Microsoft Sentinel Reviews

Organizations experience mixed results with Microsoft Sentinel. Cost savings vary; some report faster returns due to seamless integration or automation, while others see initial expenses outweigh benefits short-term. Efficiency gains are noted through reduced manual tasks and enhanced visibility, with some achieving compliance goals and significant staffing reductions. Companies appreciate ongoing improvements, acknowledging time savings in threat detection and response. Overall, users highlight enhanced security capabilities and operational efficiencies despite challenges in quantifying exact financial returns.

Microsoft Sentinel's pricing is often perceived as costly, especially for small businesses, due to its pay-as-you-go model based on data ingestion and retention. Users appreciated the scalability and integration with Microsoft products, benefiting from free logs under certain licenses. However, managing ingestion rates effectively can mitigate high costs. Despite being expensive, many users found the overall value justifiable for enterprises deeply integrated with Microsoft's ecosystem, especially when leveraging discounts and optimized configurations.

• "Pricing for Microsoft Sentinel could always be lower, but it's workable. The ingestion costs for the data analytics is usually the highest cost, but the licensing per Microsoft Sentinel is fairly straightforward and transparent."
• "We only pay for the amount of data we bring in, which is fair."
• "It is consumption-based pricing. It is an affordable solution."

Organizations primarily use Microsoft Sentinel for managing security operations, log aggregation, threat detection, and automated responses. It integrates with various Microsoft and third-party tools for centralized monitoring across hybrid and cloud environments. Users leverage its machine learning capabilities to enhance incident response, security analytics, and compliance. Serving as a core component in Security Operations Centers, it helps streamline processes by providing a unified platform to investigate, analyze, and respond to potential security threats.

Microsoft Sentinel's customer service and support is generally responsive and efficient, especially with premium and upgraded support tiers. Clients with higher-tier support experience fast response times. Users appreciate the accessibility through the Azure portal and quick ticket resolutions but note occasional delays and challenges with basic support. Some find additional support through community forums helpful. Organizations utilizing Microsoft's comprehensive support options receive timely assistance and benefit from detailed documentation.

Microsoft Sentinel's initial setup is generally straightforward and quick, especially in cloud environments. Many users report ease of deployment with Microsoft Sentinel's intuitive interface and documented processes. Challenges arise in integrating on-premises resources and third-party applications. Some users find the configuration phase moderately complex due to custom rules or unique infrastructure setups. Prior experience and administration knowledge can simplify the process, while consultation or expert assistance reduces complexity, particularly for organizations dealing with a large volume of data sources.

Microsoft Sentinel offers excellent scalability as a cloud-based service. Users appreciate its capability to handle increasing workloads with ease while offering automated scaling and extensive integration options. Managed on Azure, it supports vast data volumes without manual intervention. Organizations benefit from its flexibility, multi-region support, and seamless data connectors, allowing expansion across various departments easily. The platform is continually updated, ensuring its scalability aligns with user needs and technological advancements.

Microsoft Sentinel shows high stability. It rarely encounters bugs, glitches, or downtime. Users report reliable performance, with only occasional issues, mostly related to external factors like internet connectivity or specific integrations. The platform is secure, with minimal disruptions and generally maintains high availability. Microsoft manages infrastructure, making it trustworthy. Some mention minor configuration or regional glitches, but users appreciate its robust, cloud-based, and consistent operational nature. Users prefer its stability compared to other SIEM solutions.