Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | CrowdStrike Falcon Identity Protection by CrowdStrike View product | Microsoft Defender for Identity by Microsoft View product |
|---|---|---|
| Overview | ||
| What it is | CrowdStrike Falcon Identity Protection covers real-time ITDR defense and Pass-the-Hash mitigation for Active Directory hardening. Compare top Identity Security tools. | Microsoft Defender for Identity covers identity threat detection and lateral movement detection for identity threat detection. Compare top Identity Security tools. |
| Product type | Identity Threat Detection & Response (ITDR) Platform | Identity Threat Detection and Response |
| Best for | Banking, Healthcare, Government, Retail, Global Enterprise, Financial Services, Large Enterprise | Cross-industry |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | SaaSCloud | CloudHybridOn-Premise |
| Deployment details | Cloud SaaS / Active Directory Sensor; Cloud SaaS; Domain Controller Sensor | Cloud; Hybrid; Cloud service with on-premises sensors |
| Data residency | Global cloud infrastructure; US GovCloud | Tenant/service region dependent |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: yes |
| Single sign-on (SSO) | SSO: yes | SSO: yes |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: yes |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | Active Directory Domain ControllersEntra IDEnterprise Endpoints | Active DirectoryEntra-integrated environments |
| Compliance | PCI-DSS 4.0HIPAANIST SP 800-207SOC 2 Type IIISO 27001 | Microsoft security/compliance portfolio |
| Integrations & coverage | ||
| Integrations | Microsoft Active DirectoryMicrosoft Entra IDOktaPing IdentitySplunk | Microsoft Defender XDRMicrosoft EntraMicrosoft SentinelActive Directory |
| Industries | BankingHealthcareGovernmentRetailGlobal EnterpriseFinancial Services+1 more | Cross-industry |
| Regions | GlobalMulti-region cloud | Global |
| Vendor | ||
| Company | CrowdStrike | Microsoft |
| Headquarters | Austin, Texas, USA | Redmond, Washington, USA |
| Company size | 5,000+ | 200,000+ |
| Founded | 2011 | 1975 |
Overview
What it is
CrowdStrike Falcon Identity Protection
CrowdStrike Falcon Identity Protection covers real-time ITDR defense and Pass-the-Hash mitigation for Active Directory hardening. Compare top Identity Security tools.Microsoft Defender for Identity
Microsoft Defender for Identity covers identity threat detection and lateral movement detection for identity threat detection. Compare top Identity Security tools.Product type
CrowdStrike Falcon Identity Protection
Identity Threat Detection & Response (ITDR) PlatformMicrosoft Defender for Identity
Identity Threat Detection and ResponseBest for
CrowdStrike Falcon Identity Protection
Banking, Healthcare, Government, Retail, Global Enterprise, Financial Services, Large EnterpriseMicrosoft Defender for Identity
Cross-industryPricing
Pricing model
CrowdStrike Falcon Identity Protection
Contact VendorMicrosoft Defender for Identity
Contact VendorFree trial
CrowdStrike Falcon Identity Protection
Free trial: yesMicrosoft Defender for Identity
Free trial: yesDeployment
Deployment options
CrowdStrike Falcon Identity Protection
Microsoft Defender for Identity
Deployment details
CrowdStrike Falcon Identity Protection
Cloud SaaS / Active Directory Sensor; Cloud SaaS; Domain Controller SensorMicrosoft Defender for Identity
Cloud; Hybrid; Cloud service with on-premises sensorsData residency
CrowdStrike Falcon Identity Protection
Global cloud infrastructure; US GovCloudMicrosoft Defender for Identity
Tenant/service region dependentKey features
What it offers
CrowdStrike Falcon Identity Protection
- Real-time ITDR defense
- Conditional MFA step-up enforcement
- Active Directory hygiene auditing
- Pass-the-Hash mitigation
- Lateral movement blocking
- Ransomware lateral movement prevention
- Legacy protocol MFA enforcement
- Privileged identity defense
Microsoft Defender for Identity
- Identity threat detection
- Lateral movement detection
- Active Directory monitoring
- Identity investigation
- Attack path insights
- AD security
Platform & access
API access
CrowdStrike Falcon Identity Protection
API access: yesMicrosoft Defender for Identity
API access: yesSingle sign-on (SSO)
CrowdStrike Falcon Identity Protection
SSO: yesMicrosoft Defender for Identity
SSO: yesRole-based access (RBAC)
CrowdStrike Falcon Identity Protection
RBAC: yesMicrosoft Defender for Identity
RBAC: yesMulti-tenant
CrowdStrike Falcon Identity Protection
Multi-tenant: yesMicrosoft Defender for Identity
Multi-tenant: yesMobile app
CrowdStrike Falcon Identity Protection
Mobile app: noMicrosoft Defender for Identity
Mobile app: noSupported platforms
CrowdStrike Falcon Identity Protection
Microsoft Defender for Identity
Compliance
CrowdStrike Falcon Identity Protection
Microsoft Defender for Identity
Integrations & coverage
Integrations
CrowdStrike Falcon Identity Protection
Microsoft Defender for Identity
Industries
CrowdStrike Falcon Identity Protection
Microsoft Defender for Identity
Regions
CrowdStrike Falcon Identity Protection
Microsoft Defender for Identity
Vendor
Company
CrowdStrike Falcon Identity Protection
CrowdStrikeMicrosoft Defender for Identity
MicrosoftHeadquarters
CrowdStrike Falcon Identity Protection
Austin, Texas, USAMicrosoft Defender for Identity
Redmond, Washington, USACompany size
CrowdStrike Falcon Identity Protection
5,000+Microsoft Defender for Identity
200,000+Founded
CrowdStrike Falcon Identity Protection
2011Microsoft Defender for Identity
1975