Microsoft Sentinel

Cloud-native SIEM that collects telemetry across environments and uses analytics to detect and respond to threats.

Pricing: usage
Free tier: true
License: proprietary
Open source: No

Editorial review

Microsoft Sentinel has not yet been editorially reviewed. User reviews and published field data below are unaffected — we say so rather than implying an editorial verdict.

Facts & attributes

Every value carries its evidence state. “—” means unknown — never a silent default (P-02).

Identity · Taxonomy

Documentation(HTTPS URL): https://learn.microsoft.com/en-us/azure/sentinel/Verification pending
Tags(open-source;cloud-native): siem, soar, ueba, cloud-native, microsoft-azureVerification pending

Platform · Deployment

Delivery model(SaaS;self-hosted;desktop;mobile;embedded;managed-cloud;appliance): SaaSVerification pending

Pricing · Licensing

Free plan(true/false): trueVerification pending
Free trial(true/false): trueVerification pending
License model(proprietary;open-source;source-available;dual-license): proprietaryVerification pending
Pricing model(free;subscription;usage;seat;asset;transaction;revenue-share;perpetual;custom): usageVerification pending

Features · Product · Fit

Core capabilities(authoring;automation;analytics): Cloud-native SIEM with built-in SOAR, User and entity behavior analytics (UEBA), Threat intelligence integration, Security data lake for low-cost retention, 400+ data connectors, Security Copilot AI assistanceVerification pending

Api · Integrations · Ecosystem

API available(true/false): trueVerification pending
CLI(true/false): trueVerification pending

Security · Privacy · Compliance

Regulatory compliance(HIPAA;PCI DSS;FedRAMP;GDPR support): GDPR, HIPAA, PCI DSSVerification pending
Security certifications(SOC 2 Type II;ISO 27001): SOC 1, SOC 2, SOC 3, ISO/IEC 27001, ISO/IEC 27017, ISO/IEC 27018, FedRAMP, CSA STARVerification pending

Audience · Use · Case

Best for(Neutral editorial summary): Organizations standardized on Azure and Microsoft 365 that want a cloud-native pay-as-you-go SIEM with built-in SOAR and UEBA.Verification pending
Company-size fit(individual;SMB;mid-market;enterprise): SMB, mid-market, enterpriseVerification pending
Primary use cases(build;monitor;automate): Threat detection, investigation, and response, Low-cost long-term log retention and compliance, SIEM migration from Splunk and QRadar, Proactive threat huntingVerification pending
Skill level(beginner;intermediate;advanced;specialist): advancedVerification pending

Lifecycle · Versioning

Changelog/release notes(HTTPS URL): https://learn.microsoft.com/en-us/azure/sentinel/whats-newVerification pending
Maintenance status(active;maintenance;deprecated;EOL;archived): activeVerification pending

Vendor · Maintainer

Founded year(2012): 1975Verification pending
Headquarters country(US): United StatesVerification pending
Vendor type(commercial;foundation;community;government;consortium;individual): commercialVerification pending

User reviews

Review policy

No published reviews yet.