Microsoft Sentinel Reviews
Microsoft Sentinel

Microsoft Sentinel Competitors and AlternativesFormerly Azure Sentinel

Most Commonly Comparedto Microsoft Sentinel

Best Microsoft Sentinel Alternatives for Small Businesses

LevelBlue USM Anywhere

Score 7.5 out of 10

The LevelBlue USM Anywhere XDR platform (replacing the former AlienVault USM) delivers threat detection, incident response, and compliance management.

Higher Rated Features

Customers are more satisfied with the features of Microsoft Sentinel than the LevelBlue USM Anywhere

Popular Integrations

There is not enough information to display integrations.

Best Microsoft Sentinel Alternatives for Medium-sized Companies

Sumo Logic

Score 9.3 out of 10

Sumo Logic is a log management offering from the San Francisco based company of the same name.

Higher Rated Features

Customers are more satisfied with the features of Microsoft Sentinel than the Sumo Logic

Popular Integrations

There is not enough information to display integrations.

InsightIDR

Score 8.9 out of 10

In addition to their incident response service, Rapid7 offers InsightIDR, a combined XDR and SIEM that provides user behavior and threat analytics.

Higher Rated Features

Customers are more satisfied with the features of Microsoft Sentinel than the InsightIDR

Popular Integrations

There is not enough information to display integrations.

Splunk Enterprise

Score 8.5 out of 10
Learn More

Splunk is software for searching, monitoring, and analyzing machine-generated big data, via a web-style interface. It captures, indexes and correlates real-time data in a searchable repository from which it can generate graphs, reports, alerts, dashboards and visualizations.

Higher Rated Features

  • Event and log normalization/management
  • Deployment flexibility
  • Data integration/API management

Popular Integrations

There is not enough information to display integrations.

Splunk Enterprise Security

Score 8.6 out of 10
Learn More

Splunk Enterprise Security is an analytics-driven SIEM that helps to combat threats with actionable intelligence and advanced analytics at scale.

Higher Rated Features

  • Security Information and Event Management (SIEM)
  • Behavioral analytics and baselining
  • Deployment flexibility

Popular Integrations

There is not enough information to display integrations.

Splunk Cloud Platform

Score 8.4 out of 10
Learn More

Splunk Cloud Platform is a data platform service thats help users search, analyze, visualize and act on data. The service can go live in as little as two days, and with an IT backend managed by Splunk experts.

Higher Rated Features

  • Security Information and Event Management (SIEM)
  • Event and log normalization/management
  • Host and network-based intrusion detection

Popular Integrations

There is not enough information to display integrations.

SolarWinds LEM is security information and event management (SIEM) software.

Higher Rated Features

  • Security Information and Event Management (SIEM)
  • Deployment flexibility
  • Custom dashboards and workspaces

Popular Integrations

There is not enough information to display integrations.

IBM Security QRadar SIEM

Score 8.7 out of 10

IBM Security QRadar is security information and event management (SIEM) Software.

Higher Rated Features

  • Security Information and Event Management (SIEM)
  • Host and network-based intrusion detection
  • Event and log normalization/management

Popular Integrations

There is not enough information to display integrations.

AlienVault OSSIM (discontinued)

Score 8.9 out of 10

AlienVault OSSIM was an open source Security Information and Event Management (SIEM). AlienVault was acquired by AT&T Cybersecurity, now LevelBlue, and OSSIM is no longer available for sale.

Higher Rated Features

  • Host and network-based intrusion detection
  • Integration with Identity and Access Management Tools
  • Custom dashboards and workspaces

Popular Integrations

There is not enough information to display integrations.

Trellix Enterprise Security Manager (formerly McAfee Enterprise Security Manager) is security information and event management (SIEM) software.

Higher Rated Features

  • Security Information and Event Management (SIEM)
  • Integration with Identity and Access Management Tools
  • Custom dashboards and workspaces

Popular Integrations

There is not enough information to display integrations.

LogRhythm NextGen SIEM Platform

Score 8.1 out of 10

The LogRhythm NextGen SIEM Platform, from LogRhythm in Boulder, Colorado, is security information and event management (SIEM) software which includes SOAR functionality via SmartResponse Automation Plugins (a RespondX feature), the DetectX security analytics module, and AnalytiX as a log management solution that centralizes log data, enriches it with contextual details and applies a consistent schema across all data types.

Higher Rated Features

  • Centralized event and log data collection
  • Event and log normalization/management
  • Correlation

Popular Integrations

There is not enough information to display integrations.

Best Microsoft Sentinel Alternatives for Enterprises

Sumo Logic

Score 9.3 out of 10

Sumo Logic is a log management offering from the San Francisco based company of the same name.

Higher Rated Features

Customers are more satisfied with the features of Microsoft Sentinel than the Sumo Logic

Popular Integrations

There is not enough information to display integrations.

InsightIDR

Score 8.9 out of 10

In addition to their incident response service, Rapid7 offers InsightIDR, a combined XDR and SIEM that provides user behavior and threat analytics.

Higher Rated Features

Customers are more satisfied with the features of Microsoft Sentinel than the InsightIDR

Popular Integrations

There is not enough information to display integrations.

Splunk Enterprise

Score 8.5 out of 10
Learn More

Splunk is software for searching, monitoring, and analyzing machine-generated big data, via a web-style interface. It captures, indexes and correlates real-time data in a searchable repository from which it can generate graphs, reports, alerts, dashboards and visualizations.

Higher Rated Features

  • Event and log normalization/management
  • Deployment flexibility
  • Data integration/API management

Popular Integrations

There is not enough information to display integrations.

Splunk Enterprise Security

Score 8.6 out of 10
Learn More

Splunk Enterprise Security is an analytics-driven SIEM that helps to combat threats with actionable intelligence and advanced analytics at scale.

Higher Rated Features

  • Security Information and Event Management (SIEM)
  • Behavioral analytics and baselining
  • Deployment flexibility

Popular Integrations

There is not enough information to display integrations.

Splunk Cloud Platform

Score 8.4 out of 10
Learn More

Splunk Cloud Platform is a data platform service thats help users search, analyze, visualize and act on data. The service can go live in as little as two days, and with an IT backend managed by Splunk experts.

Higher Rated Features

  • Security Information and Event Management (SIEM)
  • Event and log normalization/management
  • Host and network-based intrusion detection

Popular Integrations

There is not enough information to display integrations.

SolarWinds LEM is security information and event management (SIEM) software.

Higher Rated Features

  • Security Information and Event Management (SIEM)
  • Deployment flexibility
  • Custom dashboards and workspaces

Popular Integrations

There is not enough information to display integrations.

IBM Security QRadar SIEM

Score 8.7 out of 10

IBM Security QRadar is security information and event management (SIEM) Software.

Higher Rated Features

  • Security Information and Event Management (SIEM)
  • Host and network-based intrusion detection
  • Event and log normalization/management

Popular Integrations

There is not enough information to display integrations.

Trellix Enterprise Security Manager (formerly McAfee Enterprise Security Manager) is security information and event management (SIEM) software.

Higher Rated Features

  • Security Information and Event Management (SIEM)
  • Integration with Identity and Access Management Tools
  • Custom dashboards and workspaces

Popular Integrations

There is not enough information to display integrations.

LogRhythm NextGen SIEM Platform

Score 8.1 out of 10

The LogRhythm NextGen SIEM Platform, from LogRhythm in Boulder, Colorado, is security information and event management (SIEM) software which includes SOAR functionality via SmartResponse Automation Plugins (a RespondX feature), the DetectX security analytics module, and AnalytiX as a log management solution that centralizes log data, enriches it with contextual details and applies a consistent schema across all data types.

Higher Rated Features

  • Centralized event and log data collection
  • Event and log normalization/management
  • Correlation

Popular Integrations

There is not enough information to display integrations.

LevelBlue USM Anywhere

Score 7.5 out of 10

The LevelBlue USM Anywhere XDR platform (replacing the former AlienVault USM) delivers threat detection, incident response, and compliance management.

Higher Rated Features

Customers are more satisfied with the features of Microsoft Sentinel than the LevelBlue USM Anywhere

Popular Integrations

There is not enough information to display integrations.