Dimension scores are derived from public data and fields; weighted into the composite. Reference only.
jon.glass appears, based on the crawled content, to be the personal cybersecurity blog “Half Full of Security Blog.” It covers topics such as Microsoft 365 Security, Microsoft Defender for Endpoint, CyberChef, malware/exploit analysis, and related areas. It is not a purchasable cybersecurity product, but rather a collection of technical articles and code examples for security practitioners.
In terms of security coverage, the content focuses on endpoint detection and response, incident response automation, threat hunting, and MDE Live Response. The articles demonstrate how to query alerts via the Microsoft Defender for Endpoint API, run Advanced Hunting, upload/delete files in the Live Response Library, and perform scripted containment actions on endpoints. Deployment is not something provided by the site itself; instead, the examples rely on Microsoft 365 Defender, Azure app registrations, device onboarding, MSAL, and Python requests to call cloud APIs. For management and alerting, the articles show practical examples of the alerts API returning severity, status, MITRE techniques, device details, and user information.
The site does not disclose any pricing, payment methods, or commercial service terms. The articles only mention that a 3-month free Defender for Endpoint license can be obtained. No compliance certifications are provided. Its integration value mainly lies in the Microsoft security ecosystem, including the securitycenter.windows.com API, Azure AD/Entra ID, MFA device code flow, application permissions, Live Response, and Advanced Query.
The main strength is that the content is highly practical, with reusable Python functions and API request structures that can help DFIR teams, SOC analysts, and MDE administrators quickly understand automated response workflows. The drawbacks are also clear: the author’s About page is empty, leaving limited background information; the code is presented as examples rather than complete, fault-tolerant implementations; some samples disable certificate validation and should not be used directly in production; and there is no SLA, after-sales support, compliance statement, or systematic documentation.
It is best suited for security professionals who already have a Microsoft Defender for Endpoint environment and want to learn API-driven operations and incident response automation. It is not suitable for enterprise buyers looking for an out-of-the-box security product. The article provides no information about access from China, so the status is unknown. In addition, the Microsoft 365 Defender, Azure login, and API dependencies used in the articles may behave differently under Chinese network conditions or tenant environments. Alternative references include Microsoft Learn, official Microsoft Defender documentation, MSTIC Blog, and SANS ISC.
⚠ This review is compiled from public sources and does not constitute a purchase recommendation. Verify all facts on the vendor's official site. Verify on jon.glass official site.
jon.glass is an Unknown Security (Security Blog) provider. TG4G tracks its product information, an overall rating of 6.0/10, and a China-accessibility score of China direct-connect friendly. Click "Visit Official Site" to reach jon.glass directly.