Microsoft Sentinel

Microsoft Sentinel

Microsoft Sentinel

70 Reviews and Ratings

Overview
Product	Rating	Most Used By	Product Summary	Starting Price
Microsoft Sentinel	Score 8.3 out of 10	N/A	Microsoft Sentinel (formerly Azure Sentinel) is designed as a birds-eye view across the enterprise. It is presented as a security information and event management (SIEM) solution for proactive threat detection, investigation, and response.	$2.46 per GB ingested

Pricing

Microsoft Sentinel

Editions & Modules

Azure Sentinel: $2.46
per GB ingested
100 GB per day: $123.00
per day
200 GB per day: $221.40
per day
300 GB per day: $319.80
per day
400 GB per day: $410.00
per day
500 GB per day: $492.00
per day
More than 500 GB per day: $492.00 + $98.40
per day/plus each additional 100 GB increment

Offerings

Pricing Offerings
Microsoft Sentinel
Free Trial
Yes
Free/Freemium Version
No
Premium Consulting/Integration Services
No

Entry-level Setup Fee

No setup fee

Additional Details

—

More Pricing Information

Community Pulse
	Microsoft Sentinel
Considered Both Products	Microsoft Sentinel EB Edward Broderick CISO Chose Microsoft Sentinel I use most of the Sims that are out there, but RSAs, old Sim Log, logic, elastic, a lot of them. Sumo, we checked out Sumo too. We're a Microsoft shop and live almost entirely on top of a Microsoft ecosystem. We are considering other Microsoft security products to integrate … Incentivized Helpful? Verified User Director Chose Microsoft Sentinel The SecureWorks product is a more mature product. We prefer the SecureWorks product over Microsoft Sentinel at this point. Incentivized Helpful? Verified User General Manager Chose Microsoft Sentinel As mentioned, the product was part of the purchase of several Microsoft Suites that we did earlier last year and with 200 licenses included, we can exclude those from the other SIEM and SOAR product, it just work well with the Microsoft's environment that we partially have Is … Incentivized Helpful? Yash Mudaliar Associate Lead Security Admin Chose Microsoft Sentinel Sentinel has a huge advantage of being the first cloud native SIEM which prevents a lot of deployment and technical overhead in comparison to the traditional SIEMs which requires a heavy software installation and even agent deployment in some scenarios. Not only this, Sentinel … Incentivized Helpful? Verified User Analyst Chose Microsoft Sentinel The key advantage of using Sentinel lies in Microsoft already being a renowned name in cloud services. Hence, the Collection of data at the cloud scale across all users, devices, applications, and infrastructure, both on-premises and especially in the MS Cloud, is super easy. … Incentivized Helpful? Verified User Consultant Chose Microsoft Sentinel ArcSight is an on-prem solution that has a different approach than Sentinel. In a basis this product is more complex to maintain and deploy. The query functionality in Sentinel is more powerful and easier to maintain. ArcSight has a much slower performance and an interface that … Incentivized Helpful? Namandeep Bhatia Co Founder & Chief Technology Officer Chose Microsoft Sentinel We checked, McAfee Enterprise Security Manager (ESM). In my opinion, Microsoft Sentinel is beter wit AI capacity and good community. Incentivized Helpful? Glenn H. Miller Chief Engineer Chose Microsoft Sentinel We don't need to maintain a third-party SaaS solution or spend any time integrating it since Microsoft Sentinel is the ideal option to give a single point of attack detection and alert monitoring. Incentivized Helpful? Verified User Analyst Chose Microsoft Sentinel Microsoft Sentinel really goes the extra mile when it comes to an SIEM that slowly improves toward a proper SOAR, this may be the best selling point of the entire solution. Highly scalable, cloud-based, and nearly perfect when dealing with Microsoft-based infrastructures, … Incentivized Helpful? Verified User Employee Chose Microsoft Sentinel No, this is the only one. Incentivized Helpful? Verified User Analyst Chose Microsoft Sentinel Most of those have been out in the industry for a longer time, so they have a lot more user friendliness to them. So I'd say it's in the mix. It's just not as high as it should be or I would expect it to be. Incentivized Helpful? Verified User Employee Chose Microsoft Sentinel Previous to Azure Sentinel, we were using the McAfee SIM and it just wasn't keeping up with the times and that was the choice of moving to Azure Sentinel. Incentivized Helpful? Verified User Engineer Chose Microsoft Sentinel We just stick with Sentinel because it works well with our Suite Office 65. Incentivized Helpful? Verified User Advisor Chose Microsoft Sentinel Elasticsearch, we did a demo about it. Also the CrowdStrike platform, we got a demo on it. How did they compare? I think Elasticsearch, for us, it's more hard to configure. Microsoft Sentinel is pretty straight to the point. We turn on stuff, it's plug-and-play. CrowdStrike, … Incentivized Helpful? Verified User Engineer Chose Microsoft Sentinel As the vast majority of our users have Windows machine and uses all 365 cloud features, we finally decided not to implement any 3rd party security solutions on desktops/laptops in order to keep our infrastructure simple. In this case, Microsoft Sentinel is the best way to … Incentivized Helpful?
Top Pros	Pro Ms products Pro False positives Pro Fast deployment
Top Cons	Minus Third party Minus Third party tools Minus Able to monitor

Features

Microsoft Sentinel

Security Information and Event Management (SIEM)

Comparison of Security Information and Event Management (SIEM) features of Product A and Product B
	Microsoft Sentinel 8.0 15 Ratings 3% above category average
Centralized event and log data collection	8.215 Ratings
Correlation	7.815 Ratings
Event and log normalization/management	8.015 Ratings
Deployment flexibility	8.614 Ratings
Integration with Identity and Access Management Tools	8.014 Ratings
Custom dashboards and workspaces	7.015 Ratings
Host and network-based intrusion detection	7.613 Ratings
Data integration/API management	8.214 Ratings
Behavioral analytics and baselining	8.013 Ratings
Rules-based and algorithmic detection thresholds	7.814 Ratings
Response orchestration and automation	8.414 Ratings
Reporting and compliance management	9.04 Ratings
Incident indexing/searching	7.615 Ratings

Best Alternatives
	Microsoft Sentinel
Small Businesses	AlienVault USM Score 8.0 out of 10
Medium-sized Companies	Splunk Enterprise Score 8.4 out of 10
Enterprises	Splunk Enterprise Score 8.4 out of 10
All Alternatives	View all alternatives

User Ratings
	Microsoft Sentinel
Likelihood to Recommend	8.3 (22 ratings)
Usability	7.3 (4 ratings)
Support Rating	8.0 (3 ratings)
Professional Services	5.0 (1 ratings)

User Testimonials
	Microsoft Sentinel
Likelihood to Recommend	Microsoft Well, it's definitely suited to log in monitor most of the normal security infrastructure and collect security telemetry. It also extends well to Microsoft's entire suite with regards to data collection for things like Office 365, Power BI, power apps, and the like. It is also pretty good at collecting information from homegrown applications, especially if you're building in Azure. Incentivized EB Edward Broderick CISO Read full review
Pros	Microsoft Sentinel is by far the most efficient tool in supporting the highest number of solutions and products when it comes to data connection (or ingestion) and that too in the least complex manner possible. Most of the data connectors in Sentinel are very easy to configure and deploy. Incident Management is undoubtedly one of the main USPs of Sentinel. With an easy-to-use UI, variety of utilities (adding tasks, manual triggering of playbooks, activity logs etc.) and provision of having an investigation map from the incident details page, Sentinel clearly stands out in this area. I personally love the feature of integrating 'Threat Intelligence' to Sentinel from a free and one of the most reliable sources, Microsoft itself. This not only saves time for an analyst in checking the reputation of an entity but also allows to take actions on the suspicious entities at earliest. Incentivized Yash Mudaliar Associate Lead Security Admin Read full review
Cons	Microsoft It takes some time to learn how to use and install it properly, and it does not connect effectively with external PaaS systems such as Salesforce CRM, Salesforce Commerce Cloud, and so on. Microsoft can simplify the display of the logs to make them easier to study, and the user interface occasionally delays, which can also be enhanced. Incentivized Glenn H. Miller Chief Engineer Read full review
Usability	Microsoft The Microsoft Azure Sentinel solution is very good and even better if you use Azure. It's easy to implement and learn how to use the tool with an intuitive and simple interface. New updates are happening to always bring new news and improve the experience and usability. The solution brings reliability as it is from a very reliable manufacturer. Incentivized Flavio Pereira Analista de sistemas Read full review
Support Rating	Microsoft Azure Sentinel is very easy to use and configure. If you are stuck somewhere, Microsoft support is excellent in assisting and solving your issue. Incentivized Verified User Anonymous Read full review
Alternatives Considered	Microsoft The key advantage of using Sentinel lies in Microsoft already being a renowned name in cloud services. Hence, the Collection of data at the cloud scale across all users, devices, applications, and infrastructure, both on-premises and especially in the MS Cloud, is super easy. Additionally, leveraging Threat Intel from Microsoft itself gives a sense of security, given their years of experience in the collection of intel. The AI and Machine learning features provided by MS is one of the finest. Incentivized Verified User Anonymous Read full review
Professional Services	Microsoft Did not use professional services Incentivized MB Michael Bobo IT Director Read full review
Return on Investment	Microsoft Less overhead on integration of cloud-native logging The KQL language is very helpful since it can be used for security and operational monitoring but as well for workbooks and dashboarding A large community developing solutions is very helpful for a quick adoption Incentivized Verified User Anonymous Read full review
ScreenShots	Microsoft Sentinel Screenshots