Microsoft Sentinel
Reviews
Star rating
Rank in Security Orchestration, Automation, and Response (SOAR)
Pros and cons
Pros
- Security
- Threat Detection
- Easy Integrations
- Integration Support
- Integrations
- Ease of Use
Cons
- Expensive
- Integration Issues
- Complexity
- Microsoft Dependency
- Difficult Learning
- Complex Setup
Traffic & LLM citations
Source: G2 review data
Winning from
Losing to
Key stats
Adoption by company size
| Segment | Share of reviews |
|---|---|
| Small Business | 27.9% |
| Mid-Market | 30.9% |
| Enterprise | 41.3% |
Quarterly history
| Quarter | Reviews | Star rating |
|---|---|---|
| 2024 Q4 | 1 | 4.5 |
| 2025 Q1 | 1 | 5.0 |
| 2025 Q3 | 1 | 3.5 |
| 2025 Q4 | 2 | 4.5 |
| 2026 Q1 | 1 | 3.5 |
| 2026 Q2 | 5 | 4.1 |
| 2026 Q3 | 3 | 4.3 |
Satisfaction ratings
What reviewers say
Best Cloud native SIEM - Microsoft Sentinel
“Correlates logs across our multi-tenant environment really well, especially with custom analytics rules. Integration with Log Analytics and the automation rules (like auto-ticket creation) saves a lot of manual triage time. Threat hunting queries in KQL are powerful once you get ”
Easy Log Ingestion Across Formats with Seamless Sentinel Integrations
“We can ingest logs of any format without doing ssh into the vms and the log collection is very easy and also we can integrate sentinel with defender xdr and also with other cloud like aws etc.”
Easy Cloud-Native Setup and Scaling, but Customization Can Be Tricky
“Easy to start . Less setup. As it’s cloud-native, there’s no infrastructure setup and connecting data sources like Azure resources or Microsoft 365 feels pretty straightforward. In my experience scalability and maintainability were important as the environment grows over the time”