No more typing reviews! Try our Samantha, our new voice AI agent.

Microsoft Defender for Cloud vs Wazuh comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.0
SentinelOne Singularity Cloud Security enhances detection, reduces incident response time, and saves over 30% in costs and resources.
Sentiment score
7.0
Microsoft Defender for Cloud boosts productivity, enhances security, and integrates seamlessly, offering cost-efficiency and significant return on investment.
Sentiment score
3.7
Wazuh offers cost-effective security, reducing detection to an hour and response to two days, benefiting small businesses.
The detailed information PingSafe gives about how to fix vulnerabilities reduces the time spent on remediation by about 70 to 80 percent.
Security and Compliance Manager at Bidgely
After implementing SentinelOne, it takes about five to seven minutes.
Cloud engineer at a construction company with 5,001-10,000 employees
Our ability to get in and review our vulnerability stance, whether daily, monthly, weekly, or whatever it might be, has drastically improved over our prior provider.
IT Support Specialist at a non-tech company with 201-500 employees
Defender proactively indexes and analyzes documents, identifying potential threats even when inactive, enhancing preventative security.
Endpoint management at a government with 10,001+ employees
Identifying potential vulnerabilities has helped us avoid costly data losses.
Manager at CBTS
Compared to not having Microsoft Defender for Cloud in place, we definitely saw an advantage by not having downtime due to a security threat.
Principal Microsoft Consultant at MicroAge
I have seen value in security cost savings with Wazuh, as using proprietary EDR versions could save us substantial money.
Security Consultant at ebenezer.okoh@agorasecurity.it
 

Customer Service

Sentiment score
7.8
SentinelOne's customer service is praised for expertise and responsiveness, with improved satisfaction post-acquisition despite occasional support variability.
Sentiment score
6.2
Microsoft Defender for Cloud offers efficient premium support, but standard support's responsiveness varies, with comprehensive documentation often assisting users.
Sentiment score
3.5
Users generally praise Wazuh's support, highlighting strong customer service and useful community resources, despite occasional delays in response times.
When we send an email, they respond quickly and proactively provide solutions.
Security and Compliance Manager at Bidgely
They took direct responsibility for the system and could solve queries quickly.
Senior DevOps Engineer at a tech services company with 501-1,000 employees
Having a reliable team ready and willing to assist with any issues is essential.
Director, DevOps at Relay Network
Since security is critical, we prefer a quicker response time.
Manager at CBTS
The support team was very responsive to queries.
Programme Manager- Cyber Fusion- Group CISO at a financial services firm with 10,001+ employees
They understand their product, but much like us, they struggle with the finer details, especially with new features.
Endpoint management at a government with 10,001+ employees
They responded quickly, which was crucial as I was on a time constraint.
Cyber Security Software Engineer at a tech services company with 11-50 employees
We use the open-source version of Wazuh, which does not provide paid support.
Tech Lead at a tech vendor with 201-500 employees
The documentation is good and provides clear instructions, though it's targeted at those with technical backgrounds.
Student at Dakota State University
 

Scalability Issues

Sentiment score
8.1
SentinelOne Singularity Cloud Security offers scalable solutions, seamlessly integrating with systems and efficiently supporting dynamic and growing environments.
Sentiment score
7.5
Microsoft Defender for Cloud adapts and scales efficiently with diverse organizational needs, integrating seamlessly across various cloud services.
Sentiment score
6.7
Wazuh is scalable and flexible, but deployment complexity and technical expertise are needed for handling large data sets.
I would rate the scalability of PingSafe 10 out of 10.
Sr DevOps Engineer at a media company with 51-200 employees
The SentinelOne Singularity Cloud exhibits high scalability.
Security Analyst at Intersistemi Italia s.p.a.
We've automated in our MDM so any device that we start in our MDM automatically installs SentinelOne.
IT Support Specialist at a non-tech company with 201-500 employees
As we have reduced our on-premises infrastructure, it is about how we can migrate workloads to the cloud to make it easier, and then having everything fully encompassed and secured within that area makes it much easier for us to scale as needed and grow.
Principal Microsoft Consultant at MicroAge
We are using infrastructure as a code, so we do not have any scalability issues with Microsoft Defender for Cloud implementation because our cloud automatically does it.
Senior Cloud Platform Engineer at Deutsche Börse
It has multiple licenses and features, covering infrastructures from a hundred to five hundred virtual machines, without any issues.
Snr. Infrastructure Architect (Data Centre) at LogicEra
It can accommodate thousands of endpoints on one instance, and multiple instances can run for different clients.
Security Operations Center Analyst at mailbox.org
Currently, I don't see any limitations in terms of scalability as Wazuh can still connect many endpoints.
Security Consultant at ebenezer.okoh@agorasecurity.it
Scalability depends on the configuration and the infrastructure resources like compute and memory we allocate.
Tech Lead at a tech vendor with 201-500 employees
 

Stability Issues

Sentiment score
8.2
SentinelOne Singularity is praised for reliability and stability, despite occasional UI glitches and communication delays.
Sentiment score
7.6
Microsoft Defender for Cloud is stable and reliable, with minimal issues and high stability ratings, despite occasional performance hiccups.
Sentiment score
6.2
Wazuh is generally stable, though updates may cause issues; proper maintenance and installation minimize potential disruptions.
SentinelOne Singularity Cloud is incredibly reliable.
Security Analyst at Intersistemi Italia s.p.a.
I would rate it a ten out of ten for stability.
Sr security engineer at Halodoc
As a security tool, our primary focus is on the results it delivers, rather than the aesthetics of the dashboards themselves.
Cyber Defence Analyst at a media company with 51-200 employees
Defender's stability has been flawless for us.
Engineer at a computer software company with 201-500 employees
I have not experienced any crashes or downtime.
Head Of IT at Cirrus Response
Microsoft Defender for Cloud is very stable.
Cloud architect at a tech vendor with 1,001-5,000 employees
The stability of Wazuh is strong, with no issues stemming from the solution itself.
Tech Lead at a tech vendor with 201-500 employees
The stability of Wazuh is largely dependent on maintenance.
Security Operations Center Analyst at mailbox.org
The indexer frequently times out, requiring system restarts.
Cyber Security Software Engineer at a tech services company with 11-50 employees
 

Room For Improvement

SentinelOne Singularity Cloud needs better integration, enhanced functionality, improved user interface, and cost-effective, stable solutions with comprehensive support.
Microsoft Defender for Cloud needs better integration, customization, automation, support, pricing, interoperability, analytics, legacy support, threat detection, and AI integration.
Wazuh needs user interface improvements, scalability, integration, enhanced cloud security, better documentation, and reduced resource consumption for effectiveness.
I would also like to see Cloud Native Security offer APIs that allow us to directly build dashboards within the platform.
Senior Cybersecurity Engineer at a computer software company with 11-50 employees
Detection should be in near real-time.
Solution Cloud Architect at a insurance company with 501-1,000 employees
If notifications are available, then it will be more helpful, easy, and time-saving.
Sr Security Analyst at a computer software company with 201-500 employees
Microsoft, in general, could significantly improve its communication and support.
Endpoint management at a government with 10,001+ employees
It would be beneficial to streamline recommendations to avoid unnecessary alerts and to refine the severity of alerts based on specific environments or environmental attributes.
Works at Coca-Cola HBC
The artificial intelligence features could be expanded to allow the system to autonomously manage security issues without needing intervention from admins.
Cloud Consultant at i-Community AG
Machine learning is needed along with understanding user behavior and behavioral patterns.
Engineer Information Security at N-Able (Pvt) Ltd
The integration modules are insufficiently developed, necessitating the creation of custom integration solutions using tools like Logstash and PubSub.
Tech Lead at a tech vendor with 201-500 employees
I think Wazuh should improve by introducing AI functionalities, as it would be beneficial to see AI incorporated in the threat hunting and detection functionalities.
Security Consultant at ebenezer.okoh@agorasecurity.it
 

Setup Cost

SentinelOne Singularity Cloud Security provides flexible, modular pricing that is competitive and valued by enterprises for cloud security solutions.
Opinions on Microsoft Defender for Cloud pricing vary; it's seen as competitive yet costly, especially for complex workloads like Kubernetes.
Wazuh is a cost-effective open-source platform with optional managed services and support, emphasizing affordability for enterprises.
With very little negotiation involved, we just let them know what we could pay and they were willing to meet us at slightly above what we paid with Sophos, which was still very fair for what we were looking at.
IT Support Specialist at a non-tech company with 201-500 employees
I recall Cloud Native Security charging a slightly higher premium previously.
Senior Cybersecurity Engineer at a computer software company with 11-50 employees
This would have been a poor return on investment, especially considering Wiz's high cost.
Lead Data & Cloud Security Engineer at a media company with 501-1,000 employees
Security has essentially no cost when compared to the cost of a breach.
Director, Cloud and Modern Workplace at Informanix Technology Group
Every time we consider expanding usage, we carefully evaluate the necessity due to cost concerns.
Programme Manager- Cyber Fusion- Group CISO at a financial services firm with 10,001+ employees
We appreciate the licensing approach based on employee count rather than a big enterprise license.
Manager, Microsoft Technology Alliance at Silverfort
Wazuh is completely free of charge.
Security Consultant at ebenezer.okoh@agorasecurity.it
I would definitely recommend Wazuh, especially considering Fortinet's licensing model which is confusing and overpriced in my opinion.
Engineer Information Security at N-Able (Pvt) Ltd
Totaling around two lakh Indian rupees per month.
Tech Lead at a tech vendor with 201-500 employees
 

Valuable Features

SentinelOne Singularity Cloud offers AI-driven threat detection, intuitive interface, seamless integration, automated remediation, and enhanced security management.
Microsoft Defender for Cloud enhances security with AI-driven threat detection, seamless Azure integration, and comprehensive compliance management.
Wazuh offers cost-effective, flexible security solutions with features like SIEM, EDR, and compliance management for diverse environments.
Cloud Native Security's cloud SIEM feature has been essential in preventing our most critical security incidents.
Senior Cybersecurity Engineer at a computer software company with 11-50 employees
The cloud misconfiguration feature gave us almost zero false positives.
Sr security engineer at Halodoc
PingSafe proactively detects and alerts us to such accidental exposures of sensitive information, including SaaS credentials.
Sr Manager DevSecOps at Bidgely
The most valuable feature for me is the variety of APIs available.
Programme Manager- Cyber Fusion- Group CISO at a financial services firm with 10,001+ employees
This feature significantly aids in threat detection and enhances the user experience by streamlining security management.
Cloud Consultant at i-Community AG
The most valuable feature is the recommendations provided on how to improve security.
Cloud architect at a tech vendor with 1,001-5,000 employees
Wazuh is a SIEM tool that is highly customizable and versatile.
Security Operations Center Analyst at mailbox.org
The system allows us to monitor endpoints effectively and collect security data that can be utilized across other platforms such as SOAR.
Security Consultant at ebenezer.okoh@agorasecurity.it
With this open source tool, organizations can establish their own customized setup.
Cyber Security Software Engineer at a tech services company with 11-50 employees
 

Categories and Ranking

SentinelOne Singularity Clo...
Sponsored
Average Rating
8.6
Reviews Sentiment
7.5
Number of Reviews
118
Ranking in other categories
Vulnerability Management (4th), Cloud and Data Center Security (3rd), Container Security (3rd), Cloud Workload Protection Platforms (CWPP) (4th), Cloud Security Posture Management (CSPM) (3rd), Cloud-Native Application Protection Platforms (CNAPP) (3rd), Compliance Management (2nd), AI Observability (2nd)
Microsoft Defender for Cloud
Average Rating
8.0
Reviews Sentiment
6.9
Number of Reviews
89
Ranking in other categories
Vulnerability Management (7th), Container Management (8th), Container Security (7th), Cloud Workload Protection Platforms (CWPP) (1st), Cloud Security Posture Management (CSPM) (4th), Cloud-Native Application Protection Platforms (CNAPP) (4th), Data Security Posture Management (DSPM) (5th), Microsoft Security Suite (7th), Compliance Management (4th), Cloud Detection and Response (CDR) (3rd)
Wazuh
Average Rating
7.4
Reviews Sentiment
6.1
Number of Reviews
50
Ranking in other categories
Log Management (1st), Security Information and Event Management (SIEM) (2nd), Extended Detection and Response (XDR) (5th)
 

Mindshare comparison

Cloud Workload Protection Platforms (CWPP) Mindshare Distribution
ProductMindshare (%)
Microsoft Defender for Cloud16.5%
AWS GuardDuty14.2%
Wiz11.6%
Other57.7%
Cloud Workload Protection Platforms (CWPP)
Security Information and Event Management (SIEM) Mindshare Distribution
ProductMindshare (%)
Wazuh5.8%
Splunk Enterprise Security7.2%
IBM Security QRadar5.3%
Other81.7%
Security Information and Event Management (SIEM)
 

Featured Reviews

SC
Information Security Engineer at DataVigilant Infotech
Enables us to prioritize and effectively address critical security issues
Evidence-based reporting helps us to prioritize and solve critical security issues. The new visualization feature demonstrates how an attacker can enter the system, highlighting the potential path that can be exploited and outlining all the steps the attacker could take. With that visibility, we can ensure the perimeter is strong and attackers cannot enter, thus reducing the risk. It has helped us prioritize issues. The visibility into how an attack could happen is valuable. For example, it highlights the system vulnerability and outlines where an attack could propagate. The visualization helps me to prioritize remediation, and if I don't know where to start, I can check to see the score that enables me to prioritize issues. I am using infrastructure-as-code scanning, and it's one of the useful features. In pre-production, it identifies embedded secrets and misconfigurations, including issues with Kubernetes or some privileged containers. This feature allows us to pass the audit and secure IaC code so that it isn't easily exploitable by attackers. We can more proactively work to identify and resolve vulnerabilities by using the dashboard and the alerting system that SentinelOne provides. It helps us with audits and compliance. We can show the compliance in percentage. We can confidently say that our company or infrastructure is very secure. It has improved our security posture by 30% to 35%. It has reduced our false positives by 30%. It has helped teams collaborate better. The security team manages SentinelOne Singularity Cloud Security, and when it flags vulnerabilities, they are forwarded to DevOps for remediation. Previously, we needed to identify and report the issues, but there would be lapses in communication. Now, there is a centralized dashboard that anyone can look at and see the open issues and work on them.
RW
Head Of IT at Cirrus Response
Cloud security has cut investigation time and now reveals threats faster but needs simpler oversight
When deploying AI applications, my key security concerns with Microsoft Defender for Cloud are data loss, leakage of data, and guardrails around the actual AI, and I am hoping that this is going to help me put those guardrails in place and identify data exfiltration. Microsoft Defender for Cloud has not helped me manage and secure multi-cloud environments, as we are 100 percent Microsoft and have not really got it in any other environment at all. I am not yet using the unified AI-powered security feature offered by Microsoft Defender for Cloud, but that is coming. I am not yet using the integrated XDR feature of Microsoft Defender for Cloud, but that is coming. I am not yet utilizing the GenAI threat protection features of Microsoft Defender for Cloud. That is also coming and a lot of that will come from learning it here. I have enabled the agentless scanning in my cloud environment with Microsoft Defender for Cloud. Assessing the impact on my workload protection without needing to install agents with Microsoft Defender for Cloud makes it a lot easier, but it also identifies a lot more, which puts more load on me sometimes. I would advise another organization considering Microsoft Defender for Cloud that it is the most logical route to follow if their whole ecosystem is Microsoft. It is easy to implement and it is very self-explanatory when doing it, making sense to just follow the steps as it is too simple, really. I would rate this review a 7.5 out of 10.
RS
Engineer Information Security at N-Able (Pvt) Ltd
Has faced limitations in AI capabilities and pricing flexibility
Pricing-wise, Wazuh stands out, along with deployment flexibility and its documentation which is extremely good in comparison to Forti. The community support is also incredible. They have helped quite a bit because previously, we had a separate tool and management dashboard to do our compliance. With Wazuh, we receive that information without having to do anything extra. We just set up the SIEM and all of that information was automatically populated. The dashboards are very easy to understand and very quick with no lag or delay. I have experienced delays on Forti's dashboards, but not with Wazuh. Wazuh is quite good. In comparison to Forti, they are quite similar. They are very good at detection.
report
Use our free recommendation engine to learn which Cloud Workload Protection Platforms (CWPP) solutions are best for your needs.
885,444 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
14%
Computer Software Company
11%
Manufacturing Company
9%
Government
6%
Financial Services Firm
13%
Computer Software Company
10%
Manufacturing Company
9%
Government
7%
Computer Software Company
12%
Comms Service Provider
11%
University
8%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business49
Midsize Enterprise22
Large Enterprise55
By reviewers
Company SizeCount
Small Business29
Midsize Enterprise10
Large Enterprise49
By reviewers
Company SizeCount
Small Business27
Midsize Enterprise15
Large Enterprise8
 

Questions from the Community

What do you like most about PingSafe?
The dashboard gives me an overview of all the things happening in the product, making it one of the tool's best featu...
What is your experience regarding pricing and costs for PingSafe?
Regarding the pricing for SentinelOne Singularity Cloud Security, I do not think it is something I can compare.
What needs improvement with PingSafe?
I do not see room for improvement in SentinelOne Singularity Cloud Security. In the future, I would like to see the i...
How is Prisma Cloud vs Azure Security Center for security?
Azure Security Center is very easy to use, integrates well, and gives very good visibility on what is happening acros...
What is your experience regarding pricing and costs for Microsoft Defender for Cloud?
My experience with pricing, setup cost, and licensing for Microsoft Defender for Cloud was pretty straightforward. We...
What needs improvement with Microsoft Defender for Cloud?
Microsoft Defender for Cloud can be improved. An additional feature that should be included in the next release is Ze...
What do you like most about Wazuh?
Wazuh is its flexibility and open-source nature, which allows us to tailor threat detection and response across diver...
What needs improvement with Wazuh?
Regarding compliance, I find it not stable. I do not recommend it for that purpose. It can comply with Wazuh NCA, whi...
What is your primary use case for Wazuh?
I have been working with Wazuh for two years, and I can explain how I use Wazuh. I did not use Wazuh as a SIEM soluti...
 

Also Known As

PingSafe
Microsoft Azure Security Center, Azure Security Center, Microsoft ASC, Azure Defender
Wazuh All-In-One Deployment
 

Interactive Demo

Demo not available
Demo not available
 

Overview

 

Sample Customers

Information Not Available
Microsoft Defender for Cloud is trusted by companies such as ASOS, Vatenfall, SWC Technology Partners, and more.
Information Not Available
Find out what your peers are saying about Microsoft Defender for Cloud vs. Wazuh and other solutions. Updated: September 2023.
885,444 professionals have used our research since 2012.