Microsoft Defender for Cloud Apps vs SentinelOne Singularity Identity comparison

Microsoft Defender for Cloud Apps vs. SentinelOne Singularity Identity

Download the complete report

Helped 879,422 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

ROI

Sentiment score

7.0

Microsoft Defender for Cloud Apps enhances security and efficiency, offering significant ROI with up to 60% savings and streamlined operations.

Sentiment score

6.8

SentinelOne Singularity Identity offers enhanced protection and value, saving users over 200 hours annually in security investigations.

The biggest return on investment so far has been visibility, knowing what we have in our environment.

reviewer2596311

Cloud and data protection engineer at a university with 10,001+ employees

As a small team, Microsoft Defender for Cloud Apps allowed us to manage systems with just one or two people.

For more quotes and insights, download the Microsoft Defender for Cloud Apps report

Manager, Information Technology Security Compliance at a manufacturing company with 201-500 employees

We have at least saved the costs we had from the Netskope solution this year.

Frank Van Der Spek

Security and Continuity Manager at Rolinco NV

No quotes available

For more quotes and insights, download the SentinelOne Singularity Identity report

Customer Service

Sentiment score

6.4

Microsoft Defender for Cloud Apps support is praised for its responsiveness, though some users experience delays and resource access challenges.

Sentiment score

7.3

SentinelOne Singularity Identity is lauded for comprehensive, responsive support, offering rapid issue resolution and dedicated customer success resources.

Their customer service is pretty good, but it's frustrating to go through three or four channels before reaching the right person.

reviewer2596311

Cloud and data protection engineer at a university with 10,001+ employees

The support is excellent, and the speed of response is commendable.

reviewer1710705

Solutions Architect at a university with 51-200 employees

There were instances where the engineers were knowledgeable and helpful, but at other times it felt like a ping pong game, with unnecessary transfers until the right person was found.

For more quotes and insights, download the Microsoft Defender for Cloud Apps report

Manager, Information Technology Security Compliance at a manufacturing company with 201-500 employees

They have been responsive to our needs as integrators and those of the client.

For more quotes and insights, download the SentinelOne Singularity Identity report

Senior Consultant at CGI

Scalability Issues

Sentiment score

7.4

Microsoft Defender for Cloud Apps offers scalable, seamless integration, and reliable management for organizations of all sizes and environments.

Sentiment score

7.9

SentinelOne Singularity Identity is scalable and flexible but faces challenges with deployment maturity and third-party integration scalability.

For what I know about the log collector and how much data it can take in, it is super scalable and capable of handling high workloads.

reviewer2596311

Cloud and data protection engineer at a university with 10,001+ employees

Microsoft Defender for Cloud Apps is very scalable, provided you have the right subscription.

reviewer1710705

Solutions Architect at a university with 51-200 employees

In my experience, Microsoft Defender for Cloud Apps is good enough for small to medium businesses.

For more quotes and insights, download the Microsoft Defender for Cloud Apps report

Manager, Information Technology Security Compliance at a manufacturing company with 201-500 employees

No quotes available

For more quotes and insights, download the SentinelOne Singularity Identity report

Stability Issues

Sentiment score

8.0

Microsoft Defender for Cloud Apps is highly stable, reliable, and maintains performance with minor, swiftly resolved incidents.

Sentiment score

8.1

SentinelOne Singularity Identity is highly stable with minimal disruptions, responsive support, and low CPU resource usage.

I would rate it a ten because I have not experienced any stability issues so far with Defender for Cloud Apps.

reviewer2638737

Head of Security Operations at a computer software company with 51-200 employees

I would assess the stability and reliability of Microsoft Defender for Cloud Apps as stable

Usha Talluri

Network Engineer at Apexon

My impression on the stability and reliability of Microsoft Defender for Cloud Apps is that it is very stable.

Frank Van Der Spek

Security and Continuity Manager at Rolinco NV

For more quotes and insights, download the Microsoft Defender for Cloud Apps report

No quotes available

For more quotes and insights, download the SentinelOne Singularity Identity report

Room For Improvement

Microsoft Defender for Cloud Apps seeks enhanced pricing, integration, user interface, automation, and multi-cloud support, while improving insights and management.

SentinelOne Singularity Identity needs improved policies, interfaces, support, and features like reporting, updates, and integration for better usability.

For data loss prevention, it would be useful to be able to drill down into the kind of data being transferred over CloudApp.

reviewer2638737

Head of Security Operations at a computer software company with 51-200 employees

Defender typically connects to Entra ID, but we have local users on the cloud for database access, SSH, or RDS, and there is nothing produced by Defender regarding those local IAM users.

Usha Talluri

Network Engineer at Apexon

Microsoft Defender for Cloud Apps would benefit if Microsoft allows users to fine-tune false positives, enabling us to dismiss alerts or make adjustments so that such things don't trigger multiple times in the future.

reviewer2257149

Security delivery analyst at a tech vendor with 10,001+ employees

For more quotes and insights, download the Microsoft Defender for Cloud Apps report

There is a clear roadmap for improvements, including enhancing capabilities with AI and seamless functionality in an MSP model for deeper visibility across multiple agencies.

For more quotes and insights, download the SentinelOne Singularity Identity report

Senior Consultant at CGI

Setup Cost

Microsoft Defender for Cloud Apps is seen as cost-effective for enterprises within Microsoft ecosystems, despite standalone pricing concerns.

SentinelOne Singularity Identity offers flexible pricing seen as both cost-effective and sometimes expensive, reflecting its comprehensive features.

The pricing for Microsoft Defender for Cloud Apps is acceptable.

reviewer1710705

Solutions Architect at a university with 51-200 employees

My organization is currently revisiting pricing, but previously, the cost was a bit expensive, yet comparable to other solutions with similar functionalities and features.

For more quotes and insights, download the Microsoft Defender for Cloud Apps report

Manager, Information Technology Security Compliance at a manufacturing company with 201-500 employees

It's not the cheapest, but also not the most expensive, placing it in the mid-level range.

Faran Hasan

IT Architect at a logistics company with 10,001+ employees

No quotes available

For more quotes and insights, download the SentinelOne Singularity Identity report

Valuable Features

Microsoft Defender for Cloud Apps integrates well, offering threat detection, management ease, shadow IT discovery, and robust security enhancements.

SentinelOne Singularity Identity offers AI-driven security with dynamic threat detection, seamless management, and enhanced visibility for rapid remediation.

It provides excellent suggestions and options for configuration; for example, it can track suspicious files getting uploaded to cloud resources on Azure based on their signatures, generating alerts for those files.

reviewer2257149

Security delivery analyst at a tech vendor with 10,001+ employees

The product recommends things that need to be blocked and allows for dynamic configuration, which cuts down on potential issues that might arise from going through lists and understanding what needs to be blocked.

reviewer2777910

Partner & Chief Executive Officer at a consultancy with 51-200 employees

The ability to sanction unsanctioned apps using Secure Score benchmarking, included in Cloud, is also beneficial.

reviewer2638737

Head of Security Operations at a computer software company with 51-200 employees

For more quotes and insights, download the Microsoft Defender for Cloud Apps report

With visibility into endpoint telemetry, SentinelOne does provide useful information to find threat actors and empowers those who are in the business of threat hunting.

For more quotes and insights, download the SentinelOne Singularity Identity report

Senior Consultant at CGI

Categories and Ranking

Microsoft Defender for Clou...

Ranking in Advanced Threat Protection (ATP)

14th

Average Rating

8.4

Reviews Sentiment

7.1

Number of Reviews

Ranking in other categories

Cloud Access Security Brokers (CASB) (4th), Microsoft Security Suite (12th)

SentinelOne Singularity Ide...

Ranking in Advanced Threat Protection (ATP)

15th

Average Rating

9.0

Reviews Sentiment

7.3

Number of Reviews

Ranking in other categories

Vulnerability Management (21st), Threat Deception Platforms (3rd), Identity Threat Detection and Response (ITDR) (5th)

Mindshare comparison

As of January 2026, in the Advanced Threat Protection (ATP) category, the mindshare of Microsoft Defender for Cloud Apps is 1.8%, up from 1.1% compared to the previous year. The mindshare of SentinelOne Singularity Identity is 1.9%, up from 1.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Advanced Threat Protection (ATP) Market Share Distribution
Product	Market Share (%)
Microsoft Defender for Cloud Apps	1.8%
SentinelOne Singularity Identity	1.9%
Other	96.3%

Advanced Threat Protection (ATP)

Featured Reviews

Frank Van Der Spek

Security and Continuity Manager at Rolinco NV

Deployment has been seamless with insightful data categorization and enhanced control

The features of Microsoft Defender for Cloud Apps that I have found most valuable include the overall portal view, with bubble graphs which give us insight into what goes where in the categorization, nowadays with Generative AI but all kinds of categorization, collaboration, etc. That central view of the portal is very useful for us. The impact of Microsoft Defender for Cloud Apps on our organization's ability to assess and manage app related risks has been significant because we have more visibility. Therefore, we can add more control, and we have already done so. This was not possible in the old solution, in the old CASB solution with Netskope. We now can see on the spot, and we do that almost weekly, what the end users are utilizing, which cloud providers or cloud apps they're using. The visibility into OAuth apps provided by Microsoft Defender for Cloud Apps is very good. The visibility into risk and risk management of our organization's Generative AI apps is very nice, as you can choose the category Generative AI and then see exactly what traffic has been going to and from Generative AI in the cloud. This makes us very insightful on what is used within the company. We have some policies on blocking specific Generative AI, and we use within our company one particular AI part, which is CoPilot of Microsoft. In this way, we can see what the end users are using other than CoPilot, and that makes us more in control. The effectiveness of the integration of Microsoft Defender for Cloud Apps with Defender XDR and defending against SaaS attacks is very intuitive. It works immediately if we create a new policy or in Purview or in Microsoft Defender for Cloud Apps, or when we make an app unsanctioned by blocking it, then it is almost immediately, or at least within a couple of hours, effective on all the endpoints where the EDR is running. This gives us much better control over things than before.

Read full review

We have seen a night and day difference in mean time to detect reduction

Senior Consultant at CGI

Incident response is one of the key areas where the solution has been very useful. Whenever there is an incident, instead of being reactive, the government is now able to quickly gain the data that it needs to see what its end agency is also seeing and partner with them in real-time to look at the same data and to collaborate where needed, empowering the agency to be able to do their job. When it comes to the mean time to detect, we see a night and day difference. When you have an MSP model with visibility across multiple entities, your ability to get a tip, follow up on the tip, and investigate it is night and day. There's no comparison between having visibility and having across-agency visibility. SentinelOne has definitely reduced their mean time to respond. With this visibility, you can now respond. Before, there was no visibility, so we definitely see a big difference. With visibility into endpoint telemetry, SentinelOne does provide useful information to find threat actors and empowers those who are in the business of threat hunting. Prior to this, the alternative was partnering with an agency. going on-site and getting access. Now, being able to do that work remotely in real-time, it's a ninety-day difference in terms of being able to quickly, correctly, quickly respond and partner with the end agencies. That's a definite benefit. As an architect, I'm very curious about how AI takes security the next step forward, what it enables people to do differently, more quickly, or more comprehensively, and how that meets some of the needs today. I think that AI holds a lot of potential, and it can allow analysts to do their job quicker. It can allow them to do their job with more helpful context and, as a result, be able to perform orders of magnitude better than they would have without the tool.

Read full review

See which vendors are best for you

Use our free recommendation engine to learn which Advanced Threat Protection (ATP) solutions are best for your needs.

See recommendations

879,422 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

12%

Financial Services Firm

11%

Manufacturing Company

Government

Computer Software Company

12%

Manufacturing Company

Financial Services Firm

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	15
Midsize Enterprise	10
Large Enterprise	19

By reviewers
Company Size	Count
Small Business	4
Midsize Enterprise	5
Large Enterprise	13

Questions from the Community

Which is the better security solution - Cisco Umbrella or Microsoft Cloud App Security?

Cisco Umbrella is an integral component of the Cisco SASE architecture. It integrates security in a single, cloud-native solution, unifying multiple features like DNS-layer security, threat intelli...

What do you like most about Microsoft Cloud App Security?

It does a great job of monitoring and maintaining a security baseline. For us, that is a key element. The notifications are pretty good.

What is your experience regarding pricing and costs for Microsoft Cloud App Security?

At the time of implementation, when the size of our organization was small, it was a more affordable product. Since all our productivity applications were on O365, Microsoft Defender for Cloud Apps...

What is your experience regarding pricing and costs for SentinelOne Singularity Identity?

I have no visibility into pricing, setup costs, or licensing as the government handles these aspects directly with SentinelOne. We do the integrating, and they process the payments.

What needs improvement with SentinelOne Singularity Identity?

Regarding improvements, I believe that API integration in third-party applications could be better. The Singularity tool uses its own credential in the record features.

What is your primary use case for SentinelOne Singularity Identity?

One of the main use cases I describe is that we face lateral movement in our customer's server side. The customer is using 50 or more servers for the news channel, Daily Thanthi. Among those, one s...

Zscaler Internet Access vs Microsoft Defender for Cloud Apps

Comparisons

Compared 15% of the time

Cisco Umbrella vs Microsoft Defender for Cloud Apps

Compared 15% of the time

Netskope vs Microsoft Defender for Cloud Apps

Compared 11% of the time

Prisma Access by Palo Alto Networks vs Microsoft Defender for Cloud Apps

Compared 6% of the time

Microsoft Defender for Cloud vs Microsoft Defender for Cloud Apps

Compared 5% of the time

More Microsoft Defender for Cloud Apps Competitors

Huntress Managed ITDR vs SentinelOne Singularity Identity

Compared 12% of the time

Tenable Vulnerability Management vs SentinelOne Singularity Identity

Compared 9% of the time

CrowdStrike Falcon vs SentinelOne Singularity Identity

Compared 6% of the time

Qualys VMDR vs SentinelOne Singularity Identity

Compared 6% of the time

Microsoft Defender for Identity vs SentinelOne Singularity Identity

Compared 6% of the time

More SentinelOne Singularity Identity Competitors

Product Reports

Microsoft Defender for Cloud Apps

Download Microsoft Defender for Cloud Apps product report

Microsoft Defender for Cloud Apps report

SentinelOne Singularity Identity

Download SentinelOne Singularity Identity product report

Also Known As

MS Cloud App Security, Microsoft Cloud App Security

No data available

Overview

Microsoft Defender for Cloud Apps is a comprehensive security solution that provides protection for cloud-based applications and services. It offers real-time threat detection and response, as well as advanced analytics and reporting capabilities. With Defender for Cloud Apps, organizations can ensure the security of their cloud environments and safeguard against cyber threats. Whether you're running SaaS applications, IaaS workloads, or PaaS services, Microsoft Defender for Cloud Apps can help you secure your cloud environment and protect your business from cyber threats.

Microsoft Defender for Cloud Apps Benefits:

Provides comprehensive security for cloud applications
Integrates with other Microsoft security tools
Easy to use and deploy
Provides real-time threat detection and response
Strong protection against phishing attacks and other common threats
Highly customizable to meet specific needs of different organizations

Microsoft Defender for Cloud Apps Use Cases:

Governance, authentication, security, and compliance.
Detects shadow IT and anomalous user behavior
Controls access to applications
Provides auditing and filtering setups
Used for end-user compute devices, file monitoring, user investigation, and activity
Used for data governance, threat detection, and getting visibility over cloud applications
Used to identify information about applications beyond organizational boundaries
Prevent exfiltration and data filtration of corporate data
Used to deal with spam emails and detect shadow IT

Reviews from Real Users

Ram-Krish, Cloud Security & Governance at a financial services firm, says that Microsoft Defender for Cloud Apps "Integrates well and helps us in protecting sensitive information, but takes time to scan and apply the policies and cannot detect everything we need".

PeerSpot user, Senior Cloud & Security Consultant at a tech services, writes that Microsoft Defender for Cloud Apps "Great for monitoring user activity and protecting data while integrating well with other applications".

Simon Burgess,Infrastructure Engineer at SBITSC, states that Microsoft Defender for Cloud Apps is "A fluid, intelligent product for great visibility, centralized management, and increased uptime".

Microsoft

Singularity Identity, a component of the Singularity platform, provides threat detection & response (ITDR) capabilities to defend Active Directory and domain-joined endpoints in real-time from adversaries aiming to gain persistent, elevated privilege and move covertly. Singularity Identity provides actionable, high-fidelity insight as attacks emerge from managed and unmanaged devices. It detects identity misuse and reconnaissance activity happening within endpoint processes targeting critical domain servers, service accounts, local credentials, local data, network data, and cloud data. On-agent cloaking and deception techniques slow the adversary down while providing situational awareness and halting adversarial attempts at lateral movement. Singularity Identity helps you detect and respond to identity-based attacks, providing early warning while misdirecting them away from production assets.

Singularity Identity’s primary use case is to protect credential data and disrupt identity-based attacks. The most valuable function of Singularity Identity is its ability to misdirect attackers by providing deceptive data to identity-based recon attacks. Additionally, it can hide and deny access to locally stored credentials or identity data on Active Directory domain controllers.

Singularity Identity also provides rapid detection and respond to identity attacks, capturing attack activity and feeding it directly to the Singularity platform’s Security DataLake for enterprise-wide analysis and response.

By implementing Singularity Identity, organizations benefit from enhanced security, reduced credential-related risks, and improved user productivity. It detects and responds to identity-based attacks, ensuring only authorized individuals can access critical identity data. With its cloaking capabilities to hide identity stored locally on endpoints or in the identity infrastructure and it’s ability to provide decoy results to identity-based attacks, organizations can effectively secure their sensitive or privileged identities, resulting in improved overall identity security.

SentinelOne

Sample Customers

Customers for Microsoft Defender for Cloud Apps include Accenture, St. Luke’s University Health Network, Ansell, and Nakilat.

Information Not Available

Microsoft Defender for Cloud Apps vs. SentinelOne Singularity Identity