Try our new research platform with insights from 80,000+ expert users

Cynet vs Microsoft Sentinel comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 18, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.6
Cynet delivers quick ROI, effective virus prevention, and automates oversight, rapidly stopping cyberattacks for various clients.
Sentiment score
7.2
Microsoft Sentinel ROI is mixed; challenges exist, but benefits include automation savings, enhanced security, and reduced staffing needs.
If a customer is already using Microsoft’s ecosystem, the ROI can be positive due to seamless integration.
Microsoft Azure was not fitting for short-term cost savings but promised a better ROI over three to five years for medium to large companies.
 

Customer Service

Sentiment score
7.6
Cynet's 24/7 support is praised for responsiveness and knowledge, with some suggested improvements in ticket speed and regional expansion.
Sentiment score
6.7
Microsoft Sentinel's support is praised for quick response, with premium tiers offering expert help and strong community resources.
Their SOC side support, when a threat is detected, is excellent.
Their technical support can be improved in terms of speed when opening a ticket.
I was very satisfied with their technical support.
Their solutions' integration simplifies resolving issues compared to those caused by third-party products.
When my team needs to escalate issues to Microsoft, especially for Microsoft Sentinel, the response is fast through their French entity.
Working with a Sentinel engineer helped us tune settings effectively.
 

Scalability Issues

Sentiment score
7.9
Cynet offers scalable, efficient endpoint management for diverse sectors, supporting cloud and on-premises installations, ensuring adaptability across industries.
Sentiment score
8.0
Microsoft Sentinel's cloud scalability enables effortless resource management and meets large-scale needs, making it ideal for extensive monitoring.
The solution is highly scalable.
Cynet is very scalable.
Office 365 and Exchange are running on it, covering about 35,000 users efficiently.
Being a SaaS solution, the scalability of Microsoft Sentinel is robust.
As our organization uses Microsoft Azure and Defender, everything grows together, and we can integrate various features seamlessly.
 

Stability Issues

Sentiment score
8.5
Cynet is preferred for its stability and simplicity, offering reliable performance with minimal issues, appealing to many users.
Sentiment score
7.8
Microsoft Sentinel is stable and reliable with 99.9%+ uptime; issues typically arise from external factors or misconfigurations.
In the past two years, our team hasn't encountered any issues with the stability of Microsoft Sentinel from an operations perspective.
So far, we have not experienced any issues, and it has been stable from the beginning.
I need to be aware of deprecated connectors as they may disconnect, but the data continues to be sent with a need for quick adaptation.
 

Room For Improvement

Cynet needs improved mobile support, faster technical assistance, flexible reporting, better threat handling, and enhanced integrations and features.
Users recommend improvements to multi-tenancy, log ingestion, interface intuitiveness, and integration, with concerns over pricing and AI enhancement.
There should be more options than deploying solely through group policy, as the assumption that GPO is working isn’t always the case.
Integration with local Active Directory, not only Azure AD, is a must.
Having a DLP feature would also add value.
Currently, we are happy to have a way in the middle with not so much cost, but it would be nice to have the ability to enhance the automation of workflows based on learned incidents.
We have some tools, such as our off-site Meraki firewalls, that have not fully integrated with Sentinel.
There are complexities in calculating the right pricing tier for different customers, which makes it difficult for me as a consultant during upfront pricing.
 

Setup Cost

Cynet offers affordable, flexible subscriptions with high ROI, cost-effective features, and competitive pricing compared to CrowdStrike and Sentinel One.
Microsoft Sentinel offers scalable, cost-effective pricing with discounts, especially beneficial for E5 users and high-volume data ingestion.
I think the pricing of Cynet is fair and one of the better options in the market.
Microsoft Sentinel offers more capabilities than Bastion, with a more intuitive experience.
Setting up the right cost model for customers is intricate, requiring careful consideration of various components and licensing tiers.
We already had the necessary licensing for Sentinel, so we didn't need to spend extra money.
 

Valuable Features

Cynet provides advanced threat detection, easy setup, and flexible pricing, appealing to small teams with low management effort.
Microsoft Sentinel offers seamless integration, AI-driven threat detection, automated responses, and scalability for efficient, comprehensive security management.
The SOAR function, deception, and forensics are very useful.
The most effective features of Cynet are its ransomware protection and lateral movement deception.
The valuable aspects of Cynet are its EDR and XDR components, which are available at a reasonable price point.
The ability of Microsoft Sentinel to correlate data from multiple sources enhances threat detection capabilities.
Custom workbooks are valuable. It is one of the crucial points in dealing with potential security threats in an automated way without requiring too much manpower.
The most valuable features for us include threat collection, threat detection, response, and the knowledge base for investigation.
 

Categories and Ranking

Cynet
Ranking in Security Information and Event Management (SIEM)
12th
Average Rating
8.8
Reviews Sentiment
7.5
Number of Reviews
40
Ranking in other categories
Endpoint Protection Platform (EPP) (15th), User Entity Behavior Analytics (UEBA) (5th), Endpoint Detection and Response (EDR) (14th), Threat Deception Platforms (4th), Network Detection and Response (NDR) (4th), Extended Detection and Response (XDR) (9th), Ransomware Protection (6th)
Microsoft Sentinel
Ranking in Security Information and Event Management (SIEM)
3rd
Average Rating
8.2
Reviews Sentiment
7.1
Number of Reviews
91
Ranking in other categories
Security Orchestration Automation and Response (SOAR) (1st), Microsoft Security Suite (6th), AI-Powered Cybersecurity Platforms (5th)
 

Mindshare comparison

As of April 2025, in the Security Information and Event Management (SIEM) category, the mindshare of Cynet is 1.0%, up from 0.9% compared to the previous year. The mindshare of Microsoft Sentinel is 7.4%, down from 9.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Information and Event Management (SIEM)
 

Featured Reviews

Zubair Ahmad - PeerSpot reviewer
Managed threat detection efficiently with minimal resource usage
We used the solution as a Managed Detection and Response (MDR) service. It detected threats, and the team managing our services took care of it. We did not face any major challenges or attacks, and memory utilization was minimal. It functioned very well Cynet was valuable since it efficiently…
KrishnanKartik - PeerSpot reviewer
Every rule enriched at triggering stage, easing the job of SOC analyst
It's a Big Data security analytics platform. Among the unique features is the fact that it has built-in UEBA and analytical capabilities. It allows you to use the out-of-the-box machine learning and AI capabilities, but it also allows you to bring your own AI/ML, by bringing in your own IPs and allowing the platform to accept them and run that on top of it. In addition, the SOAR component is a pay-per-use model. Compared to any other product, where customization is not available, you can fine-tune the SOAR and you'll be charged only when your playbooks are triggered. That is the beauty of the solution because the SOAR is the costliest component in the market today. Other vendors charge heavily for the SOAR, but with Sentinel it is upside-down: the SOAR is the lowest-hanging fruit. It's the least costly and it delivers more value to the customer. The SOAR engine also uniquely helps us to automate most of the incidents with automated enrichment and that cuts out the L1 analyst work. And combining M365 with Sentinel, if you want to call it integration, takes just a few clicks: "next, next finish." If it is all M365-native, it is a maximum of three or four steps and you'll be able to ingest all the logs into Sentinel. That is true even with AWS or GCP because most of the connectors are already available out-of-the-box. You just click, put in your subscription details, include your IAM, and you are finished. Within five to six steps, you can integrate AWS workloads and the logs can be ingested into Sentinel. When it comes to a third party specifically, such as log sources in a data center or on-premises, we need a log collector so that the logs can be forwarded to the Sentinel platform. And when it comes to servers or something where there is an agent for Windows or Linux, the agent can collect the logs and ship them to the Sentinel platform. I don't see any difficulties in integrating any of the log sources, even to the extent of collecting IoT log sources. Microsoft Defender for Cloud has multiple components such as Defender for Servers, Defender for PaaS, and Defender for databases. For customers in Azure, there are a lot of use cases specific to protecting workloads and PaaS and SaaS in Azure and beyond Azure, if a customer also has on-premises locations. There is EDR for Windows and Linux servers, and it even protects different kinds of containers. With Defender for Cloud, all these sources can be seamlessly integrated and you can then track the security incidents in Microsoft's XDR platform. That means you have one more workspace, under Azure, not Defender for Cloud, where you can see the security incidents. In addition, it can be integrated with Sentinel for EDR deep-dive analytics. It can also protect workloads in AWS. We have customers for whom we are protecting their AWS workloads. Even EKS, Elastic Kubernetes Service, on AWS can be integrated, as can the GKE (Google Kubernetes Engine). And with Defender for Cloud, security alert ingestion is free
report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
847,772 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
16%
Comms Service Provider
9%
Manufacturing Company
8%
Financial Services Firm
6%
Computer Software Company
16%
Financial Services Firm
11%
Manufacturing Company
8%
Government
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

When evaluating User Activity Monitoring, what aspect do you think is the most important to look for?
The support team that stands behind the detection and response. Is there adequate expertise and are they behind you 24x7x365? Cynet CyOps has been there for us.
What do you like most about Cynet?
In terms of incident response, Cynet can contain attacks, offer a trial period to customers, and uninstall if not continued. The most valuable aspect is its integration capabilities, covering endpo...
What is your experience regarding pricing and costs for Cynet?
The price is competitive, so I cannot complain about it.
Is there a common threat intelligence tool that aggregates multiple threat intelligence sources?
Yes, Azure Sentinel is a SIEM on the Cloud. Multiple data sources can be uploaded and analyzed with Azure Sentinel and its Threat Hunting functionality with AI available as templates or customized ...
What is a better choice, Splunk or Azure Sentinel?
It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingestion of anything, but the charge per GB/Day Indexed and it gets expensive as log ...
Which is better - Azure Sentinel or AWS Security Hub?
We like that Azure Sentinel does not require as much maintenance as legacy SIEMs that are on-premises. Azure Sentinel is auto-scaling - you will not have to worry about performance impact, you will...
 

Also Known As

No data available
Azure Sentinel
 

Overview

 

Sample Customers

Meuhedet, East Boston Neighborhood Health Center
Microsoft Sentinel is trusted by companies of all sizes including ABM, ASOS, Uniper, First West Credit Union, Avanade, and more.
Find out what your peers are saying about Cynet vs. Microsoft Sentinel and other solutions. Updated: April 2025.
847,772 professionals have used our research since 2012.