# Microsoft Sentinel vs Palo Alto Networks Cortex XSOAR Comparison

---
## Frequently Asked Questions

### What is the difference between Microsoft Sentinel vs Palo Alto Networks Cortex...?

Palo Alto Networks Cortex... stands out for higher reviewer satisfaction on setup and administration, while Microsoft Sentinel is more widely adopted and praised for centralized monitoring and automation.

| [Microsoft Sentinel](https://www.g2.com/products/microsoft-sentinel/reviews) | [Palo Alto Networks Cortex...](https://www.g2.com/products/palo-alto-networks-cortex-xsoar/reviews) |
| --- | --- |
| 4.4/5 (298 reviews) | 4.6/5 (28 reviews) |
| Enterprise | Enterprise |
| 8.3 | 8.9 |
| 8.5 | 8.5 |
| Centralized monitoring and automation (27 mentions for real-time monitoring, 23 for alerting) | Incident management and automation (3 mentions for incident management, 1 for automation) |



### How do the pricing models of Microsoft Sentinel and Palo Alto Networks Cortex... compare?

Palo Alto Networks Cortex... is rated higher for price satisfaction, indicating reviewers see it as the stronger value compared to Microsoft Sentinel.

- **Microsoft Sentinel:** In recent reviews, many cite unpredictable and escalating costs tied to data ingestion, with several noting that pricing can become a challenge as log volumes grow.
- **Palo Alto Networks Cortex...:** Reviewers acknowledge a higher price point but consistently describe the value as justified by advanced features and rapid support response.
- **Switching reasons:** Reviewers switching to Palo Alto Networks Cortex... highlight the need for more advanced automation and integration capabilities, even at a higher cost.



### What are the best alternatives to Microsoft Sentinel and Palo Alto Networks Cortex...?

The top three alternatives to Microsoft Sentinel and Palo Alto Networks Cortex... are Sumo Logic, IBM QRadar SIEM, and Tines.

| Product | G2 Rating (reviews) | Largest Segment | Pricing Insight | Top Reviewer-Cited Strength |
| --- | --- | --- | --- | --- |
| [Microsoft Sentinel](https://www.g2.com/products/microsoft-sentinel/reviews) | 4.4/5 (298 reviews) | Enterprise | Pricing can escalate with data ingestion | Centralized monitoring and automation |
| [Palo Alto Networks Cortex...](https://www.g2.com/products/palo-alto-networks-cortex-xsoar/reviews) | 4.6/5 (28 reviews) | Enterprise | Higher price justified by advanced features | Incident management and automation |
| [Sumo Logic](https://www.g2.com/products/sumo-logic/reviews) | 4.3/5 (404 reviews) | Mid-Market | — | Flexible log management and analytics |
| [IBM QRadar SIEM](https://www.g2.com/products/ibm-ibm-qradar-siem/reviews) | 4.4/5 (338 reviews) | Enterprise | — | Comprehensive threat detection |
| [Tines](https://www.g2.com/products/tines/reviews) | 4.7/5 (408 reviews) | Mid-Market | — | Automation and ease of use |



### Which Security Orchestration, Automation, and Response (SOAR) features should I prioritize when comparing Microsoft Sentinel and Palo Alto Networks Cortex...?

Buyers should prioritize automation, integration breadth, threat intelligence, ease of setup, and incident management when comparing Microsoft Sentinel and Palo Alto Networks Cortex....

- **Automation:** Microsoft Sentinel (14 all-time mentions for alerting system, 11 for setup ease); Palo Alto Networks Cortex... (1 all-time mention for automation, 3 for incident management).
- **Integration breadth:** Microsoft Sentinel (multiple reviewer mentions of integration with Azure, Defender, and third-party tools); Palo Alto Networks Cortex... (marketplace with 1,000+ integrations cited in reviews).
- **Threat intelligence:** Microsoft Sentinel (built-in threat intelligence, 12 all-time mentions for data analysis); Palo Alto Networks Cortex... (Unit 42 threat intelligence, direct dashboard integration cited in reviews).
- **Ease of setup:** Microsoft Sentinel (Ease of Setup score: 8.3); Palo Alto Networks Cortex... (Ease of Setup score: 8.9).
- **Incident management:** Microsoft Sentinel (centralized management, 11 all-time mentions); Palo Alto Networks Cortex... (incident management, 3 all-time mentions).



### What are the pros and cons of Microsoft Sentinel vs Palo Alto Networks Cortex...?

Microsoft Sentinel's headline strength is centralized monitoring and automation, while Palo Alto Networks Cortex... excels in incident management and automation breadth.

- **Microsoft Sentinel strengths:** Real-time monitoring (27 all-time mentions), alerting (23), dashboard usability (21), centralized management (11), automation rules and playbooks, strong integration with Microsoft ecosystem.
- **Microsoft Sentinel trade-offs:** Cloud dependency (12 all-time mentions), difficult setup (10), cost escalation with data ingestion, learning curve for KQL, integration challenges with non-Microsoft tools.
- **Palo Alto Networks Cortex... strengths:** Incident management (3 all-time mentions), automation (1), user interface (2), rapid customer support, marketplace with 1,000+ integrations, Unit 42 threat intelligence.
- **Palo Alto Networks Cortex... trade-offs:** Learning curve (2 all-time mentions), higher price, some complexity in configuration, reporting and dashboard customization could improve.



### Is Microsoft Sentinel or Palo Alto Networks Cortex... better for small businesses?

Neither Microsoft Sentinel nor Palo Alto Networks Cortex... is primarily focused on small businesses, as both are most widely adopted in the Enterprise segment.

- **Microsoft Sentinel:** Largest segment is Enterprise; reviewers note cost and complexity as barriers for smaller organizations.
- **Palo Alto Networks Cortex...:** Largest segment is Enterprise; reviewers highlight advanced features and integrations, but also mention higher price and complexity.



### Which Security Orchestration, Automation, and Response (SOAR) platform has better integrations?

Palo Alto Networks Cortex... is favored for integrations, with reviewers citing its marketplace of over 1,000 integrations and ease of adding new connections.

- **Microsoft Sentinel:** Reviewers mention integration with Azure, Defender, and third-party tools, with multiple recent mentions of broad integration capabilities.
- **Palo Alto Networks Cortex...:** Reviewers highlight the marketplace with 1,000+ integrations and direct dashboard integration with Unit 42 and MineMeld.



### How do Microsoft Sentinel and Palo Alto Networks Cortex... compare on customer support?

Microsoft Sentinel and Palo Alto Networks Cortex... are rated equally for Quality of Support, both scoring 8.5, indicating parity in reviewer satisfaction.

- **Microsoft Sentinel:** Reviewers describe support as generally responsive, with some noting slow or redirected responses in complex cases.
- **Palo Alto Networks Cortex...:** Reviewers consistently praise rapid support response, especially for critical issues, and describe knowledgeable support teams.



### Which is easier to implement, Microsoft Sentinel or Palo Alto Networks Cortex...?

Palo Alto Networks Cortex... scores higher on Ease of Setup (8.9 vs. 8.3), indicating reviewers find it easier to implement than Microsoft Sentinel.

- **Microsoft Sentinel:** Reviewers note straightforward setup for Microsoft environments but mention a learning curve and complexity for customizations and non-Microsoft integrations.
- **Palo Alto Networks Cortex...:** Reviewers highlight easy and scalable deployment, with both on-premises and cloud options, and praise the marketplace for simplifying integrations.



### Which product has better Threat Intelligence?

Palo Alto Networks Cortex... is favored for Threat Intelligence, with reviewers citing Unit 42 integration and advanced threat correlation.

- **Microsoft Sentinel:** Built-in threat intelligence and AI-powered analytics, with 12 all-time mentions for data analysis and multiple reviewer citations of threat detection capabilities.
- **Palo Alto Networks Cortex...:** Unit 42 threat intelligence, direct dashboard integration, and multiple reviewer mentions of advanced threat correlation and proactive detection.



| | Microsoft Sentinel | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Star Rating** | 4.4 out of 5 | 4.6 out of 5 | 
| **Total Reviews** | 298 | 28 | 
| **Largest Market Segment** | Enterprise (41.5% of reviews) | Enterprise (50.0% of reviews) | 
| **Entry Level Price** | Pay As You Go | No pricing available | 

---
## Top Pros & Cons

### Microsoft Sentinel

Pros:
- Security (76 reviews)
- Threat Detection (71 reviews)

Cons:
- Expensive (36 reviews)
- Integration Issues (32 reviews)

### Palo Alto Networks Cortex XSOAR

Pros:
- Incident Management (3 reviews)
- User Interface (2 reviews)

Cons:
- Learning Curve (2 reviews)
- Limited Customization (1 reviews)

---
## Ratings Comparison
| Rating | Microsoft Sentinel | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
  | **Meets Requirements** | 8.7 (231 reviews) | 8.9 (20 reviews) | 
  | **Ease of Use** | 8.5 (237 reviews) | 8.7 (22 reviews) | 
  | **Ease of Setup** | 8.3 (137 reviews) | 8.9 (19 reviews) | 
  | **Ease of Admin** | 8.3 (127 reviews) | 8.9 (16 reviews) | 
  | **Quality of Support** | 8.5 (225 reviews) | 8.5 (20 reviews) | 
  | **Has the product been a good partner in doing business?** | 8.7 (122 reviews) | 8.9 (17 reviews) | 
  | **Product Direction (% positive)** | 9.5 (226 reviews) | 8.9 (21 reviews) | 

---
## Pricing

### Microsoft Sentinel

#### Entry-Level Pricing

Plan: Pay-As-You-Go 

Price: Pay As You Go

Description: Effective Per GB Price - $2.46
Savings Over Pay as You Go: N/A

Key Features:
- Pay-As-You-Go

[Browse all 11 editions](https://www.g2.com/products/microsoft-sentinel/pricing)

#### Free Trial

Yes

### Palo Alto Networks Cortex XSOAR

#### Entry-Level Pricing

No pricing available

#### Free Trial

No information available

---
## Features Comparison By Category

### Threat Intelligence

| Product | Score | Reviews |
|---|---|---|
| **Microsoft Sentinel** | N/A | N/A |
| **Palo Alto Networks Cortex XSOAR** | N/A | N/A |

#### Orchestration

| Feature | Microsoft Sentinel | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Asset Management** | Not enough data | Not enough data | 
| **Security Workflow Automation** | Not enough data | Not enough data | 
| **Deployment** | Not enough data | Not enough data | 
| **Sandboxing** | Not enough data | Not enough data | 
| **Remediation Management** | Not enough data | Not enough data | 

#### Information

| Feature | Microsoft Sentinel | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Proactive Alerts** | Not enough data | Not enough data | 
| **Malware Detection** | Not enough data | Not enough data | 
| **Intelligence Reports** | Not enough data | Not enough data | 
| **Threat Intelligence** | Not enough data | Not enough data | 
| **Real-time Alerts** | Not enough data | Not enough data | 

#### Personalization

| Feature | Microsoft Sentinel | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Endpoint Intelligence** | Not enough data | Not enough data | 
| **Security Validation** | Not enough data | Not enough data | 
| **Dynamic/Code Analysis** | Not enough data | Not enough data | 
| **Event Analysis** | Not enough data | Not enough data | 
| **Web-Application Security** | Not enough data | Not enough data | 
| **Application Security** | Not enough data | Not enough data | 

#### Generative AI

| Feature | Microsoft Sentinel | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **AI Text Summarization** | Not enough data | Not enough data | 
| **Generate Attack Scenarios** | Not enough data | Not enough data | 
| **Generate Threat Detection Rules** | Not enough data | Not enough data | 
| **Generate Threat Summaries** | Not enough data | Not enough data | 
| **Generative AI** | Not enough data | Not enough data | 

#### Agentic AI - Threat Intelligence

| Feature | Microsoft Sentinel | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Autonomous Task Execution** | Not enough data | Not enough data | 
| **Multi-step Planning** | Not enough data | Not enough data | 
| **Proactive Assistance** | Not enough data | Not enough data | 
| **Decision Making** | Not enough data | Not enough data | 

#### Additional Functionality

| Feature | Microsoft Sentinel | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Real-Time Reporting** | Not enough data | Not enough data | 
| **Real-Time Analytics** | Not enough data | Not enough data | 
| **Network Monitoring** | Not enough data | Not enough data | 
| **API** | Not enough data | Not enough data | 
| **Reporting/Analytics** | Not enough data | Not enough data | 
| **Alerts/Notifications** | Not enough data | Not enough data | 
| **Behavior Analytics** | Not enough data | Not enough data | 
| **AI Copilot** | Not enough data | Not enough data | 
| **Activity Dashboard** | Not enough data | Not enough data | 
| **Profiling** | Not enough data | Not enough data | 
| **Cloud Backup** | Not enough data | Not enough data | 
| **Data Visualization** | Not enough data | Not enough data | 
| **Activity Monitoring** | Not enough data | Not enough data | 
| **Network Scanning** | Not enough data | Not enough data | 
| **Event Logs** | Not enough data | Not enough data | 
| **Monitoring** | Not enough data | Not enough data | 
| **Server Monitoring** | Not enough data | Not enough data | 
| **Vulnerability Scanning** | Not enough data | Not enough data | 
| **Incident Reporting** | Not enough data | Not enough data | 
| **Activity Tracking** | Not enough data | Not enough data | 
| **Reporting & Statistics** | Not enough data | Not enough data | 
| **Network Provisioning** | Not enough data | Not enough data | 
| **Prioritization** | Not enough data | Not enough data | 
| **Threat Response** | Not enough data | Not enough data | 
| **Real-Time Data** | Not enough data | Not enough data | 
| **IT Reporting** | Not enough data | Not enough data | 

### Incident Response

| Product | Score | Reviews |
|---|---|---|
| **Microsoft Sentinel** | N/A | N/A |
| **Palo Alto Networks Cortex XSOAR** | N/A | N/A |

#### Response

| Feature | Microsoft Sentinel | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Resolution Automation** | Not enough data | Not enough data | 
| **Resolution Guidance** | Not enough data | Not enough data | 
| **System Isolation** | Not enough data | Not enough data | 
| **Threat Intelligence** | Not enough data | Not enough data | 
| **Incident Investigation** | Not enough data | Not enough data | 

#### Records

| Feature | Microsoft Sentinel | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Incident Logs** | Not enough data | Not enough data | 
| **Incident Reports** | Not enough data | Not enough data | 

#### Management

| Feature | Microsoft Sentinel | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Incident Alerts** | Not enough data | Not enough data | 
| **Incident Case Management** | Not enough data | Not enough data | 
| **Workflow Management** | Not enough data | Not enough data | 

#### Generative AI

| Feature | Microsoft Sentinel | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **AI Text Generation** | Not enough data | Not enough data | 
| **AI Text Summarization** | Not enough data | Not enough data | 
| **Generative AI** | Not enough data | Not enough data | 

#### Additional Functionality

| Feature | Microsoft Sentinel | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **SSL Security** | Not enough data | Not enough data | 
| **HIPAA Compliant** | Not enough data | Not enough data | 
| **API** | Not enough data | Not enough data | 
| **Threat Response** | Not enough data | Not enough data | 
| **Endpoint Protection** | Not enough data | Not enough data | 
| **Maintenance Scheduling** | Not enough data | Not enough data | 
| **Third-Party Integrations** | Not enough data | Not enough data | 
| **Security Auditing** | Not enough data | Not enough data | 
| **Application Security** | Not enough data | Not enough data | 
| **Encryption** | Not enough data | Not enough data | 
| **Network Security** | Not enough data | Not enough data | 
| **Real-Time Reporting** | Not enough data | Not enough data | 
| **AI Copilot** | Not enough data | Not enough data | 
| **Reporting/Analytics** | Not enough data | Not enough data | 
| **Authentication** | Not enough data | Not enough data | 
| **Financial Data Protection** | Not enough data | Not enough data | 
| **Anti Virus** | Not enough data | Not enough data | 
| **Secure Data Storage** | Not enough data | Not enough data | 
| **Virus Definition Update** | Not enough data | Not enough data | 
| **Activity Dashboard** | Not enough data | Not enough data | 
| **VPN** | Not enough data | Not enough data | 
| **Audit Trail** | Not enough data | Not enough data | 
| **Anti Spam** | Not enough data | Not enough data | 
| **Access Controls/Permissions** | Not enough data | Not enough data | 
| **Data Visualization** | Not enough data | Not enough data | 
| **Alerts/Escalation** | Not enough data | Not enough data | 
| **Data Security** | Not enough data | Not enough data | 

### Security Information and Event Management (SIEM)

| Product | Score | Reviews |
|---|---|---|
| **Microsoft Sentinel** | 8.7/10 | 190 |
| **Palo Alto Networks Cortex XSOAR** | N/A | N/A |

#### Network Management

| Feature | Microsoft Sentinel | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Activity Monitoring** | 8.9 (172 reviews) | Not enough data | 
| **Asset Management** | 8.4 (161 reviews) | Not enough data | 
| **Log Management** | 8.8 (166 reviews) | Not enough data | 
| **Network Monitoring** | Not enough data | Not enough data | 
| **Server Monitoring** | Not enough data | Not enough data | 
| **File Integrity Monitoring** | Not enough data | Not enough data | 
| **Real-Time Monitoring** | Not enough data | Not enough data | 
| **User Management** | Not enough data | Not enough data | 
| **Endpoint Management** | Not enough data | Not enough data | 
| **Compliance Management** | Not enough data | Not enough data | 
| **Incident Management** | Not enough data | Not enough data | 
| **Vulnerability Management** | Not enough data | Not enough data | 
| **Policy Management** | Not enough data | Not enough data | 
| **Event Logs** | Not enough data | Not enough data | 

#### Incident Management

| Feature | Microsoft Sentinel | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Event Management** | 8.8 (170 reviews) | Not enough data | 
| **Automated Response** | 8.7 (166 reviews) | Not enough data | 
| **Incident Reporting** | 8.9 (165 reviews) | Not enough data | 
| **Real-Time Reporting** | Not enough data | Not enough data | 

#### Security Intelligence

| Feature | Microsoft Sentinel | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Threat Intelligence** | 8.7 (168 reviews) | Not enough data | 
| **Vulnerability Assessment** | 8.3 (160 reviews) | Not enough data | 
| **Behavioral Analytics** | 8.5 (162 reviews) | Not enough data | 
| **Data Examination** | 8.5 (162 reviews) | Not enough data | 
| **Real-Time Data** | Not enough data | Not enough data | 

#### Agentic AI - Security Information and Event Management (SIEM)

| Feature | Microsoft Sentinel | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Autonomous Task Execution** | Not enough data | Not enough data | 
| **Multi-step Planning** | Not enough data | Not enough data | 
| **Proactive Assistance** | Not enough data | Not enough data | 
| **Decision Making** | Not enough data | Not enough data | 

#### Additional Functionality

| Feature | Microsoft Sentinel | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Real-Time Notifications** | Not enough data | Not enough data | 
| **Audit Trail** | Not enough data | Not enough data | 
| **Application Security** | Not enough data | Not enough data | 
| **Risk Analysis** | Not enough data | Not enough data | 
| **AI Copilot** | Not enough data | Not enough data | 
| **Data Import/Export** | Not enough data | Not enough data | 
| **Alerts/Notifications** | Not enough data | Not enough data | 
| **Prioritization** | Not enough data | Not enough data | 
| **Security Auditing** | Not enough data | Not enough data | 
| **Search/Filter** | Not enough data | Not enough data | 
| **Compliance Tracking** | Not enough data | Not enough data | 
| **Generative AI** | Not enough data | Not enough data | 
| **API** | Not enough data | Not enough data | 
| **Third-Party Integrations** | Not enough data | Not enough data | 
| **Activity Dashboard** | Not enough data | Not enough data | 
| **Data Visualization** | Not enough data | Not enough data | 

### Security Orchestration, Automation, and Response (SOAR)

| Product | Score | Reviews |
|---|---|---|
| **Microsoft Sentinel** | 8.5/10 | 118 |
| **Palo Alto Networks Cortex XSOAR** | 8.8/10 | 13 |

#### Automation

| Feature | Microsoft Sentinel | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Workflow Mapping** | 8.2 (95 reviews) | 8.3 (12 reviews) | 
| **Workflow Automation** | 8.4 (101 reviews) | 8.9 (12 reviews) | 
| **Automated Remediation** | 8.7 (98 reviews) | 9.0 (13 reviews) | 
| **Log Monitoring** | 8.8 (102 reviews) | 8.1 (13 reviews) | 

#### Orchestration

| Feature | Microsoft Sentinel | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Security Orchestration** | 8.9 (105 reviews) | 9.4 (13 reviews) | 
| **Data Collection** | 8.7 (105 reviews) | 8.7 (13 reviews) | 
| **Threat Intelligence** | 8.6 (99 reviews) | 8.6 (13 reviews) | 
| **Data Visualization** | 8.4 (97 reviews) | 9.0 (13 reviews) | 

#### Response

| Feature | Microsoft Sentinel | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Alerting** | 8.6 (104 reviews) | 9.2 (13 reviews) | 
| **Performance Baselin** | 8.1 (94 reviews) | 9.2 (13 reviews) | 
| **High Availability/Disaster Recovery** | 8.5 (93 reviews) | 8.6 (13 reviews) | 

#### Additional Functionality

| Feature | Microsoft Sentinel | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Generative AI** | Not enough data | Not enough data | 
| **Collaboration Tools** | Not enough data | Not enough data | 
| **Incident Management** | Not enough data | Not enough data | 
| **AI Copilot** | Not enough data | Not enough data | 
| **Reporting/Analytics** | Not enough data | Not enough data | 
| **Threat Response** | Not enough data | Not enough data | 
| **Key Performance Indicators** | Not enough data | Not enough data | 
| **Risk Alerts** | Not enough data | Not enough data | 
| **Performance Metrics** | Not enough data | Not enough data | 
| **Third-Party Integrations** | Not enough data | Not enough data | 

---
## Categories
**Shared Categories (1):** [Security Orchestration, Automation, and Response (SOAR) Software](https://www.g2.com/categories/security-orchestration-automation-and-response-soar)

**Unique to Microsoft Sentinel (2):** [Security Information and Event Management (SIEM) Software](https://www.g2.com/categories/security-information-and-event-management-siem), [Incident Response Software](https://www.g2.com/categories/incident-response)

**Unique to Palo Alto Networks Cortex XSOAR (1):** [Threat Intelligence Software](https://www.g2.com/categories/threat-intelligence)


---
## Reviewer Demographics

### By Company Size

| Segment | Microsoft Sentinel | Palo Alto Networks Cortex XSOAR | 
|---|---|---|
| **Small-Business** | 27.3% | 17.9% | 
| **Mid-Market** | 31.3% | 32.1% | 
| **Enterprise** | 41.5% | 50.0% | 

### By Industry

#### Microsoft Sentinel

- **Information Technology and Services:** 25.9%
- **Computer & Network Security:** 15.7%
- **Computer Software:** 8.4%
- **Banking:** 4.0%
- **Security and Investigations:** 3.6%
- **Accounting:** 3.3%
- **Automotive:** 2.6%
- **Consulting:** 2.6%
- **Financial Services:** 2.6%
- **Construction:** 1.8%
- **Other:** 29.6%

#### Palo Alto Networks Cortex XSOAR

- **Computer & Network Security:** 39.3%
- **Manufacturing:** 7.1%
- **Information Technology and Services:** 7.1%
- **Events Services:** 7.1%
- **Consulting:** 3.6%
- **Retail:** 3.6%
- **Medical Devices:** 3.6%
- **Logistics and Supply Chain:** 3.6%
- **Insurance:** 3.6%
- **Hospital & Health Care:** 3.6%
- **Other:** 17.9%

---
## Alternatives

### Alternatives to Microsoft Sentinel

- [Sumo Logic](https://www.g2.com/products/sumo-logic/reviews) — 4.3/5 stars (417 reviews)
- [IBM QRadar SIEM](https://www.g2.com/products/ibm-ibm-qradar-siem/reviews) — 4.4/5 stars (339 reviews)
- [Splunk Enterprise Security](https://www.g2.com/products/splunk-enterprise-security/reviews) — 4.3/5 stars (248 reviews)
- [Google Security Operations](https://www.g2.com/products/google-security-operations/reviews) — 4.4/5 stars (161 reviews)
- [LogRhythm SIEM](https://www.g2.com/products/exabeam-logrhythm-siem/reviews) — 4.2/5 stars (152 reviews)
- [LevelBlue USM Anywhere](https://www.g2.com/products/levelblue-usm-anywhere/reviews) — 4.4/5 stars (114 reviews)
- [Rapid7 Next-Gen SIEM](https://www.g2.com/products/rapid7-next-gen-siem/reviews) — 4.4/5 stars (75 reviews)
- [Datadog](https://www.g2.com/products/datadog/reviews) — 4.4/5 stars (726 reviews)
- [KnowBe4 PhishER/PhishER Plus](https://www.g2.com/products/knowbe4-phisher-phisher-plus/reviews) — 4.5/5 stars (574 reviews)
- [Graylog](https://www.g2.com/products/graylog/reviews) — 4.4/5 stars (120 reviews)

### Alternatives to Palo Alto Networks Cortex XSOAR

- [Tines Stories](https://www.g2.com/products/tines-stories/reviews) — 4.7/5 stars (429 reviews)
- [Splunk SOAR (Security Orchestration, Automation and Response)](https://www.g2.com/products/splunk-soar-security-orchestration-automation-and-response/reviews) — 4.4/5 stars (40 reviews)
- [Google Security Operations](https://www.g2.com/products/google-security-operations/reviews) — 4.4/5 stars (161 reviews)
- [n8n](https://www.g2.com/products/n8n/reviews) — 4.7/5 stars (314 reviews)
- [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) — 4.7/5 stars (579 reviews)
- [Sumo Logic](https://www.g2.com/products/sumo-logic/reviews) — 4.3/5 stars (417 reviews)
- [KnowBe4 PhishER/PhishER Plus](https://www.g2.com/products/knowbe4-phisher-phisher-plus/reviews) — 4.5/5 stars (574 reviews)
- [Cloudflare Application Security and Performance](https://www.g2.com/products/cloudflare-application-security-and-performance/reviews) — 4.5/5 stars (775 reviews)
- [Ivanti Autonomous Endpoint Management](https://www.g2.com/products/ivanti-autonomous-endpoint-management/reviews) — 4.3/5 stars (408 reviews)
- [Torq AI SOC Platform](https://www.g2.com/products/torq-ai-soc-platform/reviews) — 4.8/5 stars (152 reviews)

---
## Top Discussions

### Microsoft Sentinel

- Title: [What is Microsoft Sentinel used for?](https://www.g2.com/discussions/what-is-microsoft-sentinel-used-for) — 3 comments, 2 upvotes
  > **Top comment:** "Microsoft Sentinel, also known as Azure Sentinel, is a cloud-native security information and event management (SIEM) and security orchestration, automation,..."
- Title: [If I had to have a question, I would ask if there were any plans to add linux support to this program.](https://www.g2.com/discussions/31827-if-i-had-to-have-a-question-i-would-ask-if-there-were-any-plans-to-add-linux-support-to-this-program) — 2 comments, 1 upvote
  > **Top comment:** "need to ask Microsoft, but  since dot.net core can be installed in Linux, I believe   the agent will work as it uses the  .net platform. please experiment "
- Title: [Why should I use Azure Sentinel?](https://www.g2.com/discussions/why-should-i-use-azure-sentinel) — 1 comment
  > **Top comment:** "easy"
- Title: [Is sentinel a free service provided by Microsoft azure ?](https://www.g2.com/discussions/is-sentinel-a-free-service-provided-by-microsoft-azure) — 1 comment, 1 upvote
  > **Top comment:** "No"
- Title: [How I  able to install /integrated Azure Sentinel agents to collect data on IOT devices/ DLP/ Endpoint devices Computer / Laptops / Printers](https://www.g2.com/discussions/31797-how-i-able-to-install-integrated-azure-sentinel-agents-to-collect-data-on-iot-devices-dlp-endpoint-devices-computer-laptops-printers) — 1 comment, 1 upvote
  > **Top comment:** "So couple of point for IOT devices. You can leverage with IOT Hub in Azure.  Most IOT devices uses C as their programming language you will probaly need to..."

### Palo Alto Networks Cortex XSOAR

No discussions available for this product.

---
**Source:** [G2.com](https://www.g2.com) | [Comparison Page](https://www.g2.com/compare/microsoft-sentinel-vs-palo-alto-networks-cortex-xsoar)