CrowdStrike Falcon vs. Microsoft Sentinel

Overview
ProductRatingMost Used ByProduct SummaryStarting Price
CrowdStrike Falcon
Score 9.1 out of 10
N/A
CrowdStrike offers the Falcon Endpoint Protection suite, an antivirus and endpoint protection system emphasizing threat detection, machine learning malware detection, and signature free updating. Additionally the available Falcon Spotlight module delivers vulnerability assessment with no performance impact, no additional agents, hardware, scheduled scans, firewall exceptions or admin credentials.
$59.99
per endpoint/month (minimum number of endpoints applies)
Microsoft Sentinel
Score 8.7 out of 10
N/A
Microsoft Sentinel (formerly Azure Sentinel) is designed as a birds-eye view across the enterprise. It is presented as a security information and event management (SIEM) solution for proactive threat detection, investigation, and response.
$2.46
per GB ingested
Pricing
CrowdStrike FalconMicrosoft Sentinel
Editions & Modules
Falcon Go (Small Business)
$59.99
per endpoint/month (minimum number of endpoints applies)
Falcon Go (Small Business)
$59.99
Falcon Pro
$99.99
per endpoint/month (for 5-250 endpoints, billed annually)
Falcon Enterprise
$184.99
per endpoint/month (minimum number of endpoints applies)
Azure Sentinel
$2.46
per GB ingested
100 GB per day
$123.00
per day
200 GB per day
$221.40
per day
300 GB per day
$319.80
per day
400 GB per day
$410.00
per day
500 GB per day
$492.00
per day
More than 500 GB per day
$492.00 + $98.40
per day/plus each additional 100 GB increment
Offerings
Pricing Offerings
CrowdStrike FalconMicrosoft Sentinel
Free Trial
YesYes
Free/Freemium Version
NoNo
Premium Consulting/Integration Services
YesNo
Entry-level Setup FeeNo setup feeNo setup fee
Additional Details
More Pricing Information
Community Pulse
CrowdStrike FalconMicrosoft Sentinel
Considered Both Products
CrowdStrike Falcon
Chose CrowdStrike Falcon
It was the easiest to deploy and manage, while the dashboard was also very clear and precise in terms of useful information.
Another major reason in selection CrowdStrike Falcon was its AI and ML detection capabilities which really impressed us during evaluation. Other tools …
Chose CrowdStrike Falcon
Pricing was less, it had better ratings as well as word of mouth in the market. Works on agent-based solution rather than remote access. Finds zero day attacks very soon recently CrowdStrike found the 3cx attack which is now a critical supply chain attack. CrowdStrike falls …
Chose CrowdStrike Falcon
The logs analysis is very easy to use as it uses splunk in the backend. The automated SOAR features helps to save time and response on the incidents. The threat intelligence is very up-to-date with the recent cyber attacks.
Microsoft Sentinel
Chose Microsoft Sentinel
The SecureWorks product is a more mature product. We prefer the SecureWorks product over Microsoft Sentinel at this point.
Chose Microsoft Sentinel
Elasticsearch, we did a demo about it. Also the CrowdStrike platform, we got a demo on it. How did they compare? I think Elasticsearch, for us, it's more hard to configure. Microsoft Sentinel is pretty straight to the point. We turn on stuff, it's plug-and-play. CrowdStrike, …
Chose Microsoft Sentinel
As the vast majority of our users have Windows machine and uses all 365 cloud features, we finally decided not to implement any 3rd party security solutions on desktops/laptops in order to keep our infrastructure simple. In this case, Microsoft Sentinel is the best way to …
Features
CrowdStrike FalconMicrosoft Sentinel
Endpoint Security
Comparison of Endpoint Security features of Product A and Product B
CrowdStrike Falcon
8.7
96 Ratings
3% above category average
Microsoft Sentinel
-
Ratings
Anti-Exploit Technology9.087 Ratings00 Ratings
Endpoint Detection and Response (EDR)9.294 Ratings00 Ratings
Centralized Management8.995 Ratings00 Ratings
Hybrid Deployment Support8.24 Ratings00 Ratings
Infection Remediation8.991 Ratings00 Ratings
Vulnerability Management7.571 Ratings00 Ratings
Malware Detection9.394 Ratings00 Ratings
Security Information and Event Management (SIEM)
Comparison of Security Information and Event Management (SIEM) features of Product A and Product B
CrowdStrike Falcon
-
Ratings
Microsoft Sentinel
7.9
26 Ratings
0% below category average
Centralized event and log data collection00 Ratings8.626 Ratings
Correlation00 Ratings7.926 Ratings
Event and log normalization/management00 Ratings7.726 Ratings
Deployment flexibility00 Ratings7.124 Ratings
Integration with Identity and Access Management Tools00 Ratings7.824 Ratings
Custom dashboards and workspaces00 Ratings7.926 Ratings
Host and network-based intrusion detection00 Ratings7.622 Ratings
Data integration/API management00 Ratings7.224 Ratings
Behavioral analytics and baselining00 Ratings7.622 Ratings
Rules-based and algorithmic detection thresholds00 Ratings8.224 Ratings
Response orchestration and automation00 Ratings8.123 Ratings
Reporting and compliance management00 Ratings9.04 Ratings
Incident indexing/searching00 Ratings8.524 Ratings
Best Alternatives
CrowdStrike FalconMicrosoft Sentinel
Small Businesses
ThreatLocker
ThreatLocker
Score 9.4 out of 10
LevelBlue USM Anywhere
LevelBlue USM Anywhere
Score 7.5 out of 10
Medium-sized Companies
BlackBerry Protect (CylancePROTECT)
BlackBerry Protect (CylancePROTECT)
Score 9.1 out of 10
Sumo Logic
Sumo Logic
Score 9.3 out of 10
Enterprises
BeyondTrust Endpoint Privilege Management
BeyondTrust Endpoint Privilege Management
Score 9.9 out of 10
Sumo Logic
Sumo Logic
Score 9.3 out of 10
All AlternativesView all alternativesView all alternatives
User Ratings
CrowdStrike FalconMicrosoft Sentinel
Likelihood to Recommend
9.1
(99 ratings)
8.6
(53 ratings)
Likelihood to Renew
10.0
(3 ratings)
7.1
(2 ratings)
Usability
10.0
(2 ratings)
6.5
(7 ratings)
Support Rating
10.0
(9 ratings)
8.0
(3 ratings)
In-Person Training
9.0
(1 ratings)
-
(0 ratings)
Implementation Rating
10.0
(1 ratings)
-
(0 ratings)
Professional Services
-
(0 ratings)
5.0
(1 ratings)
User Testimonials
CrowdStrike FalconMicrosoft Sentinel
Likelihood to Recommend
CrowdStrike
CrowdStrike Falcon is well suited for any size of environment. Large to small, CrowdStrike Falcon does an amazing job. The ability to have the same security as a fortune 500 company and have a solution that sees the same threats that they are seeing is amazing. I do not think that there is a company or environment that wouldn't benefit from the CrowdStrike Falcon solution.
Read full review
Microsoft
Microsoft Sentinel excels in centralized monitoring, AI-driven threat detection, and automation, but improvements in cost transparency, user experience, third-party integrations, and support for emerging technologies could make it even more effective. Addressing these areas would enhance its appeal for small-to-medium businesses, large enterprises, and organizations with complex or specialized IT environments.
Read full review
Pros
CrowdStrike
  • The Log analysis is very detailed and easy to use.
  • Prevent and block all type of malwares.
  • Great threat intelligence which is very up-to-date with the recent cyber attacks
  • very user friendly in access and management
  • Automated feature of detecting, taking action and closing incidents using fusion workflow.
Read full review
Microsoft
  • I appreciate that it keeps the data within our, what we call our, authorization boundary. The fact that the data remains within Microsoft's, I guess, walled garden if you will, is very helpful for certain compliance needs in particular.
  • The large library of ingestion: ability to ingest is basically as easy as I can basically get it to be most of the time. There's occasionally some vendors that it's a little bit more challenging for, but given the ease of integration for a lot of things, basically it's become one of my requirements when I am looking at other tools is how easily do they integrate with Sentinel.
Read full review
Cons
CrowdStrike
  • Support - we are often tasked with running down problems rather than being directed by support.
  • The sales staff we have dealt with are not very responsive or timely.
  • I believe this is a product built for installations of 300 users or more.
Read full review
Microsoft
  • I think it should include more third party integration with non microsoft products as well as with other cloud providers. These integrations should be native.
  • It should improve ML and AI capabilities.
  • I find its documentation a little bit difficult to understand at the start. So the words should be simple.
Read full review
Likelihood to Renew
CrowdStrike
Crowdstrike has a large suite of tools built for helping the engineers triage and respond to security event whenever identified. The ability to customize the security policies and implement more granular policies to different devices based on the functionality is unmatched. Crowdstrike provides so much of ability in a decent budget which ascertains the value for money or ROI.
Read full review
Microsoft
it does the job reasonably well
Read full review
Usability
CrowdStrike
I think it is a complete and very trustful XDR platform, with very few False Positives. It is very well supported by highly skilled professionals on all levels: from pre-sales engineers, Customer Account Managers and support engineers.
Read full review
Microsoft
The Microsoft Azure Sentinel solution is very good and even better if you use Azure. It's easy to implement and learn how to use the tool with an intuitive and simple interface. New updates are happening to always bring new news and improve the experience and usability. The solution brings reliability as it is from a very reliable manufacturer.
Read full review
Support Rating
CrowdStrike
Any time we need to engage the Crowdstrike Falcon Complete Team, their response is switch, thorough, and they are sure to not close out any request until the customer confirms that they have provided an acceptable resolution. If I ever need anything from the account team related to the product, I also get a response from them within minutes typically to address my question. Top notch customer service!
Read full review
Microsoft
Azure Sentinel is very easy to use and configure. If you are stuck somewhere, Microsoft support is excellent in assisting and solving your issue.
Read full review
In-Person Training
CrowdStrike
There is limited amount of learning that can be completed in an in-person training available. In my opinion, the self-paced learning provided by Falcon portal is more useful over in-person training. The support from Falcon is great and useful to overcome difficulties, if any.
Read full review
Microsoft
No answers on this topic
Online Training
CrowdStrike
The training provided by Crowdstrike Falcon is complete in terms of the depth of technical knowledge and teaches the users about going through with the platform. There are lots of jargons for different tools that Crowdstrike Falcon has and this training teaches them all which helps in managing the platform better. Plus, the regular knowledge checks are also very helpful for the end user.
Read full review
Microsoft
No answers on this topic
Implementation Rating
CrowdStrike
Read the documentation
Read full review
Microsoft
No answers on this topic
Alternatives Considered
CrowdStrike
It stacks on top. We love the ease of use, the third-party integration, having AI, and the CrowdStrike team was way more helpful with our team, so that adoption was within a couple of months. We also compared prices, and the value was higher, with a faster ROI, which helps our finance department start the project promptly.
Read full review
Microsoft
We decided to go with Microsoft Sentinel because it works really well with Microsoft tools we are already using. Microsoft Sentinel's intelligent features detect and resolve problems more quickly than Sumo Logic. It also allows us to pay for what we use and grow as we need. While Sumo Logic is good at analyzing data, Microsoft Sentinel fits our needs.
Read full review
Professional Services
CrowdStrike
No answers on this topic
Microsoft
Did not use professional services
Read full review
Return on Investment
CrowdStrike
  • CrowdStrike Falcon's proactive threat mitigation has significantly reduced the risk of successful cyber attacks, resulting in tangible savings related to potential data breaches or system compromises.
  • The cloud-native architecture and automated features have improved operational efficiency.
  • The platform's real-time visibility and threat hunting capabilities have drastically improved incident response times.
Read full review
Microsoft
  • As any cybersecurity product, this has to be more with risk to avoid loss in case of a ransomware that more than relate to a productivity increase. Maybe the impact could be that instead of having people that are checking 24/7 the dashboard, you could implement Sentinel and have less people checking that or people with less expertise. So the saving will be a minor but will be a saving in the cost of your team.
Read full review
ScreenShots

Microsoft Sentinel Screenshots

Screenshot of Screenshot of Screenshot of Microsoft Sentinel Capabilities