Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Microsoft Defender Threat Intelligence by Microsoft View product | VirusTotal by VirusTotal View product |
|---|---|---|
| Overview | ||
| What it is | Microsoft Defender Threat Intelligence: threat intelligence and indicator research. Built for threat research. Compare Threat Intelligence alternatives. | See what VirusTotal offers: live YARA hunting. It is built for SOC alert triage enrichment, supports cloud deployment and competes with other Threat Intelligence tools. |
| Product type | Cyber Threat Intelligence Platform | Crowdsourced Threat Intelligence & Multi-Engine File Analysis |
| Best for | Cross-industry | Cybersecurity, SOC Teams, Incident Response, Threat Hunting, Financial Services |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: no | Free trial: yes |
| Deployment | ||
| Deployment options | Cloud | SaaSCloud |
| Deployment details | Cloud; Cloud | Cloud SaaS; API Service; Cloud SaaS; High-Throughput REST API |
| Data residency | Service dependent | United States; European Union; Google Cloud Infrastructure |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: yes |
| Single sign-on (SSO) | SSO: yes | SSO: yes |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: yes |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | WebAPIs where available | Suspicious ExecutablesDocumentsScriptsURLsDomainsIP Addresses |
| Compliance | Microsoft security/compliance portfolio | SOC 2 Type IIISO 27001GDPRGoogle Cloud Security Standards |
| Integrations & coverage | ||
| Integrations | Microsoft Defender portalMicrosoft Sentinelsecurity operations workflows | Google CloudSplunkMicrosoft SentinelMISPCortex XSOARREST APIs |
| Industries | Cross-industry | CybersecuritySOC TeamsIncident ResponseThreat HuntingFinancial Services |
| Regions | Global | Global |
| Vendor | ||
| Company | Microsoft | VirusTotal |
| Headquarters | Redmond, Washington, USA | Malaga, Spain |
| Company size | 200,000+ | 100,000+ (parent: Google) |
| Founded | 1975 | 2004 |
Overview
What it is
Microsoft Defender Threat Intelligence
Microsoft Defender Threat Intelligence: threat intelligence and indicator research. Built for threat research. Compare Threat Intelligence alternatives.VirusTotal
See what VirusTotal offers: live YARA hunting. It is built for SOC alert triage enrichment, supports cloud deployment and competes with other Threat Intelligence tools.Product type
Microsoft Defender Threat Intelligence
Cyber Threat Intelligence PlatformVirusTotal
Crowdsourced Threat Intelligence & Multi-Engine File AnalysisBest for
Microsoft Defender Threat Intelligence
Cross-industryVirusTotal
Cybersecurity, SOC Teams, Incident Response, Threat Hunting, Financial ServicesPricing
Pricing model
Microsoft Defender Threat Intelligence
Contact VendorVirusTotal
Contact VendorFree trial
Microsoft Defender Threat Intelligence
Free trial: noVirusTotal
Free trial: yesDeployment
Deployment options
Microsoft Defender Threat Intelligence
VirusTotal
Deployment details
Microsoft Defender Threat Intelligence
Cloud; CloudVirusTotal
Cloud SaaS; API Service; Cloud SaaS; High-Throughput REST APIData residency
Microsoft Defender Threat Intelligence
Service dependentVirusTotal
United States; European Union; Google Cloud InfrastructureKey features
What it offers
Microsoft Defender Threat Intelligence
- Threat intelligence
- Indicator research
- Infrastructure mapping
- Domain intelligence
- Investigation context
- Threat research
- Indicator enrichment
- Infrastructure investigation
VirusTotal
- Multi-scanning across 70+ antivirus engines
- Dynamic behavioral sandboxing
- VirusTotal Intelligence search
- Live YARA hunting (Livehunt)
- VirusTotal Graph visualization
- Automated multi-engine malware scanning
- Threat hunting with YARA rules
- Adversary infrastructure tracking
Platform & access
API access
Microsoft Defender Threat Intelligence
API access: yesVirusTotal
API access: yesSingle sign-on (SSO)
Microsoft Defender Threat Intelligence
SSO: yesVirusTotal
SSO: yesRole-based access (RBAC)
Microsoft Defender Threat Intelligence
RBAC: yesVirusTotal
RBAC: yesMulti-tenant
Microsoft Defender Threat Intelligence
Multi-tenant: yesVirusTotal
Multi-tenant: yesMobile app
Microsoft Defender Threat Intelligence
Mobile app: noVirusTotal
Mobile app: noSupported platforms
Microsoft Defender Threat Intelligence
VirusTotal
Compliance
Microsoft Defender Threat Intelligence
VirusTotal
Integrations & coverage
Integrations
Microsoft Defender Threat Intelligence
VirusTotal
Industries
Microsoft Defender Threat Intelligence
VirusTotal
Regions
Microsoft Defender Threat Intelligence
VirusTotal
Vendor
Company
Microsoft Defender Threat Intelligence
MicrosoftVirusTotal
VirusTotalHeadquarters
Microsoft Defender Threat Intelligence
Redmond, Washington, USAVirusTotal
Malaga, SpainCompany size
Microsoft Defender Threat Intelligence
200,000+VirusTotal
100,000+ (parent: Google)Founded
Microsoft Defender Threat Intelligence
1975VirusTotal
2004