Microsoft Reviews, Ratings & Features 2026 | Gartner Peer Insights

Gartner defines the insider risk management (IRM) market as solutions that use advanced analytics, monitoring, and behavior-based risk models to detect, analyze and mitigate risks posed by trusted insiders within an organization. These solutions monitor the activities of employees, service partners and key suppliers to ensure their behavior aligns with corporate policies and risk tolerance levels. IRM platforms can be delivered as cloud-based services or on-premises solutions, or in hybrid forms. When effectively implemented alongside proper governance, they provide comprehensive visibility, real-time detection, and proactive intervention to safeguard against data theft, fraud and other malicious or unintentional insider threat activities.

Active

Find the top Insider Risk Management Solutions with Gartner. Compare and filter by verified product reviews and choose the software that’s right for your organization.

Insider Risk Management Solutions

Advanced Threat Analytics (ATA) (Legacy)

Microsoft Purview Insider Risk Management

Microsoft Defender for Identity

Microsoft

Data Analyst | Data Engineer

With the tool in place, it is always easy to detect and block compromised credentials and this helps mitigate insider risks. It keeps monitoring trusted users to detect suspicious activities which helps prevent data theft. What's more, MS Defender for Identity works across cloud and hybrid environments which makes it very functional and a worthy investment for our business. 

50M - 250M USD

<50M USD

1B - 3B USD

Gov't/PS/ED <5,000 Employees

250M - 500M USD

500M - 1B USD

3B - 10B USD

10B - 30B USD

Gov't/PS/ED 5,000 - 50,000 Employees

30B + USD

IT Security & Risk Management Associate

I believe the Insider Risk management product is still maturing and is not ready for full production use yet. Despite setting up some connectors (e,g, HR connector to import human resource data), we have not received any actionable or meaningful alerts from the tool. That impression seems confirmed by Microsoft's roadmap, which shows they are still actively working to improve the product. In the meantime. are currently leveraging Cyera DLP alongside Microsoft Purview IRM to enhance the triage and the prioritization of alerts.

Cyber Security Specialist

It has good detection and response capabilities, extensive data telemetry and asset inventory on Defender XDR but it's a dedicated agent with specific requirements,

Cisco Systems (Splunk)

Fortinet

Proofpoint

Forcepoint

Varonis

Other...

Rapid7

Exabeam

Securonix

Broadcom

One Identity

Code42

Gurucul

Proofpoint (ObserveIT)

LogRhythm

Cyberhaven

OpenText

Mimecast

ThreatMark

Leidos

E8 Security

Mimecast (Elevate Security)

Aware

NetWitness

DTEX

OpenText (Micro Focus)

Niara

Bottomline Technologies

Microsoft enables digital transformation for the era of an intelligent cloud and an intelligent edge. Its mission is to empower every person and every organization on the planet to achieve more. Microsoft is dedicated to advancing human and organizational achievement.

Microsoft Security helps protect people and data against cyberthreats to give peace of mind.


Every company has a mission. What's ours? To empower every person and every organization to achieve more. We believe technology can and should be a force for good and that meaningful innovation contributes to a brighter world in the future and today. Our culture doesn’t just encourage curiosity; it embraces it. Each day we make progress together by showing up as our authentic selves. We show up with a learn-it-all mentality. We show up cheering on others, knowing their success doesn't diminish our own. We show up every day open to learning our own biases, changing our behavior, and inviting in differences. When we show up, we achieve more together. 

Microsoft operates in 190 countries and is made up of more than 220,000 passionate employees worldwide.

Reviews

Ratings Overview

Overall experience with

Favorable Review

Effective identity detection and response features, hindered by some false positives

Critical Review

Insider Risk Management’s Alerting Capabilities Currently Lack Actionable Outcomes

Likes and dislikes about

likes

dislikes