Link copied to clipboard

# Microsoft Sentinel vs Palo Alto Cortex XSIAM Comparison - What are their main differences?

Share
[
Export
](/compare/microsoft-sentinel/palo-alto-cortex-xsiam/export.csv)

Microsoft SentinelPalo Alto Cortex XSIAM[+ Add Product](#)

Pricing

**Microsoft Sentinel**
Free Trial

**Pay As You Go** · Pay-As-You-Go 

**Palo Alto Cortex XSIAM**
No pricing available

**Pricing Insights**
from reviews

Time to Implement

**Microsoft Sentinel**
3 months

Based on 7 responses

**Palo Alto Cortex XSIAM**
3 months

Based on 7 responses

Return on Investment

**Microsoft Sentinel**
17 months

Based on 5 responses

**Palo Alto Cortex XSIAM**
13 months4 months sooner

Based on 7 responses

Perceived Cost

**Microsoft Sentinel**
$$$$$

**Palo Alto Cortex XSIAM**
$$$$$

Average Discount

**Microsoft Sentinel**
11%

**Palo Alto Cortex XSIAM**
17%6% more

**Pros & Cons**
from reviews

**Microsoft Sentinel**
[
Real-time Monitoring (27)
](https://www.g2.com/products/microsoft-sentinel/reviews?filters%5Bsentiment_snippet%5D=2507314&qs=pros-and-cons#reviews)[
Alerting (23)
](https://www.g2.com/products/microsoft-sentinel/reviews?filters%5Bsentiment_snippet%5D=2507368&qs=pros-and-cons#reviews)[
Cloud Dependency (12)
](https://www.g2.com/products/microsoft-sentinel/reviews?filters%5Bsentiment_snippet%5D=2507289&qs=pros-and-cons#reviews)[
Complex Configuration (12)
](https://www.g2.com/products/microsoft-sentinel/reviews?filters%5Bsentiment_snippet%5D=2507275&qs=pros-and-cons#reviews)

**Palo Alto Cortex XSIAM**
[
Ease of Use (50)
](https://www.g2.com/products/palo-alto-cortex-xsiam/reviews?filters%5Bsentiment_snippet%5D=1992225&qs=pros-and-cons#reviews)[
Threat Detection (37)
](https://www.g2.com/products/palo-alto-cortex-xsiam/reviews?filters%5Bsentiment_snippet%5D=1992037&qs=pros-and-cons#reviews)[
Expensive (28)
](https://www.g2.com/products/palo-alto-cortex-xsiam/reviews?filters%5Bsentiment_snippet%5D=1992083&qs=pros-and-cons#reviews)[
Difficult Learning (17)
](https://www.g2.com/products/palo-alto-cortex-xsiam/reviews?filters%5Bsentiment_snippet%5D=1992182&qs=pros-and-cons#reviews)

Integrations

**Microsoft Sentinel**
[

 ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/large_detail/large_detail_8dedb235969bcb553f9e412b16e93d0a/check-point-email-security.png "Product Avatar Image")

Check Point Email Security

](https://www.g2.com/products/check-point-email-security/reviews)[

 ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/large_detail/large_detail_8b3109519c061f3739371275d691098a/cortex-xsoar.png "Product Avatar Image")

Cortex XSOAR

](https://www.g2.com/products/cortex-xsoar/reviews)[

 ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/large_detail/large_detail_a81eb5423dfbe8206840c59a50d1029c/eset-protect.png "Product Avatar Image")

ESET PROTECT

](https://www.g2.com/products/eset-protect/reviews)[

 ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/large_detail/large_detail_9f5cba7cc6d5f6cc378e063e63a669ea/fortianalyzer.jpeg "Product Avatar Image")

FortiAnalyzer

](https://www.g2.com/products/fortianalyzer/reviews)[
View all
](https://www.g2.com/products/microsoft-sentinel/integrations)

**Palo Alto Cortex XSIAM**
[

 ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/large_detail/large_detail_2ac0e7b10e1efb64107026cb2b241d53/azure-pipelines.jpg "Product Avatar Image")

Azure Pipelines

](https://www.g2.com/products/azure-pipelines/reviews)[

 ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/large_detail/large_detail_44f8df28f2c172cbc91e96a79c2c3f13/bitsight.png "Product Avatar Image")

Bitsight

](https://www.g2.com/products/bitsight/reviews)[

 ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/large_detail/large_detail_ce6083360b9d32949ccac4c8fd8f0b27/checkpoint.png "Product Avatar Image")

CheckPoint

](https://www.g2.com/products/checkpoint/reviews)[

 ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/large_detail/large_detail_5837e273a4c3cb67895b3aa9d2e5953b/forticlient.jpg "Product Avatar Image")

FortiClient

](https://www.g2.com/products/forticlient/reviews)[
View all
](https://www.g2.com/products/palo-alto-cortex-xsiam/integrations)

Screenshots

**Microsoft Sentinel**
 ![Microsoft Sentinel screenshot](https://images.g2crowd.com/cdn-cgi/image/width=600,height=600,fit=scale-down,format=auto,onerror=redirect,/https://images.g2crowd.com/uploads/attachment/file/1224559/Sentinel-1.png)

**Palo Alto Cortex XSIAM**
No screenshot available

**Ratings**
from reviews

Meets Requirements

**Microsoft Sentinel**

8.7

8.7231

**Palo Alto Cortex XSIAM**

8.9

8.985

Ease of Use

**Microsoft Sentinel**

8.5

8.5237

**Palo Alto Cortex XSIAM**

8.7

8.788

Ease of Setup

**Microsoft Sentinel**

8.3

8.3137

**Palo Alto Cortex XSIAM**

8.4

8.473

Ease of Admin

**Microsoft Sentinel**

8.3

8.3127

**Palo Alto Cortex XSIAM**

8.3

8.355

Quality of Support

**Microsoft Sentinel**

8.5

8.5225

**Palo Alto Cortex XSIAM**

8.5

8.583

Has the product been a good partner in doing business?

**Microsoft Sentinel**

8.7

8.7122

**Palo Alto Cortex XSIAM**

8.5

8.554

Product Direction (% positive)

**Microsoft Sentinel**

9.5

9.5226

**Palo Alto Cortex XSIAM**

9.4

9.477

**Features**
ratings from reviews

Security Information and Event Management (SIEM)

8.7

190

9.3

75

Cloud Security Monitoring and Analytics

Not enough data

8.4

25

User and Entity Behavior Analytics (UEBA)

Not enough data

9.0

20

Network Traffic Analysis (NTA)

Not enough data

8.8

21

Extended Detection and Response (XDR) Platforms

Not enough data

8.3

20

Security Orchestration, Automation, and Response (SOAR)

8.5

118

Not enough data

Incident Response

Not enough data

8.3

37

User Insights

**Reviewers' Company Size**

Small-Business(50 or fewer emp.)
27.3%

Mid-Market(51-1000 emp.)
31.3%

Enterprise(\> 1000 emp.)
41.5%

Small-Business(50 or fewer emp.)
27.3%

Mid-Market(51-1000 emp.)
31.3%

Enterprise(\> 1000 emp.)
41.5%

Small-Business(50 or fewer emp.)
28.0%

Mid-Market(51-1000 emp.)
34.6%

Enterprise(\> 1000 emp.)
37.4%

Small-Business(50 or fewer emp.)
28.0%

Mid-Market(51-1000 emp.)
34.6%

Enterprise(\> 1000 emp.)
37.4%

**Reviewers' Industry**

[![Microsoft Sentinel](https://images.g2crowd.com/uploads/product/hd_favicon/a8a99a96fda235658139f710592f8a53/microsoft-sentinel.svg "Microsoft Sentinel")](https://www.g2.com/products/microsoft-sentinel/reviews)
Microsoft Sentinel

Information Technology and Services
25.9%

Computer & Network Security
15.7%

Computer Software
8.4%

Banking
4.0%

Security and Investigations
3.6%

Other
42.3%

[![Palo Alto Cortex XSIAM](https://images.g2crowd.com/uploads/product/image/thumb_square/thumb_square_b3245a4abf360f613c3aef7a4214e5ba/palo-alto-cortex-xsiam.jpeg "Palo Alto Cortex XSIAM")](https://www.g2.com/products/palo-alto-cortex-xsiam/reviews)
Palo Alto Cortex XSIAM

Information Technology and Services
22.2%

Computer & Network Security
13.1%

Financial Services
8.1%

Banking
7.1%

Accounting
5.1%

Other
44.4%

Alternatives

**Microsoft Sentinel Alternatives**

 ![Sumo Logic](https://images.g2crowd.com/uploads/product/hd_favicon/1550622115/sumo-logic.svg "Sumo Logic")

[
Sumo Logic
](/products/sumo-logic/reviews)

 ![IBM QRadar SIEM](https://images.g2crowd.com/uploads/product/hd_favicon/7d76baae79036d41d25c4a6c46e5af43/ibm-ibm-qradar-siem.svg "IBM QRadar SIEM")

[
IBM QRadar SIEM
](/products/ibm-ibm-qradar-siem/reviews)

 ![Splunk Enterprise Security](https://images.g2crowd.com/uploads/product/hd_favicon/b92838221b8df42dd6b5bb09c9f8ff55/splunk-enterprise-security.svg "Splunk Enterprise Security")

[
Splunk
](/products/splunk-enterprise-security/reviews)

 ![LogRhythm SIEM](https://images.g2crowd.com/uploads/product/hd_favicon/2b5a539672981045aad925bbc9cc5aa0/exabeam-logrhythm-siem.svg "LogRhythm SIEM")

[
LogRhythm SIEM
](/products/exabeam-logrhythm-siem/reviews)

**Palo Alto Cortex XSIAM Alternatives**

 ![CrowdStrike Falcon Endpoint Protection Platform](https://images.g2crowd.com/uploads/product/image/thumb_square/thumb_square_56db399f44b6fabb7c667f09bc770579/crowdstrike-falcon-endpoint-protection-platform.png "CrowdStrike Falcon Endpoint Protection Platform")

[
CrowdStrike Falcon Endpoint...
](/products/crowdstrike-falcon-endpoint-protection-platform/reviews)

 ![Wiz](https://images.g2crowd.com/uploads/product/hd_favicon/991dbad301661dc9e1b78a7e252252b4/wiz-wiz.svg "Wiz")

[
Wiz
](/products/wiz-wiz/reviews)

 ![Splunk Enterprise](https://images.g2crowd.com/uploads/product/hd_favicon/b92838221b8df42dd6b5bb09c9f8ff55/splunk-enterprise.svg "Splunk Enterprise")

[
Splunk Enterprise
](/products/splunk-enterprise/reviews)

 ![Datadog](https://images.g2crowd.com/uploads/product/hd_favicon/1498834114/datadog.svg "Datadog")

[
Datadog
](/products/datadog/reviews)

## Microsoft Sentinel vs Palo Alto Cortex XSIAM

When assessing the two solutions, reviewers found Palo Alto Cortex XSIAM easier to use and set up. However, reviewers felt that administration of both products was equally easy, and preferred doing business with Microsoft Sentinel overall.

- Reviewers felt that Palo Alto Cortex XSIAM meets the needs of their business better than Microsoft Sentinel.
- When comparing quality of ongoing product support, Microsoft Sentinel and Palo Alto Cortex XSIAM provide similar levels of assistance.
- For feature updates and roadmaps, our reviewers preferred the direction of Microsoft Sentinel over Palo Alto Cortex XSIAM.