Name: Microsoft Sentinel
Rating: 4.5 (296 reviews)

Overview

Review Summary

AI Generated Using Real User Reviews

See a synthesized overview of the key takeaways from verified reviews of Microsoft Sentinel.

Product Information on Microsoft Sentinel

Updated 14th October 2025

What is Microsoft Sentinel?

Microsoft Sentinel is a security information and event management software designed to help organizations detect, investigate, and respond to potential threats across their digital environments. The software aggregates and analyzes data from various sources such as users, applications, servers, and devices, both on-premises and in the cloud. It utilizes artificial intelligence to identify patterns and anomalies that may indicate security risks. Microsoft Sentinel provides capabilities for automated incident response, threat intelligence enrichment, and customizable dashboards for monitoring and reporting. The software aims to streamline security operations, reduce the time to investigate incidents, and support compliance with various regulatory requirements by offering integrated management and analytics tools for safeguarding enterprise assets.

Overall experience with Microsoft Sentinel

MANAGER, IT SECURITY AND RISK MANAGEMENT

250M - 500M USD, Manufacturing

FAVORABLE

“Automation With Logic Apps Shines, But GUI Features Remain Limited In Sentinel”

4.0

Nov 29, 2025

This text serves as a placeholder and does not reflect the user’s review responses or opinions. This text serves as a placeholder and does not reflect the user’s review responses or opinions. This text serves as a placeholder and does not reflect the user’s review responses or opinions.

IT MANAGER

<50M USD, Banking

CRITICAL

“Integration with Microsoft Smooth, Third-Party and Querying Hinder Experience”

3.0

Jul 18, 2025

This text serves as a placeholder and does not reflect the user’s review responses or opinions. This text serves as a placeholder and does not reflect the user’s review responses or opinions. This text serves as a placeholder and does not reflect the user’s review responses or opinions.

Badges

Gartner Peer Insights recognizes vendors who meet or exceed both the market average Overall Experience and the market average User Interest and Adoption score through a Customers’ Choice distinction.

For Market:
Security Information and Event Management

About Company

Company Description

Microsoft enables digital transformation for the era of an intelligent cloud and an intelligent edge. Its mission is to empower every person and every organization on the planet to achieve more. Microsoft is dedicated to advancing human and organizational achievement. Microsoft Security helps protect people and data against cyberthreats to give peace of mind.

Company Details

Company type

Public

Year Founded

1975

Head office location

Redmond, Washington, United States

Number of employees

10000+

Annual Revenue

30B+ USD

Website

https://microsoft.com

Do You Manage Peer Insights at Microsoft?

Access Vendor Portal to update and manage your profile.

Key Insights

A Snapshot of What Matters - Based on Validated User Reviews

User Sentiment About Microsoft Sentinel

Reviewer Insights for: Microsoft Sentinel

Deciding Factors: Microsoft Sentinel Vs. Market Average

Performance of Microsoft Sentinel Across Market Features

Microsoft Sentinel Likes & Dislikes

KQL is awesome to work with, and easy to pick up and start working with. There are always other things you can really dive into to improve your skills, like functions or setting up ASIM tables to format your data. The transformations on a data collection rule make it very easy to bring in just the data that you need, even if you do pay a bit for some transformation if you are dropping a lot of data.

What I dont like at all is the thir-party integration, the associated costs when integrating new sources, and keeping in mind that every GB used must be included in the budget. On the other hand, theres the issue of queries, for which you must have knowledge of KQL

Top Microsoft Sentinel Alternatives

4.5

(1061 Ratings)

4.3

(716 Ratings)

4.3

(671 Ratings)

View All Alternatives

Peer Discussions

Microsoft Sentinel Reviews and Ratings

4.5

(296 Ratings)

Rating Distribution

5 Star: 56%
4 Star: 41%
3 Star: 3%
2 Star: 1%
1 Star: 0%

MANAGER, IT SECURITY AND RISK MANAGEMENT
50M-1B USD
Manufacturing
Review Source
Automation With Logic Apps Shines, But GUI Features Remain Limited In Sentinel
4.0
Nov 28, 2025
Sentinel is by far my favorite SIEM. We migrated away from another vendor and have been all in on Sentinel for about 2 years now. Being able to use Logic apps for automation is great and I just find KQL to be far more intuitive than dealing with SPL, which is likely because the same skills can be used on other various logs in Azure for Diagnostics.

MANAGER, IT SECURITY AND RISK MANAGEMENT

50M-1B USD

Manufacturing

Review Source

Automation With Logic Apps Shines, But GUI Features Remain Limited In Sentinel

4.0

Nov 28, 2025

Sentinel is by far my favorite SIEM. We migrated away from another vendor and have been all in on Sentinel for about 2 years now. Being able to use Logic apps for automation is great and I just find KQL to be far more intuitive than dealing with SPL, which is likely because the same skills can be used on other various logs in Azure for Diagnostics.

Read All 480 Reviews

Get unlimited access to verified peer reviews and insights

Read unlimited Gartner-vetted product reviews

View and share valuable product insights

Download full product profiles

Review products you use today