Blumira vs. Microsoft Sentinel

Blumira is great for a small IT team in a small to medium sized environment. It gives you unlimited logging (no limit on the number of logs sent) and doesn't require advanced knowledge or expertise in SIEMs to get the system up and running.

Incentivized

We use it because when a user sees the suspicious activity on his account, Microsoft Sentinel gives alerts to the user's system and the admin system as well. When a user of one of our systems clicked a spam email, that email was trying to install a virus on our server, but Microsoft Sentinel gave an alert to the user and admin both, so that is why our team was able to fix that issue with Microsoft Sentinel very fast. However, it will not be the best option for you if your team is utilizing every feature but you are on a tight budget.

• The user interface (for managing, reporting) is intuitive and is easy to use
• The setup / onboarding process was very easy
• Support has been wonderful (and personal)

Incentivized

• I appreciate that it keeps the data within our, what we call our, authorization boundary. The fact that the data remains within Microsoft's, I guess, walled garden if you will, is very helpful for certain compliance needs in particular.
• The large library of ingestion: ability to ingest is basically as easy as I can basically get it to be most of the time. There's occasionally some vendors that it's a little bit more challenging for, but given the ease of integration for a lot of things, basically it's become one of my requirements when I am looking at other tools is how easily do they integrate with Sentinel.

Incentivized

• We've had a few suggestions for improving some of the built-in "workflows" -- steps that we are instructed to take by Blumira for specific "findings"
• There are a few improvements about reporting I'd like to see

Incentivized

• I think it should include more third party integration with non microsoft products as well as with other cloud providers. These integrations should be native.
• It should improve ML and AI capabilities.
• I find its documentation a little bit difficult to understand at the start. So the words should be simple.

Incentivized

The Microsoft Azure Sentinel solution is very good and even better if you use Azure. It's easy to implement and learn how to use the tool with an intuitive and simple interface. New updates are happening to always bring new news and improve the experience and usability. The solution brings reliability as it is from a very reliable manufacturer.

Incentivized

Azure Sentinel is very easy to use and configure. If you are stuck somewhere, Microsoft support is excellent in assisting and solving your issue.

Incentivized

Blumira is "right-sized" for my small organization. It is not a strain on our resources (people, system, or monetary). It gives us exactly what we needed

Incentivized

Well before there was Microsoft Sentinel, you had other competing products like ArcSight or Splunk, et cetera. I think they have their own qualities, but the Microsoft integration story is really why we're using it.

Incentivized

Did not use professional services

Incentivized

• Now when we have a security audit or need to completed a cybersecurity insurance application, we answer "Yes" to the "Do you have a SIEM?" question.
• It has provided awareness and visibility of events and situations on our system that we were completely blind to before.

Incentivized

• As any cybersecurity product, this has to be more with risk to avoid loss in case of a ransomware that more than relate to a productivity increase. Maybe the impact could be that instead of having people that are checking 24/7 the dashboard, you could implement Sentinel and have less people checking that or people with less expertise. So the saving will be a minor but will be a saving in the cost of your team.

Incentivized