No more typing reviews! Try our Samantha, our new voice AI agent.

Google Security Operations vs Microsoft Security Copilot comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
110
Ranking in other categories
Endpoint Protection Platform (EPP) (4th), Endpoint Detection and Response (EDR) (7th), Extended Detection and Response (XDR) (6th), Ransomware Protection (2nd), AI-Powered Cybersecurity Platforms (1st)
Google Security Operations
Average Rating
9.0
Reviews Sentiment
7.7
Number of Reviews
4
Ranking in other categories
Security Information and Event Management (SIEM) (25th), Security Orchestration Automation and Response (SOAR) (14th), AI-Powered Cybersecurity Platforms (12th)
Microsoft Security Copilot
Average Rating
8.2
Reviews Sentiment
6.7
Number of Reviews
19
Ranking in other categories
No ranking in other categories
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
reviewer2203269 - PeerSpot reviewer
Cloud Senior lead at a financial services firm with 10,001+ employees
Real-time threat detection and alarm management have improved security operations
Google SecOps is extremely useful for threat detection and hunting. It provides a detailed pipeline for detection and is beneficial for real-time threat monitoring when integrated with Mandiant. The tool's integration capabilities are effective, and it helps in managing alarms for normal threats efficiently. Overall, Google SecOps is a very useful service for security operations.
Hiram Machado - PeerSpot reviewer
CEO / CISO at adaQuest Inc
Processes security data very well, but its cost is the main challenge
For many customers, it's too expensive. It comes at a price. What we end up doing is activating it for the purpose of extracting an action plan, then we turn it off. So, unfortunately, for most customers, we're not using it constantly. We're using it sporadically or while investigating a particular incident. We are turning it on and off because of price constraints. More transparency is needed. The pricing model should also be different. To improve Microsoft Security Copilot and make it the best solution in the market, the main hurdle today is cost. If a way could be found to make it more cost-effective and streamline the licensing mechanism, they have the technology to succeed in the marketplace. It's potentially better than what's out there.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It is a simple platform to use."
"It has absolutely improved the way our organization functions, we are more secure, it is giving us more peace of mind, and it has found malicious activity happening on our endpoints that probably would not have been detected if we didn't have it."
"The solution's most valuable feature is its ability to rapidly detect certain hardware files."
"We can visualize and control the activities in the environment from anywhere."
"The ability to kind of stitch everything together and see the actual complete picture is very useful. I guess you'd call it a playbook. Some people call it the forensics analysis of what was happening on particular endpoints when they detected some malicious behavior, and what transpired before that to cause that. It is also very user friendly. The way they have done everything and integrated all the solutions that they've purchased over the years to make it a very seamless, effective product is very good. One thing about Palo Alto is that they take the products or services that they purchase and make them seamless for the end user as compared to some companies that purchase other companies and then just kind of have their products off to the side or keep different interfaces. Palo Alto doesn't do that."
"The multi-layered approach to the product gives you confidence that it will stop exploits, ransomware, worms, or viruses from compromising endpoints, essentially providing peace of mind."
"The positive impacts I see from Cortex XDR by Palo Alto Networks include a complete 360-degree view of our security posture altogether, being a uniform platform where we are ingesting logs from multiple resources."
"One thing that I like about Cortex XDR by Palo Alto Networks, it is detecting all the suspicious or malicious binaries, and it has integration with Palo Alto Firewall."
"Overall, Google SecOps is a very useful service for security operations."
"The playbooks feature in Siemplify is crucial for automation. We've utilized both standard and custom integrations with other security operation solutions, enhancing our flexibility. The user interface is generally straightforward, although recent changes may require some adjustment and Siemplify's integrations and capabilities offer potential support for various compliance requirements."
"Without hyperbole, I have never, in my entire career, encountered a vendor or a vendor community as awesome as Siemplify. Siemplify and the Siemplify Community quite literally made it possible for our SOC to increase almost five-fold in our number of clients and number of analysts and to go from a Monday to Friday 9-5 shop to a 24/7 shop all in the span of under a year and a half and all while continually adding capabilities and improving the services we offer to our clients."
"The most valuable feature of Siemplify is the playbooks that can be created."
"Google SecOps is extremely useful for threat detection and hunting."
"The best feature Microsoft Security Copilot offers based on what I have seen is the seamless integration."
"The features of Microsoft Security Copilot are mostly beneficial at the cold start when I need to begin analyzing something; it gives me the first few steps, which is helpful and saves time."
"Microsoft Security Copilot has helped with easing that pressure because everything is under a single umbrella, and they are able to devote their time towards the right set of activities."
"My thoughts on the integration of generative AI in it for incident response are that it saves us time and money; before it would take an hour to triage an incident to fix it, now it takes maybe ten to fifteen minutes."
"The integration of generative AI and Microsoft Security Copilot for incident response is really helping us; we appreciate the automation and self-healing capabilities."
"I would rate Microsoft Security Copilot ten points on a scale of one to ten because we are very satisfied with it."
"Microsoft Copilot for Security gives us flexibility; we're a small organization, so everyone wears many hats and security is everyone's job, and it allows anyone to engage with the system without extensive prior knowledge and ask questions, making the process actionable and understandable."
"The features of Microsoft Security Copilot that I appreciate the most include the ease of the prompts that I give, which generate easy answers for me. It also automatically gives me options to apply, which is very helpful."
 

Cons

"To jump from the partner to Palo Alto directly was challenging."
"We had a problem with getting our older endpoints up to date, but their newest updates have been really good."
"Additionally, I think the price is very high, and if it can be adjusted, I believe it will be a very good solution."
"The server sometimes stops continuously to check things so it would be helpful to receive access updates or technical reasons."
"Basically, they don't provide customer support tools just to investigate the logs."
"It would be better if they could educate the customers more. Some sort of seminars and roadshows will help educate the customers and show what the product can do. The price could be better. It would also help if they had a team for deployment and support."
"The solution lags to the real-time scenarios here and there."
"It would be good if they could make an exception for applications. Sometimes, it can be a bit of a challenge to make exceptions for certain applications that have been used as rogue."
"The main improvement could be in the accuracy and detail provided in threat descriptions."
"We often encounter minor issues that could be improved, but we maintain communication with the developers and submit feature requests. Recently, I requested enhancements such as improved search functionality within playbooks and expanded options for exporting case data."
"Building the playbooks could be easier and the integration could improve. It is a difficult process, such as what API connections need to be made."
"I'm inclined to say that I'd love to see some Machine Learning capabilities integrated into the platform, however, I just attended a demo this morning where Siemplify gave a sneak peek into some Machine Learning capabilities that they are currently developing and have roadmapped for release soon."
"The main improvement could be in the accuracy and detail provided in threat descriptions."
"The solution does exactly what I need, but sometimes the prompts required to get the needed information need to be rephrased several times."
"It would be beneficial if Copilot's security features were available to roles other than just the top security personnel. Other roles could use some of the functions, perhaps with limited access, allowing for greater flexibility within an organization."
"I think it can be improved by having more users feeding it information because the more things it pulls from, the more we teach it and it builds on it."
"The effectiveness of Microsoft Security Copilot's natural language interface is sometimes slow and it occasionally has hallucinations, but other than that, it works well."
"Currently, Microsoft Security Copilot is not very intuitive. I still need to figure out how to operate some features, so more intuitive methods would be beneficial."
"Microsoft Security Copilot can be improved by addressing the ambiguity around agents at the moment."
"To improve Microsoft Security Copilot and make it the best solution in the market, the main hurdle today is cost."
"Governance is an area where Microsoft Security Copilot can be improved, and it should be included as an additional feature in the next release."
 

Pricing and Cost Advice

"Cortex XDR is a costly solution."
"Cortex XDR by Palo Alto Networks is an expensive solution."
"Compared to CrowdStrike, Cortex XDR is an expensive solution."
"I don't have any issues with the pricing. We are satisfied with the price."
"Every customer has to pay for a license because it doesn't work with what you get from a managed services provider."
"It has a yearly renewal."
"The price of the product is not very economical."
"Cortex XDR’s pricing is very reasonable."
Information not available
"Its pricing scares our customers the most. They didn't understand that it would generate such a cost. Once they understood, they became defensive about wanting to commit because it's not clear to them what the costs would be."
"Pricing is decent if you compare it with the market. We were previously using a different service, but we wanted something under one umbrella, which is something Microsoft is able to give."
report
Use our free recommendation engine to learn which AI-Powered Cybersecurity Platforms solutions are best for your needs.
890,088 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
13%
Financial Services Firm
12%
Comms Service Provider
8%
Manufacturing Company
7%
Financial Services Firm
15%
Manufacturing Company
9%
University
7%
Computer Software Company
7%
Computer Software Company
16%
Insurance Company
9%
Financial Services Firm
7%
Transportation Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business45
Midsize Enterprise20
Large Enterprise48
No data available
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise2
Large Enterprise12
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
What is your experience regarding pricing and costs for Siemplify?
The pricing for Google SecOps and Microsoft Sentinel is almost the same, with no significant differences.
What needs improvement with Siemplify?
The main improvement could be in the accuracy and detail provided in threat descriptions. Google SecOps reports could...
What is your primary use case for Siemplify?
I use Google SecOps for threat detection and hunting. It is primarily used for monitoring threats in real-time, and G...
What is your experience regarding pricing and costs for Microsoft Security Copilot?
My experience with pricing, setup costs, and licensing was mostly positive; we are a very small client, so we did not...
What needs improvement with Microsoft Security Copilot?
I believe Microsoft Security Copilot could use performance improvement based on what I have seen. The UI is sluggish,...
What is your primary use case for Microsoft Security Copilot?
My main use case for considering Microsoft Security Copilot is that I saw a demo at the RSAC conference that seemed i...
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
Siemplify ThreatNexus
Copilot for Security
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
FedEx Mondelez Intenrational Check Point Trustwave Atos Cyberint Bae Systems Crowe Longwall Security Telefonica Nordea HCL
Information Not Available
Find out what your peers are saying about Google Security Operations vs. Microsoft Security Copilot and other solutions. Updated: April 2026.
890,088 professionals have used our research since 2012.