Microsoft Defender XDR vs Sumo Logic Security comparison

Microsoft and Sumo Logic are both solutions in the Security Information and Event Management (SIEM) category. Additionally, 97% of Microsoft users are willing to recommend the solution, compared to 95% of Sumo Logic users who would recommend it.

Microsoft Defender XDR

Read 89 Microsoft Defender XDR reviews

7,029 Views
5,340 Comparison Views

97% willing to recommend

Sumo Logic Security

Read 18 Sumo Logic Security reviews

1,626 Views
1,104 Comparison Views

95% willing to recommend

Microsoft Defender XDR

Sumo Logic Security

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Microsoft Defender XDR and Sumo Logic Security based on real PeerSpot user reviews.

Find out in this report how the two Security Information and Event Management (SIEM) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed Microsoft Defender XDR vs. Sumo Logic Security Report (Updated: May 2023).

Buyer's Guide

Microsoft Defender XDR vs. Sumo Logic Security

May 2023

Download the complete report

Helped 814,649 peers since 2012

Categories and Ranking

Microsoft Defender XDR

Average Rating

8.4

Number of Reviews

Ranking in other categories

Endpoint Detection and Response (EDR) (5th), Extended Detection and Response (XDR) (5th), Microsoft Security Suite (2nd)

Sumo Logic Security

Average Rating

8.6

Number of Reviews

Ranking in other categories

Log Management (19th), Security Information and Event Management (SIEM) (19th), Security Orchestration Automation and Response (SOAR) (12th)

Featured Reviews

Desray Liu

Project Manager at Freedom Systems Inc.

Nov 28, 2023

A time-saving and easy-to-integrate product that needs to offer a control center to users

As a part of Microsoft's attempt to reduce costs, there has been a direct cut down of the local technical support team. Sometimes, you have to use the technical support offered by Microsoft from other countries, but at times, we speak different languages, just like how people speak in Chinese or Mandarin, but there are still some differences between them. The front-line support from Microsoft has only limited technical abilities or access to their internal system. Sometimes, my company cannot even escalate an issue to Microsoft's senior team members. The support team of Microsoft is nice as they attempt to solve the problems together with you, but I believe that due to some cost-related issues, they don't have enough permissions. Sometimes, users might feel blocked when trying to connect with the support team. I rate the technical support a seven out of ten.

Read full review

Moole Muralidhara Reddy

DevOps and Solution Architect at ADP

Mar 26, 2024

Used to store and monitor application logs and VPC flow logs

We are mainly concentrating on networking. We use VPC products and application logs to monitor the genuineness of users who have logged in. We also store and monitor GuardDuty logs to see if someone is trying to access the same server multiple times. We are storing and monitoring WAF logs and GuardDuty logs. If someone faces any issues, we'll receive an email and take action based on it. If someone tries to access one of the applications from a different country, we can search in Google and identify the location of that particular IP address. Sumo Logic Security identifies whether a particular IP address is low, medium, or high risk without the help of Google. We can store logs in CloudWatch, but it is very difficult to search them in CloudWatch. We should know the query in order to do that. Searching for logs with Sumo Logic Security is very easy compared to CloudWatch. We have been using the solution for more than two years and haven't faced any issues with the solution's availability. I would recommend the solution to other users. I would recommend Sumo Logic Security instead of AWS, CloudWatch, or CloudTrail. With Sumo Logic Security, you can capture and see all the logs in a single place. If some issues occur, you can log into the solution and verify all the logs. At an organizational level, we have multiple AWS accounts for different environments. Instead of logging in to all the AWS accounts, you can log in to Sumo Logic Security and verify everything. Overall, I rate the solution a nine out of ten.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"We also use Microsoft Sentinel, Defender for Cloud, Defender for Identity, and Microsoft Defender for Cloud Apps. They are all integrated and it was very easy to integrate them. In my experience with the integrations, it was just a click of a button and things were integrated. It's just a button."

"The Endpoint Manager is incredible; it has a very straightforward interface and is exceedingly easy to use. Pulling out and deploying different tags or resources is a simple task across various departments with different levels of security. The notifications are also simple and satisfying; it's great to see the bubble informing us which devices are compliant and which are waiting to update."

"All of the security components are valuable including, antiphishing, antispam, and stage three antivirus."

"Defender is easy to use. It has a nice console, and everything is all in one place."

"I like the easy integration and advanced possibilities. We can implement it at customer sites in a few clicks, but we can also dive deep and drill down to extended features. There's a very good starting point to get into this product and all the features from Defender."

"It provides a single pane of glass within the 365 admin interface, streamlining our experience by consolidating information in one place and eliminating the need to navigate through multiple interfaces."

"The advantage of Microsoft Defender XDR has over other XDRs in the market is that it's easy to use. You can quickly differentiate between alerts, incidents, devices, software, etc. It's easier to investigate an incident, and you have so many options. You can automate investigations and use playbooks. There's also the live response session, which is something you can't find in any other XDR."

"For me, the advanced hunting capabilities have been really great. It allowed querying the dataset with their own language, which is KQL or Kusto Query Language. That has allowed me to get much more insight into the events that have occurred. The whole power of 365 Defender is that you can get the whole story. It allows you to query an email-based activity and then correlate it with an endpoint-based activity."

More Microsoft Defender XDR pros

"We can ingest logs and make reports out of them. It is a good tool which can help us monitor any issues."

"Sumo Logic is an easy solution to use. You can set it up very quickly, and it includes a lot of training videos."

"I have no concerns about the stability of the product. I feel it handles the stress we put on it very well."

"Technical support is always great."

"We use it to ingest Windows domain controller logs. We use this to monitor if anyone is placed in particular administration groups that potentially shouldn't be. It helps us keep track of people."

"The tool has key features like operability. It will alert the admins whenever a device is onboarded."

"For many of our services, we use Sumo Logic to track errors and send notifications to our Slack channel, if there are issues. Then, we have our support people monitoring this, and they can react quickly."

"We have used it many times to find a root cause of a live issue, then fix the problem in the applications."

More Sumo Logic Security pros

Cons

"The AI could be improved. As an analyst, I want to be able to interact more with AI. The AI simply sends summaries. I can't ask it, for example, if it has seen any suspicious activity with device two. I have to go and check device two for myself."

"It would be beneficial to have a more seamless experience with everything consolidated in one place, particularly when dealing with aspects related to the Exchange console."

"The abundance of sub-dashboards and sub-areas within the main dashboard can be confusing, even if it all technically makes sense."

"The solution can improve the rules and privileges it offers."

"Microsoft Defender XDR is not a full-fledged EDR or XDR."

"Improving scalability, especially for very large tenants, could be beneficial for Microsoft Defender XDR."

"When discussing the secure score, which includes overviews and recommended actions, some of these recommended actions are not applicable to us, particularly those related to Microsoft Internet Explorer, which we do not use in any of our environments."

"The logs could be better."

More Microsoft Defender XDR cons

"Sumo Logic Security is expensive, and its pricing could be improved."

"The API integration in Sumo Logic Security could improve. There are delayed connections or they stop and then automatically start. Having a seamless log collection would be beneficial."

"There needs to be improvement on imported data which can be used within Sumo Logic to do more advanced queries."

"It took a bit of trial and error to get it set up correctly based on everything we had to do. In the end, we had to send everything over HTTP, which was sort of a stop-gap."

"The initial setup is the most stressful, like learning how to use it."

"If you look at some of the other offerings right now that are available in the market, they do offer APM as well as the product they're offering. I believe Sumo Logic is not there yet. So that's something which I would love to see."

"We would like to have some type of predefined setup for the logs, making the setup easier by default."

"There are some API gaps that are missing."

More Sumo Logic Security cons

Pricing and Cost Advice

"It is fairly priced because we get complete integrated services with the E5 license."

"I believe that the pricing of the licensing is fair."

"365 Defender is billed per account. I don't know the exact price, but my supervisor told me that Microsoft Defender is cheaper than the alternatives. It's bundled, so you get all the features in one place."

"Microsoft should provide lower-level licensing options. They should do it in such a way that even an individual could purchase a license, and it should be entirely flexible."

"I find the pricing to be quite competitive, especially considering its inclusion in our E5 subscription, which provides a comprehensive set of functionalities."

"Purchasing Microsoft Defender XDR as part of a Microsoft 365 bundle can be cost-effective, but acquiring it as a standalone product may be more expensive."

"It has consistently offered highly appealing academic pricing, with distinct rates for higher education and general educational purposes."

"We have a lot of problems in Latin America regarding the price of Microsoft 365 Defender, because the relationship between dollars and the money of the different countries, it's is a lot. Many customers that have small businesses say that they would like the solution but it is too expensive. However, large companies do not find the cost an issue."

More Microsoft Defender XDR pricing and cost advice

"If we went to ELK Stack, which is open source, it would have been less costly, but it would have required more development from our side."

"We chose to go through the AWS Marketplace because it makes it a lot easier when we bill our customers. Rather than having to get multiple different sources of information then correlate a monthly bill for our customers, it is just included in the AWS usage charges."

"The pricing is a little high, but for the features that we receive from Sumo Logic, it suits the price. For some small organizations, the price might be a little high."

"Storing logs in Sumo Logic Security is charged GB-wise, which is a little higher than other products."

"The license pricing model is based on the events that are processed through the solution."

"The product is costly."

"The AWS Marketplace pricing is borderline. Every annual renewal, we always contemplate if we are getting what we think we could out of it or could we do it cheaper with some other product."

"The price scaling comes in a bit expensive."

More Sumo Logic Security pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.

See recommendations

814,649 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

17%

Financial Services Firm

10%

Government

Manufacturing Company

Computer Software Company

16%

Financial Services Firm

11%

Government

10%

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about Microsoft 365 Defender?

Microsoft Defender XDR provides strong identity protection with comprehensive insights into risky user behavior and potential indicators of compromise.

See all answers

What is your experience regarding pricing and costs for Microsoft 365 Defender?

The pricing is reasonable. It's cheaper than other options.

See all answers

What needs improvement with Microsoft 365 Defender?

The solution could enhance the threat Intelligence feature by making it more relevant to specific industries. Much of the threat intelligence information isn't directly applicable to our environmen...

See all answers

What do you like most about Sumo Logic Security?

Sumo Logic Security is a good solution for searching the logs and identifying the issues.

See all answers

What is your experience regarding pricing and costs for Sumo Logic Security?

Storing logs in Sumo Logic Security is charged GB-wise, which is a little higher than other products.

See all answers

What needs improvement with Sumo Logic Security?

Sumo Logic Security is expensive, and its pricing could be improved.

See all answers

Comparisons

CrowdStrike Falcon vs Microsoft Defender XDR

Compared 38% of the time

Wazuh vs Microsoft Defender XDR

Compared 8% of the time

Microsoft Defender for Cloud vs Microsoft Defender XDR

Compared 8% of the time

Trend Vision One vs Microsoft Defender XDR

Compared 5% of the time

Microsoft Purview Compliance Manager vs Microsoft Defender XDR

Compared 4% of the time

More Microsoft Defender XDR Competitors

Google Chronicle Suite vs Sumo Logic Security

Compared 15% of the time

Wazuh vs Sumo Logic Security

Compared 13% of the time

Rapid7 InsightIDR vs Sumo Logic Security

Compared 11% of the time

Securonix Next-Gen SIEM vs Sumo Logic Security

Compared 8% of the time

Microsoft Sentinel vs Sumo Logic Security

Compared 8% of the time

More Sumo Logic Security Competitors

Product Reports

Buyer's Guide

Microsoft Defender XDR

October 2024

Download Microsoft Defender XDR product report

Buyer's Guide

Sumo Logic Security

October 2024

Download Sumo Logic Security product report

Also Known As

Microsoft 365 Defender, Microsoft Threat Protection, MS 365 Defender

No data available

Learn More

Microsoft

Sumo Logic

Overview

Microsoft Defender XDR is a comprehensive security solution designed to protect against threats in the Microsoft 365 environment.

It offers robust security measures, comprehensive threat detection capabilities, and an efficient incident response system. With seamless integration with other Microsoft products and a user-friendly interface, it simplifies security management tasks.

Users have found it effective in detecting and preventing various types of attacks, such as phishing attempts, malware infections, and data breaches.

Watch the Microsoft demo video here: Microsoft Defender XDR demo video.

Sumo Logic

Sumo Logic is a cloud-based machine data analytics company focusing on security, operations, and BI use cases. It provides log management and analytics services that leverage machine-generated big data to deliver real-time IT insights.

Sumo Logic is developed as a SaaS solution, it processes and analyzes large quantities of IT infrastructure data, spotting patterns and anomalies that can indicate a potential threat or significant event.

The platform is designed to help IT, security, and business operations teams develop, manage, and secure their applications and cloud infrastructures. It collects, aggregates, and analyzes data from various sources including servers, virtual machines, and network devices, providing visibility into complex systems.

What are the key features of Sumo Logic?

Real-time Analytics: Continuous queries and live dashboards that provide insights into application performance, user behavior, and security threats.
Advanced Machine Learning: Utilizes machine learning algorithms to identify trends, anomalies, and patterns.
Integrated Threat Intelligence: Tools and workflows to enhance security postures by detecting threats and anomalies.
Multi-tenant Cloud Service: Allows users to operate in a shared cloud environment securely.

The solution aims to simplify data complexity, streamline operations, and provide actionable insights to businesses across various industries.

Sumo Logic is designed to handle high data volumes from multiple sources without diminishing performance. It is primarily deployed in the cloud with seamless integrations for AWS, Google Cloud, and Microsoft Azure. This flexibility allows users to leverage Sumo Logic’s capabilities regardless of their existing cloud infrastructure.

In summary, Sumo Logic is a comprehensive, AI-driven analytics solution ideal for businesses looking to enhance their IT and security operations through data-driven insights and real-time monitoring. Its flexible deployment options and scalable pricing model make it accessible for various business sizes and sectors.

Sample Customers

Accenture, Deloitte, ExxonMobil, General Electric, IBM, Johnson & Johnson and many others.

Information Not Available

Buyer's Guide

Microsoft Defender XDR vs. Sumo Logic Security

May 2023

Free Report: Microsoft Defender XDR vs. Sumo Logic Security

Find out what your peers are saying about Microsoft Defender XDR vs. Sumo Logic Security and other solutions. Updated: May 2023.

DOWNLOAD NOW

814,649 professionals have used our research since 2012.

See our Microsoft Defender XDR vs. Sumo Logic Security report.

See our list of best Security Information and Event Management (SIEM) vendors.

We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.