Microsoft Security Copilot vs. SentinelOne Purple AI

Microsoft Security Copilot is well-suited for environments where security teams face high alert volumes and need rapid triage. It is effective during active threat response, helping us establish timelines and suggest remediation steps quickly. Copilot also excels in executive reporting, generating clear summaries for leadership without much effort. Security Copilot is less effective outside of Microsoft's ecosystem because it doesn't integrate well with other products.

Incentivized

I really came to love the product. Great compliment to the team and reducing workloads

Incentivized

• Helps with finding errors in PowerShell scripts.
• Quick to answer questions about Excel formulas.
• Microsoft Security Copilot helps with summarizing and creating meeting notes.

Incentivized

• Detection
• Response
• analyzes

Incentivized

• It is super expensive, which can be a turn off for many small businesses looking to leverage its capabilities
• It can be very complex to set up, with many prerequisite steps that need to happen prior to being able to use it
• With all AI-based solutions, it can sometimes hallucinate, but that is to be expected at some level

Incentivized

• USB control
• Reporting
• Firewall control

Incentivized

Anyone can use it. Easy to prompt, also capabilities to become advance with custom agents. It can become custom to your workflow. Many people will have their unique experiences to share and results are generally positive. This is a growth in the product from the effect of community and adoption/usage.

Incentivized

My usage of other products is based on SIEM tools. So far, Microsoft Security Copilot is the only product I've seen that works across multiple technologies/products to provide full visibility into security tooling using AI. I know other vendors are working towards this, but Microsoft has definitely taken a lead.

Incentivized

It was quicker to implement and get running in our environment. Cost and support were a big factor - we got a generous special from SentinelOne - and we are still with them after our initial year. Great product.

Incentivized

• Helps reduce time spent creating a baseline script.
• Some errors get corrected but then get reintroduced while adding functionality.
• I noticed that when using this for PowerShell it will sometimes have you install the module in the script without verifying if it is already installed. You must read the script before executing.

Incentivized

• Improved our ROI - can maintain smaller team with product
• Quicker from analysis to action than normal security analyst
• Negative is the team depends on it more - they becoming dependent on it

Incentivized