Try our new research platform with insights from 80,000+ expert users

Microsoft Purview Insider Risk Management vs Securonix Next-Gen SIEM comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Microsoft Purview Insider R...
Average Rating
8.0
Reviews Sentiment
5.4
Number of Reviews
4
Ranking in other categories
Microsoft Security Suite (28th), Insider Risk Management (2nd)
Securonix Next-Gen SIEM
Average Rating
8.6
Reviews Sentiment
6.4
Number of Reviews
35
Ranking in other categories
Security Information and Event Management (SIEM) (15th), Identity Threat Detection and Response (ITDR) (9th)
 

Mindshare comparison

While both are Security Software solutions, they serve different purposes. Microsoft Purview Insider Risk Management is designed for Insider Risk Management and holds a mindshare of 13.1%, up 13.1% compared to last year.
Securonix Next-Gen SIEM, on the other hand, focuses on Security Information and Event Management (SIEM), holds 1.1% mindshare, down 1.2% since last year.
Insider Risk Management Market Share Distribution
ProductMarket Share (%)
Microsoft Purview Insider Risk Management13.1%
Proofpoint Insider Threat Management16.2%
Varonis Platform12.1%
Other58.6%
Insider Risk Management
Security Information and Event Management (SIEM) Market Share Distribution
ProductMarket Share (%)
Securonix Next-Gen SIEM1.1%
Wazuh9.3%
Splunk Enterprise Security8.7%
Other80.9%
Security Information and Event Management (SIEM)
 

Featured Reviews

Karthik Ekambaram - PeerSpot reviewer
Have consistently built secure internal environments while implementing compliance tools for diverse customer needs
The customizable alerts system needs improvement. The detection rules are not extensive enough. There should be more possibilities for creating alerts based on additional criteria. While rules can be customized, the available criteria for creating detection rules should be expanded. Microsoft's pricing is very expensive. The Business Premium offering should be extended to enterprise customers, as it's currently limited to 300 users. There should be a tier below E5 that includes Microsoft Purview and other features. Currently, E5 licensing costs approximately 6,000 INR per user per month including taxes. Competitive solutions offer similar functionality at about 50% of Microsoft's cost. Email DLP is included in Business Premium or P1 licenses, while P2 licenses cover endpoint DLP and additional channels. Microsoft should introduce an intermediate tier below E5 that covers all P1 licenses, as customers often need coverage across the entire M365 suite.
Mohammed Nadeem Rais - PeerSpot reviewer
The visibility and analytics from Securonix SIEM have become indispensable in identifying and stopping potential threats before they escalate.
The most valuable feature of Securonix Next-Gen SIEM is its advance analytics, flexibility and scalability. We ingest billions of logs without worrying about resource allocation. This makes it a robust and cost-effective solution for our needs. Its user entity and behavior analytics (UEBA) are also integral for detecting insider threats and lateral movements within the organization. These features help organizations strengthen their security posture, protect sensitive data, and maintain compliance with strict regulatory requirements.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Microsoft Purview Insider Risk Management was helpful in performing investigations after alerts were received."
"Insider Risk Management's graphing is highly specific and useful. You can see the last six months of data for the Microsoft tenant. You can easily find what you need. For example, you can filter for alerts about devices, emails, etc."
"The best thing about Purview is that it's easy to integrate with our day-to-day environment. We have Active Directory, and Word and Excel. Using a third-party vendor and trying to integrate with our existing environment would be much more challenging."
"The scoring mechanism is exceptional because it eliminates the need to reinvent criteria for identifying risks, misconfigurations, or vulnerabilities."
"Its console is very easy to use and configure. It is very intuitive for our use cases. App integrations are also pretty nice."
"One of the valuable features of Securonix is the auto-incident creation, which was not available two or three years ago."
"The customizability of the tool is valuable. We are able to customize the use cases and create them easily without a large amount of Securonix assistance. It's very flexible. We do not have to rely on Professional Services to modify or create a new use case."
"The user interface is easy to learn and navigate."
"One of the most valuable features it has is the thread chaining. One of the common issues that we always had was the number of anomalies that we used to get and the number of alerts that we used to get. But with this approach of thread chaining, we've found the false-positive rate has decreased very significantly. That was something that we never could have achieved before."
"The most valuable feature is what Securonix calls enrichment. Securonix is very powerful because of all the data it can process and automatically enrich. The actionable intelligence it provides is one of its benefits, due to the processing capacity it has."
"The most valuable feature is that it works on user behavior and event rarities."
"We ingest billions of logs without worrying about resource allocation."
 

Cons

"For certain things, you need to install an agent. I understand it's for integrity, but if there could be a clientless solution for certain aspects, it would make life easier."
"The reporting capabilities sometimes leave a little to be desired. It could be improved in terms of producing reports to provide information to the C-suite or others."
"The user interface also isn't user-friendly. When we introduce Insider Risk Management to our clients, they often find it difficult to understand. There is too much information, and the UI is not scalable. Also, entry-level IT technicians are not always interested in learning something new. It should be clearer and easier to understand."
"Microsoft's pricing is very expensive. The Business Premium offering should be extended to enterprise customers, as it's currently limited to 300 users."
"We thought they were going to be a great product, however, they're actually not great at all as an MSP."
"We have a lot of users who, because they're engineers and they're bringing down product data - where, at times, a top-level product could be 10,000 or 15,000 objects - it's difficult for us to determine what should be a concern and what shouldn't be a concern. We work with the Securonix folks to try to come up with better ways to identify that."
"It seems to me that within Securonix there is no option for completely visualizing the types of sources or if there is any loss of logs. I've heard that they have an additional module to validate those types of cases, but in terms of the platform itself only, I can only see how often it sends data but not any specific detail."
"Securonix implements risk scores based on different policies that are triggered. We've seen some challenges with the risk scores and how they trigger. These are things that Securonix has recognized and they've been working with us to help improve things."
"The dashboards in Securonix Next-Gen SIEM need more customization and informational capabilities."
"When dealing with a large amount of data, such as when firewall logs increase, queries sometimes crash or get stuck."
"SIEM could have better integration with other technologies."
"Parsing needs to be improved. Every time we integrate a new, specific data source, we face a lot of problems in parsing, even for the old data source."
 

Pricing and Cost Advice

Information not available
"Compared to other known brands in the industry, the overall cost of the licenses is a bit higher than what customers expect."
"The solution's price is double the competitors."
"Its pricing is quite similar to others and is very competitive. The other solutions have different types of licensing, but when you do the math, it is competitive."
"A good thing about Securonix is that they don't charge by volume of data or number of devices... They charge by the number of employees, which is a much more predictable number for me, versus data. Our costs are in the $100,000 range over a three-year subscription."
"I had heard that it was much cheaper than Splunk and some of the other tools, and they gave us a nice package with support. They accommodated the number of users and support very well."
"We have an annual license. We pay $200,000 for the base licensing and we pay another $50,000 for the software as a service."
"Licensing is based on events per second (EPS), costing between $50 to $60 per EPS."
"We have a license from our 5.0, so that license just continued. We paid them the extra cloud-hosting costs for a year which were about $300,000."
report
Use our free recommendation engine to learn which Insider Risk Management solutions are best for your needs.
873,003 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
36%
Financial Services Firm
8%
Comms Service Provider
5%
Manufacturing Company
5%
Computer Software Company
16%
Financial Services Firm
10%
Healthcare Company
7%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business10
Midsize Enterprise5
Large Enterprise19
 

Questions from the Community

What needs improvement with Microsoft Purview Insider Risk Management?
The customizable alerts system needs improvement. The detection rules are not extensive enough. There should be more possibilities for creating alerts based on additional criteria. While rules can ...
What is your primary use case for Microsoft Purview Insider Risk Management?
We are a cybersecurity consulting and implementation organization. We implement solutions to our customers for Microsoft Intune, Google Workspace, and other platforms. We also use Microsoft Intune ...
What advice do you have for others considering Microsoft Purview Insider Risk Management?
I would recommend Microsoft Purview Insider Risk Management to others. I would rate the overall solution as a nine.
Which is the best SIEM tool for a mid-sized financial services firm: Arcsight or Securonix?
In my market, a lot of financial companies had or have an ArcSight installation. Just because in former times it was pretty good. Now a lot of them are looking for a more effective solution due to ...
What is your primary use case for Securonix Security Analytics?
We work with CrowdStrike, Securonix Next-Gen SIEM, and other cybersecurity products such as Gurucul. We are a service provider and partner of Securonix Next-Gen SIEM. We operate as a reseller of Se...
What is your experience regarding pricing and costs for Securonix Next-Gen SIEM?
The solution is definitely not expensive. It's benchmarked against others in this space, and we haven't received any negative feedback about pricing from customers or prospects.
 

Also Known As

Microsoft Insider Risk Management
Securonix Security Analytics
 

Overview

 

Sample Customers

Information Not Available
Dtex Systems, Pfizer, Western Union, Harris, ITG
Find out what your peers are saying about Varonis, Microsoft, Dtex Systems and others in Insider Risk Management. Updated: October 2025.
873,003 professionals have used our research since 2012.