No more typing reviews! Try our Samantha, our new voice AI agent.

Microsoft ATA [EOL] vs Securonix Next-Gen SIEM comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Microsoft ATA [EOL]
Average Rating
6.6
Number of Reviews
3
Ranking in other categories
No ranking in other categories
Securonix Next-Gen SIEM
Average Rating
8.6
Reviews Sentiment
6.4
Number of Reviews
35
Ranking in other categories
Security Information and Event Management (SIEM) (30th), Identity Threat Detection and Response (ITDR) (11th), AI Security (17th)
 

Featured Reviews

it_user1369068 - PeerSpot reviewer
President and CEO at a tech services company with 11-50 employees
Good integration, simple to maintain, and very stable
Scalability shouldn't be a problem, at least for the size of network team that I work with. Right now we have between 400 and 500 users. This is deployed in a network that is actually about 500 users. We don't plan to increase usage. We're already using it as fully as we can and we don't have any more room. We might look at all the Microsoft programs that relate to office 365, like the ATP, because there is a difference between the ATA and the ATP. We are going to look and see whether there's any gaps that we can close. I think if you compare ATA with the actual ATP it's basically the same functionality. One is more on-premises versus the cloud. Since we are progressively in moving to the cloud, we might look at the ATP, which integrates better with the Microsoft cloud.
reviewer1375044 - PeerSpot reviewer
Assistant VP, Idm Compliance at a financial services firm with 1,001-5,000 employees
Centralized environment supports big data while facing integration challenges
The customization in Securonix Next-Gen SIEM is more difficult compared to other solutions. At the operation level, we are not facing many challenges with automating things using Securonix Next-Gen SIEM, but at the admin level, we have many challenges where log parsing is causing issues and compatibility is not present. The primary technology challenge we have is not at the security tools level. For example, firewall Cisco and others are capable. However, specific to product, for SAP, we are using certain products, and developing custom connectors for each product, especially the internal applications, is difficult, and Securonix Next-Gen SIEM is not up to the mark.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"One of the most valuable features is the ability to report on questionable activity."
"I like the fact that it looks for some of those very, very obscure techniques and attacks like golden tickets; those are very difficult attacks to spot and with Microsoft ATA I was able to have visibility over those kinds of techniques and attacks."
"It has also measurably decreased our mean time to detect threats by about 50 percent, and helped increase staff productivity, saving about an hour per day."
"The stability of the solution is very good."
"The solution works well when used with other Microsoft solutions."
"The second feature is that within the SNYPR product there is a functionality called Spotter. We use that for link analysis diagrams and to run the stats command. That's extremely useful because it replaces a tedious, manual process we used to use, using Microsoft Excel and a couple of other methods, to bring data together."
"I rate the technical support a nine out of ten. They're friendly. Whenever we have a P1 issue, we write an email and our issue is resolved in one or two hours."
"The solution has proven to be stable so far...The solution is easy to scale up."
"We ended up moving our clients over to QRadar as this solution did not end up working for either of them."
"Without this product, my organization would not be able to function at all; it is our main monitoring product for our clients and the main process of providing services because we are a 24/7/365 security operations center."
"[The solution has] incident-management or case-management functionality. If someone were to download a high number and we decided we needed to investigate it, I could open a case right in the tool. It would be able to directly reference the data that they downloaded and we could open and shut the case directly in the tool, as well as report from it."
"The scalability is one of the remarkable qualities of this product, which makes it very effective, especially when we are dealing with substantial data volumes in the cloud."
"The most valuable feature is that it works on user behavior and event rarities."
 

Cons

"There are occasions where it generates some false positives and you have to embark into figuring it out. You need to find out if it was a true alert or a false positive. It's a little bit cumbersome in that area."
"Some of the newer features are not completely there yet... For example, there's a tool that allows you to grade your overall internal security and I don't feel that it's completely accurate."
"It would be ideal if the interface allowed for more granular configurations. For example, if I were to set a rule that is a deviation from the pre-defined rules in the Microsoft product, there's conflict."
"The software is not as advanced as many competitors."
"It seems to me that within Securonix there is no option for completely visualizing the types of sources or if there is any loss of logs. I've heard that they have an additional module to validate those types of cases, but in terms of the platform itself only, I can only see how often it sends data but not any specific detail."
"The UX could be simpler."
"There is slight room for improvement in terms of the initial deployment."
"We have compliance needs. We have investigation needs. And we have situations where an analyst needs to look at threats. These three things require a different view of how they look at the threats. What would be good is to have Securonix create three different views of their Security Command Center so that, depending on the persona of the person logging in, they'd get the relevant data they need and not see everything."
"As far as what can be improved, again it is the pricing."
"We would like a little more face-to-face training."
"The technical support of the solution is an area with shortcomings and needs improvement."
"I face slowness issues sometimes."
 

Pricing and Cost Advice

"I believe we are looking into new licenses. They may be called the E5. Honestly, I don't have it on top of my mind, but I think it's around seven to $10 a user per month."
"The pricing is good, but by adding more things, the licensing becomes more complex because an EPS license fluctuates a lot. This licensing concept is going to be problematic in the long run."
"We went in on a three-year agreement which has an annual licensing fee, based upon the number of people that we're monitoring. There have not been any additional costs to the standard licensing fees."
"Compared to other brands it seems more affordable to us."
"The pricing is fine compared to the market but I think that at some point the competitors will catch up on price."
"I had heard that it was much cheaper than Splunk and some of the other tools, and they gave us a nice package with support. They accommodated the number of users and support very well."
"I rate the pricing an eight on a scale of one to ten, where one is cheap, and ten is very expensive. It is a pretty expensive tool."
"Compared to other known brands in the industry, the overall cost of the licenses is a bit higher than what customers expect."
"A good thing about Securonix is that they don't charge by volume of data or number of devices... They charge by the number of employees, which is a much more predictable number for me, versus data. Our costs are in the $100,000 range over a three-year subscription."
report
Use our free recommendation engine to learn which User Entity Behavior Analytics (UEBA) solutions are best for your needs.
917,433 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
No data available
Manufacturing Company
12%
Outsourcing Company
11%
Construction Company
10%
Comms Service Provider
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business10
Midsize Enterprise5
Large Enterprise19
 

Questions from the Community

Ask a question
Earn 20 points
Which is the best SIEM tool for a mid-sized financial services firm: Arcsight or Securonix?
In my market, a lot of financial companies had or have an ArcSight installation. Just because in former times it was pretty good. Now a lot of them are looking for a more effective solution due to ...
What is your primary use case for Securonix Security Analytics?
We work with CrowdStrike, Securonix Next-Gen SIEM, and other cybersecurity products such as Gurucul. We are a service provider and partner of Securonix Next-Gen SIEM. We operate as a reseller of Se...
What is your experience regarding pricing and costs for Securonix Next-Gen SIEM?
The solution is definitely not expensive. It's benchmarked against others in this space, and we haven't received any negative feedback about pricing from customers or prospects.
 

Also Known As

Microsoft Advanced Threat Analytics, MS ATA [EOL]
Securonix Security Analytics
 

Overview

 

Sample Customers

Turkish Airlines, Seoul National University Bundang Hospital, Empa, The Alberta Teachers' Association
Dtex Systems, Pfizer, Western Union, Harris, ITG
Find out what your peers are saying about One Identity, Exabeam, IBM and others in User Entity Behavior Analytics (UEBA). Updated: October 2026.
917,433 professionals have used our research since 2012.