No more typing reviews! Try our Samantha, our new voice AI agent.

Microsoft Purview Insider Risk Management vs Securonix Next-Gen SIEM comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Microsoft Purview Insider R...
Average Rating
8.0
Reviews Sentiment
5.7
Number of Reviews
5
Ranking in other categories
Microsoft Security Suite (28th), Insider Risk Management (2nd)
Securonix Next-Gen SIEM
Average Rating
8.6
Reviews Sentiment
6.4
Number of Reviews
35
Ranking in other categories
Security Information and Event Management (SIEM) (17th), Identity Threat Detection and Response (ITDR) (10th), AI Security (6th)
 

Mindshare comparison

While both are Security Software solutions, they serve different purposes. Microsoft Purview Insider Risk Management is designed for Insider Risk Management and holds a mindshare of 14.7%, up 11.6% compared to last year.
Securonix Next-Gen SIEM, on the other hand, focuses on Security Information and Event Management (SIEM), holds 1.4% mindshare, up 1.0% since last year.
Insider Risk Management Mindshare Distribution
ProductMindshare (%)
Microsoft Purview Insider Risk Management14.7%
Proofpoint Insider Threat Management11.4%
Varonis Platform10.9%
Other63.0%
Insider Risk Management
Security Information and Event Management (SIEM) Mindshare Distribution
ProductMindshare (%)
Securonix Next-Gen SIEM1.4%
Splunk Enterprise Security7.0%
IBM Security QRadar5.2%
Other86.4%
Security Information and Event Management (SIEM)
 

Featured Reviews

Karthik Ekambaram - PeerSpot reviewer
Director at Scybers
Have consistently built secure internal environments while implementing compliance tools for diverse customer needs
The customizable alerts system needs improvement. The detection rules are not extensive enough. There should be more possibilities for creating alerts based on additional criteria. While rules can be customized, the available criteria for creating detection rules should be expanded. Microsoft's pricing is very expensive. The Business Premium offering should be extended to enterprise customers, as it's currently limited to 300 users. There should be a tier below E5 that includes Microsoft Purview and other features. Currently, E5 licensing costs approximately 6,000 INR per user per month including taxes. Competitive solutions offer similar functionality at about 50% of Microsoft's cost. Email DLP is included in Business Premium or P1 licenses, while P2 licenses cover endpoint DLP and additional channels. Microsoft should introduce an intermediate tier below E5 that covers all P1 licenses, as customers often need coverage across the entire M365 suite.
reviewer1375044 - PeerSpot reviewer
Assistant VP, Idm Compliance at a financial services firm with 1,001-5,000 employees
Centralized environment supports big data while facing integration challenges
The customization in Securonix Next-Gen SIEM is more difficult compared to other solutions. At the operation level, we are not facing many challenges with automating things using Securonix Next-Gen SIEM, but at the admin level, we have many challenges where log parsing is causing issues and compatibility is not present. The primary technology challenge we have is not at the security tools level. For example, firewall Cisco and others are capable. However, specific to product, for SAP, we are using certain products, and developing custom connectors for each product, especially the internal applications, is difficult, and Securonix Next-Gen SIEM is not up to the mark.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The best thing about Purview is that it's easy to integrate with our day-to-day environment. We have Active Directory, and Word and Excel. Using a third-party vendor and trying to integrate with our existing environment would be much more challenging."
"Insider Risk Management's graphing is highly specific and useful. You can see the last six months of data for the Microsoft tenant. You can easily find what you need. For example, you can filter for alerts about devices, emails, etc."
"The scoring mechanism is exceptional because it eliminates the need to reinvent criteria for identifying risks, misconfigurations, or vulnerabilities."
"Instead of having multiple vendors' solutions, I can install Purview, or I can enhance the features in Purview to make my life easier, and it can be managed through a single portal."
"An example of how these features from Microsoft Purview Insider Risk Management have benefited my organization is that we recently discovered a foreign actor, someone from North Korea took a job at our company and was pretending to be an employee, and with Microsoft Purview Insider Risk Management, they notified us of that problem and we were able to remediate the fact that we had a North Korean spy working for us."
"Microsoft Purview Insider Risk Management was helpful in performing investigations after alerts were received."
"The solution has proven to be stable so far...The solution is easy to scale up."
"One of the valuable features of Securonix is the auto-incident creation, which was not available two or three years ago."
"The solution is stable and scalable."
"[The solution has] incident-management or case-management functionality. If someone were to download a high number and we decided we needed to investigate it, I could open a case right in the tool. It would be able to directly reference the data that they downloaded and we could open and shut the case directly in the tool, as well as report from it."
"In summary: First, I have been able to reduce my overhead by half, and second, my analyst is a lot more efficient and the noise in my environment is reduced by at least 70 percent."
"The second feature is that within the SNYPR product there is a functionality called Spotter. We use that for link analysis diagrams and to run the stats command. That's extremely useful because it replaces a tedious, manual process we used to use, using Microsoft Excel and a couple of other methods, to bring data together."
"The detection of threats and reduction of false positive alarms as compared to other solutions are valuable features. It has improved threat detection response and reduced a lot of noise from false positives as compared to our previous SIEM solutions."
"The feature that I have found most valuable is their analytics platform where they have the open security data-link, which they introduced, and this is typically different from the other vendors."
 

Cons

"The reporting capabilities sometimes leave a little to be desired. It could be improved in terms of producing reports to provide information to the C-suite or others."
"The user interface also isn't user-friendly. When we introduce Insider Risk Management to our clients, they often find it difficult to understand. There is too much information, and the UI is not scalable. Also, entry-level IT technicians are not always interested in learning something new. It should be clearer and easier to understand."
"My experience with the deployment of Microsoft Purview Insider Risk Management was a fifty-fifty situation because we have a very diverse network, and not all of it is on Microsoft products."
"For certain things, you need to install an agent. I understand it's for integrity, but if there could be a clientless solution for certain aspects, it would make life easier."
"For certain things, you need to install an agent; installing an agent on the client workstation is a headache and whenever a new client comes in, you need to install an agent on it, which is an added task for IT."
"Microsoft's pricing is very expensive. The Business Premium offering should be extended to enterprise customers, as it's currently limited to 300 users."
"Securonix could open up information regarding the indicators of compromise or cyber-threat intelligence databases that they use."
"The incident response area should be improved."
"One of the things they can improve on a little bit is the usability side, to make some things simpler... The tool does have a lot of knobs, you can turn a lot of things on and off and you can change things. Sometimes, it can become a little overwhelming. They should remove some confirmation options and make it simpler for the less mature customers and people who are still trying to grasp it."
"We thought they were going to be a great product, however, they're actually not great at all as an MSP."
"The pricing. I'm not sure how they are proceeding with the identity based pricing compared with DB pricing which most of the vendors are using today."
"We have a lot of users who, because they're engineers and they're bringing down product data - where, at times, a top-level product could be 10,000 or 15,000 objects - it's difficult for us to determine what should be a concern and what shouldn't be a concern."
"The customization in Securonix Next-Gen SIEM is more difficult compared to other solutions. At the admin level, we have many challenges where log parsing is causing issues and compatibility is not present."
"We look forward to more developments from Securonix Next-Gen SIEM in terms of their service turnaround times and staying connected with customers."
 

Pricing and Cost Advice

Information not available
"Its price is fine. We found it to be cheaper than LogRhythm, Exabeam, Splunk, as well as Elastic Security. A few months ago, when we were comparing Securonix with Elastic Security, we found Securonix to be cheaper than Elasticsearch. We were pretty surprised that Elastic Security is more expensive than Securonix because Elasticsearch is just starting, and it cannot compete with Securonix at this time. So, the pricing of Securonix is pretty good for now."
"The pricing is good, but by adding more things, the licensing becomes more complex because an EPS license fluctuates a lot. This licensing concept is going to be problematic in the long run."
"A good thing about Securonix is that they don't charge by volume of data or number of devices... They charge by the number of employees, which is a much more predictable number for me, versus data. Our costs are in the $100,000 range over a three-year subscription."
"We have a license from our 5.0, so that license just continued. We paid them the extra cloud-hosting costs for a year which were about $300,000."
"Its pricing is quite similar to others and is very competitive. The other solutions have different types of licensing, but when you do the math, it is competitive."
"We went in on a three-year agreement which has an annual licensing fee, based upon the number of people that we're monitoring. There have not been any additional costs to the standard licensing fees."
"The pricing is fine compared to the market but I think that at some point the competitors will catch up on price."
"The solution's price is double the competitors."
report
Use our free recommendation engine to learn which Insider Risk Management solutions are best for your needs.
892,383 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Financial Services Firm
12%
Outsourcing Company
7%
Comms Service Provider
6%
Computer Software Company
10%
Manufacturing Company
9%
Financial Services Firm
9%
Comms Service Provider
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business10
Midsize Enterprise5
Large Enterprise19
 

Questions from the Community

What needs improvement with Microsoft Purview Insider Risk Management?
I feel Microsoft Purview Insider Risk Management can be improved by being able to identify patterns and practices of users to determine whether or not they fit the normal use case of a developer, a...
What is your primary use case for Microsoft Purview Insider Risk Management?
My main use cases involve identifying issues related to problems with the current software deployments and whether or not it is being utilized correctly.
What advice do you have for others considering Microsoft Purview Insider Risk Management?
My advice to another organization that is considering using Microsoft Purview Insider Risk Management is to make sure they plan out their deployment very carefully because the biggest sticking poin...
Which is the best SIEM tool for a mid-sized financial services firm: Arcsight or Securonix?
In my market, a lot of financial companies had or have an ArcSight installation. Just because in former times it was pretty good. Now a lot of them are looking for a more effective solution due to ...
What is your primary use case for Securonix Security Analytics?
We work with CrowdStrike, Securonix Next-Gen SIEM, and other cybersecurity products such as Gurucul. We are a service provider and partner of Securonix Next-Gen SIEM. We operate as a reseller of Se...
What is your experience regarding pricing and costs for Securonix Next-Gen SIEM?
The solution is definitely not expensive. It's benchmarked against others in this space, and we haven't received any negative feedback about pricing from customers or prospects.
 

Also Known As

Microsoft Insider Risk Management
Securonix Security Analytics
 

Overview

 

Sample Customers

Information Not Available
Dtex Systems, Pfizer, Western Union, Harris, ITG
Find out what your peers are saying about Varonis, Microsoft, Dtex Systems and others in Insider Risk Management. Updated: April 2026.
892,383 professionals have used our research since 2012.