Transparent reporting

Evaluate the performance of Microsoft Defender for Office 365

See how effectively Defender for Office 365 protects against email threats compared to other email security solutions. We believe in transparently sharing data about our performance so you can make informed security decisions.

Performance dashboard

Performance dashboard
Benchmark data
Get started

Performance dashboard

Track how well Microsoft Defender for Office 365 mitigates email security threats

Microsoft Defender for Office 365 now includes a transparent reporting dashboard that gives security teams real-time visibility into how email security threats are being identified and addressed across your organization. Understand what threats were intercepted predelivery as well as those mitigated postdelivery, all from a centralized location.

Get started

Back to tabs

Benchmark data

Assess Defender’s performance—by the numbers

Discover how Defender for Office 365 and other email solutions protect against threats.

Understand the value added by ICES vendors

Benchmarking data shows that integrating additional ICES vendors with Microsoft Defender for Office 365 improves spam and malicious content filtering by 0.3% to 0.5%. The data also shows measurable improvements in filtering promotional emails, with an increase of 19% to 31%.

Learn how Microsoft Defender for Office 365 compares to SEG vendors

Defender for Office 365 misses fewer threats per 1000 users when baselined against Defender Office 365 compared to SEGs. We will provide quarterly updates of these benchmarking reports.

Read the blog

Back to tabs

Compare how ICES solutions add value to Defender for Office 365

This analysis shows that ICES vendors on average detect 0.3% more malicious messages on average compared with the 99.7% emails blocked by Defender for Office 365.

Abnormal

About 2.5% of Abnormal’s detections overlap with Defender’s. It adds 22.9% in promotional message detection, with modest gains for spam (0.37%) and malicious content (0.33%). But, it generates 2.1% non-malicious detections, primarily affecting legitimate messages.

Checkpoint Harmony

Around 0.5% of Checkpoint Harmony detections overlap with existing detections. It adds 0.88% in marketing and advertising message detection, with minimal increases for spam (0.02%) and malicious messages (0.06%). Non-malicious detections are low at 0.19%.

Cisco

Around 1.2% of Cisco detections overlap with existing detections. It adds 4.45% in marketing and bulk email detection, with small increases for spam (0.12%) and malicious messages (0.12%). Slightly reducing its net benefit are 0.58% non-malicious detections.

Darktrace

Around 12% of Darktrace detections overlap with existing detections. It adds 19.0% in promotional mail detection, with modest increases for spam (0.73%) and malicious messages (0.36%). It has a non-malicious detection rate of 9.7%.

KnowBe4 Defend

Around 0.2% of KnowBe4 Defend detections overlap with existing detections. It adds 28.2% in marketing and advertising message detection, with moderate increases for spam (0.66%) and malicious messages (0.37%). It has a non-malicious detection rate of 4.9%.

PhishTitan

Around 9.2% of PhishTitan detections overlap with existing detections. It adds 41.6% in marketing and bulk email detection, the highest in the group, with increases for spam (1.28%) and malicious messages (0.33%), and a non-malicious detection rate of 3.1%.

Tessian

Around 2.0% of Tessian detections overlap with Defender’s. It detects 10.0% more promotional mails, with small increases for spam (0.14%) and malicious messages (0.29%). Non-malicious detections are relatively low at 1.97%, but the gains remain limited.

TrendMicro

Around 5% of TrendMicro detections overlap with existing detections. It adds 31.4% in marketing and advertising message detection, with moderate increases for spam (0.77%) and malicious messages (0.55%). It has a non-malicious detection rate of 4.9%.

Compare the effectiveness of ICES solutions

Funnel chart showing detection overlaps and marginal uplift from ICES vendors.

Compare average missed threats

Bar chart comparing average missed threats per 1,000 users (Defender versus SEG vendors such as Proofpoint and Mimecast).

A women showing something on screen to a man

Get Started

We’re committed to clarity

Make data-driven decisions about your security. Defender delivers results backed by rigorous benchmarking—regularly reported for transparency.

Explore Microsoft Security