--- title: Microsoft Sentinel Reviews meta_title: 'Microsoft Sentinel Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 296 reviews by the users' company size, role or industry to find out how Microsoft Sentinel works for a business like yours. aggregate_rating: rating_value: 4.4 review_count: 296 scale: '5' date_modified: '2026-07-17' parent_category: name: System Security url: https://www.g2.com/categories/system-security --- # Microsoft Sentinel Reviews **Vendor:** Microsoft **Category:** [Security Orchestration, Automation, and Response (SOAR) Software](https://www.g2.com/categories/security-orchestration-automation-and-response-soar) **Average Rating:** 4.4/5.0 **Total Reviews:** 296 ## About Microsoft Sentinel Microsoft Sentinel lets you see and stop threats before they cause harm, with SIEM reinvented for a modern world. Microsoft Sentinel is your birds-eye view across the enterprise. Put the cloud and large-scale intelligence from decades of Microsoft security experience to work. Make your threat detection and response smarter and faster with artificial intelligence (AI). Eliminate security infrastructure setup and maintenance, and elastically scale to meet your security needs—while reducing IT costs. With Microsoft Sentinel, you can: - Collect data at cloud scale—across all users, devices, applications, and infrastructure, both on-premises and in multiple clouds - Detect previously uncovered threats and minimize false positives using analytics and unparalleled threat intelligence from Microsoft - Investigate threats with AI and hunt suspicious activities at scale, tapping into decades of cybersecurity work at Microsoft -Respond to incidents rapidly with built-in orchestration and automation of common tasks ## Microsoft Sentinel Pros & Cons **What users like:** - Users value the **real-time monitoring** of Microsoft Sentinel, enhancing their ability to quickly respond to security threats. (27 reviews) - Users value the **automated alert response** of Microsoft Sentinel, providing peace of mind with centralized security monitoring. (23 reviews) - Users value the **seamless dashboard usability** of Microsoft Sentinel, facilitating intuitive security management and comprehensive monitoring. (21 reviews) - Users value the **fast and secure threat response** of Microsoft Sentinel, enhancing overall security and risk management. (16 reviews) - Users benefit from the **seamless data management** of Microsoft Sentinel, enhancing workflow and ensuring comprehensive security analytics. (15 reviews) - Alerting System (14 reviews) - Monitoring (14 reviews) - Data Analysis (12 reviews) - Centralized Management (11 reviews) - Setup Ease (11 reviews) **What users dislike:** - Users express concerns about **cloud dependency** , particularly regarding connectivity issues with low-speed internet and commercial reliance. (12 reviews) - Users find the **complex configuration** of Microsoft Sentinel challenging, requiring advanced technical skills for effective setup and use. (12 reviews) - Users face **configuration issues** with Microsoft Sentinel, requiring technical expertise and time for effective setup. (11 reviews) - Users find the **difficult setup** of Microsoft Sentinel challenging without dedicated security experts and proper training. (10 reviews) - Users struggle with the **poor interface design** of Microsoft Sentinel, making navigation and understanding features difficult. (9 reviews) - False Positives (7 reviews) - UX Improvement (7 reviews) - Poor Customer Support (6 reviews) - Slow Performance (6 reviews) - Time-Consumption (6 reviews) ## Microsoft Sentinel Reviews ### 1. Excellent tool for network monitoring **Rating:** 4.5/5.0 stars **Reviewed by:** Rohit M. | Data Scientist III, Enterprise (> 1000 emp.) **Reviewed Date:** April 20, 2023 **What do you like best about Microsoft Sentinel?** Microsoft Sentinel is easy to integrate with other Microsoft products and third-party solutions. It has all the capabilities to detect, monitor and counter cyber threats in real-time. It also provides analytical support to organizations to prepare better for future problems. **What do you dislike about Microsoft Sentinel?** Now this software needs to include new features to compete with competitors. Microsoft sentinel team should also work on cost optimization and reduce costs slightly. **What problems is Microsoft Sentinel solving and how is that benefiting you?** Microsoft Sentinel is highly recommended for organizations as it is helping my company in security monitoring and on-time solution for cyber threats. It helps in protecting all digital assets. ### 2. Microsoft Sentinel is Best SIEM and SOAR cloud-native solution **Rating:** 4.5/5.0 stars **Reviewed by:** Pravin M. | Lead Software Engineer -Azure Devops, Enterprise (> 1000 emp.) **Reviewed Date:** January 06, 2023 **What do you like best about Microsoft Sentinel?** Microsoft Sentinel is the best tool for security information and event management (SIEM). Sentinel helps us to deliver intelligent security analytics and threat intelligence across the enterprise. It is a complete solution to defend against security attacks. It also enabled us to increase the project monitoring tasks with remarkable results. **What do you dislike about Microsoft Sentinel?** The user interface doesn't work correctly using a normal pixels monitor. Microsoft should work more deeply on pixels monitor. We have to get a big monitor to see all the details, which is not ideal. **What problems is Microsoft Sentinel solving and how is that benefiting you?** Sentinels enable us to collect all data by using azure data connections that are available out of the box and provide real-time integration. We use Azure Active Directory, Azure Activity, Azure Storage, Azure Key Vault, and Azure Kubernetes service. It greatly helps us collect in real-time the data of those services. ### 3. Is Sentinel the best SIEM for ChatGPT Cyber Attack ? **Rating:** 5.0/5.0 stars **Reviewed by:** Wael N. | Enterprise (> 1000 emp.) **Reviewed Date:** February 28, 2023 **What do you like best about Microsoft Sentinel?** Microsft Sentinel is the most cost-optimized SIEM with built-in SOAR capabilities that can auto-remediate well-defined incidents through playbooks created by Logic Apps. **What do you dislike about Microsoft Sentinel?** Microsoft Sentinel needs some enhancements when parsing the syslog and CEF formats. Native connectors are not provided for some specific vendors which could be challenging sometimes. **What problems is Microsoft Sentinel solving and how is that benefiting you?** Microsoft Sentinel was so helpful in reducing the amount of logs and alerts being sent from Azure, GCP and AWS to Splunk. Onboarding Splunk reduced the amount of logs being shipped to Sentinel. ### 4. Benefits of Microsoft sentinel **Rating:** 3.5/5.0 stars **Reviewed by:** Ayush S. | Associate Consultant, Small-Business (50 or fewer emp.) **Reviewed Date:** June 07, 2023 **What do you like best about Microsoft Sentinel?** Microsoft sentinel is very helpful in terms of threat intelligence and advanced analytics and machine learning this is the best thing I like about this service **What do you dislike about Microsoft Sentinel?** Their complexity of implementation especially for the organisation **What problems is Microsoft Sentinel solving and how is that benefiting you?** As I already told I like threat intelligence and advanced analytics and machine learning features this is beneficial for my organisation to be updated in terms of threat and advanced analytics ### 5. "Microsoft Sentinel is best push notifications service" **Rating:** 5.0/5.0 stars **Reviewed by:** sohelsalim s. | consultant, Mid-Market (51-1000 emp.) **Reviewed Date:** February 03, 2023 **What do you like best about Microsoft Sentinel?** Microsoft sentinel is a Microsoft product. It is used for user device and application security purposes. It automatically detects and investigates threats. It is easy to learn and use. It is highly scalable. **What do you dislike about Microsoft Sentinel?** Microsoft Sentinel does not provide such kind of support. Otherwise, it is the best analytics service. It is used for security purposes.SIEM tool is helpful for businesses. **What problems is Microsoft Sentinel solving and how is that benefiting you?** Microsoft azure sentinel is a product of microsoft cloud. Microsoft sentinel helps businesses with security orchestration automation and response (SOAR). Security information and event management help the security of your application. ### 6. Microsoft Sentinel SIEM **Rating:** 5.0/5.0 stars **Reviewed by:** Kingshuk S. | Senior Security Architect, Mid-Market (51-1000 emp.) **Reviewed Date:** May 07, 2023 **What do you like best about Microsoft Sentinel?** Microsoft Sentinel is an SIEM solution by Microsoft, and since every organization has many Microsoft products, it gives easy integration to M365, Azure AD and also Defender for the cloud **What do you dislike about Microsoft Sentinel?** Microsoft Sentinel still has to work on integration with many on-premise platform, but overall I don't have dislikes for the product. This is so easy to implement. **What problems is Microsoft Sentinel solving and how is that benefiting you?** Help in Security Incident and Event Management, provides monitoring logging and alerting capabilities. Helps in security compliance and regulatory compliance. This has increased security posture ### 7. Empowering Security with Microsoft Sentinel **Rating:** 3.5/5.0 stars **Reviewed by:** Sankalp R. | Analyst, Mid-Market (51-1000 emp.) **Reviewed Date:** April 08, 2023 **What do you like best about Microsoft Sentinel?** Since it is a cloud-based platform, it provides faster deployment and more effective scaling. Its automated threat response feature is a game changer. It can easily be integrated into third-party solutions. **What do you dislike about Microsoft Sentinel?** Since this is relatively a new technology, understanding the implementation and configuration of the tool is bit challenging for my team. It also provieds limited range of customisation. **What problems is Microsoft Sentinel solving and how is that benefiting you?** Automated Incident Response is beneficial, and since this is cloud-based solution, it also helps in cost reduction for implementing this technology. It also helps in predicting the threat as well as detecting the threat real time. ### 8. Meraki with sentinel **Rating:** 5.0/5.0 stars **Reviewed by:** Ian C. | Network Systems Engineer, Enterprise (> 1000 emp.) **Reviewed Date:** April 04, 2023 **What do you like best about Microsoft Sentinel?** microsoft sentinel along with meraki is a good thing. one area to look at the data instead on the firewall itself **What do you dislike about Microsoft Sentinel?** Microsoft sentinel can be difficult in the beginning, however it will get easier after using it a few things **What problems is Microsoft Sentinel solving and how is that benefiting you?** tells us what user(s) accounts are compromised, looks at where users are logging in from, etc ### 9. A Really Helpful Powerful Tool **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Small-Business (50 or fewer emp.) **Reviewed Date:** January 17, 2023 **What do you like best about Microsoft Sentinel?** One of the things that I like best about Microsoft Sentinel is its integration with other Microsoft Azure security tools. This allows for a more comprehensive security solution and the ability to correlate information from various sources to identify potential threats. **What do you dislike about Microsoft Sentinel?** Microsoft Sentinel is a cloud-based solution, which means that it requires a stable internet connection to work properly. This could be an issue for organizations with unreliable internet connections or those that operate in areas with limited internet access. **What problems is Microsoft Sentinel solving and how is that benefiting you?** What I like about Microsoft Sentinel is its real-time threat detection capabilities, which can help to quickly identify and respond to potential security incidents. The platform also provides automated incident response capabilities, which can help to streamline the process of responding to security threats. ### 10. Top class cloud native log management SIEM Product. **Rating:** 4.5/5.0 stars **Reviewed by:** Fawaz S. | Consultant cum Architect, Mid-Market (51-1000 emp.) **Reviewed Date:** January 04, 2023 **What do you like best about Microsoft Sentinel?** For the first time, Enterprises can protect all of their endpoints, network & network devices through a single, scaleable log management platform. Microsoft sentinel integrates out of the box with all major Microsoft technologies and most of the third-party security products out there. This cloud-native platform offers unmatched security and compliance with powerful SOAR capabilities. **What do you dislike about Microsoft Sentinel?** Would have been happy if better Microsoft Sentinel training and use cases had been made available by Microsoft. also, it seems the practice environment is not available. **What problems is Microsoft Sentinel solving and how is that benefiting you?** Cornerstone can efficiently automate Tier one SOC incidents with reduced upfront cost to the organization because Microsoft sentinel is able to integrate with other Microsoft security products by which the IT team can get a detailed view of the organization's security posture in real-time. ### 11. My review after using azure sentinel **Rating:** 4.5/5.0 stars **Reviewed by:** Ashish Pratap S. | Cloud Consultant, Mid-Market (51-1000 emp.) **Reviewed Date:** February 02, 2023 **What do you like best about Microsoft Sentinel?** The feature I most like is we can create different use cases in azure sentinel with the help of those cases we can take steps to prevent the threats. Azure sentinel can interact with different products such as firewalls, carbon black etc. Azure sentinel can perform automated responses for some common security issues. **What do you dislike about Microsoft Sentinel?** There is no reason to dislike Microsoft sentinel, but there are Some cons that I noticed in my experience. Microsoft has to provide a mobile application for investigation while we are on the move. **What problems is Microsoft Sentinel solving and how is that benefiting you?** It solves most of my problems as we can easily find the correct raw log of the system by running some queries, and we can get those logs on the console itself. ### 12. Good SIEM **Rating:** 4.5/5.0 stars **Reviewed by:** Lily C. | Senior Network Administrator, Entertainment, Mid-Market (51-1000 emp.) **Reviewed Date:** March 28, 2023 **What do you like best about Microsoft Sentinel?** Reviewing the incidents is eye opening. Giving us a way to threat hunt has been helpful too. **What do you dislike about Microsoft Sentinel?** The cost of the data connectors can be frustrating. **What problems is Microsoft Sentinel solving and how is that benefiting you?** Setting up automation and response has been very helpful. We don't need to be online to have something happen when a specific incident comes in. ### 13. Impressive customizable and scalable SIEM solution **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Construction | Enterprise (> 1000 emp.) **Reviewed Date:** March 13, 2023 **What do you like best about Microsoft Sentinel?** This solution provides attack detection, threat visibility, and response. It monitors all the IT infrastructure that includes applications, endpoints, multi-cloud, etc., and gives alerts whenever there is any threat or security breach. The solution helps you to also be a step ahead and proactive when it comes to any security compromisation. **What do you dislike about Microsoft Sentinel?** The solution covers most of the security aspects, and it's hard to find any drawbacks in it. **What problems is Microsoft Sentinel solving and how is that benefiting you?** Its continuous monitoring features which cover all the IT infrastructure devices like the cloud, servers, endpoints applications, etc. help us to keep the IT environment secure from threats. ### 14. Pros of Microsoft sentinel **Rating:** 4.5/5.0 stars **Reviewed by:** Aakash s. | Software Engineer Intern, Small-Business (50 or fewer emp.) **Reviewed Date:** June 07, 2023 **What do you like best about Microsoft Sentinel?** The most helpful in Microsoft sentinel is automated incident response and enhanced security operations which help me **What do you dislike about Microsoft Sentinel?** I dislike resources requirements in Microsoft sentinel **What problems is Microsoft Sentinel solving and how is that benefiting you?** This solving my security problems as this provides security enhanced operation and automate incident response is really helpful for my organisation to be one step forward ### 15. Leading global cloud cyber security solution **Rating:** 4.5/5.0 stars **Reviewed by:** Rachel B. | Tax Advisor, Mid-Market (51-1000 emp.) **Reviewed Date:** March 29, 2023 **What do you like best about Microsoft Sentinel?** This is the most powerful security data analytics delivery product I have experienced. It provides intelligence information that helps IT team to trace any challenge affecting performance. Microsoft Sentinel has orchestrated security alerts that stimulates quick actions before attacks. **What do you dislike about Microsoft Sentinel?** The security chiefguard has had competitive performance throughout. I am impressed by the security operations. **What problems is Microsoft Sentinel solving and how is that benefiting you?** The threat investigation system has blocked many malware attacks that could destroy data and lead to catastrophic losses. Quick response to network challenges has enhanced timely task and project implementation. ### 16. Microsoft Sentinel honest review **Rating:** 4.5/5.0 stars **Reviewed by:** Rohit S. | Software Developer, Small-Business (50 or fewer emp.) **Reviewed Date:** March 06, 2023 **What do you like best about Microsoft Sentinel?** Microosoft Sentinel helped my organization comply with industry and regulatory standards, such as GDPR and PCI DSS. **What do you dislike about Microsoft Sentinel?** One thing i disliked about microsoft sentinel is that the organizations that are heavily based on microsoft infrastructure are benefitted from using Sentinel, and for those organizations that use other cloud platforms or on-premises systems may find it less useful in a long run. **What problems is Microsoft Sentinel solving and how is that benefiting you?** Since Sentinel uses machine learning and artificial intelligence to automatically detect and respond to potential threats. This has helped me in reducing the time to identify and respond to security incidents. ### 17. Microsoft sentinel the ultimate SIEM tool **Rating:** 4.5/5.0 stars **Reviewed by:** Rachit S. | Mid-Market (51-1000 emp.) **Reviewed Date:** March 16, 2023 **What do you like best about Microsoft Sentinel?** It was very easy to setup and easily got integrated with windows server , network devices and Linux servers. **What do you dislike about Microsoft Sentinel?** Our environment has Windows 2008 R2 servers and they are going offline after every 8 hours and we had to configure them again and again and it caused us a lot of trouble. **What problems is Microsoft Sentinel solving and how is that benefiting you?** It is helping us to find out various exploits in our datacencenter and cloud environment like failed login and multiple failed attempts. It helps with threat analysis for our entire datacencenter and cloud environment. ### 18. Seamless threat detection application **Rating:** 4.5/5.0 stars **Reviewed by:** Daniel N. | Python Developer, Electrical/Electronic Manufacturing, Enterprise (> 1000 emp.) **Reviewed Date:** March 15, 2023 **What do you like best about Microsoft Sentinel?** The powerful product helps us to monitor the performance of the computing devices in the organization. The Microsoft analytics provides real-time insights on security situation across the enterprise. It unearths suspicious activities that may lead to ransomware invasion into the company systems. **What do you dislike about Microsoft Sentinel?** The overall performance has been good. It has helped us to stop many threats and I like how it performs. **What problems is Microsoft Sentinel solving and how is that benefiting you?** Microsoft Sentinel provides reliable threat automation responses that stops cyber attacks in advance. It provides efficient data analytics for investigating threats and suspicious activities. ### 19. Smart tool for orchestrating security operations **Rating:** 4.5/5.0 stars **Reviewed by:** Susan C. | Sales Executive, Enterprise (> 1000 emp.) **Reviewed Date:** March 17, 2023 **What do you like best about Microsoft Sentinel?** The powerful product delivers efficient security analytics that helps us in protecting data. It detects threats that can inject into business websites and affect operations. The faster response mechanism on threats have saved the organization from facing great risks. **What do you dislike about Microsoft Sentinel?** There is efficient and consistent threat repulsion infrastructure that is highly stable. **What problems is Microsoft Sentinel solving and how is that benefiting you?** It provides intelligence data that provides advanced analytics on security protocol. The great security tools have boosted the organization production capacity by giving employees full potential to focus on more productive activities. ### 20. Best SIEM tool in market interms of security events tracking **Rating:** 4.5/5.0 stars **Reviewed by:** Ravichandra K. | Cloud Security Engineer- Technology Lead, Enterprise (> 1000 emp.) **Reviewed Date:** June 07, 2023 **What do you like best about Microsoft Sentinel?** Large Volume of Data injection from large number of different sources and Notebooks utilization for threat hunting **What do you dislike about Microsoft Sentinel?** KQL learning much required, better arrange more learning in this aspect **What problems is Microsoft Sentinel solving and how is that benefiting you?** Correlation of data from different sources helping us to get rid of Security incidents ### 21. Real-time response to security threat **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Enterprise (> 1000 emp.) **Reviewed Date:** April 20, 2023 **What do you like best about Microsoft Sentinel?** Microsoft Sentinel offers advanced security analytics and threat intelligence. It allows security teams to detect and respond to threats in real-time, automate security workflows, and investigate incidents with rich contextual data. **What do you dislike about Microsoft Sentinel?** Not suitable for all organizations. Some organizations may find it too complex or require additional customisation to make it work for their environment. But no other major concerns. **What problems is Microsoft Sentinel solving and how is that benefiting you?** With the increasing complexity of security threats, we needed a solution that evolves and adapts. Microsoft Sentinel helps to address this issue by leveraging machine learning and AI to identify potential threats and anomalies in real-time, enabling security teams to respond quickly and effectively. ### 22. Microsoft Sentinel : Leader in SIEM Technology **Rating:** 5.0/5.0 stars **Reviewed by:** Manzar A. | Software Engineer, Enterprise (> 1000 emp.) **Reviewed Date:** March 29, 2022 **What do you like best about Microsoft Sentinel?** It is SIEM plus SOAR solution that is built over the Azure Platform. It requires significantly less Administration as it is SAAS based offering. I am sure that this will be a leading SIEM plus SOAR solution in the coming years as many organizations are already using the Azure offerings, which can be integrated with Microsoft Sentinel in less time. As I previously said, it will be a leader in SIEM technology, and this week it has been announced as the leader in the 2022 Gartner® Magic Quadrant™ for Security Information and Event Management. It is evolving day by day and community is also getting stronger with more experts comming in. **What do you dislike about Microsoft Sentinel?** Microsoft Azure Sentinel is new in the market and is not as mature as other SIEM or SOAR solutions. If we compare its SIEM and SOAR capabilities with IBM QRadar SIEM and Palo alto XSOAR, then it will not be able to match them. However, it is catching up with them fast. Another thing is cost - In the beginning, it might be expensive for a few organizations, but over a long period, the price will reduce. Also, I have experienced a delay in the log ingestion. The cost is not optimized correctly as different charges are involved, like charges for data ingestion and for using connectors in Logic Apps. **What problems is Microsoft Sentinel solving and how is that benefiting you?** It helps in proactive Threat Detection and Automated Response. Also, it has ML capabilities to detect anomalies. It provides OOB Hunting queries with all the Data Connectors, and also we can create custom hunting queries to hunt for threats proactively. Also, it provides OOB workbooks which help get quick information about many things involving security, administration, and risk. ### 23. Easy to use and cost-effective solution to manage the security operations. **Rating:** 4.0/5.0 stars **Reviewed by:** Varun S. | Mid-Market (51-1000 emp.) **Reviewed Date:** March 15, 2023 **What do you like best about Microsoft Sentinel?** 1- It provides a dashboard that allows to monitor, investigate and respond to security threats. 2-It helps to detect adavnce threat 3-It also helps to create custom workflow to automate repetative task like threat hunting 4-It integrate semalessly with other microsoft security solution. 5-Cost- effective **What do you dislike about Microsoft Sentinel?** 1- There is a limitation in integrating with third party security tool 2- Limited customization **What problems is Microsoft Sentinel solving and how is that benefiting you?** It solves the problem of threat detection and there is central dashboard for managing the threat. ### 24. Good software **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Accounting | Small-Business (50 or fewer emp.) **Reviewed Date:** September 20, 2023 **What do you like best about Microsoft Sentinel?** Best UI User friendly Agile and reliable **What do you dislike about Microsoft Sentinel?** Lags sometimes. Otherwise it is extremely good. **What problems is Microsoft Sentinel solving and how is that benefiting you?** Helps to automate security information workflows. ### 25. Microsoft Sentinel - My Honest Review **Rating:** 5.0/5.0 stars **Reviewed by:** Dhiraj B. | Associate Cloud Consultant, Information Technology and Services, Small-Business (50 or fewer emp.) **Reviewed Date:** July 18, 2022 **What do you like best about Microsoft Sentinel?** The best things I like about Microsoft Sentinel are:- 1. The data analysis is much easier. 2. User-friendly UI and its faster than other platforms. 3. We can connect any log sources with one click. 4. It provides Real-time alerts. 5. Helpful to detect advanced threats. **What do you dislike about Microsoft Sentinel?** 1. For start-up businesses, it can be expensive 2. No additional capacity to connect SIEMs. 3. Sometimes Normal Pixel monitor does not work properly so you need a big size monitor to see all the details which is not ideal for me. 4. Sometimes it's not User-friendly for new people which can be improved. 5. I think Support can be Improved as I was experienced low support from Microsoft **What problems is Microsoft Sentinel solving and how is that benefiting you?** 1. It provides the service single solution alert detection and also threat visiability. 2. It improves the performance of Business and it's also Saves a lot of time and effort. 3. It is the best service in the market of both SIEM and SOAR which secures environment in cloud. 4. It prevents and mitigates the attacks that happen to your apps. 5. It helps me in Threat detection. 6.It provides Threat Prevention, Automated Response, Alerting, etc. ### 26. Sentinel is best SIEM solution **Rating:** 4.5/5.0 stars **Reviewed by:** Rupesh B. | Technical Lead, Enterprise (> 1000 emp.) **Reviewed Date:** December 25, 2022 **What do you like best about Microsoft Sentinel?** Native integration with a complete Microsoft security ecosystem is just great. Provides multiple predefined connectors to integrate with other Microsoft services. This is a fantastic tool for reviewing the logs. It is easier to monitor data and incidents. **What do you dislike about Microsoft Sentinel?** UX is not good. Sometimes get confused about finding some navigations for new users. Sometimes their customer service takes a lot of time to resolve, which should be fixed. **What problems is Microsoft Sentinel solving and how is that benefiting you?** It makes it easier to manage and monitor all security logs and vulnerable actions with various flaws and alerts in a single place. Secure implementation of database and server ### 27. Effective and Scalable Security Setup **Rating:** 3.5/5.0 stars **Reviewed by:** Shaurya S. | Software Engineer, Mid-Market (51-1000 emp.) **Reviewed Date:** April 04, 2023 **What do you like best about Microsoft Sentinel?** It is good at finding and analysing security threats and giving comprehensive reports. It gets the fundamentals right , and hence quite useful. **What do you dislike about Microsoft Sentinel?** The setup with data connectors is sometimes problematic, with some having read/write permissions issues. **What problems is Microsoft Sentinel solving and how is that benefiting you?** It has become a one-stop destination for viewing and analysing security information. ### 28. SIEM Solution **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Commercial Real Estate | Enterprise (> 1000 emp.) **Reviewed Date:** March 14, 2023 **What do you like best about Microsoft Sentinel?** Microsoft Sentinel is the best tool for managing events. Cloud-native architecture helps control all the users, devices and applications on the cloud and on-premises. It is the solution that offers threat detection, threat response, threat visibility and threat hunting. **What do you dislike about Microsoft Sentinel?** The dashboard is simple, but threat investigations are more complicated. **What problems is Microsoft Sentinel solving and how is that benefiting you?** Microsoft sentinel collects all the events and provides clear visibility. ### 29. Chaotic and unclear **Rating:** 1.5/5.0 stars **Reviewed by:** david r. | Enterprise (> 1000 emp.) **Reviewed Date:** February 24, 2023 **What do you like best about Microsoft Sentinel?** Everything is reunited in the same application **What do you dislike about Microsoft Sentinel?** Everything look so chaotics and informations are hard to find **What problems is Microsoft Sentinel solving and how is that benefiting you?** Raises alerts when suspicious or out of nature activites are occuring ### 30. Intelligent security analytics tool **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Commercial Real Estate | Enterprise (> 1000 emp.) **Reviewed Date:** March 08, 2023 **What do you like best about Microsoft Sentinel?** In our organization SOC team is using Microsoft Sentinel for security analytics. it helps to collect threat detection, threat response, and investigation in a central location and helps to facilitate the detection and response. **What do you dislike about Microsoft Sentinel?** It is a great tool but needs improvement in cost. **What problems is Microsoft Sentinel solving and how is that benefiting you?** it helps our organization in real-time monitoring and sends alerts on incidents. ### 31. Best tool to practice your skills and enhance the domain knowledge **Rating:** 5.0/5.0 stars **Reviewed by:** Vishal T. | Information Security Consultant, Small-Business (50 or fewer emp.) **Reviewed Date:** December 05, 2022 **What do you like best about Microsoft Sentinel?** Microsoft Sentinel helped us enhance our domain's skillset and upgrade our knowledge concerning our monitoring practices. Sentinel also helped my other team members to increase the project monitoring tasks with remarkable results. **What do you dislike about Microsoft Sentinel?** As per the dislike remarks, I would have preferred a more user-friendly interface that helps the users to make a more effortless workflow. Also, few options should have been there that help as a one-click options, **What problems is Microsoft Sentinel solving and how is that benefiting you?** Sentinel also helped my other team members to increase the project monitoring tasks with remarkable results. With incresing in project monitoring also allows us to reach our desired goal sets for each project. ### 32. Gartner recommended best SIEM solution. **Rating:** 4.5/5.0 stars **Reviewed by:** Vivek P. | Cloud and M365 architect, Enterprise (> 1000 emp.) **Reviewed Date:** December 07, 2022 **What do you like best about Microsoft Sentinel?** Cloud-native security incident and event management solution which provides a variety of automation features to manage incident response and perform orchestration to keep your enterprise secure. **What do you dislike about Microsoft Sentinel?** Handling if incidents can be made better as centinel doesn't have a strong ticketing system which other vendors such as Jira or ServiceNow provide. **What problems is Microsoft Sentinel solving and how is that benefiting you?** Sentinel helps to get 360 degree view across the entire enterprise environment including network,Iot, cloud, onpremise/hybrid environment along with roaming computers and all these ingested logs can be corelated using Microsoft threat intelligence and remediation and mitigation can be provided to make enterprise environment fully secured. ### 33. Good product for use **Rating:** 3.0/5.0 stars **Reviewed by:** Verified User in Financial Services | Enterprise (> 1000 emp.) **Reviewed Date:** December 02, 2022 **What do you like best about Microsoft Sentinel?** It is good in terms of monitoring, and to Team members, for reqular use of monitoring review the logs of internal and external clients for both we are using for multiple purposes. We just thanks for give us just a amazing tool for regular used. **What do you dislike about Microsoft Sentinel?** All products have some disadvantage but here we can say the for siem we can use multiple time but don't get any regrate about that product for our organization and even my team also going to be on regular basis used. **What problems is Microsoft Sentinel solving and how is that benefiting you?** It's very benefit for our organization due to the we are able to monitoring and check all logs day to day even sometimes we Missed the manually but due to tool we can rectify all logs and check and resolve all unwanted things due to help of Microsoft sentinel. ### 34. Best SIEM solution **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Computer & Network Security | Enterprise (> 1000 emp.) **Reviewed Date:** October 06, 2022 **What do you like best about Microsoft Sentinel?** Microsoft sentinel has certain features such as graphs, filtering logs, a quick summary before diving into the investigation (investigate feature) which makes it a class apart. Another speciality is that it is cloud based & won't consume your time or human bandwidth to maintian an on-premise solution. There is an advanced option of automating response as well using connectors & playbooks which makes it a great SOAR platform as well. We may also forward the logs to any destination as well to further processing. **What do you dislike about Microsoft Sentinel?** There might be some delays in customer queries. There are not enough custome plans whihc makes it a bit expensive for smaller organizations. KQL alhtough being a very good query language does hamper with analysts sometime as it is literallly "hard". Learning a new language for investigations seems a bit odd. Some EDR fetures should be present such as fetching file. **What problems is Microsoft Sentinel solving and how is that benefiting you?** Information security alongwith automation is something which every organization requires right now & sentinel is working towards it. Automation helps resolve incidents & alerts very quickly & alongwith the scalability provided by cloud solution I dont have to rely on the usual slow process of on premise deployment. User access is also very well managed by sentinel alongwith the response action required in case of a breach, attack or suspicious alert through user risk & sign in risk actions. ### 35. SIEM Tool: Microsoft Sentinel **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Enterprise (> 1000 emp.) **Reviewed Date:** July 20, 2022 **What do you like best about Microsoft Sentinel?** Sentinel is one the best SIEM Solution for Cloud networks. Helps to analyze huge amount of data to detect any threat in our network. We can create alert rule to trigger any alert based on condition which will help to detect any suspcious activity. Also it has AI fetaures which we can use to hunt any threat. We can respond to incidents easily using built-in orchestration and automation of common tasks like alerts. **What do you dislike about Microsoft Sentinel?** In azure sentinel, we need to learn KQL queries to perform log searches or work on incidents. For new users, it can take time to learn KQL. Also, we might need basic knowledge of the Azure cloud environment while working wth sentinel. Integration with other logic apps sometimes takes time. **What problems is Microsoft Sentinel solving and how is that benefiting you?** Detecting threats in our environment, Creating incidents and their triage. Real-time threat monitoring of the environment. With AI features we can perform deep investigations. Prevention from cyberattacks. ### 36. Complete siem platform **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Security and Investigations | Enterprise (> 1000 emp.) **Reviewed Date:** October 06, 2022 **What do you like best about Microsoft Sentinel?** Microsoft sentinel is a complete siem platform with all the features needed for a new age siem. It has a very user-friendly UI which helps to manage the platform easily. The kql is easy to use while investigating logs. The in-depth logs allow to implement rules for advance threats. It is one of the best platforms to completely implement it on the cloud, which helps to improve productivity. It can analyse large volumes of data in a quick time and is highly productive. **What do you dislike about Microsoft Sentinel?** Microsoft support can be better as they take a bit more time to resolve queries. Microsoft can make the logs view bit simpler so that it is easier to analyse the logs. The user interface sometimes lags, which can also be improved. **What problems is Microsoft Sentinel solving and how is that benefiting you?** It provides real-time threat detection and alerts so the security team can quickly work on the incidents. The logs are easy to search and analyse, which helps to take decisions on critical security incidents quickly. It supports all kinds of logs source, which helps manage all endpoints in a single platform. It helped to save a lot of valuable time in dealing with critical incidents so that quick remediation actions can be taken. ### 37. Sentinel as a monitoring tool **Rating:** 5.0/5.0 stars **Reviewed by:** Neethu A. | Senior Security Consultant, Enterprise (> 1000 emp.) **Reviewed Date:** December 02, 2022 **What do you like best about Microsoft Sentinel?** Used for monitoring purposes. For checking vulnerabilities and monitoring vulnerabilities. It is a good tool for monitoring. Monitors vulnerabilities and for checking. **What do you dislike about Microsoft Sentinel?** The interface presented to the end user is not good. Improve the user interface and enhance the user view. Users should access the tool in an easy manner. **What problems is Microsoft Sentinel solving and how is that benefiting you?** It is a SIEM tool which can be used in monitoring. For an organization that is focused on monitoring, this tool is of great help and assists in solving problems. Overall, a good tool. ### 38. Best cloud SIEM solution **Rating:** 4.0/5.0 stars **Reviewed by:** Aditya Y. | Security consultant, Enterprise (> 1000 emp.) **Reviewed Date:** October 14, 2022 **What do you like best about Microsoft Sentinel?** Navigation user friendly. Easy to integrate data sources those are in cloud. Easy to ingest lots from on premises data sources. Connectors available for most of the security solution. API options for getting logs from data sources for those connectors not available. End to end soar options, investigate, detection and response available through playbook. **What do you dislike about Microsoft Sentinel?** Some of navigation, make user confused. Use cases creation can be improved. Creating the playbook for automation needs improvement. API options can be more handy to use . **What problems is Microsoft Sentinel solving and how is that benefiting you?** Monitoring security logs and alert. Easy to manage and monitor all the security control from one single glass of pane. Health monitoring of security controls possible. ### 39. Microsoft sentinel as a log management tool **Rating:** 4.5/5.0 stars **Reviewed by:** Sidh B. | Information Security Consultant, Mid-Market (51-1000 emp.) **Reviewed Date:** December 02, 2022 **What do you like best about Microsoft Sentinel?** Sentinel is easier to use with lots of space for monitoring in security aspects of an organisation network infrastructure . Sentinel also works good while monitoring the network **What do you dislike about Microsoft Sentinel?** The user interface should be friendly in terms of usage with the beginners .Also, quite varied in terms of generating reports for audit purposes with easier to use. **What problems is Microsoft Sentinel solving and how is that benefiting you?** It helps to monitor vulnerable actions with various flaws in the digital space including network architecture and secure implementations of the server and databases. ### 40. Cloud Based SIEM & SOAR Solution **Rating:** 4.5/5.0 stars **Reviewed by:** Rafil D. | Administrators, Small-Business (50 or fewer emp.) **Reviewed Date:** December 02, 2022 **What do you like best about Microsoft Sentinel?** Pre-Provision Data Connectors for Windows Linux as well as third-party security products like Cisco as well as support for all major log ingestion standards like sys log, CEF. **What do you dislike about Microsoft Sentinel?** Poor incident management capabilities, which force businesses to opt for third-party solutions like ServiceNow seem to be a deal breaker for many companies. **What problems is Microsoft Sentinel solving and how is that benefiting you?** Sentinel introduces automation capabilities such as Fusion rule, Advance multi-staging, and Rare RDP Connection, which helps the security team to focus on things that really matter. ### 41. MS Sentinel Operational insights **Rating:** 3.5/5.0 stars **Reviewed by:** Yash J. | Assistant Manager, Enterprise (> 1000 emp.) **Reviewed Date:** July 04, 2022 **What do you like best about Microsoft Sentinel?** Sentinel is the central eye to monitor the whole enterprise. Security professionals can watch the environment from a single console. Other SIEM tools are not so much emerged as compared to Sentinel. The best thing about Sentinel is its cloud service. The Infrastructure overhead has vanished from IT operations. We can configure N number of alerts of different types such as hunters/Incidents/Threat Intelligence. The incident number generated by Sentinel helps us to track the alert effectively. Also, we can span this to our traditional data center. We are using pre-built connectors to link other providers as well. **What do you dislike about Microsoft Sentinel?** Microsoft should work more deeply in the auto-remediation of selected alerts chosen by the Security person. Secondly, the user interface doesn't work properly if you are using a normal pixels monitor. You have to get a big size monitor to see all details which is not an ideal case. Many times I faced hung user interface issues too. **What problems is Microsoft Sentinel solving and how is that benefiting you?** We're monitoring critical events in our enterprise such as User addition in the privileged group, Network changes, and any role assignment on a broader level etc. We have a Security team that closely monitors all events highlighted/detected by the Sentinel workspace. ### 42. Superb Experience **Rating:** 5.0/5.0 stars **Reviewed by:** Green R. | Senior Consultant, Enterprise (> 1000 emp.) **Reviewed Date:** August 25, 2022 **What do you like best about Microsoft Sentinel?** Microsoft Sentinel is best for threat analyser it's smooth process gives you an advantage to detect the threat. The unified integration capabilities of Microsoft Sentinel have created a buzz in the security industry where it integrates with Microsoft 365 Defender and Microsoft Defender to provide a unified way to manage risk in your digital landscape under a single umbrella. Incidents, schema, and alerts can be shared between Microsoft Sentinel and Microsoft 365 Defender, providing a holistic view with seamless drill-down for context. **What do you dislike about Microsoft Sentinel?** As of now I am great with the sentinel so far so amazed at this tool **What problems is Microsoft Sentinel solving and how is that benefiting you?** Our security analysts design and implement custom analytical rules that involve various MITRE techniques and tactics to improve the efficiency and speed of attack detections. ### 43. One of best cloud-native security and event manager platform. **Rating:** 5.0/5.0 stars **Reviewed by:** Himanshu T. | Cloud Consultant, Mid-Market (51-1000 emp.) **Reviewed Date:** July 05, 2022 **What do you like best about Microsoft Sentinel?** Microsoft Sentinel provides built-in AI to help analyse large volumes of data. This is one of the services or features I like the most which are provided by Microsoft Sentinel **What do you dislike about Microsoft Sentinel?** Microsoft Sentinel is legging in providing good services in the customer support domain. Sometimes they took a while to rectify the customer issues in a short period. **Recommendations to others considering Microsoft Sentinel:** I highly recommend other people and organizations use Microsoft Sentinel. Because it provides the best services of cloud-native security information and event management platform. **What problems is Microsoft Sentinel solving and how is that benefiting you?** Microsoft Sentinel solves or provides a wide variety of services in different domains. One of the services it provides is single solution alert detection and threat visibility. ### 44. Sentinal **Rating:** 5.0/5.0 stars **Reviewed by:** AKASH M. | Solution Engineer , Small-Business (50 or fewer emp.) **Reviewed Date:** July 15, 2022 **What do you like best about Microsoft Sentinel?** MS Sentinel, has been an amazing solution, it has given us a secure platform and fast data analysis. Specially when we need to check for large amount of data, this app has given us the faster and secure solution. What make us be calm is the way the data is being secure. **What do you dislike about Microsoft Sentinel?** Dependency on Microsoft Azure software and it is a mobile app to do an investigation while on the move. Also Premium Consulting / Integration Services. In the WFH world sometimes it would be nice to have a local client version when speed isn't the best from home **What problems is Microsoft Sentinel solving and how is that benefiting you?** As far as integration goes, yes you can use the APIs for the various MS security products, however there is much better integration between the other MS security products and MS Sentinel, which is only getting better as time goes on. ### 45. Microsoft Siem and Soar Solution- Sentinel **Rating:** 4.5/5.0 stars **Reviewed by:** Huzefa S. | Consultant, Mid-Market (51-1000 emp.) **Reviewed Date:** December 02, 2022 **What do you like best about Microsoft Sentinel?** Microsoft Sentinel's automation and orchestration that enables scalable automation as new technologies and threats emerge. Building playbooks with Azure Logic Apps, you can choose from a growing gallery of built-in playbooks. **What do you dislike about Microsoft Sentinel?** Nothing, it is the best tool as compared to Qradar and other siem solutions. **What problems is Microsoft Sentinel solving and how is that benefiting you?** Azure Active Directory (Azure AD) sign-in and audit logs Microsoft Cloud App Security shadow IT discovery logs Microsoft Information Protection logs Microsoft 365 advanced hunting data ### 46. Security Incident and Event Management Solution to rapidly analyze complete organizational traffic **Rating:** 3.5/5.0 stars **Reviewed by:** Taha D. | Administrator, Information Technology and Services, Small-Business (50 or fewer emp.) **Reviewed Date:** December 02, 2022 **What do you like best about Microsoft Sentinel?** Security Incident and Event Management Solution to rapidly analyze complete organizational traffic **What do you dislike about Microsoft Sentinel?** Limited security measure integration capabilities and the need for R&D are two difficulties encountered during implementation. **What problems is Microsoft Sentinel solving and how is that benefiting you?** Efficient visibility across endpoints security devices, network and IoT devices along with integration with multiple products. Enable users to analyze and correlate almost all data in the organization and which helps in better security implementation. ### 47. Advanced Log Management Solution **Rating:** 3.5/5.0 stars **Reviewed by:** Sahil D. | Marketing and accounts consultant, Small-Business (50 or fewer emp.) **Reviewed Date:** December 01, 2022 **What do you like best about Microsoft Sentinel?** Automation is my pick; it is my favorite among other offerings from Microsoft Sentinel. The ability to configure bookmarks, and scheduled hunting queries helps in automating the tedious task for tier 1 soc analysts. **What do you dislike about Microsoft Sentinel?** The consumption model is very costly, as the dashboard is not charged, but the workspace incurs costs. **What problems is Microsoft Sentinel solving and how is that benefiting you?** Cloud-based solutions for Log and Incident Management also it can be connected with almost all applications in the environment. ### 48. Big Data and Sentinel **Rating:** 3.5/5.0 stars **Reviewed by:** Muhammad Gulfam P. | Junior Consultant - Data Analyst, Small-Business (50 or fewer emp.) **Reviewed Date:** February 07, 2023 **What do you like best about Microsoft Sentinel?** it can connect with multiple data sources to help with analyzing the data quickly. **What do you dislike about Microsoft Sentinel?** its good overall for now, will have more feedback as we use it more **What problems is Microsoft Sentinel solving and how is that benefiting you?** data from multiple sources can be loaded easily ### 49. Microsoft sentinel good SOAR tool **Rating:** 4.5/5.0 stars **Reviewed by:** BANWARI Y. | Senior Software Developer, Mid-Market (51-1000 emp.) **Reviewed Date:** January 11, 2023 **What do you like best about Microsoft Sentinel?** You can fine tune the SOAR and will get only charged when your playbook are triggered **What do you dislike about Microsoft Sentinel?** NDR is not available out-of-the-box. Rest is good **What problems is Microsoft Sentinel solving and how is that benefiting you?** We are able to deploy within an hour and we only require 1 person to complete the implementation. ### 50. Powerful tool for security archestration **Rating:** 3.5/5.0 stars **Reviewed by:** Gokul B. | Senior Associate Specialist, Mid-Market (51-1000 emp.) **Reviewed Date:** January 09, 2023 **What do you like best about Microsoft Sentinel?** The most easy UI interface with easy to use options available that can gives you full control to archestrate you company security posture **What do you dislike about Microsoft Sentinel?** More linkage of use cases with AI adoption possible **What problems is Microsoft Sentinel solving and how is that benefiting you?** The security automation gives to adoption and time saving approach ## Microsoft Sentinel Discussions - [What is Microsoft Sentinel used for?](https://www.g2.com/discussions/what-is-microsoft-sentinel-used-for) - 3 comments, 2 upvotes - [Is sentinel a free service provided by Microsoft azure ?](https://www.g2.com/discussions/is-sentinel-a-free-service-provided-by-microsoft-azure) - 1 comment, 1 upvote - [If I had to have a question, I would ask if there were any plans to add linux support to this program.](https://www.g2.com/discussions/31827-if-i-had-to-have-a-question-i-would-ask-if-there-were-any-plans-to-add-linux-support-to-this-program) - 2 comments, 1 upvote - [How I able to install /integrated Azure Sentinel agents to collect data on IOT devices/ DLP/ Endpoint devices Computer / Laptops / Printers](https://www.g2.com/discussions/31797-how-i-able-to-install-integrated-azure-sentinel-agents-to-collect-data-on-iot-devices-dlp-endpoint-devices-computer-laptops-printers) - 1 comment, 1 upvote - [Why should I use Azure Sentinel?](https://www.g2.com/discussions/why-should-i-use-azure-sentinel) - 1 comment - [View Microsoft Sentinel pricing details and edition comparison](https://www.g2.com/products/microsoft-sentinel/reviews?page=4&qs=pros-and-cons§ion=pricing&secure%5Bexpires_at%5D=2026-07-22+06%3A25%3A54+-0500&secure%5Bsession_id%5D=e361fc84-e926-48b4-be68-30d5fc28d2f6&secure%5Btoken%5D=990b1761a0a51323408705fc7623a3ea7171b9ea9b4829272a0a817bd3e06ec4&format=llm_user) ## Microsoft Sentinel Integrations - [Check Point Email Security](https://www.g2.com/products/check-point-email-security/reviews) - [Cortex XDR](https://www.g2.com/products/palo-alto-networks-cortex-xdr/reviews) - [ESET PROTECT](https://www.g2.com/products/eset-protect/reviews) - [FortiAnalyzer](https://www.g2.com/products/fortianalyzer/reviews) - [Microsoft Defender for Cloud](https://www.g2.com/products/microsoft-defender-for-cloud/reviews) - [Microsoft Defender for Endpoint](https://www.g2.com/products/microsoft-defender-for-endpoint/reviews) - [Microsoft Defender XDR](https://www.g2.com/products/microsoft-defender-xdr/reviews) ## Microsoft Sentinel Features **Response** - Resolution Automation - Resolution Guidance - System Isolation - Threat Intelligence - Incident Investigation **Network Management** - Activity Monitoring - Asset Management - Log Management **Automation** - Workflow Mapping - Workflow Automation - Automated Remediation - Log Monitoring **Records** - Incident Logs - Incident Reports **Incident Management** - Event Management - Automated Response - Incident Reporting **Orchestration** - Security Orchestration - Data Collection - Threat Intelligence - Data Visualization **Management** - Incident Alerts - Incident Case Management - Workflow Management **Security Intelligence** - Threat Intelligence - Vulnerability Assessment - Advanced Analytics - Data Examination **Response** - Alerting - Performance Baselin - High Availability/Disaster Recovery **Agentic AI - Security Information and Event Management (SIEM)** - Autonomous Task Execution - Multi-step Planning - Proactive Assistance - Decision Making **Generative AI** - AI Text Generation - AI Text Summarization ## Top Microsoft Sentinel Alternatives - [Sumo Logic](https://www.g2.com/products/sumo-logic/reviews) - 4.3/5.0 (391 reviews) - [IBM QRadar SIEM](https://www.g2.com/products/ibm-ibm-qradar-siem/reviews) - 4.4/5.0 (282 reviews) - [Splunk Enterprise Security](https://www.g2.com/products/splunk-enterprise-security/reviews) - 4.3/5.0 (223 reviews)