security needs.
$30
per seat/per year
Pricing
Microsoft Defender for Endpoint
Webroot Antivirus + Internet Security Complete (SecureAnywhere)
Editions & Modules
Academic
$2.50
per user/per month
Standalone
$5.20
per user/per month
Webroot Business Endpoint Protection
$30
per seat/per year
Offerings
Pricing Offerings
Microsoft Defender for Endpoint
Webroot Antivirus + Internet Security Complete (SecureAnywhere)
For me personally, I can not really compare the two against each other, as they are both really good. For us as a business specializing in MS products, it is a logical choice to have followed.
We used to use Symantec's Endpoint Detection and Response Solution, and so that's actually what we replaced with Defender for Endpoint. So it's just lightyears ahead of that one. So personally, I've also used Webroot in the past for an antivirus solution and Kaspersky and …
As compared to some of the other products we have used in our organization over the years, Windows Defender has been a lot better at not using a lot of system resources when running on the clients. A lot of other commercial threat protection products on the market today, tend …
Webroot Antivirus + Internet Security Complete (SecureAnywhere)
Likelihood to Recommend
Microsoft
I would say, where it's well suited as certainly any device where you know that either you're potentially running a Kickstarter device as your own personal unit, but maybe you want to try to connect it to some resource like, "Hey, you know what? This is a small community device. Maybe I'll try connecting my email on the go." You're protected from that perspective with the vendor, even if it's something that might be a bit suspicious from a hardware perspective. There's also the case where any device that you know are running Defender for endpoint that you're good to go. You don't really have to worry about all the other solutions out there because Defender has recovered.
Webroot can be great if you have many employees using computers. Sensitive business information can be accessed by malicious threats online if your employees are not trained to avoid these problems. In this case, I think it's important to have software to protect you. If working with a smaller team (and not doing any sort of video production or other intensive software/applications) I can't see a need for anything like Webroot. Learning how to use the internet safely and protecting your file storage are things to be done on the cheap and with smarts.
It integrates perfectly with Azure Sentinel. I mean, that's great. We can have a single pane of class with other platforms, like Defender for Cloud, Defender for endpoints, and Defender for servers, which is awesome as well. The ease of deployment is because Microsoft made sure around a year ago that every single workstation with Microsoft Windows came with Defender for Endpoints embedded.
Webroot provides a very easy to use web interface with GSM. From a single dashboard we can control all of our endpoints that are currently using Webroot services. This is extremely helpful for central management for my engineers.
Webroot's new (2.0) plugin for Automate (formerly LabTech) provides us with integration into our RMM platform that allows for a large majority of the daily operational tasks to be completed without ever having to move to a different application and/or the web dashboard. The integration is key for engineers to make changes on the fly and quickly. They have done a good job with the 2.0 plugin after coming from the 1st iteration.
Webroot interface on the machines is a simple and easy UI to follow and understand. Seeing what the product is doing and how it is configured is very straightforward and doesn't require much hunting with the local interface on machines.
While it's a very good product for auditing, it has a very hard time to distinguish what is malicious and is an attack, what is not. Very rarely we get indication of a real malicious attack. We got lots of hours for off the shelf malware that it cleans up automatically. So basically we never get to look at it, which is a positive thing, but threats are detected by the third party endpoint, so it will not be enough by itself.
It would be nice if there was a notification when Webroot blocked something. Power users may need to legitimately edit things like their hosts file, but they dont know Webroot is preventing them from doing so. They could easily temporarily disable it to do what they need to do if they were aware. Same thing goes for files that get quarantined without notice, it leaves the user wondering why their legitimate file keeps disappearing.
While the web based console is nice and easy to use, it could use a little better reporting.
If an administrator disabled a feature (like the firewall, for example) then the Webroot GUI should not alert the end user about whenever they open it. The software should be aware it is being administratively controlled.
It's easy to renew with Webroot, their support is very attentive and highly available. However if you do choose to change products, they even provide means of removing the software from your endpoints via the admin portal which is very convenient.
The first time I tried to onboard my macOS endpoints to MDE I struggled for quite a bit. I had to reach out to Microsoft's MDE support team. The tech was very helpful in walking me through the steps during a screen share session
We have not had to use Webroot support much over the years. The one or two times we did we were referred to online documentation and in a somewhat condescending manner in one case and in another case, the support person did not demonstrate much knowledge of their product and referred us to the user community for support.
Tenable Security Center was a fantastic exposure detection tool but there was always a lag and servers would hang alot when being scanned causing resource traffic. Microsoft Defender for Endpoint on the other hand does not use up most resources soo there is usually noo lag during scanning and it also provide more detailed insights on the network. Also Microsoft Defender for Endpoint integration power has helped us up our security game by delivering a smooth secure network.
As previously mentioned, Webroot is struggling to compete. Specifically, it is struggling to show value when similar products are catching more and offer more complete packages for remediation as well. We have discontinued the use of Webroot in favor of offering more advanced protection tools by default to our contracted clients.
Ease of implementation across various devices is easy and efficient regardless of scale. Whether it is 5 devices or 500 the product continually proves its the best in its class.
Positive : Microsoft Defender for Endpoint offers sophisticated threat detection and response capabilities, putting it into use helps increase security. Reduced security incidents, data breaches, and related expenses may arise from this.
Positive : A more secure environment means less time and effort spent by IT and security teams on remediation and incident response.
False Positives: Like any security solution, false positives can occur, leading to unnecessary investigations and potential disruptions to business operations. This may require additional resources to manage.
It has had a mostly positive impact as we have not had any breaches.
The only negative impact has been when Webroot Antivirus + Internet Security Complete (SecureAnywhere) changed something on their end that caused one of our business applications to not be usable by end-users. That cost our business a fair amount as it took 4 days before it could be used again.
