Microsoft Reviews, Ratings & Features 2026 | Gartner Peer Insights

Security information and event management (SIEM) is a configurable system of record that collects, aggregates and analyzes security event data from on-premises and cloud environments. SIEM processes security event data for the purposes of threat detection, investigation and response. It natively supports data normalization and offers user-configurable detection content and reporting to orchestrate threat mitigation and satisfy compliance requirements. These solutions are delivered via a SaaS platform or client-hosted on-premises or private cloud. The security information and event management (SIEM) system must assist with: 1. Aggregating and normalizing data from various IT and operational technology (OT) environments. 2. Designing and executing near real-time monitoring and alerting content. 3. Enriching and investigating security events of interest. 4. Supporting manual and automated response actions. 5. Maintaining and reporting on current and historical event data.

Active

Find the top Security Information and Event Management Software with Gartner. Compare and filter by verified product reviews and choose the software that’s right for your organization.

Security Information and Event Management

Microsoft Sentinel

Microsoft

Cyber Security Specialist

Sentinel is a very powerful tool and a pivotal hub for cybersecurity, allowing auditing and investigating around our Microsoft business eco-system. Sentinel can digest the huge amount of information that you feed it from all sources available to you within Microsoft and other supported 3rd parties to produce actionable cases. Along with its very intuitive and powerful incident automation, there are a vast number of automation templates to apply in addition to building your own with your own indicators and trigger points. We are using it constantly and improving our automation to better protect the business.

<50M USD

50M - 250M USD

500M - 1B USD

10B - 30B USD

3B - 10B USD

250M - 500M USD

1B - 3B USD

Gov't/PS/ED <5,000 Employees

30B + USD

Gov't/PS/ED 5,000 - 50,000 Employees

Senior Analyst, Cyber Security

good cloud-native platform with strong core SIEM functionality. However some of the vendor integration needs work/updating in terms of documentation from both vendor/Microsoft side for content hub/data connectors.

Cloud Security Architect

Sentinel offers a powerful SIEM/SOAR platform, especially when integrated within the Microsoft security ecosystem. Native connectors, including Entra ID, M365 and Defender XDR, are very easy to connect, making the initial onboarding process a breeze. The analytics engine is quite powerful too, allowing many detection use cases.
However, cost predictions remain challenging, particularly for high-ingestion environments, and are often not easy to extrapolate. Also, multi-workspace governance and data segregation (there's a data lake behind it) can introduce operational complexity.

Cisco Systems (Splunk)

Fortinet

CrowdStrike

Elastic

Google

LogRhythm

Rapid7

Palo Alto Networks

SolarWinds

Datadog

Google (Mandiant)

LogSentinel

ManageEngine

Trellix

Other...

Exabeam

Securonix

SentinelOne

AT&T Cybersecurity

Wazuh

Sumo Logic

Fortra

Guardsix

FireEye

McAfee

Graylog

BluSapphire

Microsoft enables digital transformation for the era of an intelligent cloud and an intelligent edge. Its mission is to empower every person and every organization on the planet to achieve more. Microsoft is dedicated to advancing human and organizational achievement.

Microsoft Security helps protect people and data against cyberthreats to give peace of mind.


Every company has a mission. What's ours? To empower every person and every organization to achieve more. We believe technology can and should be a force for good and that meaningful innovation contributes to a brighter world in the future and today. Our culture doesn’t just encourage curiosity; it embraces it. Each day we make progress together by showing up as our authentic selves. We show up with a learn-it-all mentality. We show up cheering on others, knowing their success doesn't diminish our own. We show up every day open to learning our own biases, changing our behavior, and inviting in differences. When we show up, we achieve more together. 

Microsoft operates in 190 countries and is made up of more than 220,000 passionate employees worldwide.

Reviews

Ratings Overview

Overall experience with

Favorable Review

Powerful cloud-native SIEM with strong Microsoft integration

Critical Review

Taking a Deeper Look Into Microsoft Sentinel's Vendor Integration

Likes and dislikes about

likes

dislikes