

Microsoft Defender for Cloud and SentinelOne Singularity Identity compete in the cloud security market. Microsoft Defender has the upper hand due to its seamless integration with various Microsoft products, which is beneficial for organizations using Microsoft services extensively.
Features: Microsoft Defender for Cloud integrates well with Azure, offering advanced threat protection, compliance management, and multi-cloud capabilities. It leverages AI for predictive threat detection and provides a comprehensive security posture overview with a unified platform approach. SentinelOne Singularity Identity focuses on endpoint security with its behavioral AI detection, allowing for dynamic response and rollback features. It offers lightweight implementation and real-time protection with a strong emphasis on identity protection and threat detection capabilities.
Room for Improvement: Microsoft Defender can be complex regarding pricing structures and lacks transparency for smaller organizations. There's also a need for improved third-party integration and clearer cost communication. SentinelOne requires improvements in pricing transparency and consistency, particularly concerning yearly price hikes. Users seek enhanced communication regarding cost changes and a more straightforward pricing model.
Ease of Deployment and Customer Service: Microsoft Defender is praised for its seamless integration with Microsoft's ecosystem, providing easy deployment for existing Microsoft users. Its customer support is effective, offering extensive documentation for user assistance. SentinelOne's deployment is user-friendly with a customizable UI, and its customer support is highly responsive, with different levels of support that emphasize real-time threat management.
Pricing and ROI: Microsoft Defender has a complex pricing structure perceived as high by smaller organizations, but ROI is justified by its enhanced security outcomes. SentinelOne is more cost-effective compared to alternatives like CrowdStrike, although users desire more stable and transparent pricing. Both solutions offer significant security value, but pricing remains a critical consideration for decision-makers.
Defender proactively indexes and analyzes documents, identifying potential threats even when inactive, enhancing preventative security.
Identifying potential vulnerabilities has helped us avoid costly data losses.
Compared to not having Microsoft Defender for Cloud in place, we definitely saw an advantage by not having downtime due to a security threat.
Since security is critical, we prefer a quicker response time.
The support team was very responsive to queries.
They understand their product, but much like us, they struggle with the finer details, especially with new features.
They have been responsive to our needs as integrators and those of the client.
As we have reduced our on-premises infrastructure, it is about how we can migrate workloads to the cloud to make it easier, and then having everything fully encompassed and secured within that area makes it much easier for us to scale as needed and grow.
We are using infrastructure as a code, so we do not have any scalability issues with Microsoft Defender for Cloud implementation because our cloud automatically does it.
It has multiple licenses and features, covering infrastructures from a hundred to five hundred virtual machines, without any issues.
Defender's stability has been flawless for us.
I have not experienced any crashes or downtime.
Microsoft Defender for Cloud is very stable.
Microsoft, in general, could significantly improve its communication and support.
It would be beneficial to streamline recommendations to avoid unnecessary alerts and to refine the severity of alerts based on specific environments or environmental attributes.
The artificial intelligence features could be expanded to allow the system to autonomously manage security issues without needing intervention from admins.
There is a clear roadmap for improvements, including enhancing capabilities with AI and seamless functionality in an MSP model for deeper visibility across multiple agencies.
Security has essentially no cost when compared to the cost of a breach.
Every time we consider expanding usage, we carefully evaluate the necessity due to cost concerns.
We appreciate the licensing approach based on employee count rather than a big enterprise license.
The most valuable feature for me is the variety of APIs available.
This feature significantly aids in threat detection and enhances the user experience by streamlining security management.
The most valuable feature is the recommendations provided on how to improve security.
With visibility into endpoint telemetry, SentinelOne does provide useful information to find threat actors and empowers those who are in the business of threat hunting.
| Product | Mindshare (%) |
|---|---|
| Microsoft Defender for Cloud | 3.6% |
| SentinelOne Singularity Identity | 0.9% |
| Other | 95.5% |

| Company Size | Count |
|---|---|
| Small Business | 29 |
| Midsize Enterprise | 10 |
| Large Enterprise | 49 |
| Company Size | Count |
|---|---|
| Small Business | 4 |
| Midsize Enterprise | 5 |
| Large Enterprise | 13 |
Microsoft Defender for Cloud is a comprehensive security solution that provides advanced threat protection for cloud workloads. It offers real-time visibility into the security posture of cloud environments, enabling organizations to quickly identify and respond to potential threats. With its advanced machine learning capabilities, Microsoft Defender for Cloud can detect and block sophisticated attacks, including zero-day exploits and fileless malware.
The solution also provides automated remediation capabilities, allowing security teams to quickly and easily respond to security incidents. With Microsoft Defender for Cloud, organizations can ensure the security and compliance of their cloud workloads, while reducing the burden on their security teams.
Singularity Identity, a component of the Singularity platform, provides threat detection & response (ITDR) capabilities to defend Active Directory and domain-joined endpoints in real-time from adversaries aiming to gain persistent, elevated privilege and move covertly. Singularity Identity provides actionable, high-fidelity insight as attacks emerge from managed and unmanaged devices. It detects identity misuse and reconnaissance activity happening within endpoint processes targeting critical domain servers, service accounts, local credentials, local data, network data, and cloud data. On-agent cloaking and deception techniques slow the adversary down while providing situational awareness and halting adversarial attempts at lateral movement. Singularity Identity helps you detect and respond to identity-based attacks, providing early warning while misdirecting them away from production assets.
Singularity Identity’s primary use case is to protect credential data and disrupt identity-based attacks. The most valuable function of Singularity Identity is its ability to misdirect attackers by providing deceptive data to identity-based recon attacks. Additionally, it can hide and deny access to locally stored credentials or identity data on Active Directory domain controllers.
Singularity Identity also provides rapid detection and respond to identity attacks, capturing attack activity and feeding it directly to the Singularity platform’s Security DataLake for enterprise-wide analysis and response.
By implementing Singularity Identity, organizations benefit from enhanced security, reduced credential-related risks, and improved user productivity. It detects and responds to identity-based attacks, ensuring only authorized individuals can access critical identity data. With its cloaking capabilities to hide identity stored locally on endpoints or in the identity infrastructure and it’s ability to provide decoy results to identity-based attacks, organizations can effectively secure their sensitive or privileged identities, resulting in improved overall identity security.
We monitor all Vulnerability Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.