Try our new research platform with insights from 80,000+ expert users

Exabeam vs Microsoft Purview Insider Risk Management comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Exabeam
Average Rating
7.8
Reviews Sentiment
6.7
Number of Reviews
19
Ranking in other categories
Security Information and Event Management (SIEM) (14th), User Entity Behavior Analytics (UEBA) (3rd), Security Incident Response (4th), Threat Intelligence Platforms (7th), Security Orchestration Automation and Response (SOAR) (7th), AI-Powered Cybersecurity Platforms (9th)
Microsoft Purview Insider R...
Average Rating
7.6
Reviews Sentiment
6.7
Number of Reviews
3
Ranking in other categories
Microsoft Security Suite (34th), Insider Risk Management (3rd)
 

Mindshare comparison

While both are Security Software solutions, they serve different purposes. Exabeam is designed for Security Information and Event Management (SIEM) and holds a mindshare of 1.3%, down 1.4% compared to last year.
Microsoft Purview Insider Risk Management, on the other hand, focuses on Insider Risk Management, holds 13.4% mindshare, up 12.5% since last year.
Security Information and Event Management (SIEM)
Insider Risk Management
 

Featured Reviews

Stephen-Armstrong - PeerSpot reviewer
The SIEM provides a user-friendly UI experience
When events come into the system, the dashboard categorizes them by the highest risk score, not when they appear on the system. When you've got multiple ongoing incidents you can only see the highest risk score at the top of the list rather than the most recent detection. Exabeam's reporting dashboard could have included a filtering option to filter by the most recent detection.
DC
The solution's graphing is highly specific and useful
Implementing policies in the solution isn't easy, and it takes time. For example, you need to use some secrets in Windows or Mac to execute your policies, and you can assign these policies with Microsoft Intune. However, when you execute a policy, you still need to wait up to two days to see alerts. Some of our customers aren't happy because they didn't expect it to take so long. They're satisfied once it starts working because they see the alerts and graphs. The user interface also isn't user-friendly. When we introduce Insider Risk Management to our clients, they often find it difficult to understand. There is too much information, and the UI is not scalable. Also, entry-level IT technicians are not always interested in learning something new. It should be clearer and easier to understand. Microsoft is still working on machine learning and AI components. They're constantly updating the product. However, from my experience, most of my customers are not ready or able to use the AI solution. They are creating some project plans and specific policies. They don't want to see dozens of alerts when they use Microsoft's recommendations or the AI-based solution.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Exabeam is very easy to use, with a straightforward platform and workflow, unlike other tools that require more expertise."
"Exabeam Fusion SIEM has a good performance and more advantages than traditional solutions."
"The way it can connect with AWS is very useful, and the integrations are pretty good."
"The Exabeam SIEM has a user friendly UI interface."
"The ThreatHunter in Advanced Analytics is the most valuable. It helps analyze compromised assets and provides analysis for any entity within my client's environment."
"The most valuable feature of Exabeam is the timeline creation based on log sources, which helps in security investigations."
"The setup is not difficult. It was easy."
"The platform is not extremely expensive compared to its direct competitors; I would rate its pricing around six out of ten."
"The best thing about Purview is that it's easy to integrate with our day-to-day environment. We have Active Directory, and Word and Excel. Using a third-party vendor and trying to integrate with our existing environment would be much more challenging."
"Microsoft Purview Insider Risk Management was helpful in performing investigations after alerts were received."
"Insider Risk Management's graphing is highly specific and useful. You can see the last six months of data for the Microsoft tenant. You can easily find what you need. For example, you can filter for alerts about devices, emails, etc."
 

Cons

"I believe if it were more flexible it would be a better product."
"The only problem is that the UI is not very impressive."
"The solution's reporting and dashboarding could be improved."
"Updating the new release of Exabeam Fusion SIEM takes time and slows our performance."
"The initial setup of Exabeam Fusion SIEM is complex because it needs to integrate with the SIEM solution, but after this is complete it is straightforward."
"One area that needs improvement is interacting with Exabeam's API. There was a headache regarding the API; the documentation wasn't clear, and the syntax wasn't very precise."
"The organzation is rigid and not flexible in the way they operate"
"One area for the solution's improvement is integration capabilities, particularly out-of-the-box integration which sometimes requires additional professional services."
"For certain things, you need to install an agent. I understand it's for integrity, but if there could be a clientless solution for certain aspects, it would make life easier."
"The user interface also isn't user-friendly. When we introduce Insider Risk Management to our clients, they often find it difficult to understand. There is too much information, and the UI is not scalable. Also, entry-level IT technicians are not always interested in learning something new. It should be clearer and easier to understand."
"The reporting capabilities sometimes leave a little to be desired. It could be improved in terms of producing reports to provide information to the C-suite or others."
 

Pricing and Cost Advice

"Exabeam is not a cheap solution."
"They have a great model for pricing that can be based either on user count or gigabits per day."
"There is an annual license required to use Exabeam Fusion SIEM. The price of the solution should be reduced."
"The platform is not extremely expensive compared to its direct competitors; I would rate its pricing around six out of ten."
"The solution is expensive."
"Exabeam Fusion SIEM's pricing is reasonable."
Information not available
report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
842,592 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
16%
Financial Services Firm
13%
Manufacturing Company
9%
Government
6%
Computer Software Company
25%
Financial Services Firm
13%
Government
8%
University
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What are the biggest differences between Securonix UEBA, Exabeam, and IBM QRadar?
It mostly depends on your use-cases and environment. Exabeam and Securonix have a stronger UEBA feature set, friendlier GUI and are not licensed based on capacity (amount of logs and information in...
What do you like most about Exabeam Fusion SIEM?
The solution's initial setup process is easy.
What is your experience regarding pricing and costs for Exabeam Fusion SIEM?
I do not have much information about the pricing. However, I am aware that Exabeam is cheaper than Palo Alto based on discussions in meetings.
What needs improvement with Microsoft Purview Insider Risk Management?
Implementing policies in the solution isn't easy, and it takes time. For example, you need to use some secrets in Windows or Mac to execute your policies, and you can assign these policies with Mic...
What is your primary use case for Microsoft Purview Insider Risk Management?
Insider Risk Management is useful for cybersecurity. It can be used to protect against attacks or for attack simulations. Insider Risk Management is another approach to security because it's about ...
What advice do you have for others considering Microsoft Purview Insider Risk Management?
I rate Microsoft Purview Insider Risk Management six out of 10. I've had trouble using the product, and the UI isn't user-friendly. I don't mind the difficulties, but Microsoft's technical team doe...
 

Also Known As

No data available
Microsoft Insider Risk Management
 

Overview

 

Sample Customers

Hulu, ADP, Safeway, BBCN Bank
Information Not Available
Find out what your peers are saying about Splunk, Wazuh, Microsoft and others in Security Information and Event Management (SIEM). Updated: March 2025.
842,592 professionals have used our research since 2012.