No more typing reviews! Try our Samantha, our new voice AI agent.

Microsoft Sentinel vs Singularity Platform comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
4.9
Cortex XDR reduces security incidents, personnel needs, and costs, offering quick ROI, enhanced performance, and competitive pricing.
Sentiment score
6.6
Microsoft Sentinel provides cost savings, efficiency, and enhanced security, offering significant ROI despite high initial investments within its ecosystem.
Sentiment score
3.9
Singularity Platform offers significant ROI, saving time and costs while enhancing security with rapid returns within nine months.
They appreciate the rich telemetry data from the solution, as it provides in-depth threat identification.
Cyber Security Manager at Welab bank
Cortex XDR by Palo Alto Networks helps to reduce my total cost of ownership significantly.
Detection and Response Consultant at Inovasys
In Cortex XDR by Palo Alto Networks, most of the remediation is automated and the accuracy is quite good.
Network Security Engineer at Cyberwell Solution
If a customer is already using Microsoft’s ecosystem, the ROI can be positive due to seamless integration.
senior cyber security at a tech services company with 201-500 employees
Our MTTR, mean time to response, improved by forty to fifty percent. Earlier, medium-severity incidents took two to three hours to resolve. Now, after Microsoft Sentinel, it is forty to fifty-five minutes.
Cyber Security Consultant at ProTechmanize
We attribute our growth to Sentinel.
Chief Commercial Officer at defend
The impact of a ransomware attack typically encrypts all critical data and stops production.
Senior Technical Engineer at Safezone Secure Solutions Private Limited
Large enterprises that can afford it often choose SentinelOne for its ease of management compared to other platforms.
Security Engineer at a tech vendor with 11-50 employees
If I estimate how much time it has saved me, I would say it has saved almost 30 to 40 percent of time compared to other tools.
Cyber Security Mentor and trainee at DataSpace Academy
 

Customer Service

Sentiment score
7.0
Cortex XDR support is effective and fast but faces issues with language, delays, and high costs, yet generally satisfactory.
Sentiment score
6.4
Microsoft Sentinel support receives mixed reviews, praised for responsiveness but criticized for delays and communication issues, especially with basic plans.
Sentiment score
7.4
Singularity Platform's technical support receives mixed reviews, with effectiveness varying based on the competence of assigned engineers.
The technical support from Palo Alto deserves a mark of ten because they reach out within an hour whenever assistance is needed.
Head of data centers at a non-profit with 10,001+ employees
There is no back and forth, and they know what we are asking for and come up with the best resolution for a solution.
Senior Process Expert at A.P. Moller - Maersk
If any of these services are missed, it becomes a problem in terms of support tickets, follow-up, or special configuration that needs to be done in the system.
Chief of IT Architecture at a financial services firm with 10,001+ employees
Microsoft invests significantly in support, which is crucial for companies.
Director de Microsoft y Transformación Digital at Compucad
I believe Microsoft could improve by keeping customer service within the US for Microsoft Sentinel customers who are within state and federal government sectors.
Infosec at a government with 10,001+ employees
Working with a Sentinel engineer helped us tune settings effectively.
Systems Emgineer at a non-profit with 1-10 employees
A lot of people have to reach out to one sole person who has basically developed the system, creating a bottleneck for responses.
Treasury Management at standard casualty company
On a scale of one to ten, the technical support of SentinelOne would be rated as an 8.5.
Security Engineer at a tech vendor with 11-50 employees
I would evaluate their customer service and technical support as very good, five stars.
Co-Founder & VP Sales and Marketing at a tech services company with 11-50 employees
 

Scalability Issues

Sentiment score
7.5
Cortex XDR is scalable, supports diverse enterprises, integrates with endpoints, and enables easy expansion with cloud infrastructure.
Sentiment score
7.6
Microsoft Sentinel offers robust, scalable cloud-based service with seamless data integration, effectively managing resources for organizations of all sizes.
Sentiment score
7.7
Singularity Platform is scalable, flexible, and stable, praised for efficient expansion and onboarding with positive user feedback.
You can onboard 10,000 endpoints in just hours, which demonstrates the excellent scalability of this product.
Assistant Security Architect at Cloudnomics
Cortex XDR by Palo Alto Networks can be expanded anytime by purchasing another license without any issues related to scalability.
Head of data centers at a non-profit with 10,001+ employees
I think scalability for Cortex XDR by Palo Alto Networks is good.
Threat Analyst II at a tech vendor with 1,001-5,000 employees
There is no need to add hardware or redesign infrastructure because it is cloud-native.
Cyber Security Consultant at ProTechmanize
As our organization uses Microsoft Azure and Defender, everything grows together, and we can integrate various features seamlessly.
Systems Emgineer at a non-profit with 1-10 employees
Being a SaaS solution, the scalability of Microsoft Sentinel is robust.
senior cyber security at a tech services company with 201-500 employees
I have not run into any issues regarding how scalable Singularity Platform is, so I do not see any limitations for scalability.
Information Security Officer at a tech vendor with 51-200 employees
Scalability is not an issue for Singularity Platform because it is delivered as a SaaS service, so scalability is taken care of by SentinelOne.
Presales Manager at a manufacturing company with 201-500 employees
I believe that the system is scalable but it all goes back to personnel behind the scenes and the availability of those people, plus the knowledge they hold in terms of being able to bring larger clients onboard.
Treasury Management at standard casualty company
 

Stability Issues

Sentiment score
8.0
Cortex XDR is highly regarded for stability, reliable performance, and well-received updates, despite minor occasional disruptions.
Sentiment score
7.8
Microsoft Sentinel is a reliable, highly stable platform with minimal downtime, outperforming others in stability and requiring minimal maintenance.
Sentiment score
7.5
Users praise Singularity Platform's stability and efficiency but occasionally report search issues and unannounced maintenance without major impact.
Cortex remains fast and responsive, even with increasing data and alerts.
Final Year Student at Gitam University
The thresholds we've seen on our firewall boxes at some instances reached 80% to 85%, but even at that level of utilization, we don't observe any latency or any issues reported with respect to accessing the application.
Senior Process Expert at A.P. Moller - Maersk
Cortex XDR is stable, offering high quality and reliable performance.
Cyber Security Manager at Welab bank
I have never experienced any downtime, crashes, or performance issues with Microsoft Sentinel because it is SOC as a Service, so it maintains 100% uptime and scaling.
Infosec at a government with 10,001+ employees
In the past two years, our team hasn't encountered any issues with the stability of Microsoft Sentinel from an operations perspective.
Project Executive at synergyc
I need to be aware of deprecated connectors as they may disconnect, but the data continues to be sent with a need for quick adaptation.
senior cyber security at a tech services company with 201-500 employees
If I have to rate the stability level of Singularity Platform from one to ten, I would say it would be a strong nine.
Information Security Officer at a tech vendor with 51-200 employees
The automation helps a lot, and once implemented, we face no further issues regarding stability or scalability; everything works absolutely fine.
Associate Vice President at Novac Technology Solutions
The product is pretty stable, and even if the agent is offline, it will handle the threats.
Senior Technical Engineer at Safezone Secure Solutions Private Limited
 

Room For Improvement

Cortex XDR requires enhancements in UI, integration, reporting, and pricing, while addressing false positives and improving automation and mobile support.
Users seek better integration, cost-efficiency, usability, and enhanced AI in Microsoft Sentinel, citing challenges in implementation and learning curve.
Singularity Platform needs improvements in threat analysis, customization, integration, alerting, and response time to compete effectively.
Improving reporting and dashboard customization, along with the addition of real-time and exportable reports, would help SOC teams greatly.
Final Year Student at Gitam University
The inclusion of this feature would allow the application of DLP policies alongside antivirus policies via a single agent and console, making it more competitive as other OEMs often offer DLP solutions as part of their antivirus products.
Pre Sales Architect at network techlab
If the per GB data could be provided at a certain level free of cost or at the same cost which the customer is taking for the entire bundle, that would be better.
Cyber Security Information Security Specialist at MHM Holding GmbH
Log ingestion and retention costs can grow quickly, and understanding which data source is driving cost is not always straightforward.
Cyber Security Consultant at ProTechmanize
We have some tools, such as our off-site Meraki firewalls, that have not fully integrated with Sentinel.
Systems Emgineer at a non-profit with 1-10 employees
There are complexities in calculating the right pricing tier for different customers, which makes it difficult for me as a consultant during upfront pricing.
senior cyber security at a tech services company with 201-500 employees
When I find a log suspicious, if it automatically points out that a particular point in the log at a specific timing or frame is looking malicious, it would be easier for me.
Cyber Security Mentor and trainee at DataSpace Academy
Correlation in general is done very well with the storyline because it is the platform's own field for correlating data.
Information Security Officer at a tech vendor with 51-200 employees
If you are asking if this is fully customizable, I would say it is partially customizable, not fully customizable.
Senior Technical Engineer at Safezone Secure Solutions Private Limited
 

Setup Cost

Cortex XDR offers flexible pricing from $55 to $90 per endpoint annually, considered cost-effective for its advanced features.
Microsoft Sentinel's pricing is complex with data-based costs, offering discounts but potentially expensive for smaller organizations.
Singularity Platform offers premium features and flexible licensing, seen as valuable despite higher pricing compared to competitors.
The pricing on SentinelOne is far more reasonable and cheaper than Cortex XDR by Palo Alto Networks.
Consultant at a tech services company with 1,001-5,000 employees
I would say it is definitely not a cheap product, considering how mature it is and how scalable all Palo Alto products are together.
Senior Process Expert at A.P. Moller - Maersk
Cortex XDR is perceived as expensive by some customers, yet offers dynamic pricing.
Cyber Security Manager at Welab bank
It has been beneficial that Microsoft Sentinel is included as part of the Microsoft package, making it more cost-effective.
Senior System Administrator at a university with 5,001-10,000 employees
Microsoft Sentinel is not a low-cost SIEM.
Cyber Security Consultant at ProTechmanize
Microsoft Sentinel is provided at no cost, so we didn't have any issues with the cost.
Vice President, Sales, Cybersecurity at a computer software company with 51-200 employees
My philosophy is you pay for what you get, so if you decide to cheapen out on the cost of your platform, you are not going to get what you want.
Treasury Management at standard casualty company
As a SIEM tool, if it were priced less, many more people could explore it.
Cyber Security Mentor and trainee at DataSpace Academy
While it offers very good features at the enterprise level, it comes at a premium price.
Security Engineer at a tech vendor with 11-50 employees
 

Valuable Features

Cortex XDR provides advanced threat detection with AI analytics, real-time blocking, and seamless integration for enhanced security.
Microsoft Sentinel enhances security with automation and AI, offering seamless integration, scalability, and comprehensive threat detection for businesses.
Singularity Platform streamlines threat detection, offers customizable tools, and enhances efficiency with AI-driven features and cloud protection.
It incorporates AI for normal behavior detection, distinguishing unusual operations.
Cyber Security Manager at Welab bank
The product provides automation responses in case of a threat attack, severity assessments, centralized manageability, and comprehensive compliance features, resulting in reduced costs.
Pre Sales Architect at network techlab
It includes machine learning to easily analyze data and detect complex threats across endpoints, networks, or clouds.
Final Year Student at Gitam University
Microsoft Sentinel's ability to correlate data from multiple sources and its detection capabilities are essential.
Cost Engineer at a tech vendor with 10,001+ employees
Microsoft Sentinel has improved cost efficiency, which is one of the key areas we're able to win business against the ability to have threat intelligence.
Chief Commercial Officer at defend
Microsoft Sentinel's ability to correlate data from multiple sources enhances our threat detection capabilities beyond what is a simple data lake solution by filtering out the noise and consolidating the signal down to a meaningful level that is easier to investigate and see.
Solutions Architect at a tech vendor with 201-500 employees
Real-time monitoring is very much available in Singularity Platform because once the agent is up to date, it protects critical assets across our network against malicious attacks.
Associate Vice President at Novac Technology Solutions
Singularity Platform's functionality for ransomware rollback is quite useful because if you have a ransomware attack, most EDR solutions do not have the feature to do a rollback and bring the system to its earlier state, but that is one of the unique features that Singularity Platform has which can be a game changer for customers.
Presales Manager at a manufacturing company with 201-500 employees
This allows executives to determine if they have to liquefy any of their assets at a certain point in time, providing a great view in terms of risk management and current available cash balances while also considering the strategic direction in the next year or two where they plan on going with their cash balances.
Treasury Management at standard casualty company
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Ranking in AI-Powered Cybersecurity Platforms
2nd
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
108
Ranking in other categories
Endpoint Protection Platform (EPP) (5th), Endpoint Detection and Response (EDR) (7th), Extended Detection and Response (XDR) (6th), Ransomware Protection (2nd)
Microsoft Sentinel
Ranking in AI-Powered Cybersecurity Platforms
5th
Average Rating
8.2
Reviews Sentiment
6.9
Number of Reviews
107
Ranking in other categories
Security Information and Event Management (SIEM) (4th), Security Orchestration Automation and Response (SOAR) (1st), Microsoft Security Suite (6th)
Singularity Platform
Ranking in AI-Powered Cybersecurity Platforms
12th
Average Rating
8.4
Reviews Sentiment
6.7
Number of Reviews
11
Ranking in other categories
Security Information and Event Management (SIEM) (37th)
 

Mindshare comparison

As of March 2026, in the AI-Powered Cybersecurity Platforms category, the mindshare of Cortex XDR by Palo Alto Networks is 9.9%, down from 10.9% compared to the previous year. The mindshare of Microsoft Sentinel is 10.3%, up from 7.5% compared to the previous year. The mindshare of Singularity Platform is 1.0%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
AI-Powered Cybersecurity Platforms Mindshare Distribution
ProductMindshare (%)
Cortex XDR by Palo Alto Networks9.9%
Microsoft Sentinel10.3%
Singularity Platform1.0%
Other78.8%
AI-Powered Cybersecurity Platforms
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
Kallamuddin Ansari - PeerSpot reviewer
Cyber Security Consultant at ProTechmanize
Centralized monitoring has improved threat response but cost control still needs refinement
Based on real operations used in our corporate IT environment, the key features include log correlation and incident view. Microsoft Sentinel's biggest strength is how it correlates multiple related alerts into a single incident. This significantly reduces alert noise and helps the SOC focus on real threats instead of isolated events. Another valuable feature is KQL-based threat hunting with Kusto Query Language. The flexibility of this language allows us to build custom hunting queries based on our environment's behavior. This is extremely useful for detecting low and slow threats or hidden threats that default rules may miss. Cloud-native scalability and stability is another important feature. Being cloud-native, Microsoft Sentinel scales well for medium to large corporate environments without infrastructure management. Stability has been solid in day-to-day production. SOAR automation using playbooks is a feature we highly recommend. Microsoft Sentinel's SOAR functionality helps automate repetitive SOC tasks like alert enrichment and notification. This saves analyst time and improves response consistency.
Akash Das Barman - PeerSpot reviewer
Cyber Security Mentor and trainee at DataSpace Academy
Log analysis has become faster and more accurate, enabling precise threat detection
Regarding areas for improvement in Singularity Platform, I would say the data security posture and control over sensitive information could be enhanced. If the control were more robust, then it would be better. For instance, when I analyze a log using Singularity Platform, the logs I see are clear, but if they were more descriptive, it would be much better. For example, when I find a log suspicious, if it automatically points out that a particular point in the log at a specific timing or frame is looking malicious, it would be easier for me. I would not have to go through many logs to find this information.
report
Use our free recommendation engine to learn which AI-Powered Cybersecurity Platforms solutions are best for your needs.
885,311 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
11%
Manufacturing Company
8%
Computer Software Company
8%
Financial Services Firm
8%
Computer Software Company
12%
Financial Services Firm
10%
Manufacturing Company
9%
Government
8%
No data available
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business44
Midsize Enterprise20
Large Enterprise47
By reviewers
Company SizeCount
Small Business41
Midsize Enterprise22
Large Enterprise46
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise2
Large Enterprise1
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
Is there a common threat intelligence tool that aggregates multiple threat intelligence sources?
Yes, Azure Sentinel is a SIEM on the Cloud. Multiple data sources can be uploaded and analyzed with Azure Sentinel an...
What is a better choice, Splunk or Azure Sentinel?
It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingest...
Which is better - Azure Sentinel or AWS Security Hub?
We like that Azure Sentinel does not require as much maintenance as legacy SIEMs that are on-premises. Azure Sentinel...
What is your experience regarding pricing and costs for Singularity Platform?
In terms of pricing for Singularity Platform, I believe they are competitive with the market. I do not believe they a...
What needs improvement with Singularity Platform?
I believe there is room for improvement in Singularity Platform regarding its product. First of all, with all automat...
What is your primary use case for Singularity Platform?
My use case working with Singularity Platform was to implement clients from the insurance business onto the platform.
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
Azure Sentinel
No data available
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Microsoft Sentinel is trusted by companies of all sizes including ABM, ASOS, Uniper, First West Credit Union, Avanade, and more.
Information Not Available
Find out what your peers are saying about Microsoft Sentinel vs. Singularity Platform and other solutions. Updated: March 2026.
885,311 professionals have used our research since 2012.