

Microsoft Defender for Cloud and SentinelOne Singularity Identity compete in the cloud security market. Microsoft Defender has the upper hand due to its seamless integration with various Microsoft products, which is beneficial for organizations using Microsoft services extensively.
Features: Microsoft Defender for Cloud integrates well with Azure, offering advanced threat protection, compliance management, and multi-cloud capabilities. It leverages AI for predictive threat detection and provides a comprehensive security posture overview with a unified platform approach. SentinelOne Singularity Identity focuses on endpoint security with its behavioral AI detection, allowing for dynamic response and rollback features. It offers lightweight implementation and real-time protection with a strong emphasis on identity protection and threat detection capabilities.
Room for Improvement: Microsoft Defender can be complex regarding pricing structures and lacks transparency for smaller organizations. There's also a need for improved third-party integration and clearer cost communication. SentinelOne requires improvements in pricing transparency and consistency, particularly concerning yearly price hikes. Users seek enhanced communication regarding cost changes and a more straightforward pricing model.
Ease of Deployment and Customer Service: Microsoft Defender is praised for its seamless integration with Microsoft's ecosystem, providing easy deployment for existing Microsoft users. Its customer support is effective, offering extensive documentation for user assistance. SentinelOne's deployment is user-friendly with a customizable UI, and its customer support is highly responsive, with different levels of support that emphasize real-time threat management.
Pricing and ROI: Microsoft Defender has a complex pricing structure perceived as high by smaller organizations, but ROI is justified by its enhanced security outcomes. SentinelOne is more cost-effective compared to alternatives like CrowdStrike, although users desire more stable and transparent pricing. Both solutions offer significant security value, but pricing remains a critical consideration for decision-makers.
Defender proactively indexes and analyzes documents, identifying potential threats even when inactive, enhancing preventative security.
Identifying potential vulnerabilities has helped us avoid costly data losses.
Compared to not having Microsoft Defender for Cloud in place, we definitely saw an advantage by not having downtime due to a security threat.
Since security is critical, we prefer a quicker response time.
The support team was very responsive to queries.
They understand their product, but much like us, they struggle with the finer details, especially with new features.
They have been responsive to our needs as integrators and those of the client.
As we have reduced our on-premises infrastructure, it is about how we can migrate workloads to the cloud to make it easier, and then having everything fully encompassed and secured within that area makes it much easier for us to scale as needed and grow.
We are using infrastructure as a code, so we do not have any scalability issues with Microsoft Defender for Cloud implementation because our cloud automatically does it.
It has multiple licenses and features, covering infrastructures from a hundred to five hundred virtual machines, without any issues.
Defender's stability has been flawless for us.
I have not experienced any crashes or downtime.
Microsoft Defender for Cloud is very stable.
Microsoft, in general, could significantly improve its communication and support.
It would be beneficial to streamline recommendations to avoid unnecessary alerts and to refine the severity of alerts based on specific environments or environmental attributes.
The artificial intelligence features could be expanded to allow the system to autonomously manage security issues without needing intervention from admins.
There is a clear roadmap for improvements, including enhancing capabilities with AI and seamless functionality in an MSP model for deeper visibility across multiple agencies.
Security has essentially no cost when compared to the cost of a breach.
Every time we consider expanding usage, we carefully evaluate the necessity due to cost concerns.
We appreciate the licensing approach based on employee count rather than a big enterprise license.
The most valuable feature for me is the variety of APIs available.
This feature significantly aids in threat detection and enhances the user experience by streamlining security management.
The most valuable feature is the recommendations provided on how to improve security.
With visibility into endpoint telemetry, SentinelOne does provide useful information to find threat actors and empowers those who are in the business of threat hunting.
| Product | Mindshare (%) |
|---|---|
| Microsoft Defender for Cloud | 3.1% |
| SentinelOne Singularity Identity | 0.9% |
| Other | 96.0% |

| Company Size | Count |
|---|---|
| Small Business | 30 |
| Midsize Enterprise | 13 |
| Large Enterprise | 49 |
| Company Size | Count |
|---|---|
| Small Business | 4 |
| Midsize Enterprise | 5 |
| Large Enterprise | 13 |
Microsoft Defender for Cloud is a comprehensive security platform offering integration with Microsoft services, multi-cloud capability, AI-driven threat detection, compliance, and unified visibility for improved security operations.
Microsoft Defender for Cloud manages security operations by integrating with Microsoft services and supporting multi-cloud environments. Its features include AI-driven threat detection, compliance oversight, and advanced threat protection. It simplifies processes with unified visibility, threat intelligence, and automated workflows, enhancing security posture across various workloads. Despite its robust capabilities, improvements are needed in third-party tool integration, comprehensive AI-driven remediation, and a more intuitive dashboard. Users report complexity in licensing, inadequate documentation, and high costs, with room for enhancements in compliance reporting and multi-cloud support.
What are the key features of Microsoft Defender for Cloud?Industries leverage Microsoft Defender for Cloud for security posture management and endpoint protection. Many companies integrate it with Office 365 for enhanced functionality. It provides comprehensive security overviews by monitoring cloud vulnerabilities, limiting unauthorized access, and replacing existing tools with its extensive capabilities from network security to compliance checks, securing Azure infrastructure, and enhancing client security.
SentinelOne Singularity Identity offers AI-driven detection, prevention, and cloud protection, providing real-time coverage and streamlined security management through its unified console and customizable interface.
Singularity Identity enhances threat detection with dynamic capabilities, facilitating real-time protection and easy user workflows. Its management console offers a unified view for deeper risk analysis, boosting operational security. Through behavioral analysis and adaptable interfaces, threat response becomes efficient. Key elements include identity guarding and quick incident mitigation. Automated remediation options and rollback features are impactful, ensuring decreased response times. Challenges include improving user accessibility, especially for non-IT individuals, and enhancing customer support with faster solutions and robust reporting. Performance issues like CPU usage demand solutions, while endpoint management and agent updates could benefit from automation. Adding network response features and lowering costs may enhance engagement.
What are the most important features?Industries leverage SentinelOne Singularity Identity for comprehensive threat monitoring across networks. It ensures cloud and endpoint security, plus control over identity and data breaches. By replacing outdated antivirus systems, organizations emphasize proactive defense, visibility, incident response, and detecting lateral movements. Implementing this solution supports strong network and endpoint security, enhances cloud management, and maintains a robust security framework.
We monitor all Vulnerability Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.