


Illumio and Microsoft Defender for Cloud are robust security solutions competing in the cybersecurity area. Illumio seems to have the upper hand due to its exceptional traffic visibility and application dependency mapping, although Microsoft Defender for Cloud is also highly regarded for its seamless integration with Azure and broad cloud security capabilities.
Features: Illumio offers outstanding application dependency mapping, providing clear visuals of interactions, and its traffic visibility with visual interfaces aids in effective segmentation and policy enforcement. Microsoft Defender for Cloud features cloud-native security integrations, solid AI-driven threat detection, and seamless Azure integration, enhancing its comprehensive security scope.
Room for Improvement: Illumio could enhance data security support for more operating systems and address customer support issues. Improvements in labeling and agent performance in unique environments are suggested. Microsoft Defender for Cloud faces challenges with complex licensing, needing improved real-time alert accuracy, unified interfaces, and reduced false positives. Streamlined policy management is also desired.
Ease of Deployment and Customer Service: Illumio operates effectively for on-premise deployments, but there can be delays in customer service response. Microsoft Defender for Cloud is popular in public and hybrid cloud environments, benefiting from responsive customer support, although support speed and issue resolution occasionally face criticism.
Pricing and ROI: Illumio's pricing is generally viewed as expensive but offers high ROI due to enhanced operational visibility. Microsoft Defender for Cloud's pricing can be complex and sometimes high for certain businesses, but Azure integration provides more cost-effective options. Both solutions are recognized for their long-term security feature value, despite initial costs.
After implementing SentinelOne, it takes about five to seven minutes.
Our ability to get in and review our vulnerability stance, whether daily, monthly, weekly, or whatever it might be, has drastically improved over our prior provider.
It has saved us more than 50% of our time.
I observe extensive return on investment with Illumio.
Illumio serves as a single endpoint technology where I can implement various features, including a zero-trust network, north-to-south and east-to-west configurations, and micro-segmentation, all coming from one platform, which ultimately saves us time and money.
Illumio definitely demonstrates its value in money-saving capabilities, enhancing our lateral environment inside the organization and providing effectiveness overall once integrated.
Defender proactively indexes and analyzes documents, identifying potential threats even when inactive, enhancing preventative security.
Identifying potential vulnerabilities has helped us avoid costly data losses.
Compared to not having Microsoft Defender for Cloud in place, we definitely saw an advantage by not having downtime due to a security threat.
Having a reliable team ready and willing to assist with any issues is essential.
Throughout the migration, they remained available for several hours without complaint, providing assistance at every step.
In my experience, I have never encountered a junior person or someone without knowledge coming into support from SentinelOne.
Whenever I raise a case with their support team, regardless of the priority level—P1, P2, P3, or P4—they generally reply within an hour
Even if we raise an issue on non-working days like Saturdays or Sundays, we receive prompt responses.
The customer support is very prominent.
Since security is critical, we prefer a quicker response time.
The support team was very responsive to queries.
They understand their product, but much like us, they struggle with the finer details, especially with new features.
The SentinelOne Singularity Cloud exhibits high scalability.
We've automated in our MDM so any device that we start in our MDM automatically installs SentinelOne.
It is scalable. I would rate it a ten out of ten for scalability.
Scaling it to a large level is not an issue for us.
By employing Linux scripting or other methods, I can push the policy to all devices at once, making it easy to scale.
Illumio's scalability is very good; it is quite easy to scale.
As we have reduced our on-premises infrastructure, it is about how we can migrate workloads to the cloud to make it easier, and then having everything fully encompassed and secured within that area makes it much easier for us to scale as needed and grow.
We are using infrastructure as a code, so we do not have any scalability issues with Microsoft Defender for Cloud implementation because our cloud automatically does it.
It has multiple licenses and features, covering infrastructures from a hundred to five hundred virtual machines, without any issues.
SentinelOne Singularity Cloud is incredibly reliable.
The only downtime we had was when switching from V1 to V2 but it was smooth.
I would rate it a ten out of ten for stability.
Illumio is a stable solution with no glitches or bugs reported, making it a reliable product for us.
Defender's stability has been flawless for us.
I have not experienced any crashes or downtime.
Microsoft Defender for Cloud is very stable.
If notifications are available, then it will be more helpful, easy, and time-saving.
Alerts should be directly tied to compliance standards and have a clear role in the overall compliance process.
The Infrastructure as Code service available in PingSafe and the services available in AWS cloud security can be merged so that we can get the security data directly from AWS cloud in PingSafe.
They need to install an agent in the container world, while Akamai Guardicore does not need to install an agent, so they have native support that Illumio lacks.
There could also be more examples of how the automations can be done using Illumio.
Another improvement might be around scalability, ensuring that as organizations grow, Illumio can handle even larger, more complex environments seamlessly.
Microsoft, in general, could significantly improve its communication and support.
It would be beneficial to streamline recommendations to avoid unnecessary alerts and to refine the severity of alerts based on specific environments or environmental attributes.
The artificial intelligence features could be expanded to allow the system to autonomously manage security issues without needing intervention from admins.
With very little negotiation involved, we just let them know what we could pay and they were willing to meet us at slightly above what we paid with Sophos, which was still very fair for what we were looking at.
If you want to buy just EDR, the price is less. XDR is a little bit more expensive.
It should not be based on subscription. It should be based on the number of servers that I am scanning.
I know that Illumio is the cheapest solution in the security area.
But when you compare it to firewalls, then it may not be that expensive.
I think it's not very expensive if we compare it with Guardicore.
Security has essentially no cost when compared to the cost of a breach.
Every time we consider expanding usage, we carefully evaluate the necessity due to cost concerns.
We appreciate the licensing approach based on employee count rather than a big enterprise license.
This tool has been helpful for us. It allows us to search for vulnerabilities and provides evidence directly on the screen.
The cloud misconfiguration feature gave us almost zero false positives.
PingSafe has sped up the process by 80% to 90%.
Illumio helps in audit purposes by saving data and showing blocked traffic, ensuring no outside traffic is allowed.
The most important feature is the traffic review analysis, where we use the draft view and the reported view that helps us understand how the application interacts with other applications in the environment, and based on that, we are able to define the policies.
Illumio is a powerful tool for micro-segmentation and zero trust security that provides strong visibility, flexible policy management, and effective threat containment, enhancing an organization's internal security posture.
The most valuable feature for me is the variety of APIs available.
This feature significantly aids in threat detection and enhances the user experience by streamlining security management.
The most valuable feature is the recommendations provided on how to improve security.
| Product | Mindshare (%) |
|---|---|
| Microsoft Defender for Cloud | 14.0% |
| SentinelOne Singularity Cloud Security | 4.9% |
| Illumio | 4.0% |
| Other | 77.1% |


| Company Size | Count |
|---|---|
| Small Business | 52 |
| Midsize Enterprise | 23 |
| Large Enterprise | 58 |
| Company Size | Count |
|---|---|
| Small Business | 4 |
| Midsize Enterprise | 1 |
| Large Enterprise | 12 |
| Company Size | Count |
|---|---|
| Small Business | 30 |
| Midsize Enterprise | 12 |
| Large Enterprise | 49 |
SentinelOne Singularity Cloud Security offers a streamlined approach to cloud security with intuitive operation and strong integration capabilities for heightened threat detection and remediation efficiency.
Singularity Cloud Security stands out for its real-time detection and response, effectively minimizing detection and remediation timelines. Its automated remediation integrates smoothly with third-party tools enhancing operational efficiency. The comprehensive console ensures visibility and support for forensic investigations. Seamless platform integration and robust support for innovation are notable advantages. Areas for development include improved search functionality, affordability, better firewall capabilities for remote users, stable agents, comprehensive reporting, and efficient third-party integrations. Clarity in the interface, responsive support, and real-time alerting need enhancement, with a call for more automation and customization. Better scalability and cost-effective integration without compromising capabilities are desired.
What are SentinelOne Singularity Cloud Security's standout features?
What benefits should users expect from SentinelOne Singularity Cloud Security?
SentinelOne Singularity Cloud Security is deployed in industries needing robust cloud security posture management, endpoint protection, and threat hunting. Utilized frequently across AWS and Azure, it assists in monitoring, threat detection, and maintaining compliance in diverse environments while providing real-time alerts and recommendations for proactive threat management.
Illumio enhances security through micro-segmentation and real-time traffic control, offering detailed network visibility and precise application communication management. It supports scalability across environments, improving security posture and reducing lateral movement.
Illumio's features include real-time traffic control, micro-segmentation, and scalable policy management, allowing organizations to establish strict security measures against threats like ransomware. Its visibility map offers granular security insights essential for creating effective policies and auditing traffic. Centralized rule distribution and comprehensive traffic mapping augment security across environments. The platform's design ensures ease of deployment and compatibility, reducing unauthorized access by focusing on threat isolation and breach containment. While Illumio excels in flexibility and visibility, it requires advancements in technical support, third-party integrations, and user-friendly policy management to better support diverse operating systems and larger environments. Improved reporting, analytics, and automation for policy creation are necessary alongside reduced dependency on agents and enhanced data security measures.
What are Illumio's most important features?Illumio is frequently deployed in industries where network segmentation is critical, such as finance and healthcare, offering detailed network visibility and control over application communication. Organizations integrate it seamlessly with existing infrastructures, facilitating the deployment of VENs and effective policy management to secure hybrid cloud and on-premises environments, ensuring compliance and defending against evolving threats.
Microsoft Defender for Cloud is a comprehensive security platform offering integration with Microsoft services, multi-cloud capability, AI-driven threat detection, compliance, and unified visibility for improved security operations.
Microsoft Defender for Cloud manages security operations by integrating with Microsoft services and supporting multi-cloud environments. Its features include AI-driven threat detection, compliance oversight, and advanced threat protection. It simplifies processes with unified visibility, threat intelligence, and automated workflows, enhancing security posture across various workloads. Despite its robust capabilities, improvements are needed in third-party tool integration, comprehensive AI-driven remediation, and a more intuitive dashboard. Users report complexity in licensing, inadequate documentation, and high costs, with room for enhancements in compliance reporting and multi-cloud support.
What are the key features of Microsoft Defender for Cloud?Industries leverage Microsoft Defender for Cloud for security posture management and endpoint protection. Many companies integrate it with Office 365 for enhanced functionality. It provides comprehensive security overviews by monitoring cloud vulnerabilities, limiting unauthorized access, and replacing existing tools with its extensive capabilities from network security to compliance checks, securing Azure infrastructure, and enhancing client security.
We monitor all Cloud Workload Protection Platforms (CWPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.