Cortex Cloud by Palo Alto Networks and Microsoft Defender for Cloud are leading products in the cloud security market. Microsoft Defender for Cloud appears to have the upper hand due to its comprehensive feature set, particularly excelling in cloud security posture management.
Features: Cortex Cloud offers dynamic workload identity creation, seamless AWS integration, and automated forensics. Microsoft Defender for Cloud stands out with its cloud-native security, integrated monitoring, and broad threat detection capabilities across cloud environments.
Room for Improvement: Cortex Cloud needs to enhance its user interface and licensing complexity, improve support for some cloud environments, and expand automation capabilities. Microsoft Defender requires better real-time monitoring, reporting, and integration with third-party tools. It also needs more granular control over alerts.
Ease of Deployment and Customer Service: Cortex Cloud supports public and hybrid clouds with on-premises deployment and is favored for its flexibility. However, its technical support has inconsistent response times. Microsoft Defender integrates extensively with Microsoft products and is praised for responsive support, despite having complex licensing and deployment processes.
Pricing and ROI: Cortex Cloud provides a flexible but costly licensing model, offering strong ROI through automation and security improvements. Microsoft Defender's tiered pricing models make it relatively accessible with noted ROI in compliance and reduced monitoring labor, though some users find it expensive. Defender gains appreciation for cost-effective integration with existing Microsoft products.
The detailed information PingSafe gives about how to fix vulnerabilities reduces the time spent on remediation by about 70 to 80 percent.
After implementing SentinelOne, it takes about five to seven minutes.
Our ability to get in and review our vulnerability stance, whether daily, monthly, weekly, or whatever it might be, has drastically improved over our prior provider.
Before, we had a few staff members who monitored our environment, but now the alerting and other processes happen automatically, so there is a good ROI in terms of resources.
It eliminates the need for additional hardware, making it a financially and technically sound investment.
It helped reduce risks and sped up threat detection.
Defender proactively indexes and analyzes documents, identifying potential threats even when inactive, enhancing preventative security.
Identifying potential vulnerabilities has helped us avoid costly data losses.
The biggest return on investment is the rapid improvement of security posture.
When we send an email, they respond quickly and proactively provide solutions.
They took direct responsibility for the system and could solve queries quickly.
Having a reliable team ready and willing to assist with any issues is essential.
Whenever I have issues with the solution, I will get an immediate response from the product team and they will try to close the issue as soon as possible.
When you send them a message, you get a response in a minute or two.
They can respond with technical documentation or pass on the case to the next level because it requires the development of a new feature or changing a feature due to a bug.
Since security is critical, we prefer a quicker response time.
The support team was very responsive to queries.
They understand their product, but much like us, they struggle with the finer details, especially with new features.
As soon as we need to add somebody, we just add them to NinjaOne, and then we have a script set up where it automatically deploys and adds them to whichever group we need.
I would rate it a 10 out of 10 for scalability.
Scalability is no longer a concern because Cloud Native Security is a fully cloud-based resource.
It's very scalable and very easy to use.
It's the type of tool that is constantly improving, and its scalability suits our environment well.
Nowadays, all cloud solutions are scalable; scalability should be a given feature and does not need to be asked for.
We are using infrastructure as a code, so we do not have any scalability issues with Microsoft Defender for Cloud implementation because our cloud automatically does it.
Defender won't replace our endpoint XDR, but it will likely adapt and support any growth in the Microsoft Cloud space.
There might be scalability issues as you scale up to large enterprises.
In my experience, there has been 100 percent uptime.
SentinelOne Singularity Cloud is incredibly reliable.
The cloud console is very resilient.
I cannot recall any downtime with the solution.
I would rate it a ten out of ten for stability.
I haven't seen any outages with Prisma Cloud.
Defender's stability has been flawless for us.
Microsoft Defender for Cloud is very stable.
Microsoft sometimes changes settings or configurations without transparency.
If I had to ask for anything to make it easier, it would be signed images that are GPG signed and a public repository where we can get the bits from.
If they can merge Kubernetes Security with other modules related to Kubernetes, that would help us to get more modules in the current subscription.
As organizations move to the cloud, a cloud posture management tool that offers complete cloud visibility becomes crucial for maintaining compliance.
Currently, it requires programming knowledge, so if someone without hardware programming knowledge could customize certain features to their requirements, it would be very helpful.
It is a SaaS solution, but some of my clients have a local regulatory requirement, and they want to install it locally on their premises.
From a developer's perspective, especially for organizations like banks developing their applications, ensuring API security before deploying them to the cloud is crucial.
Microsoft, in general, could significantly improve its communication and support.
The artificial intelligence features could be expanded to allow the system to autonomously manage security issues without needing intervention from admins.
I've heard there might be issues with scalability for larger enterprises.
With very little negotiation involved, we just let them know what we could pay and they were willing to meet us at slightly above what we paid with Sophos, which was still very fair for what we were looking at.
The price was very, very important to us, and it came down to the price when we were doing our evaluations WatchGuard and SentinelOne.
Covering our 50,000 endpoints would have nearly bankrupted most security programs, even well-funded ones like ours.
A strategy to optimize costs will save you money.
The licensing model for data security should be compared to the native security offered by AWS and Azure.
Prisma Cloud is remarkably expensive.
Every time we consider expanding usage, we carefully evaluate the necessity due to cost concerns.
We appreciate the licensing approach based on employee count rather than a big enterprise license.
Microsoft Defender for Cloud is pricey, especially for Kubernetes clusters.
The real-time detection and response capabilities of SentinelOne Singularity Cloud impressive because it is a platform that uses artificial intelligence to determine what is normal and what is abnormal and can lock down any virus it may encounter.
We were shown how ransomware can be immediately stopped in real-time. That was huge.
Our previous product took a lot of man hours to manage. Once we got Singularity Cloud Workload Security, it freed up our time to work on other tasks.
Prisma offers visibility to developers and high-level leadership because the dashboard is excellent and the alerts are comprehensive.
This alerting system allows me to take the necessary steps to secure it before any attack can occur, making it the best preventive measure for our cloud.
Its ease of integration is valuable because we need to get the solution out of the door quickly, so speed and ease matter.
The most valuable feature for me is the variety of APIs available.
This feature significantly aids in threat detection and enhances the user experience by streamlining security management.
The most valuable feature is the recommendations provided on how to improve security.
SentinelOne Singularity Cloud Security protects cloud workloads, offering advanced threat detection and automated response. It integrates seamlessly with cloud environments and secures containerized applications and virtual machines against vulnerabilities.
SentinelOne Singularity Cloud Security is renowned for its efficiency in mitigating threats in real-time. The platform integrates effortlessly with existing cloud environments, ensuring robust cloud security management with minimal manual intervention. Securing containerized applications and virtual machines, it excels in threat intelligence and endpoint protection. However, improvements are needed in performance during high workload periods, and more integrations with third-party tools and better documentation would be beneficial. Users often find the installation process complex, support response times slow, and the dashboard's navigation unintuitive.
What are the key features of SentinelOne Singularity Cloud Security?In specific industries, SentinelOne Singularity Cloud Security is implemented to safeguard critical data and infrastructure. Organizations in finance, healthcare, and technology depend on its real-time threat detection and automated response to protect sensitive information. Its ability to secure containerized applications and virtual machines is particularly valuable in dynamic environments where rapid scaling is necessary.
Cortex Cloud by Palo Alto Networks offers dynamic workload identity creation, application dependency mapping, and automated forensics. Its capabilities in multi-cloud environments, tight AWS integration, and compliance features enhance threat visibility and control.
Cortex Cloud integrates RedLock and Prisma Cloud to deliver inventory management, vulnerability scanning, and cloud configuration monitoring. These features enable strong security posture management while optimizing alert response times and operational costs. Users leverage it for container security and multi-cloud compliance, maximizing insights into security configurations and threat detection across AWS, Azure, and GCP.
What are the key features of Cortex Cloud?Cortex Cloud is widely used in industries prioritizing container security and compliance across multi-cloud frameworks. Companies implement it for real-time management, vulnerability detection, and threat remediation. The focus is on aligning security posture with industry benchmarks and achieving automated compliance, facilitating robust protection across platforms like AWS, Azure, and Google Cloud.
Microsoft Defender for Cloud is a comprehensive security solution that provides advanced threat protection for cloud workloads. It offers real-time visibility into the security posture of cloud environments, enabling organizations to quickly identify and respond to potential threats. With its advanced machine learning capabilities, Microsoft Defender for Cloud can detect and block sophisticated attacks, including zero-day exploits and fileless malware.
The solution also provides automated remediation capabilities, allowing security teams to quickly and easily respond to security incidents. With Microsoft Defender for Cloud, organizations can ensure the security and compliance of their cloud workloads, while reducing the burden on their security teams.
We monitor all Cloud Workload Protection Platforms (CWPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.