CISO Tribune

Vendor comparison · 2 companies

Exabeam vs Microsoft

Exabeam sells security operations software for threat detection, investigation and response (TDIR), including cloud-native SIEM, behavioral analytics and an on-premises SIEM platform. Microsoft Defender offers threat prevention, detection and response capabilities. CISO Tribune files both under SIEM. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Exabeam
  • Microsoft
Exabeam vs Microsoft: Products, Customers and Funding Compared
ExabeamExabeam sells security operations software for threat detection, investigation and response (TDIR), including cloud-native SIEM, behavioral analytics and an on-premises SIEM platform.exabeam.comMicrosoftMicrosoft Defender offers threat prevention, detection and response capabilities.microsoft.com
What it sells
  • New-Scale Fusion[1][5][9]A cloud-native platform combining New-Scale SIEM and New-Scale Analytics.
  • New-Scale SIEM[5][9]A cloud-native SIEM with search, correlation and AI co-investigation in a TDIR workbench.
  • Exabeam Nova[1][5][9]A platform-wide co-investigator for analysts.
  • Outcomes Navigator[5][9]Maps data to use cases and frameworks.
  • LogRhythm SIEM[5][11][12]An on-premises SIEM platform.
  • LogRhythm Intelligence[5][12]An add-on bringing behavioral analytics to LogRhythm SIEM.
  • NetMon[13]Network traffic monitoring for LogRhythm or New-Scale deployments.
  • Microsoft Defender[1][11][12][23][25]Threat protection that prevents, detects and responds to attacks across devices, identities, applications, email, data, workloads and cloud environments.
  • Microsoft Sentinel[1][23]A cloud-native SIEM built for AI.
  • Microsoft Purview[1][14][23][24][25]Unified information protection, governance and compliance products.
  • Microsoft Entra[1][15][23][25]Identity and access products that verify every identity and access request across clouds, platforms and devices.
  • Microsoft Intune[1][16][23][25]Endpoint management products for device security and hybrid work.
  • Microsoft Defender Suite[12]Threat protection and detection and response across endpoints, identities, email and SaaS apps.
  • Microsoft Entra Suite[15]An extension to Microsoft 365 E3 or E5 for secure workforce use of apps and AI.
  • Microsoft Purview Suite[14]A suite that provides advanced data security and compliance capabilities.
Categories
Headquarters
Foster City, United States[4]Redmond, United States[3]
Founded
2013[2]1975[2]
Ownership and funding
Owned by Thoma Bravo since 2024[5][7][8]Public (NASDAQ: MSFT)[4][10][22]
Named customers
Not stated on its pages
  • Best Buy[5]
  • Danfoss[6]
  • Oregon State University[7]
Recent news
  • October 1, 2026Exabeam introduced new Agentic SOC capabilities that bring AI-driven investigation, execution, and governance to cloud and on-premises environments.[15]
  • July 1, 2026Exabeam expanded its Behavior Intelligence capabilities to help organizations secure AI agents, autonomous workflows, and human-to-agent interactions.[6]
  • June 23, 2026Exabeam introduced Agent Behavior Verification and released Praxen, an open-source tool that tests an AI agent against its intended role before deployment.[16]
  • July 29, 2026Microsoft reported revenue of $90.0 billion for the quarter ended June 30, 2026, up 18% year over year.[8]
  • July 27, 2026Microsoft introduced Project Perception, an agentic security system that uses AI to turn signals into real-time protections.[21]
  • May 1, 2026Microsoft announced general availability of Microsoft 365 E7 and Microsoft Agent 365 on May 1, 2026.[28]
  • April 29, 2026Microsoft reported revenue of $82.9 billion for the quarter ended March 31, 2026, up 18% from a year earlier.[9]
  • December 22, 2025Microsoft announced the Defender Experts suite, an expert-led security offering for resellers and scale solution providers, generally available from January 1, 2026.[20]
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: listed, seen November 3, 2026[8]
  • G2: listed, seen November 10, 2026[10]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Exabeam says its platform helps organizations of any size and maturity. Exabeam offers a cloud-native platform and an on-premises SIEM, so it addresses both cloud and self-hosted deployment preferences. Its pages describe replacing a legacy SIEM or augmenting an existing one with behavioral analytics and automation. Exabeam also targets organizations concerned with insider threats from both human users and AI agents.From its own pages, Microsoft sells security products for businesses of any size. Microsoft 365 Business Premium is aimed at small and medium-sized businesses, and Microsoft Defender is designed to protect individuals, businesses and enterprises. Microsoft refers to enterprise and government cloud customers, and Providence Care, a healthcare organization, uses Microsoft 365 E5 for healthcare security.
Last verified
September 27, 2026November 2, 2026

Where they overlap

  • Exabeam and Microsoft are both filed under SIEM.
  • Both are headquartered in the United States.

Where they differ, field by field

  • Exabeam's primary category is SIEM; Microsoft's is EDR and XDR.
  • Exabeam is also filed under AI SOC analysts. Microsoft is also filed under Workforce IAM and SSO and Endpoint management and application control.
  • Exabeam lists New-Scale Fusion, New-Scale SIEM, Exabeam Nova, Outcomes Navigator, LogRhythm SIEM and 2 more. Microsoft lists Microsoft Defender, Microsoft Sentinel, Microsoft Purview, Microsoft Entra, Microsoft Intune and 3 more.
  • Exabeam is headquartered in Foster City, United States. Microsoft is headquartered in Redmond, United States.
  • Exabeam was founded in 2013. Microsoft was founded in 1975.
  • Exabeam is owned by Thoma Bravo, since 2024. Microsoft is a public company listed on NASDAQ as MSFT.
  • Microsoft publicly names Best Buy, Danfoss and Oregon State University.

What it sells: Exabeam

What New-Scale Fusion does[1][5][9]
New-Scale Fusion unifies log management, behavioral analytics, dynamic risk scoring and automation in a modular platform. It can replace an existing SIEM or augment current tools. It runs on Google Cloud Platform.
What New-Scale SIEM does[5][9]
New-Scale SIEM combines fast search, advanced correlation and persistent AI co-investigation in a unified TDIR workbench. Threat Center unifies alerts, cases, detections and watchlists. New-Scale SIEM is delivered from GCP.
What Exabeam Nova does[1][5][9]
Exabeam Nova follows analysts through Threat Center, search timelines and Outcomes Navigator. It automates background context collection, secondary searches and triage assistance.
What LogRhythm SIEM does[5][11][12]
LogRhythm SIEM is deployed on-premises for complete data control. It includes 1,100+ prebuilt correlation rules mapped to MITRE ATT&CK and compliance mandates.
What LogRhythm Intelligence does[5][12]
LogRhythm Intelligence applies AI-driven behavioral analytics to surface user and entity anomalies in the LogRhythm SIEM platform. It is an add-on to LogRhythm SIEM and not available as a standalone product.

What it sells: Microsoft

What Microsoft Defender does[1][11][12][23][25]
Microsoft Defender is a threat protection solution designed to protect individuals, businesses and enterprises from malicious cyberthreats. Microsoft Defender coordinates protection across endpoints, identity, email, apps and cloud.
What Microsoft Purview does[1][14][23][24][25]
Microsoft Purview offers a unified approach to help organizations secure and govern data across their heterogenous data estate. Microsoft Purview covers on-premises, multicloud and SaaS environments, and structured and unstructured data. Microsoft Purview features are purchased through different licenses or on a pay-as-you-go basis.
What Microsoft Entra does[1][15][23][25]
Azure Active Directory (Azure AD) was renamed Microsoft Entra ID in 2023. Purchase starts with Microsoft Entra ID P1 or P2 license subscriptions, which can also be purchased as part of a Microsoft 365 E3 or E5 license.
What Microsoft Intune does[1][16][23][25]
Microsoft Intune offers advanced endpoint management and security capabilities available as standalone add-ons or as part of the Intune Suite. Microsoft Intune Plan 1 is the endpoint management solution included in most Microsoft 365 enterprise licenses. Plan 1 covers cross-platform device management, built-in security, mobile application management and endpoint analytics.
What Microsoft Defender Suite does[12]
Microsoft Defender Suite focuses on threat protection and detection and response across endpoints, identities, email and SaaS apps. The integrated security operations center (ISOC) is included in the Defender Suite.
What Microsoft Entra Suite does[15]
Microsoft Entra Suite extends Microsoft 365 E3 or E5 to enable secure workforce use of apps and AI with continuous, adaptive identity and network access controls across employees, apps and networks. Microsoft Entra Suite requires a subscription to Microsoft Entra ID P1 or a package that includes Microsoft Entra ID P1.

Questions about Exabeam and Microsoft

What do Exabeam and Microsoft sell?
Exabeam sells New-Scale Fusion, New-Scale SIEM, Exabeam Nova, Outcomes Navigator, LogRhythm SIEM and 2 more. Microsoft sells Microsoft Defender, Microsoft Sentinel, Microsoft Purview, Microsoft Entra, Microsoft Intune and 3 more.
Are Exabeam and Microsoft in the same category?
They share SIEM. Exabeam's primary category is SIEM and Microsoft's is EDR and XDR.
Where are Exabeam and Microsoft headquartered?
Exabeam is headquartered in Foster City, United States. Microsoft is headquartered in Redmond, United States.
When were Exabeam and Microsoft founded?
Exabeam was founded in 2013. Microsoft was founded in 1975.
Who owns Exabeam and Microsoft?
Exabeam is owned by Thoma Bravo, since 2024. Microsoft is a public company listed on NASDAQ as MSFT.
Which customers do Exabeam and Microsoft name?
Microsoft publicly names Best Buy, Danfoss and Oregon State University.
Who are Exabeam and Microsoft sold to?
Exabeam says its platform helps organizations of any size and maturity. From its own pages, Microsoft sells security products for businesses of any size.
What have Exabeam and Microsoft announced recently?
October 1, 2026: Exabeam introduced new Agentic SOC capabilities that bring AI-driven investigation, execution, and governance to cloud and on-premises environments. July 29, 2026: Microsoft reported revenue of $90.0 billion for the quarter ended June 30, 2026, up 18% year over year.

About Exabeam

Exabeam sells security operations software for threat detection, investigation and response (TDIR), including cloud-native SIEM, behavioral analytics and an on-premises SIEM platform.[9]

Exabeam says AI agents now act alongside human employees, often at machine speed and massive scale, and that traditional security tools were not built to see or understand this behavior. Exabeam says it applies behavioral analytics to both humans and AI agents to help organizations detect signals of compromised credentials, malicious activity and misaligned autonomous systems earlier. User and entity behavior analytics (UEBA) and Agent Behavior Analytics (ABA) automatically baseline activity and expose anomalies.[10]

New-Scale Fusion is the cloud-native platform. New-Scale Fusion combines New-Scale SIEM and New-Scale Analytics in a modular platform that unifies log management, behavioral analytics, dynamic risk scoring and automation. Exabeam says New-Scale Fusion can be deployed to replace an existing SIEM or to augment current tools with behavioral analytics and automation. New-Scale Fusion runs on Google Cloud Platform (GCP) with a 99.5% uptime SLA, and customers select a hosting region at purchase.[1][9][14]

New-Scale SIEM combines fast search, advanced correlation and persistent AI co-investigation in a unified TDIR workbench. Exabeam Nova is a platform-wide co-investigator that follows analysts through Threat Center, search timelines and Outcomes Navigator. Threat Center unifies alerts, cases, detections and watchlists in one workbench.[1][9]

On data handling, Exabeam says prebuilt collectors process more than 2 million events per second (EPS) and that customers can start with 7,000+ prebuilt log parsers. The Common Information Model (CIM) normalizes data at ingestion. The Exabeam Threat Intelligence Service ingests and scores commercial and open-source threat feeds, updates every 24 hours, and is included at no extra cost.[9]

LogRhythm SIEM is deployed on-premises for complete data control. LogRhythm SIEM includes 1,100+ prebuilt correlation rules mapped to MITRE ATT&CK and compliance mandates. LogRhythm Intelligence applies AI-driven behavioral analytics to surface user and entity anomalies in the LogRhythm SIEM platform, and it is an add-on to LogRhythm SIEM rather than a standalone product. NetMon monitors network traffic for LogRhythm or New-Scale Security Operations Platform deployments.[11][12][13]

Exabeam names Resorts World Las Vegas, SA Power Networks, MTI Ltd and Port of Antwerp-Bruges among its customers. Exabeam says its platform helps organizations of any size and maturity improve security operations.[3][9][10][13][14]

Exabeam on the record

Sources

Exabeam full record

  1. [1]Exabeam new scale fusion security operations platformExabeam · exabeam.com · published July 1, 2026 · Tier A
  2. [2]About usExabeam · exabeam.com · published September 15, 2026 · Tier A
  3. [3]Exabeam and logrhythm complete merger and announce new company detailsThoma Bravo · thomabravo.com · published July 17, 2024 · Tier B
  4. [4]Exabeam opens new office in plano tx expands customer service and support in north americaExabeam · exabeam.com · published November 3, 2022 · Tier A
  5. [5]Exabeam | Cybersecurity & Compliance with Security Log Management and SIEMExabeam · undated page, accessed October 24, 2026 · Tier A
  6. [6]Exabeam Expands Behavior Intelligence to Secure the Agentic EnterpriseBusiness Wire · published July 1, 2026 · Tier A
  7. [7]Exabeam New-Scale Platform Reviews & Product Details - G2G2 · undated page, accessed October 24, 2026 · Tier C
  8. [8]Exabeam Reviews, Ratings & Features 2026 | Gartner Peer InsightsGartner Peer Insights · undated page, accessed October 24, 2026 · Tier C
  9. [9]New-Scale SIEM | ExabeamExabeam · undated page, accessed November 3, 2026 · Tier A
  10. [10]Exabeam | Cybersecurity & Compliance with Security Log Management and SIEMExabeam · undated page, accessed November 3, 2026 · Tier A
  11. [11]LogRhythm SIEM | ExabeamExabeam · undated page, accessed November 3, 2026 · Tier A
  12. [12]LogRhythm Intelligence | ExabeamExabeam · undated page, accessed November 3, 2026 · Tier A
  13. [13]NetMon | ExabeamExabeam · undated page, accessed November 3, 2026 · Tier A
  14. [14]The Exabeam Difference | ExabeamExabeam · undated page, accessed November 3, 2026 · Tier A
  15. [15]The Agentic SOC, Delivered: Exabeam Accelerates AI-Powered Security Operations to Machine SpeedExabeam · published October 1, 2026 · Tier A
  16. [16]Exabeam launches Praxen, an open-source tool to verify AI agent behaviorSiliconANGLE · published June 23, 2026 · Tier B

Microsoft full record

  1. [1]Cloud Security Solutions | Microsoft SecurityMicrosoft · undated page, accessed September 27, 2026 · Tier A
  2. [2]AboutMicrosoft · news.microsoft.com · undated page, accessed September 27, 2026 · Tier A
  3. [3]Msft 20240630Microsoft Corporation via SEC EDGAR · sec.gov · undated page, accessed September 27, 2026 · Tier A
  4. [4]7c96b326 33bc 4b84 8abb 7afd7a517ea3Microsoft Corporation · microsoft.gcs-web.com · undated page, accessed September 27, 2026 · Tier A
  5. [5]25053 best buy microsoft sentinelMicrosoft · microsoft.com · published August 25, 2025 · Tier A
  6. [6]22786 danfoss microsoft sentinelMicrosoft · microsoft.com · published March 7, 2025 · Tier A
  7. [7]1747330384796486050 oregon state university microsoft security copilot higher education en united statesMicrosoft · microsoft.com · published March 14, 2024 · Tier A
  8. [8]Microsoft cloud and ai strength fuels fourth quarter results 4Microsoft · news.microsoft.com · published July 29, 2026 · Tier A
  9. [9]Microsoft cloud and ai strength fuels third quarter resultsMicrosoft · news.microsoft.com · published April 29, 2026 · Tier A
  10. [10]Microsoft 365 Reviews 2026: Details, Pricing, & Features - G2G2 · undated page, accessed October 26, 2026 · Tier C
  11. [11]Microsoft Defender—Cybersecurity Solutions | Microsoft SecurityMicrosoft · undated page, accessed November 3, 2026 · Tier A
  12. [12]Microsoft Defender Suite | Microsoft SecurityMicrosoft · undated page, accessed November 3, 2026 · Tier A
  13. [13]Microsoft Purview Suite | Microsoft SecurityMicrosoft · undated page, accessed November 3, 2026 · Tier A
  14. [14]Microsoft Purview Pricing | Microsoft SecurityMicrosoft · undated page, accessed November 3, 2026 · Tier A
  15. [15]Microsoft Entra Pricing | Microsoft SecurityMicrosoft · undated page, accessed November 3, 2026 · Tier A
  16. [16]Microsoft Intune Pricing | Microsoft SecurityMicrosoft · undated page, accessed November 3, 2026 · Tier A
  17. [17]Cybersecurity for small and medium business | Microsoft SecurityMicrosoft · undated page, accessed November 3, 2026 · Tier A
  18. [18]Security Copilot agents in Microsoft 365 E5 | Microsoft SecurityMicrosoft · undated page, accessed November 3, 2026 · Tier A
  19. [19]Microsoft Defender Pricing | Microsoft SecurityMicrosoft · undated page, accessed November 3, 2026 · Tier A
  20. [20]December 2025 announcements - Partner Center announcementsMicrosoft Learn · published December 22, 2025 · Tier A
  21. [21]Rethinking security for the age of AIThe Official Microsoft Blog · published July 27, 2026 · Tier A
  22. [22]Microsoft Reviews, Ratings & Features 2026 | Gartner Peer InsightsGartner Peer Insights · undated page, accessed November 3, 2026 · Tier C
  23. [23]Microsoft 365 Security Enterprise Plans| Microsoft SecurityMicrosoft · undated page, accessed November 10, 2026 · Tier A
  24. [24]Microsoft Purview: Data Security and Governance | Microsoft SecurityMicrosoft · undated page, accessed November 10, 2026 · Tier A
  25. [25]CybersecurityMicrosoft · undated page, accessed November 10, 2026 · Tier A
  26. [26]Microsoft Defender Suite for Microsoft 365 Business Premium | Microsoft SecurityMicrosoft · undated page, accessed November 10, 2026 · Tier A
  27. [27]Microsoft Mobile Phone Authenticator | Microsoft SecurityMicrosoft · undated page, accessed November 10, 2026 · Tier A
  28. [28]Leading Frontier Firm transformation with Microsoft 365 E7: The partner opportunityMicrosoft · published May 1, 2026 · Tier A

Spot a factual error? Request a correction.