Microsoft Sentinel plus Security Copilot
Standing by category
| Category | Function | Share | Rank | Negative rate | Labels | Quadrant | Since September 2026 |
|---|---|---|---|---|---|---|---|
| AI SOC agents | Security operations | 2% | 20 of 104 | 0% | 2 | under 10 labels · led by Dropzone AI at 24% |
Movement
By model
How each model treated Microsoft Sentinel plus Security Copilot across every prompt where it was named for a mid-market B2B company. Fourteen models, six prompts per category.ShowHide
By model
| Model | First choice | Alternative | Mention | Negative | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 0 | 0 | 0 | 0 | 0 |
| GPT-5.4 mini | 0 | 0 | 0 | 0 | 0 |
| Gemini 3.5 Flash | 0 | 0 | 0 | 0 | 0 |
| Perplexity Sonar | 0 | 0 | 0 | 0 | 0 |
| Grok 4.1 Fast | 0 | 0 | 0 | 0 | 0 |
| Mistral Small | 1 | 0 | 0 | 0 | 1 |
| DeepSeek V4 Flash | 0 | 0 | 0 | 0 | 0 |
| Llama 4 Maverick | 0 | 1 | 0 | 0 | 1 |
| Qwen 3.7 Flash | 0 | 0 | 0 | 0 | 0 |
| Kimi K2 | 0 | 0 | 0 | 0 | 0 |
| GLM 4.7 FlashX | 0 | 0 | 0 | 0 | 0 |
| MiniMax M2.5 | 0 | 0 | 0 | 0 | 0 |
| GPT-6 Luna | 0 | 0 | 0 | 0 | 0 |
| Muse Glimmer 30B | 0 | 0 | 0 | 0 | 0 |
By framing
What the models said for it
Verbatim evidence the judge attached to positive labels.
“Microsoft Sentinel with Security Copilot is often the top recommendation due to its integration with existing Microsoft tools and competitive pricing” Mistral Small · AI SOC agents · budget prompt · first choice
“a native cloud SIEM with AI copilot agents, suitable for Microsoft E5 shops” Llama 4 Maverick · AI SOC agents · budget prompt · alternative
And against it
Verbatim evidence attached to negative labels. A warning on a product with few labels is a warning; on a product with many, it is one voice among them.
Named alongside
The products named in the same answers as Microsoft Sentinel plus Security Copilot, over the 5 answers that named it. Took the first choice instead counts the answers where the other product was the first choice and Microsoft Sentinel plus Security Copilot was named but was not.ShowHide
Named alongside
What carried it into the answer
Citations exist only for the models that return a source list, five of the fourteen in this edition, so these counts come from 5 of the 5 answers that named Microsoft Sentinel plus Security Copilot and are not a share of its labels.
Domains cited
Twenty-five of the twenty-five domain citations in answers naming Microsoft Sentinel plus Security Copilot came from somebody else's page.
Pages cited
Pages are listed as the models cited them.
Follow Microsoft Sentinel plus Security Copilot
An email the morning each edition publishes: where this product moved, where it held, and by how much against the noise floor. One address, confirmed by a click; a stop link in every email.
Already following? Everything you follow, with a stop for each.
The company
Microsoft is the company behind Microsoft Sentinel plus Security Copilot.ShowHide
The company
On record
Company records- Also from Microsoft
- Microsoft 365, Microsoft 365 Admin Center, Microsoft 365 Administration, Microsoft 365 Backup, Microsoft 365 Compliance Center, Microsoft 365 Copilot, Microsoft 365 Copilot Chat, Microsoft 365 DSC and 164 more
In its own words
Stated by the vendor, not checked- Positioning
- As a managed service, Microsoft Sentinel was the tool needed to gain the necessary visibility and control over our diverse systems and establish a central cybersecurity organization.
- For
- Körber, ein global agierender Technologiekonzern
- Customers named
- KörberNVISOSHUEISHA INC.NTT Communications
- Not stated on the pages read
- Price, starting price, free plan or trial, integrations, certifications, hosting
What Microsoft Sentinel plus Security Copilot's own pages state, read October 6, 2026: microsoft.com/en/customers/story/20130-korber-microsoft-sentinel, microsoft.com/de-de/customers/story/20128-korber-microsoft-sentinel, microsoft.com/en/customers/story/21623-shueisha-microsoft-copilot-for-security, microsoft.com/en/customers/story/20383-ntt-communications-microsoft-security-copilot, microsoft.com/en/customers/story/1511095253017592508-pearson-vue-edu-microsoft-sentinel. A claimed page can correct any of them.
Claim this page
Claiming is free and changes nothing in the data. A claimed page shows a verified contact who is told when each edition publishes and when Microsoft Sentinel plus Security Copilot's standing changes by more than the noise floor; the right to propose corrections to the vendor table, meaning names the judge wrote that should or should not read as Microsoft Sentinel plus Security Copilot, applied by version and listed in the change log; and a one-line description supplied by the vendor and marked as such.
What a new claim receivesHide what a new claim receives
A new claim receives the current edition's vendor brief for Microsoft Sentinel plus Security Copilot by email, built from the raw record of the edition. It shows:
- where Microsoft Sentinel plus Security Copilot is named, by buyer and by framing, and which cells hold its first choices;
- the claims the models make when they name it, ranked, with the strongest and the weakest quoted;
- its vocabulary against the segment leader's, and the pages the models cited;
- who was chosen in the answers that did not name Microsoft Sentinel plus Security Copilot, and every reason the record gives;
- a battlecard for each top rival: the head-to-head split, why they win, and the reservation quoted against them;
- one page of published figures cleared to show a buyer.