

OpenText Behavioral Signals and Microsoft Sentinel are competing products in the field of digital threat detection and analysis. OpenText Behavioral Signals is more affordable, while Microsoft Sentinel offers advanced features that justify a higher cost.
Features: OpenText Behavioral Signals provides insights into user behavior patterns, enhancing human-computer interactions. Microsoft Sentinel integrates seamlessly with Microsoft's ecosystem, offers comprehensive analytics, and leverages AI for automated incident response.
Room for Improvement: OpenText Behavioral Signals could benefit from enhanced feature breadth and deeper integration capabilities. Microsoft Sentinel might improve by streamlining complexity for smaller businesses, optimizing learning curves for new users, and reducing costs associated with full-scale deployments.
Ease of Deployment and Customer Service: OpenText Behavioral Signals offers a streamlined and agile deployment process, supported by specialized customer service. Microsoft Sentinel, benefiting from robust integration within Microsoft's broader infrastructure, provides extensive support and comprehensive guidance through Microsoft resources.
Pricing and ROI: OpenText Behavioral Signals is cost-effective, attracting smaller enterprises with a favorable entry price. Microsoft Sentinel, though more expensive, delivers significant long-term value through integration and comprehensive defense capabilities, potentially offering higher ROI for larger organizations.
If a customer is already using Microsoft’s ecosystem, the ROI can be positive due to seamless integration.
Our MTTR, mean time to response, improved by forty to fifty percent. Earlier, medium-severity incidents took two to three hours to resolve. Now, after Microsoft Sentinel, it is forty to fifty-five minutes.
We attribute our growth to Sentinel.
Their solutions' integration simplifies resolving issues compared to those caused by third-party products.
Microsoft invests significantly in support, which is crucial for companies.
Working with a Sentinel engineer helped us tune settings effectively.
Office 365 and Exchange are running on it, covering about 35,000 users efficiently.
There is no need to add hardware or redesign infrastructure because it is cloud-native.
As our organization uses Microsoft Azure and Defender, everything grows together, and we can integrate various features seamlessly.
So far, we have not experienced any issues, and it has been stable from the beginning.
In the past two years, our team hasn't encountered any issues with the stability of Microsoft Sentinel from an operations perspective.
I need to be aware of deprecated connectors as they may disconnect, but the data continues to be sent with a need for quick adaptation.
Log ingestion and retention costs can grow quickly, and understanding which data source is driving cost is not always straightforward.
We have some tools, such as our off-site Meraki firewalls, that have not fully integrated with Sentinel.
Currently, we are happy to have a way in the middle with not so much cost, but it would be nice to have the ability to enhance the automation of workflows based on learned incidents.
It has been beneficial that Microsoft Sentinel is included as part of the Microsoft package, making it more cost-effective.
Microsoft Sentinel is not a low-cost SIEM.
Microsoft Sentinel offers more capabilities than Bastion, with a more intuitive experience.
Microsoft Sentinel's ability to correlate data from multiple sources and its detection capabilities are essential.
Microsoft Sentinel has improved cost efficiency, which is one of the key areas we're able to win business against the ability to have threat intelligence.
Microsoft Sentinel's ability to correlate data from multiple sources enhances our threat detection capabilities beyond what is a simple data lake solution by filtering out the noise and consolidating the signal down to a meaningful level that is easier to investigate and see.
| Product | Market Share (%) |
|---|---|
| Microsoft Sentinel | 5.0% |
| OpenText Behavioral Signals | 0.7% |
| Other | 94.3% |


| Company Size | Count |
|---|---|
| Small Business | 38 |
| Midsize Enterprise | 22 |
| Large Enterprise | 45 |
Microsoft Sentinel is a scalable, cloud-native, security information event management (SIEM) and security orchestration automated response (SOAR) solution that lets you see and stop threats before they cause harm. Microsoft Sentinel delivers intelligent security analytics and threat intelligence across the enterprise, providing a single solution for alert detection, threat visibility, proactive hunting, and threat response. Eliminate security infrastructure setup and maintenance, and elastically scale to meet your security needs—while reducing IT costs. With Microsoft Sentinel, you can:
- Collect data at cloud scale—across all users, devices, applications, and infrastructure, both on-premises and in multiple clouds
- Detect previously uncovered threats and minimize false positives using analytics and unparalleled threat intelligence from Microsoft
- Investigate threats with AI and hunt suspicious activities at scale, tapping into decades of cybersecurity work at Microsoft
- Respond to incidents rapidly with built-in orchestration and automation of common tasks
To learn more about our solution, ask questions, and share feedback, join our Microsoft Security, Compliance and Identity Community.
OpenText Behavioral Signals enhances organizational security monitoring with its robust correlation engine and streamlined dashboard, offering customization to suit different environments like airports or banks.
OpenText Behavioral Signals effectively integrates device logs through its strong correlation engine. The platform's customization options enable tailored alerts to match specific use cases, such as airports or banks. Although it needs more frequent updates to stay aligned with global incidents, it provides a centralized dashboard that ensures comprehensive visibility across networks. Users find the interface intuitive, making rule writing and report access easy, aiding in a comprehensive understanding of the network environment.
What are the key features of OpenText Behavioral Signals?In industries like banking and airports, OpenText Behavioral Signals is implemented for gathering global intelligence from the cloud. It notifies organizations about global attacks and updates its correlation engines. These industries utilize the platform for monitoring and analyzing logs from network devices, security log management, and addressing network challenges like link failures and unauthorized login attempts, ensuring better security posture with behavioral analytics and log integration using Unix and Microsoft-based connectors.
We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.