IBM Guardium vs. Microsoft Sentinel

IBM Guardium

Microsoft Sentinel

Overview
Product	Rating	Most Used By	Product Summary	Starting Price
IBM Guardium	Score 8.6 out of 10	N/A	IBM Guardium is IBM's data security posture management solution, that aims to offer organizations comprehensive visibility, actionable insights and real-time controls to help users comply with regulations, preserve privacy and secure sensitive data no matter where it is stored.	N/A
Microsoft Sentinel	Score 8.6 out of 10	N/A	Microsoft Sentinel (formerly Azure Sentinel) is designed as a birds-eye view across the enterprise. It is presented as a security information and event management (SIEM) solution for proactive threat detection, investigation, and response.	$2.46 per GB ingested

Pricing

IBM Guardium

Microsoft Sentinel

Editions & Modules

No answers on this topic

Azure Sentinel: $2.46
per GB ingested
100 GB per day: $123.00
per day
200 GB per day: $221.40
per day
300 GB per day: $319.80
per day
400 GB per day: $410.00
per day
500 GB per day: $492.00
per day
More than 500 GB per day: $492.00 + $98.40
per day/plus each additional 100 GB increment

Offerings

Pricing Offerings
IBM Guardium	Microsoft Sentinel
Free Trial
Yes	Yes
Free/Freemium Version
No	No
Premium Consulting/Integration Services
No	No

Entry-level Setup Fee

Optional

No setup fee

Additional Details

Pricing is dependent based on data source environment.

—

More Pricing Information

Pricing Info

Community Pulse
	IBM Guardium	Microsoft Sentinel
Considered Both Products	IBM Guardium John Jairo Guaña Morales Product Engineers Chose IBM Guardium IBM Security Guardium is better with its compatibility and integration methods and compatibility matrix, the other products don't cover all the database motors that IBM Guardium can do, regarding to brand, versions and editions of the database motors, IBM support and licensing … Incentivized Helpful? MD Marcello Donaire Security Delivery Manager Chose IBM Guardium No other products, only Guardium. Incentivized Helpful? Verified User Anonymous Chose IBM Guardium Especially cost, we use both products, but cost, we use Imperva a lot and other databases, but cloud is where we are really looking for a new differentiator. That's where I would say we still don't have anybody in that space here. Especially it can identify the risks related to … Incentivized Helpful? TR Timothy Russell Cybersecurity Director Chose IBM Guardium Well, like I say, there's a couple out there that do this kind of thing as well. So TRX being one of the ones that do something in this space too. Also very good product. I don't think there's a lot between them to be honest. We have IBM as a partner in my organization so they … Incentivized Helpful? Sergio Okida Project manager Chose IBM Guardium Imperva did not give any expectations of working together with Oracle ksplice O imperva não deu expectativas de trabalhar em conjunto com o oracle ksplice Incentivized Helpful? BK Bassam Karam Technical Engineering Manager Chose IBM Guardium Guardium is part of our main product. Incentivized Helpful? Verified User Anonymous Chose IBM Guardium After we did the comparison between imperva and IBM Guardium we decided to buy Guardium Incentivized Helpful? Mirosław Heimrath Expert Security Specialist Chose IBM Guardium It is possible to connect the product with SIEM and SOAR systems. Incentivized Helpful? Verified User Anonymous Chose IBM Guardium Guardium stacks up well with other products. So far we have not seen something that would improve enough for us to leave the platform Incentivized Helpful? Verified User Anonymous Chose IBM Guardium IBM is the industry leader in DAM domain. Cost was also a factor. Technical support was good. Incentivized Helpful? Verified User Anonymous Chose IBM Guardium Guardium, I believe, does a lot more than other products I have used. Incentivized Helpful? Md Masudul Hassan Lecturer Chose IBM Guardium The integration is excellent. Versatile deployment options are an advantage of using it. The ability to easily complete vulnerability assessments with comparable scores and observe activity in our data environment is one of the best features. In order to improve our security … Incentivized Helpful? Verified User Anonymous Chose IBM Guardium In my opinion, IBM Security Guardium is more accurate and powerful that the above, and more robust. Incentivized Helpful? FURKAN GÖKCAN Security Engineer Chose IBM Guardium You can not learn Imperva within 1 year. The interface is complicated and difficult to understand. Additionally, Impervan's product scope is not as broad as Guardium's. Guardium is ahead in this regard with its other modules. At Imperva, product admin and access manager are not … Incentivized Helpful? Verified User Anonymous Chose IBM Guardium If I compare with imperva Guardium is more efficient. First of all GUI is more useful. Documentation is more than imperva etc. Incentivized Helpful? Verified User Anonymous Chose IBM Guardium We needed MSSQL database level information which McAfee DAM could only provide at instance level. Incentivized Helpful? Brandon Lowry Cyber Security Specialist Chose IBM Guardium IBM Security Guardium uses advanced technologies, such as behavioral analysis and machine learning, to detect and respond to security threats in real time. This enables more accurate detection and faster response to threats compared to other similar software. Incentivized Helpful? Telmo Fonseca TI specialist Chose IBM Guardium Easy to configure and supports the latest versions of OS like AIX 7.2. Incentivized Helpful? Anshuman Bhatnagar Security Specialist Chose IBM Guardium IBM Security Guardium provides many more features and capabilities than all the other tools evaluated for this decision. To begin with, there are limited databases that are supported by other database security tools. None of the other evaluated tools have the ability to mask … Incentivized Helpful? DC Deivis Campos Cybersecurity Analist Chose IBM Guardium Almost a perfect integration. But you need to be skillful in both solutions to make things clear. Incentivized Helpful? ROHIT GOYAL Database Security Administrator Chose IBM Guardium Navigating through GUI is very useful Incentivized Helpful? Mansi Talwar Senior Consultant Chose IBM Guardium IBM Security Guardium is a perfect tool that is a little bit more costly than other tools available on the market. But as compared to features this tool provides a lot of features that can help to detect the anomalies in the data and even help to identify the advanced threats … Incentivized Helpful? MC Mehak Chawla Marketing Associate Chose IBM Guardium IBM Security Guardium has extended capabilities of automatically locating databases and assessing the vulnerabilities and configuration flaws in them. IBM Security Guardium stacks up against other products due to the additional features that can be easily added to your IT … Incentivized Helpful? Sourabh Yaduvanshi Solution Architect Chose IBM Guardium When compared to the others, IBM Security Guardium offers a decent platform. In South Africa, IBM Security Guardium users are ecstatic, therefore it's a winner. The agent's stability is superior to that of others. It outperforms the competition (Vulnerability Assessment, … Incentivized Helpful? Zinnur Dikici, Msc Information Security and Risk Team Lead Chose IBM Guardium The architecture of IBM Guardium give us flexibility to access activities, create policies and management. Easy deployment and stabilization of product can be other reason for preference. Can be easy manage and track activities' backup node of databases in a disaster recovery … Incentivized Helpful?	Microsoft Sentinel IS Ian Stuebe Project Manager Chose Microsoft Sentinel We decided to go with Microsoft Sentinel because it works really well with Microsoft tools we are already using. Microsoft Sentinel's intelligent features detect and resolve problems more quickly than Sumo Logic. It also allows us to pay for what we use and grow as we need. … Incentivized Helpful? Verified User Anonymous Chose Microsoft Sentinel Well, primarily we use different stuff like CrowdStrike. We use different sign-on features. We primarily use those different products because we support a wider ecosystem. Incentivized Helpful? RD Richard Dornhart National Security Practice Manager Chose Microsoft Sentinel Splunk, Google, SecOps. I look at how it stacks up based on the fact that it's the primary solution that we sell. So I think it stacks up really well. Why do we select it? Well, we selected it primarily because we're a very large Microsoft partner. The technology is very good … Incentivized Helpful? Verified User Anonymous Chose Microsoft Sentinel Well before there was Microsoft Sentinel, you had other competing products like ArcSight or Splunk, et cetera. I think they have their own qualities, but the Microsoft integration story is really why we're using it. Incentivized Helpful? HP Himanshu Pawar Manager Chose Microsoft Sentinel In my opinion, Microsoft Sentinel is much more reliable and Trustworthy. They are a bigger name with bigger scope of use. Incentivized Helpful? Verified User Anonymous Chose Microsoft Sentinel We use intune to protect endpoints and we pull logs from all the endpoints through the intune connector into the Microsoft Sentinel SIEM and that way we can run rules on those logs to find anomalies. Incentivized Helpful? Verified User Anonymous Chose Microsoft Sentinel Elastic seems to have a much better interface for log search and is able to filter out noise. Microsoft Sentinel also appears to generate a lot of false positives. Incentivized Helpful? Verified User Anonymous Chose Microsoft Sentinel Elastic is some carbon for various use cases. So because Elastic is a very, very wrong history in the market. So Sentinel is very recent for products from my understanding. Incentivized Helpful? Verified User Anonymous Chose Microsoft Sentinel Well, we didn't select, we selected Sentinel for our Azure stuff, our Microsoft stuff, but we do use a different SIEM for the other stuff still. Incentivized Helpful? Verified User Anonymous Chose Microsoft Sentinel Prior to using Sentinel, we were using Splunk specifically Splunk Enterprise Security and Splunk Cloud, so their on-prem and their cloud-based products. We switched originally for cost reasons, specifically cost control, but I have found that the ability to create reports, the … Incentivized Helpful? Verified User Anonymous Chose Microsoft Sentinel We've used Splunk before, but it really is just pick your poison. They're all very similar. Incentivized Helpful? Verified User Anonymous Chose Microsoft Sentinel Based on the overall infrastructure configuration that we have and also after analysing various solutions provided by Microsoft Sentinel, we came to a conclusion that the Microsoft Sentinel is the best option for us to help us in overall threat detection on our custom servers, … Incentivized Helpful? Ajay Sehgal Project Manager Chose Microsoft Sentinel Sentinel AI makes it a better choice. Also, its flexibility and customization make it a bit more costly than other competitors. Incentivized Helpful? EB Edward Broderick CISO Chose Microsoft Sentinel I use most of the Sims that are out there, but RSAs, old Sim Log, logic, elastic, a lot of them. Sumo, we checked out Sumo too. We're a Microsoft shop and live almost entirely on top of a Microsoft ecosystem. We are considering other Microsoft security products to integrate … Incentivized Helpful? Verified User Anonymous Chose Microsoft Sentinel The SecureWorks product is a more mature product. We prefer the SecureWorks product over Microsoft Sentinel at this point. Incentivized Helpful? Verified User Anonymous Chose Microsoft Sentinel As mentioned, the product was part of the purchase of several Microsoft Suites that we did earlier last year and with 200 licenses included, we can exclude those from the other SIEM and SOAR product, it just work well with the Microsoft's environment that we partially have Is … Incentivized Helpful? Verified User Anonymous Chose Microsoft Sentinel The key advantage of using Sentinel lies in Microsoft already being a renowned name in cloud services. Hence, the Collection of data at the cloud scale across all users, devices, applications, and infrastructure, both on-premises and especially in the MS Cloud, is super easy. … Incentivized Helpful? Verified User Anonymous Chose Microsoft Sentinel ArcSight is an on-prem solution that has a different approach than Sentinel. In a basis this product is more complex to maintain and deploy. The query functionality in Sentinel is more powerful and easier to maintain. ArcSight has a much slower performance and an interface that … Incentivized Helpful? Namandeep Bhatia Co Founder & Chief Technology Officer Chose Microsoft Sentinel We checked, McAfee Enterprise Security Manager (ESM). In my opinion, Microsoft Sentinel is beter wit AI capacity and good community. Incentivized Helpful? Glenn H. Miller Chief Engineer Chose Microsoft Sentinel We don't need to maintain a third-party SaaS solution or spend any time integrating it since Microsoft Sentinel is the ideal option to give a single point of attack detection and alert monitoring. Incentivized Helpful? Verified User Anonymous Chose Microsoft Sentinel Microsoft Sentinel really goes the extra mile when it comes to an SIEM that slowly improves toward a proper SOAR, this may be the best selling point of the entire solution. Highly scalable, cloud-based, and nearly perfect when dealing with Microsoft-based infrastructures, … Incentivized Helpful? Verified User Anonymous Chose Microsoft Sentinel No, this is the only one. Incentivized Helpful? Verified User Anonymous Chose Microsoft Sentinel Most of those have been out in the industry for a longer time, so they have a lot more user friendliness to them. So I'd say it's in the mix. It's just not as high as it should be or I would expect it to be. Incentivized Helpful? Verified User Anonymous Chose Microsoft Sentinel Previous to Azure Sentinel, we were using the McAfee SIM and it just wasn't keeping up with the times and that was the choice of moving to Azure Sentinel. Incentivized Helpful? Verified User Anonymous Chose Microsoft Sentinel We just stick with Sentinel because it works well with our Suite Office 65. Incentivized Helpful?

Features

IBM Guardium

Microsoft Sentinel

Security Information and Event Management (SIEM)

Comparison of Security Information and Event Management (SIEM) features of Product A and Product B
	IBM Guardium - Ratings	Microsoft Sentinel 7.3 Ratings 6% below category average
Centralized event and log data collection	00 Ratings	8.20 Ratings
Correlation	00 Ratings	7.10 Ratings
Event and log normalization/management	00 Ratings	6.90 Ratings
Deployment flexibility	00 Ratings	7.30 Ratings
Integration with Identity and Access Management Tools	00 Ratings	6.50 Ratings
Custom dashboards and workspaces	00 Ratings	7.50 Ratings
Host and network-based intrusion detection	00 Ratings	5.00 Ratings
Data integration/API management	00 Ratings	6.40 Ratings
Behavioral analytics and baselining	00 Ratings	6.70 Ratings
Rules-based and algorithmic detection thresholds	00 Ratings	7.80 Ratings
Response orchestration and automation	00 Ratings	7.30 Ratings
Reporting and compliance management	00 Ratings	9.00 Ratings
Incident indexing/searching	00 Ratings	8.50 Ratings

Best Alternatives
	IBM Guardium	Microsoft Sentinel
Small Businesses	Oracle Audit Vault and Database Firewall Score 7.0 out of 10	LevelBlue USM Anywhere Score 3.8 out of 10
Medium-sized Companies	ManageEngine ADAudit Plus Score 9.2 out of 10	Sumo Logic Score 9.4 out of 10
Enterprises	ManageEngine ADAudit Plus Score 9.2 out of 10	Sumo Logic Score 9.4 out of 10
All Alternatives	View all alternatives	View all alternatives

User Ratings
	IBM Guardium	Microsoft Sentinel
Likelihood to Recommend	9.6 (0 ratings)	8.5 (0 ratings)
Likelihood to Renew	9.1 (0 ratings)	8.2 (0 ratings)
Usability	5.3 (0 ratings)	7.3 (0 ratings)
Support Rating	9.5 (0 ratings)	8.0 (0 ratings)

User Testimonials
	IBM Guardium	Microsoft Sentinel
Likelihood to Recommend	It checks many boxes when it comes to security. It allows you to see all the DB activity that goes on, report on it, and send it to SIEM. The analytics part extends this product even more. The investigation dashboard makes it easier to find outliers or specifics without running queries or reports. Incentivized Verified User Anonymous Read full review	We use it because when a user sees the suspicious activity on his account, Microsoft Sentinel gives alerts to the user's system and the admin system as well. When a user of one of our systems clicked a spam email, that email was trying to install a virus on our server, but Microsoft Sentinel gave an alert to the user and admin both, so that is why our team was able to fix that issue with Microsoft Sentinel very fast. However, it will not be the best option for you if your team is utilizing every feature but you are on a tight budget. IS Ian Stuebe Project Manager Read full review
Pros	when businesses use IBM Guardium Insights to visualize data risks, it can help them find and prioritize threats better by putting all of its features in one place, it might make data security easier to manage and keep under control it is easy to use and doesn't mean anything Incentivized AS Aafaq Sikandar Founder & CEO Read full review	It is a good tool for threat detection and analysis of the threats. We are using this tool for real time threat detection on our employee machines as well as some servers. It provides various options for collecting data sources by leveraging multiple sources using data connectors. This helps us in gathering data from multiple sources such as our servers as well as our employee machines. One good thing about this tool is automated incident response thereby increasing the security of servers. Incentivized Verified User Anonymous Read full review
Cons	Large activity reports are easier to generate that is capable of performing activity profiling to learn to identify abnormal activity that has the ability to integrate with reporting tools that has a mobile interface los reportes de actividades grandes Sean mas faciles de generar que sea capaz de realizar un profiling de actividades para aprender a identificar actividad anormal que Tenga la posibilidad de integrarse con herramientas de reporteria que Tenga una interfaz movil Incentivized Verified User Anonymous Read full review	It takes some time to learn how to use and install it properly, and it does not connect effectively with external PaaS systems such as Salesforce CRM, Salesforce Commerce Cloud, and so on. Microsoft can simplify the display of the logs to make them easier to study, and the user interface occasionally delays, which can also be enhanced. Incentivized Glenn H. Miller Chief Engineer Read full review
Likelihood to Renew	It is a perfect system to detect problems that we do not see manually, it is light, with a very simple learning curve and with great protection of our data, we will use it forever. Incentivized Meena Prasad Information Technology Security Analyst Read full review	it does the job reasonably well Incentivized Verified User Anonymous Read full review
Usability	It might look complex in the beginning but once you get hold of it by going through all of the documentation then it seems to be very smooth. The configuration is comparatively easy and the user can understand it on their own without any external help. The overall learning curve is Ok. Incentivized Verified User Anonymous Read full review	The Microsoft Azure Sentinel solution is very good and even better if you use Azure. It's easy to implement and learn how to use the tool with an intuitive and simple interface. New updates are happening to always bring new news and improve the experience and usability. The solution brings reliability as it is from a very reliable manufacturer. Incentivized Flavio Pereira Analista de sistemas Read full review
Support Rating	There has been great support coming from IBM. It is easy to use and a great way to keep our data secure. I would recommend this to other possible users and if I were to move companies, I would recommend we use this there too. Thank you Incentivized AY Allyson Ylvisaker Case Manager Read full review	Azure Sentinel is very easy to use and configure. If you are stuck somewhere, Microsoft support is excellent in assisting and solving your issue. Incentivized Verified User Anonymous Read full review
Alternatives Considered	IBM Security Guardium uses advanced technologies, such as behavioral analysis and machine learning, to detect and respond to security threats in real time. This enables more accurate detection and faster response to threats compared to other similar software Incentivized Brandon Lowry Cyber Security Specialist Read full review	Microsoft Sentinel excels in cloud-native scalability, Microsoft ecosystem integration, and AI-driven threat detection with UEBA and Fusion rules, offering faster deployment and lower costs (48% cheaper per Forrester) than Splunk, QRadar, Exabeam, SentinelOne, Securonix, and Wazuh. It lags in third-party integrations and syslog parsing. Organizations choose Microsoft Sentinel for its cost-effectiveness, automation, and Microsoft synergy, especially in Azure-heavy environments, though Splunk and Exabeam lead in flexibility and UEBA, respectively. Incentivized Verified User Anonymous Read full review
Return on Investment	Security and monitoring are important in a financial institution Constant visibility and auditing of companies is easy with IBM Guardium. la seguridad y monitored es important en una entidad financiera la visibilidad y auditoria constante de empresas es facil con IBM Guardium Incentivized Verified User Anonymous Read full review	As any cybersecurity product, this has to be more with risk to avoid loss in case of a ransomware that more than relate to a productivity increase. Maybe the impact could be that instead of having people that are checking 24/7 the dashboard, you could implement Sentinel and have less people checking that or people with less expertise. So the saving will be a minor but will be a saving in the cost of your team. Incentivized Verified User Anonymous Read full review
ScreenShots	IBM Guardium Screenshots	Microsoft Sentinel Screenshots