# Microsoft Sentinel vs Palo Alto Networks Cortex XSOAR Comparison | | Microsoft Sentinel | Palo Alto Networks Cortex XSOAR | |---|---|---| | **Star Rating** | 4.4 out of 5 | 4.6 out of 5 | | **Total Reviews** | 296 | 28 | | **Largest Market Segment** | Enterprise (41.4% of reviews) | Enterprise (50.0% of reviews) | | **Entry Level Price** | Pay As You Go | No pricing available | --- ## Top Pros & Cons ### Microsoft Sentinel Pros: - Real-time Monitoring (27 reviews) - Alerting (23 reviews) Cons: - Cloud Dependency (12 reviews) - Complex Configuration (12 reviews) ### Palo Alto Networks Cortex XSOAR Pros: - Incident Management (3 reviews) - User Interface (2 reviews) Cons: - Learning Curve (2 reviews) - Limited Customization (1 reviews) --- ## Ratings Comparison | Rating | Microsoft Sentinel | Palo Alto Networks Cortex XSOAR | |---|---|---| | **Meets Requirements** | 8.7 (229 reviews) | 8.9 (20 reviews) | | **Ease of Use** | 8.5 (235 reviews) | 8.7 (22 reviews) | | **Ease of Setup** | 8.3 (135 reviews) | 8.9 (19 reviews) | | **Ease of Admin** | 8.3 (125 reviews) | 8.9 (16 reviews) | | **Quality of Support** | 8.5 (223 reviews) | 8.5 (20 reviews) | | **Has the product been a good partner in doing business?** | 8.7 (120 reviews) | 8.9 (17 reviews) | | **Product Direction (% positive)** | 9.5 (224 reviews) | 8.9 (21 reviews) | --- ## Pricing ### Microsoft Sentinel #### Entry-Level Pricing Plan: Pay-As-You-Go Price: Pay As You Go Description: Effective Per GB Price - $2.46 Savings Over Pay as You Go: N/A Key Features: - Pay-As-You-Go [Browse all 11 editions](https://www.g2.com/products/microsoft-sentinel/pricing) #### Free Trial Yes ### Palo Alto Networks Cortex XSOAR #### Entry-Level Pricing No pricing available #### Free Trial No information available --- ## Features Comparison By Category ### Threat Intelligence | Product | Score | Reviews | |---|---|---| | **Microsoft Sentinel** | N/A | N/A | | **Palo Alto Networks Cortex XSOAR** | N/A | N/A | #### Orchestration | Feature | Microsoft Sentinel | Palo Alto Networks Cortex XSOAR | |---|---|---| | **Asset Management** | Not enough data | Not enough data | | **Security Workflow Automation** | Not enough data | Not enough data | | **Deployment** | Not enough data | Not enough data | | **Sandboxing** | Not enough data | Not enough data | #### Information | Feature | Microsoft Sentinel | Palo Alto Networks Cortex XSOAR | |---|---|---| | **Proactive Alerts** | Not enough data | Not enough data | | **Malware Detection** | Not enough data | Not enough data | | **Intelligence Reports** | Not enough data | Not enough data | #### Personalization | Feature | Microsoft Sentinel | Palo Alto Networks Cortex XSOAR | |---|---|---| | **Endpoint Intelligence** | Not enough data | Not enough data | | **Security Validation** | Not enough data | Not enough data | | **Dynamic/Code Analysis** | Not enough data | Not enough data | #### Generative AI | Feature | Microsoft Sentinel | Palo Alto Networks Cortex XSOAR | |---|---|---| | **AI Text Summarization** | Not enough data | Not enough data | | **Generate Attack Scenarios** | Not enough data | Not enough data | | **Generate Threat Detection Rules** | Not enough data | Not enough data | | **Generate Threat Summaries** | Not enough data | Not enough data | #### Agentic AI - Threat Intelligence | Feature | Microsoft Sentinel | Palo Alto Networks Cortex XSOAR | |---|---|---| | **Autonomous Task Execution** | Not enough data | Not enough data | | **Multi-step Planning** | Not enough data | Not enough data | | **Proactive Assistance** | Not enough data | Not enough data | | **Decision Making** | Not enough data | Not enough data | ### Incident Response | Product | Score | Reviews | |---|---|---| | **Microsoft Sentinel** | N/A | N/A | | **Palo Alto Networks Cortex XSOAR** | N/A | N/A | #### Response | Feature | Microsoft Sentinel | Palo Alto Networks Cortex XSOAR | |---|---|---| | **Resolution Automation** | Not enough data | Not enough data | | **Resolution Guidance** | Not enough data | Not enough data | | **System Isolation** | Not enough data | Not enough data | | **Threat Intelligence** | Not enough data | Not enough data | | **Incident Investigation** | Not enough data | Not enough data | #### Records | Feature | Microsoft Sentinel | Palo Alto Networks Cortex XSOAR | |---|---|---| | **Incident Logs** | Not enough data | Not enough data | | **Incident Reports** | Not enough data | Not enough data | #### Management | Feature | Microsoft Sentinel | Palo Alto Networks Cortex XSOAR | |---|---|---| | **Incident Alerts** | Not enough data | Not enough data | | **Incident Case Management** | Not enough data | Not enough data | | **Workflow Management** | Not enough data | Not enough data | #### Generative AI | Feature | Microsoft Sentinel | Palo Alto Networks Cortex XSOAR | |---|---|---| | **AI Text Generation** | Not enough data | Not enough data | | **AI Text Summarization** | Not enough data | Not enough data | ### Security Information and Event Management (SIEM) | Product | Score | Reviews | |---|---|---| | **Microsoft Sentinel** | 8.7/10 | 190 | | **Palo Alto Networks Cortex XSOAR** | N/A | N/A | #### Network Management | Feature | Microsoft Sentinel | Palo Alto Networks Cortex XSOAR | |---|---|---| | **Activity Monitoring** | 8.9 (172 reviews) | Not enough data | | **Asset Management** | 8.4 (161 reviews) | Not enough data | | **Log Management** | 8.8 (166 reviews) | Not enough data | #### Incident Management | Feature | Microsoft Sentinel | Palo Alto Networks Cortex XSOAR | |---|---|---| | **Event Management** | 8.8 (170 reviews) | Not enough data | | **Automated Response** | 8.7 (166 reviews) | Not enough data | | **Incident Reporting** | 8.9 (165 reviews) | Not enough data | #### Security Intelligence | Feature | Microsoft Sentinel | Palo Alto Networks Cortex XSOAR | |---|---|---| | **Threat Intelligence** | 8.7 (168 reviews) | Not enough data | | **Vulnerability Assessment** | 8.3 (160 reviews) | Not enough data | | **Advanced Analytics** | 8.5 (162 reviews) | Not enough data | | **Data Examination** | 8.5 (162 reviews) | Not enough data | #### Agentic AI - Security Information and Event Management (SIEM) | Feature | Microsoft Sentinel | Palo Alto Networks Cortex XSOAR | |---|---|---| | **Autonomous Task Execution** | Not enough data | Not enough data | | **Multi-step Planning** | Not enough data | Not enough data | | **Proactive Assistance** | Not enough data | Not enough data | | **Decision Making** | Not enough data | Not enough data | ### Security Orchestration, Automation, and Response (SOAR) | Product | Score | Reviews | |---|---|---| | **Microsoft Sentinel** | 8.5/10 | 116 | | **Palo Alto Networks Cortex XSOAR** | 8.8/10 | 13 | #### Automation | Feature | Microsoft Sentinel | Palo Alto Networks Cortex XSOAR | |---|---|---| | **Workflow Mapping** | 8.2 (95 reviews) | 8.3 (12 reviews) | | **Workflow Automation** | 8.4 (100 reviews) | 8.9 (12 reviews) | | **Automated Remediation** | 8.7 (98 reviews) | 9.0 (13 reviews) | | **Log Monitoring** | 8.8 (102 reviews) | 8.1 (13 reviews) | #### Orchestration | Feature | Microsoft Sentinel | Palo Alto Networks Cortex XSOAR | |---|---|---| | **Security Orchestration** | 8.9 (103 reviews) | 9.4 (13 reviews) | | **Data Collection** | 8.7 (103 reviews) | 8.7 (13 reviews) | | **Threat Intelligence** | 8.6 (99 reviews) | 8.6 (13 reviews) | | **Data Visualization** | 8.4 (97 reviews) | 9.0 (13 reviews) | #### Response | Feature | Microsoft Sentinel | Palo Alto Networks Cortex XSOAR | |---|---|---| | **Alerting** | 8.6 (103 reviews) | 9.2 (13 reviews) | | **Performance Baselin** | 8.1 (94 reviews) | 9.2 (13 reviews) | | **High Availability/Disaster Recovery** | 8.5 (92 reviews) | 8.6 (13 reviews) | --- ## Categories **Shared Categories (1):** [Security Orchestration, Automation, and Response (SOAR) Software](https://www.g2.com/categories/security-orchestration-automation-and-response-soar) **Unique to Microsoft Sentinel (2):** [Security Information and Event Management (SIEM) Software](https://www.g2.com/categories/security-information-and-event-management-siem), [Incident Response Software](https://www.g2.com/categories/incident-response) **Unique to Palo Alto Networks Cortex XSOAR (1):** [Threat Intelligence Software](https://www.g2.com/categories/threat-intelligence) --- ## Reviewer Demographics ### By Company Size | Segment | Microsoft Sentinel | Palo Alto Networks Cortex XSOAR | |---|---|---| | **Small-Business** | 27.5% | 17.9% | | **Mid-Market** | 31.1% | 32.1% | | **Enterprise** | 41.4% | 50.0% | ### By Industry #### Microsoft Sentinel - **Information Technology and Services:** 26.1% - **Computer & Network Security:** 15.4% - **Computer Software:** 8.5% - **Banking:** 4.0% - **Security and Investigations:** 3.7% - **Accounting:** 3.3% - **Consulting:** 2.6% - **Financial Services:** 2.6% - **Automotive:** 2.6% - **Education Management:** 1.8% - **Other:** 29.4% #### Palo Alto Networks Cortex XSOAR - **Computer & Network Security:** 39.3% - **Manufacturing:** 7.1% - **Information Technology and Services:** 7.1% - **Events Services:** 7.1% - **Consulting:** 3.6% - **Retail:** 3.6% - **Medical Devices:** 3.6% - **Logistics and Supply Chain:** 3.6% - **Insurance:** 3.6% - **Hospital & Health Care:** 3.6% - **Other:** 17.9% --- ## Alternatives ### Alternatives to Microsoft Sentinel - [Sumo Logic](https://www.g2.com/products/sumo-logic/reviews) — 4.3/5 stars (403 reviews) - [IBM QRadar SIEM](https://www.g2.com/products/ibm-ibm-qradar-siem/reviews) — 4.4/5 stars (337 reviews) - [Splunk Enterprise Security](https://www.g2.com/products/splunk-enterprise-security/reviews) — 4.3/5 stars (247 reviews) - [LogRhythm SIEM](https://www.g2.com/products/exabeam-logrhythm-siem/reviews) — 4.2/5 stars (152 reviews) - [LevelBlue USM Anywhere](https://www.g2.com/products/levelblue-usm-anywhere/reviews) — 4.4/5 stars (114 reviews) - [Rapid7 Next-Gen SIEM](https://www.g2.com/products/rapid7-next-gen-siem/reviews) — 4.4/5 stars (74 reviews) - [Google Security Operations](https://www.g2.com/products/google-security-operations/reviews) — 4.4/5 stars (57 reviews) - [Datadog](https://www.g2.com/products/datadog/reviews) — 4.4/5 stars (724 reviews) - [Graylog](https://www.g2.com/products/graylog/reviews) — 4.4/5 stars (120 reviews) - [KnowBe4 PhishER/PhishER Plus](https://www.g2.com/products/knowbe4-phisher-phisher-plus/reviews) — 4.5/5 stars (571 reviews) ### Alternatives to Palo Alto Networks Cortex XSOAR - [Tines](https://www.g2.com/products/tines/reviews) — 4.7/5 stars (401 reviews) - [Splunk SOAR (Security Orchestration, Automation and Response)](https://www.g2.com/products/splunk-soar-security-orchestration-automation-and-response/reviews) — 4.4/5 stars (40 reviews) - [Google Security Operations](https://www.g2.com/products/google-security-operations/reviews) — 4.4/5 stars (57 reviews) - [n8n](https://www.g2.com/products/n8n/reviews) — 4.7/5 stars (290 reviews) - [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) — 4.6/5 stars (440 reviews) - [Sumo Logic](https://www.g2.com/products/sumo-logic/reviews) — 4.3/5 stars (403 reviews) - [KnowBe4 PhishER/PhishER Plus](https://www.g2.com/products/knowbe4-phisher-phisher-plus/reviews) — 4.5/5 stars (571 reviews) - [Cloudflare Application Security and Performance](https://www.g2.com/products/cloudflare-application-security-and-performance/reviews) — 4.5/5 stars (618 reviews) - [Torq AI SOC Platform](https://www.g2.com/products/torq-ai-soc-platform/reviews) — 4.8/5 stars (150 reviews) - [Recorded Future](https://www.g2.com/products/recorded-future/reviews) — 4.6/5 stars (230 reviews) --- ## Top Discussions ### Microsoft Sentinel - Title: [What is Microsoft Sentinel used for?](https://www.g2.com/discussions/what-is-microsoft-sentinel-used-for) — 3 comments, 2 upvotes > **Top comment:** "Microsoft Sentinel, also known as Azure Sentinel, is a cloud-native security information and event management (SIEM) and security orchestration, automation,..." - Title: [If I had to have a question, I would ask if there were any plans to add linux support to this program.](https://www.g2.com/discussions/31827-if-i-had-to-have-a-question-i-would-ask-if-there-were-any-plans-to-add-linux-support-to-this-program) — 2 comments, 1 upvote > **Top comment:** "need to ask Microsoft, but since dot.net core can be installed in Linux, I believe the agent will work as it uses the .net platform. please experiment " - Title: [Why should I use Azure Sentinel?](https://www.g2.com/discussions/why-should-i-use-azure-sentinel) — 1 comment > **Top comment:** "easy" - Title: [Is sentinel a free service provided by Microsoft azure ?](https://www.g2.com/discussions/is-sentinel-a-free-service-provided-by-microsoft-azure) — 1 comment, 1 upvote > **Top comment:** "No" - Title: [How I able to install /integrated Azure Sentinel agents to collect data on IOT devices/ DLP/ Endpoint devices Computer / Laptops / Printers](https://www.g2.com/discussions/31797-how-i-able-to-install-integrated-azure-sentinel-agents-to-collect-data-on-iot-devices-dlp-endpoint-devices-computer-laptops-printers) — 1 comment, 1 upvote > **Top comment:** "So couple of point for IOT devices. You can leverage with IOT Hub in Azure. Most IOT devices uses C as their programming language you will probaly need to..." ### Palo Alto Networks Cortex XSOAR No discussions available for this product. --- **Source:** [G2.com](https://www.g2.com) | [Comparison Page](https://www.g2.com/compare/microsoft-sentinel-vs-palo-alto-networks-cortex-xsoar)