Surpassingly really good tool and a very interactive dashboard
We are hybrid company that allow folks to work from anywhere, as for the flexibility, the security portion is becoming more exposed, this …
Microsoft SentinelFormerly Azure Sentinel
Starting at $2.46 per GB ingested
View PricingOverview
What is Microsoft Sentinel?
Microsoft Sentinel (formerly Azure Sentinel) is designed as a birds-eye view across the enterprise. It is presented as a security information and event management (SIEM) solution for proactive threat detection, investigation, and response.
Recent Reviews
How Microsoft Sentinel Differs From Its Competitors
Awards
Products that are considered exceptional by their customers based on a variety of criteria win TrustRadius awards. Learn more about the types of TrustRadius awards to make the best purchase decision. More about TrustRadius Awards
Popular Features
- Centralized event and log data collection (14)8.686%
- Correlation (14)8.484%
- Event and log normalization/management (14)8.282%
- Custom dashboards and workspaces (14)7.474%
Reviewer Pros & Cons
- Sentinel is by far the most efficient tool in supporting the highest number of solutions and products when it comes to data connection (or ingestion) ...
- 'Notebook' has always been a very hard to use feature for me in Sentinel. From my experience, there have been a very selective use cases for this feat...
Associate Lead Security Admin
Atidan (Information Technology & Services, 201-500 employees)
Pricing
Azure Sentinel
$2.46
Cloud
per GB ingested
100 GB per day
$123.00
Cloud
per day
200 GB per day
$221.40
Cloud
per day
Entry-level set up fee?
- No setup fee
For the latest information on pricing, visithttps://www.microsoft.com/en…
Offerings
- Free Trial
- Free/Freemium Version
- Premium Consulting/Integration Services
Product Demos
Microsoft Sentinel: Monitoring health and integrity of analytics rules
YouTube
Features
Return to navigation
Product Details
- About
- Competitors
- Tech Details
- FAQs
What is Microsoft Sentinel?
Microsoft Sentinel is a security operations center (SOC) solution used to uncover sophisticated threats and respond with a security information and event management (SIEM) solution for proactive threat detection, investigation, and response. It eliminates security infrastructure setup and maintenance, and elastically scales to meet the user's security needs.
Helps users to protect the digital estate: Secures the digital estate with scalable, integrated coverage for a hybrid, multicloud, multiplatform business.
Microsoft intelligence to Empower SOC: Optimizes SecOps with advanced AI, security expertise, and threat intelligence.
Detection, investigation and Response: A unified set of tools to monitor, manage, and respond to incidents.
Cost of ownership: A cloud-native SaaS solution to reduce infrastructural costs.
Microsoft Sentinel Features
Security Information and Event Management (SIEM) Features
- Supported: Centralized event and log data collection
- Supported: Correlation
- Supported: Event and log normalization/management
- Supported: Deployment flexibility
- Supported: Integration with Identity and Access Management Tools
- Supported: Custom dashboards and workspaces
- Supported: Host and network-based intrusion detection
- Supported: Log retention
- Supported: Data integration/API management
- Supported: Behavioral analytics and baselining
- Supported: Rules-based and algorithmic detection thresholds
- Supported: Response orchestration and automation
- Supported: Incident indexing/searching
Microsoft Sentinel Screenshots
Microsoft Sentinel Videos
Playlist for Microsoft Sentinel videos
Microsoft Sentinel: Monitoring health and integrity of analytics rules
Microsoft Sentinel Competitors
Microsoft Sentinel Technical Details
| Deployment Types | Software as a Service (SaaS), Cloud, or Web-Based |
|---|---|
| Operating Systems | Unspecified |
| Mobile Application | No |
Frequently Asked Questions
Microsoft Sentinel (formerly Azure Sentinel) is designed as a birds-eye view across the enterprise. It is presented as a security information and event management (SIEM) solution for proactive threat detection, investigation, and response.
Splunk Enterprise Security (ES), IBM Security QRadar SIEM, and Securonix Next-Generation SIEM are common alternatives for Microsoft Sentinel.
Reviewers rate Deployment flexibility highest, with a score of 9.2.
The most common users of Microsoft Sentinel are from Enterprises (1,001+ employees).
Comparisons
Compare with
Reviews and Ratings
(67)Attribute Ratings
Reviews
(1-13 of 13)Companies can't remove reviews or game the system. Here's why
December 06, 2023
Surpassingly really good tool and a very interactive dashboard
As mentioned, the product was part of the purchase of several Microsoft Suites that we did earlier last year and with 200 licenses included, we can exclude those from the other SIEM and SOAR product, it just work well with the Microsoft's environment that we partially have
Is the tool better from the other tools ? it could be if the environment is singular
Is the tool better from the other tools ? it could be if the environment is singular
November 13, 2023
SIEM means Sentinel
Sentinel has a huge advantage of being the first cloud native SIEM which prevents a lot of deployment and technical overhead in comparison to the traditional SIEMs which requires a heavy software installation and even agent deployment in some scenarios. Not only this, Sentinel being a part of Microsoft security stack provides an upper hand of getting easily integrated with the other security products through a single click API integration.
October 24, 2023
Sentinel: Your one stop SIEM for cloud for Bird's Eyes by MS.
The key advantage of using Sentinel lies in Microsoft already being a renowned name in cloud services. Hence, the Collection of data at the cloud scale across all users, devices, applications, and infrastructure, both on-premises and especially in the MS Cloud, is super easy. Additionally, leveraging Threat Intel from Microsoft itself gives a sense of security, given their years of experience in the collection of intel. The AI and Machine learning features provided by MS is one of the finest.
October 23, 2023
Microsoft Sentinel, the scaleable cloud-native SIEM platform
ArcSight is an on-prem solution that has a different approach than Sentinel.
In a basis this product is more complex to maintain and deploy. The query functionality in Sentinel is more powerful and easier to maintain. ArcSight has a much slower performance and an interface that has a steep learning curve. Being an on-premises solution can sometimes be more cost efficient when looking at storage but also less scalable
In a basis this product is more complex to maintain and deploy. The query functionality in Sentinel is more powerful and easier to maintain. ArcSight has a much slower performance and an interface that has a steep learning curve. Being an on-premises solution can sometimes be more cost efficient when looking at storage but also less scalable
September 22, 2023
One stop solution for all security needs. Transforming Security with AI and Automation
We checked, McAfee Enterprise Security Manager (ESM).
In my opinion, Microsoft Sentinel is beter wit AI capacity and good community.
In my opinion, Microsoft Sentinel is beter wit AI capacity and good community.
September 20, 2023
Excellent cloud security solution with intelligent analytics and automation offered by Microsoft.
- KnowBe4 PhishER and Tines
We don't need to maintain a third-party SaaS solution or spend any time integrating it since Microsoft Sentinel is the ideal option to give a single point of attack detection and alert monitoring.
September 20, 2023
A big SIEM or a little SOAR?
Microsoft Sentinel really goes the extra mile when it comes to an SIEM that slowly improves toward a proper SOAR, this may be the best selling point of the entire solution. Highly scalable, cloud-based, and nearly perfect when dealing with Microsoft-based infrastructures, Microsoft Sentinel is one of the best SIEM solutions.
September 13, 2023
Microsoft Sentinel Review
No, this is the only one.
September 13, 2023
Microsoft Sentinel Review
Most of those have been out in the industry for a longer time, so they have a lot more user friendliness to them. So I'd say it's in the mix. It's just not as high as it should be or I would expect it to be.
September 12, 2023
Microsoft Sentinel
Previous to Azure Sentinel, we were using the McAfee SIM and it just wasn't keeping up with the times and that was the choice of moving to Azure Sentinel.
September 12, 2023
Microsoft Sentinel Review
We just stick with Sentinel because it works well with our Suite Office 65.
September 12, 2023
Microsoft Sentinel Review
Elasticsearch, we did a demo about it. Also the CrowdStrike platform, we got a demo on it. How did they compare? I think Elasticsearch, for us, it's more hard to configure. Microsoft Sentinel is pretty straight to the point. We turn on stuff, it's plug-and-play. CrowdStrike, I don't know much. Since it was only a demo.
- Splunk Enterprise Security (ES) and CrowdStrike Falcon
As the vast majority of our users have Windows machine and uses all 365 cloud features, we finally decided not to implement any 3rd party security solutions on desktops/laptops in order to keep our infrastructure simple. In this case, Microsoft Sentinel is the best way to provide a unique point of attack detection and alert monitoring. We do not need to keep 3rd party SaaS solution and spend any efforts for their integration.