Try our new research platform with insights from 80,000+ expert users

Check Point Infinity vs Microsoft Sentinel comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 2, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
4.9
Cortex XDR reduces security incidents, personnel needs, and costs, offering quick ROI, enhanced performance, and competitive pricing.
Sentiment score
5.8
Check Point Infinity enhances security and ROI with streamlined management, remote connectivity, and justified pricing for Portuguese businesses.
Sentiment score
6.6
Microsoft Sentinel enhances ROI with automation, boosts productivity, lowers costs, and improves security through efficient integration and faster responses.
They appreciate the rich telemetry data from the solution, as it provides in-depth threat identification.
Cyber Security Manager at Welab bank
Cortex XDR by Palo Alto Networks helps to reduce my total cost of ownership significantly.
Detection and Response Consultant at Inovasys
In Cortex XDR by Palo Alto Networks, most of the remediation is automated and the accuracy is quite good.
Network Security Engineer at Cyberwell Solution
When I use different Check Point tools, I save support time overall.
IT at a security firm with 51-200 employees
The value is in the capacity to protect against problems or attacks with technology, developing and strengthening cybersecurity policies and administration.
PM at SECURE SOFT
I would say we can save about 90% of our budget with Check Point Infinity.
Advisor at Rossell Techsys (Division of Rossell India Limited)
If a customer is already using Microsoft’s ecosystem, the ROI can be positive due to seamless integration.
senior cyber security at a tech services company with 201-500 employees
Our MTTR, mean time to response, improved by forty to fifty percent. Earlier, medium-severity incidents took two to three hours to resolve. Now, after Microsoft Sentinel, it is forty to fifty-five minutes.
Cyber Security Consultant at ProTechmanize
We attribute our growth to Sentinel.
Chief Commercial Officer at defend
 

Customer Service

Sentiment score
7.0
Cortex XDR support is effective and fast but faces issues with language, delays, and high costs, yet generally satisfactory.
Sentiment score
6.2
Check Point Infinity's customer service is praised for responsiveness and knowledge, but some users experience delays and slow ticket processes.
Sentiment score
6.4
Microsoft Sentinel support is praised for quick, knowledgeable responses, with higher satisfaction in premium plans despite some documentation challenges.
The technical support from Palo Alto deserves a mark of ten because they reach out within an hour whenever assistance is needed.
Head of data centers at a non-profit with 10,001+ employees
There is no back and forth, and they know what we are asking for and come up with the best resolution for a solution.
Senior Process Expert at A.P. Moller - Maersk
If any of these services are missed, it becomes a problem in terms of support tickets, follow-up, or special configuration that needs to be done in the system.
Chief of IT Architecture at a financial services firm with 10,001+ employees
As soon as we raise a ticket, they engage promptly, indicating strong vendor support.
Network Engineer at Insa
The technical support is excellent with quick response times.
PM at SECURE SOFT
Check Point support is very responsive.
Advisor at Rossell Techsys (Division of Rossell India Limited)
Microsoft invests significantly in support, which is crucial for companies.
Director de Microsoft y Transformación Digital at Compucad
I believe Microsoft could improve by keeping customer service within the US for Microsoft Sentinel customers who are within state and federal government sectors.
Infosec at a government with 10,001+ employees
Working with a Sentinel engineer helped us tune settings effectively.
Systems Emgineer at a non-profit with 1-10 employees
 

Scalability Issues

Sentiment score
7.5
Cortex XDR is scalable, supports diverse enterprises, integrates with endpoints, and enables easy expansion with cloud infrastructure.
Sentiment score
7.6
Check Point Infinity offers scalable flexibility, efficiently managing growth and diverse requirements for businesses of all sizes and capacities.
Sentiment score
7.6
Microsoft Sentinel offers scalable, cloud-based operations with seamless Azure integration, emphasizing elasticity and cost considerations for effective data management.
You can onboard 10,000 endpoints in just hours, which demonstrates the excellent scalability of this product.
Assistant Security Architect at Cloudnomics
Cortex XDR by Palo Alto Networks can be expanded anytime by purchasing another license without any issues related to scalability.
Head of data centers at a non-profit with 10,001+ employees
I think scalability for Cortex XDR by Palo Alto Networks is good.
Threat Analyst II at a tech vendor with 1,001-5,000 employees
The Infinity Portal lets us manage on-premises, cloud and edge environments from a single elastic console.
Network Security Engineer at Arrow PC Network Pvt Ltd
We have not faced any issues with scalability.
Team Lead, Network & Security at Max international
Check Point Infinity is scalable because Check Point has a deployment ecosystem with technical support and the quality of the final information from these tools.
PM at SECURE SOFT
There is no need to add hardware or redesign infrastructure because it is cloud-native.
Cyber Security Consultant at ProTechmanize
As our organization uses Microsoft Azure and Defender, everything grows together, and we can integrate various features seamlessly.
Systems Emgineer at a non-profit with 1-10 employees
Being a SaaS solution, the scalability of Microsoft Sentinel is robust.
senior cyber security at a tech services company with 201-500 employees
 

Stability Issues

Sentiment score
8.0
Cortex XDR is highly regarded for stability, reliable performance, and well-received updates, despite minor occasional disruptions.
Sentiment score
8.5
Check Point Infinity is highly rated for stability, with mature components and minimal issues, often scoring 8-10 out of 10.
Sentiment score
7.8
Microsoft Sentinel is reliable with 99.9% uptime, minor glitches, and minimal maintenance thanks to its managed service aspect.
Cortex remains fast and responsive, even with increasing data and alerts.
Final Year Student at Gitam University
The thresholds we've seen on our firewall boxes at some instances reached 80% to 85%, but even at that level of utilization, we don't observe any latency or any issues reported with respect to accessing the application.
Senior Process Expert at A.P. Moller - Maersk
Cortex XDR is stable, offering high quality and reliable performance.
Cyber Security Manager at Welab bank
Check Point Infinity is a very stable solution; I don't remember experiencing any downtime.
Private User at a educational organization with 5,001-10,000 employees
Check Point Infinity is very stable for our company.
IT Support at a security firm with 51-200 employees
Check Point Infinity has achieved a 99.9% block rate on zero-day malware in the 2025 Miercom test.
Network Security Engineer at Arrow PC Network Pvt Ltd
I have never experienced any downtime, crashes, or performance issues with Microsoft Sentinel because it is SOC as a Service, so it maintains 100% uptime and scaling.
Infosec at a government with 10,001+ employees
In the past two years, our team hasn't encountered any issues with the stability of Microsoft Sentinel from an operations perspective.
Project Executive at synergyc
I need to be aware of deprecated connectors as they may disconnect, but the data continues to be sent with a need for quick adaptation.
senior cyber security at a tech services company with 201-500 employees
 

Room For Improvement

Cortex XDR requires enhancements in UI, integration, reporting, and pricing, while addressing false positives and improving automation and mobile support.
Check Point Infinity suffers from slow support, high costs, unclear documentation, confusing licensing, and a cumbersome user experience.
Users seek better integration, documentation, user-friendliness, AI, automation, and transparency in Microsoft Sentinel for improved threat management.
Improving reporting and dashboard customization, along with the addition of real-time and exportable reports, would help SOC teams greatly.
Final Year Student at Gitam University
The inclusion of this feature would allow the application of DLP policies alongside antivirus policies via a single agent and console, making it more competitive as other OEMs often offer DLP solutions as part of their antivirus products.
Pre Sales Architect at network techlab
If the per GB data could be provided at a certain level free of cost or at the same cost which the customer is taking for the entire bundle, that would be better.
Cyber Security Information Security Specialist at MHM Holding GmbH
A more guided setup process or contextual help within the dashboard would make it easier for new team members to get up to speed.
Cloud Support at a security firm with 51-200 employees
I would recommend having more comprehensive documentation, including a guide for installation and configuration of Check Point Infinity.
Network Engineer at Insa
I would improve Check Point Infinity by embedding some sort of analytics that indicates which attacks are coming from specific IP addresses very often so that we can block those IP addresses.
Advisor at Rossell Techsys (Division of Rossell India Limited)
Log ingestion and retention costs can grow quickly, and understanding which data source is driving cost is not always straightforward.
Cyber Security Consultant at ProTechmanize
We have some tools, such as our off-site Meraki firewalls, that have not fully integrated with Sentinel.
Systems Emgineer at a non-profit with 1-10 employees
There are complexities in calculating the right pricing tier for different customers, which makes it difficult for me as a consultant during upfront pricing.
senior cyber security at a tech services company with 201-500 employees
 

Setup Cost

Cortex XDR offers flexible pricing from $55 to $90 per endpoint annually, considered cost-effective for its advanced features.
Enterprises have mixed views on Check Point Infinity's pricing, appreciating flexibility but finding costs high for certain features.
Microsoft Sentinel's pricing is flexible yet costly, requiring optimization and integration to maximize cost-effectiveness for data management.
The pricing on SentinelOne is far more reasonable and cheaper than Cortex XDR by Palo Alto Networks.
Consultant at a tech services company with 1,001-5,000 employees
I would say it is definitely not a cheap product, considering how mature it is and how scalable all Palo Alto products are together.
Senior Process Expert at A.P. Moller - Maersk
Cortex XDR is perceived as expensive by some customers, yet offers dynamic pricing.
Cyber Security Manager at Welab bank
In terms of pricing, I find Check Point Infinity to be an expensive product.
Advisor at Rossell Techsys (Division of Rossell India Limited)
The setup cost or license is very high.
Cloud Support at a security firm with 51-200 employees
We received a relative discount for this.
Team Lead, Network & Security at Max international
It has been beneficial that Microsoft Sentinel is included as part of the Microsoft package, making it more cost-effective.
Senior System Administrator at a university with 5,001-10,000 employees
Microsoft Sentinel is not a low-cost SIEM.
Cyber Security Consultant at ProTechmanize
Microsoft Sentinel is provided at no cost, so we didn't have any issues with the cost.
Vice President, Sales, Cybersecurity at a computer software company with 51-200 employees
 

Valuable Features

Cortex XDR provides advanced threat detection with AI analytics, real-time blocking, and seamless integration for enhanced security.
Check Point Infinity provides centralized security management with AI-driven threat prevention, enhancing efficiency and reducing complexity across platforms.
Microsoft Sentinel excels in integration, AI, scalability, automation, and user experience, with powerful threat detection and response features.
It incorporates AI for normal behavior detection, distinguishing unusual operations.
Cyber Security Manager at Welab bank
The product provides automation responses in case of a threat attack, severity assessments, centralized manageability, and comprehensive compliance features, resulting in reduced costs.
Pre Sales Architect at network techlab
It includes machine learning to easily analyze data and detect complex threats across endpoints, networks, or clouds.
Final Year Student at Gitam University
Check Point uses robust AI software to detect and recognize all cyber-attacks, giving me the ability to prevent these attacks.
PM at SECURE SOFT
Check Point Infinity has positively impacted my organization by making everything better, including the speed of the network and the security.
Private User at a educational organization with 5,001-10,000 employees
We have seen a faster response time and reduced effort from the network and security engineers while going through logs.
Team Lead, Network & Security at Max international
Microsoft Sentinel's ability to correlate data from multiple sources and its detection capabilities are essential.
Cost Engineer at a tech vendor with 10,001+ employees
Microsoft Sentinel has improved cost efficiency, which is one of the key areas we're able to win business against the ability to have threat intelligence.
Chief Commercial Officer at defend
Microsoft Sentinel's ability to correlate data from multiple sources enhances our threat detection capabilities beyond what is a simple data lake solution by filtering out the noise and consolidating the signal down to a meaningful level that is easier to investigate and see.
Solutions Architect at a tech vendor with 201-500 employees
 

Categories and Ranking

Cortex XDR by Palo Alto Net...
Sponsored
Ranking in AI-Powered Cybersecurity Platforms
2nd
Average Rating
8.4
Reviews Sentiment
6.8
Number of Reviews
108
Ranking in other categories
Endpoint Protection Platform (EPP) (5th), Endpoint Detection and Response (EDR) (7th), Extended Detection and Response (XDR) (6th), Ransomware Protection (2nd)
Check Point Infinity
Ranking in AI-Powered Cybersecurity Platforms
8th
Average Rating
8.8
Reviews Sentiment
6.9
Number of Reviews
40
Ranking in other categories
Advanced Threat Protection (ATP) (9th), AI Security (3rd), AI Observability (5th)
Microsoft Sentinel
Ranking in AI-Powered Cybersecurity Platforms
5th
Average Rating
8.2
Reviews Sentiment
6.9
Number of Reviews
107
Ranking in other categories
Security Information and Event Management (SIEM) (4th), Security Orchestration Automation and Response (SOAR) (1st), Microsoft Security Suite (6th)
 

Mindshare comparison

As of March 2026, in the AI-Powered Cybersecurity Platforms category, the mindshare of Cortex XDR by Palo Alto Networks is 9.9%, down from 10.9% compared to the previous year. The mindshare of Check Point Infinity is 2.8%, up from 0.1% compared to the previous year. The mindshare of Microsoft Sentinel is 10.3%, up from 7.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
AI-Powered Cybersecurity Platforms Mindshare Distribution
ProductMindshare (%)
Cortex XDR by Palo Alto Networks9.9%
Microsoft Sentinel10.3%
Check Point Infinity2.8%
Other77.0%
AI-Powered Cybersecurity Platforms
 

Featured Reviews

ABHISHEK_SINGH - PeerSpot reviewer
Senior Process Expert at A.P. Moller - Maersk
Gained full visibility and streamlined threat detection through behavior-based insights and AI integration
Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.
Chetan Bhati - PeerSpot reviewer
Network Security Engineer at Arrow PC Network Pvt Ltd
Improves daily threat prevention with real-time detection and requires better alert tuning for faster prioritization
Check Point Infinity is powerful, but there are a few areas that could improve. The learning curve for new users can be steep, especially when managing multiple modules like CloudGuard, Quantum, and Harmony together. Some alerts can be overwhelming, making it harder to prioritize without fine-tuning. While automation helps, occasional manual adjustments are still needed. Overall, it is strong, but simplifying onboarding and alert management would make it even better. Integration with third-party tools could be smoother. The reporting dashboard could be more customizable for quick insights. Performance on very large networks can sometimes slow during updates. Overall, while the platform is strong, improving user experience, alert management, and integration would make it even more efficient for daily operations.
Kallamuddin Ansari - PeerSpot reviewer
Cyber Security Consultant at ProTechmanize
Centralized monitoring has improved threat response but cost control still needs refinement
Based on real operations used in our corporate IT environment, the key features include log correlation and incident view. Microsoft Sentinel's biggest strength is how it correlates multiple related alerts into a single incident. This significantly reduces alert noise and helps the SOC focus on real threats instead of isolated events. Another valuable feature is KQL-based threat hunting with Kusto Query Language. The flexibility of this language allows us to build custom hunting queries based on our environment's behavior. This is extremely useful for detecting low and slow threats or hidden threats that default rules may miss. Cloud-native scalability and stability is another important feature. Being cloud-native, Microsoft Sentinel scales well for medium to large corporate environments without infrastructure management. Stability has been solid in day-to-day production. SOAR automation using playbooks is a feature we highly recommend. Microsoft Sentinel's SOAR functionality helps automate repetitive SOC tasks like alert enrichment and notification. This saves analyst time and improves response consistency.
report
Use our free recommendation engine to learn which AI-Powered Cybersecurity Platforms solutions are best for your needs.
884,873 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
9%
Manufacturing Company
9%
Financial Services Firm
9%
Comms Service Provider
7%
Security Firm
21%
Manufacturing Company
10%
Educational Organization
10%
Financial Services Firm
7%
Computer Software Company
12%
Financial Services Firm
10%
Manufacturing Company
9%
Government
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business44
Midsize Enterprise20
Large Enterprise47
By reviewers
Company SizeCount
Small Business40
Midsize Enterprise9
Large Enterprise10
By reviewers
Company SizeCount
Small Business41
Midsize Enterprise22
Large Enterprise46
 

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...
Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)
Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...
How is Cortex XDR compared with Microsoft Defender?
Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...
What do you like most about Check Point Infinity?
Check Point Infinity's threat prevention capabilities benefitted our organization.
What needs improvement with Check Point Infinity?
Check Point Infinity could be improved with more intuitive documentation.
What is your primary use case for Check Point Infinity?
Check Point Infinity is used primarily for consolidating security across networks, including cloud and on-premise, an...
Is there a common threat intelligence tool that aggregates multiple threat intelligence sources?
Yes, Azure Sentinel is a SIEM on the Cloud. Multiple data sources can be uploaded and analyzed with Azure Sentinel an...
What is a better choice, Splunk or Azure Sentinel?
It would really depend on (1) which logs you need to ingest and (2) what are your use cases Splunk is easy for ingest...
Which is better - Azure Sentinel or AWS Security Hub?
We like that Azure Sentinel does not require as much maintenance as legacy SIEMs that are on-premises. Azure Sentinel...
 

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps
R80, Infinity
Azure Sentinel
 

Overview

 

Sample Customers

CBI Health Group, University Honda, VakifBank
Edel AG
Microsoft Sentinel is trusted by companies of all sizes including ABM, ASOS, Uniper, First West Credit Union, Avanade, and more.
Find out what your peers are saying about Check Point Infinity vs. Microsoft Sentinel and other solutions. Updated: February 2026.
884,873 professionals have used our research since 2012.