Try our new research platform with insights from 80,000+ expert users

Microsoft Defender Threat Intelligence vs SentinelOne Singularity Identity comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 1, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
8.1
Microsoft Defender Threat Intelligence consolidates security, reduces costs, enhances intelligence, and effectively prevents breaches, offering significant ROI.
Sentiment score
7.5
SentinelOne Singularity Identity offered high return on investment with enhanced protection, efficiency, and time savings, justifying higher costs.
 

Customer Service

Sentiment score
7.4
Microsoft Defender support varies, with excellent technical help praised but mixed experiences with contact ease and expertise levels.
Sentiment score
7.8
SentinelOne Singularity Identity provides responsive customer service with higher tiers offering 24/7 support and prioritizing user success.
Level two support is knowledgeable and knows how the product works, which is very good.
They have been responsive to our needs as integrators and those of the client.
 

Scalability Issues

Sentiment score
7.9
Microsoft Defender Threat Intelligence offers scalable security, favored for flexibility, ease of use, and seamless cloud integration despite potential costs.
Sentiment score
8.3
SentinelOne Singularity Identity is praised for scalability, despite occasional integration and deployment challenges, often rated nine or ten.
If there were some customizations available, I would rate its scalability as nine out of ten.
 

Stability Issues

Sentiment score
8.3
Microsoft Defender Threat Intelligence is praised for stability, performance, security features, and resilience, despite occasional outages and delays.
Sentiment score
8.5
SentinelOne Singularity Identity is highly stable with minimal CPU usage, excellent performance, and effective support for installation issues.
It provides a high level of security and avoids phishing and scam emails.
 

Room For Improvement

Microsoft Defender Threat Intelligence needs pricing, integration, support, AI, automation, and customization improvements for better affordability and usability.
SentinelOne Singularity Identity needs better management, enhanced features, user-friendly policies, improved support, and competitive pricing.
Providing code customization would help keep pace with new vulnerabilities and threats.
From the telemetry data standpoint, I would prefer Defender data to be more open in future updates.
There is a clear roadmap for improvements, including enhancing capabilities with AI and seamless functionality in an MSP model for deeper visibility across multiple agencies.
 

Setup Cost

Microsoft Defender Threat Intelligence is cost-effective in E5 bundles but can be complex and costly standalone for SMEs.
SentinelOne Singularity Identity offers competitive pricing, valued integration, and customizable licensing, though pricing transparency is key for executive approval.
 

Valuable Features

Microsoft Defender Threat Intelligence integrates globally informed threat detection with seamless Microsoft product integration for comprehensive, automated protection and analysis.
SentinelOne Singularity Identity offers AI-driven threat detection, rapid response, and efficient security management with minimal system impact.
Our threat detection is enhanced due to the AI agents in Microsoft Defender Threat Intelligence, which helps in detecting automatically.
One of the best features is that it provides a certain level of customization, allowing us to set our spam confidence levels.
With visibility into endpoint telemetry, SentinelOne does provide useful information to find threat actors and empowers those who are in the business of threat hunting.
 

Categories and Ranking

Microsoft Defender Threat I...
Ranking in Advanced Threat Protection (ATP)
10th
Average Rating
8.4
Reviews Sentiment
7.4
Number of Reviews
32
Ranking in other categories
Threat Intelligence Platforms (4th), Microsoft Security Suite (15th)
SentinelOne Singularity Ide...
Ranking in Advanced Threat Protection (ATP)
7th
Average Rating
9.0
Reviews Sentiment
7.5
Number of Reviews
21
Ranking in other categories
Vulnerability Management (10th), Threat Deception Platforms (2nd), Identity Threat Detection and Response (ITDR) (4th)
 

Mindshare comparison

As of June 2025, in the Advanced Threat Protection (ATP) category, the mindshare of Microsoft Defender Threat Intelligence is 1.6%, up from 1.2% compared to the previous year. The mindshare of SentinelOne Singularity Identity is 2.6%, up from 1.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Advanced Threat Protection (ATP)
 

Featured Reviews

TapabrataSamanta - PeerSpot reviewer
A cost-effective solution for monitoring and security but lacks supports for non-Microsoft products
There are weaknesses, and Microsoft is working on addressing them. Over the past three to four years, the ATP and other components have improved significantly, and the integration has also advanced. We are using third-party services. While we have Microsoft Threat Intelligence, which leverages Microsoft's facilities, we also utilize additional third-party threat intelligence. As of today, we don't completely rely on Microsoft for certain regions. This is an area where Microsoft needs to improve. Consequently, we use Anomali, a third-party threat intelligence provider. We integrate our product's intelligence with Anomali, from which we obtain threat insights. Microsoft products offer significant advantages, especially in the realm of threat intelligence. It works very well with Microsoft products. However, you might need additional services if you have non-Microsoft products in your environment. For instance, if you use Apple or Linux, Microsoft's solutions alone might not be sufficient. If they can work more effectively, especially with zero-day attack speed and other sophisticated threats, it will help us provide our customers with timely newsletters about new attacks.
Roftiel Constantine - PeerSpot reviewer
Provides proactive threat remediation, reduces alert volume, and enhances incident response capabilities
During our pre-purchase evaluation of SentinelOne's EDR capabilities three years ago, we were consistently impressed by the positive relationships customers reported having with SentinelOne's engineers, sales teams, and customer success managers. These strong relationships, evident in the customers' unsolicited feedback, highlighted the "soft skills" and intangible qualities that SentinelOne possessed. This positive customer experience has been mirrored in our own interactions with them. Their responsiveness to our needs, particularly when addressing a couple of challenges we faced, has been excellent. They proactively scheduled weekly meetings to demonstrate their commitment to resolving our issues, a customer-centric approach I admire. SentinelOne's dedication to customer service, including their rapid technology updates and responsiveness to our suggestions, has been crucial to our success in protecting our organization. Their ability to quickly incorporate our needs into new releases is truly impressive and sets them apart. Overall, I highly recommend SentinelOne based on our positive interactions across all levels of their organization.
report
Use our free recommendation engine to learn which Advanced Threat Protection (ATP) solutions are best for your needs.
859,129 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Financial Services Firm
13%
Educational Organization
10%
Government
9%
Computer Software Company
15%
Financial Services Firm
11%
Manufacturing Company
8%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Microsoft Defender Threat Intelligence?
It just runs in the background. I don't have to worry about, making sure it's Intelligence. So, you know, this kind of makes it very easy, have to worry about installing. It is easy to use.
What needs improvement with Microsoft Defender Threat Intelligence?
From the telemetry data standpoint, I would prefer Defender data to be more open in future updates.
What is your primary use case for Microsoft Defender Threat Intelligence?
We have tried Microsoft Defender Threat Intelligence. I have expertise with Microsoft Defender products. I am not familiar with Microsoft Defender for IoT because we did not use that in our environ...
Does SentinelOne have a Virtual Patching functionality?
Yes -- SentinelOne has a Virtual Patching functionality called Virtual Patching and Exploit Shield. This preventive security solution uses behavioral AI to identify and block zero-day attacks and v...
What is your experience regarding pricing and costs for SentinelOne Singularity Identity?
I have no visibility into pricing, setup costs, or licensing as the government handles these aspects directly with SentinelOne. We do the integrating, and they process the payments.
 

Overview

Find out what your peers are saying about Microsoft Defender Threat Intelligence vs. SentinelOne Singularity Identity and other solutions. Updated: June 2025.
859,129 professionals have used our research since 2012.