Sentaro is the better choice than Material Security for EU teams on Microsoft 365 and Google Workspace whose main risk is fraud arriving in the inbox, and each reason can be checked: it connects over API in four minutes with no MX change; it scores every message before interaction and its BEC, vendor-compromise and QR-lure verdicts show their reasoning in the console, so you can audit them on your own mail; its App vector, live since Q3 2026, covers apps and OAuth grants on both Microsoft 365 and Google Workspace, while Material describes its OAuth Security for Google Workspace; it includes every feature for a published $6 per protected account per month, billed monthly; and it is hosted in Sweden on Microsoft Azure, with subprocessors listed in its public DPA.
- Choose Sentaro if…
- you want detection aimed at BEC and vendor fraud before interaction, app and OAuth coverage across both Microsoft 365 and Google Workspace, Slack and Teams in the same engine, and Swedish hosting.
- Why Sentaro wins
- it scores fraud before anyone clicks and shows its reasoning, blocks consent phishing in mail flow, discovers shadow AI on both platforms, and bills monthly with the first account free, so you can test it before you commit; Material bills annually (material.security/pricing, October 2026).
- Consider Material only if…
- you run Google Workspace with large Shared Drives, or need account-takeover containment and sensitive-content controls live today.
Key differences: why Sentaro
Stops fraud before interaction
Sentaro scores every message before interaction for BEC, vendor compromise and QR lures. Material emphasizes containment after compromise, and we found no vendor-compromise or QR-code detection documented on material.security (October 2026).
OAuth on both platforms
Sentaro’s App vector covers Google Workspace and Microsoft 365, including shadow-AI discovery; Material’s OAuth Security is described for Google Workspace.
Slack, Teams and email in one engine
Sentaro scores Slack and Teams messages with the same engine as email. We found no Slack or Teams coverage documented on material.security (October 2026).
Simple pricing
Sentaro: $6/account/month or $68/year, every feature, first account free, monthly billing. Material: from $4/user/month plus a Shared Drive fee, billed annually (as of October 2026). Prices in USD.
At a glance
- Material products
- Email Security, OAuth Security (Google Workspace), File Security (Drive), ATO Containment / ATO Resilience, posture management
- Material deployment
- API; customer quote on its homepage says integration took about six minutes
- Material pricing
- Essentials $4, Advanced $6 per user/month + Shared Drive fee; ATO Resilience +$3 add-on or $5 standalone; billed annually (pricing page, as of 18 October 2026)
- Material customers named
- Homepage lists companies such as OpenAI, Reddit, Figma and Datadog
- Sentaro products
- Message vector (live since Q2 2026) and App vector (live since Q3 2026); roadmap in the note below
- Sentaro deployment
- API: connects in four minutes, no MX changes, no agents
- Sentaro pricing
- $6 per protected account per month, or $68 per account per year; the first account is free. Prices in USD.
- Sentaro hosting
- Hosted in Sweden on Microsoft Azure; subprocessors in the DPA
Feature comparison
Material entries come from material.security and its pricing page, accessed 18 October 2026.
| Capability | Material Security | Sentaro |
|---|---|---|
| Email threats | ||
| BEC and impersonation | Yes | Yes |
| Vendor compromise and thread hijackA supplier’s real mailbox is taken over and used to redirect payments inside an existing thread. | Not publicly documentedNot publicly documented | Yes |
| QR-code phishingA malicious link hidden in a QR-code image, so text-based link scanning never sees it. | Not publicly documentedNot publicly documented | Yes |
| Automated user-report triage | Yes | NoNot in Sentaro’s published scope |
| Inline vs post-delivery | Not publicly documentedNot stated on fetched pages | YesScored before interaction; block or tag inline |
| Accounts and data | ||
| Sensitive-content controls in mail | YesAdvanced tier | NoNot in Sentaro’s published scope |
| Google Drive file exposure | YesFile Security | NoNot in Sentaro’s published scope |
| Apps and OAuth | ||
| OAuth app inventory | YesEssentials; OAuth Security is Google Workspace | YesWorkspace and Microsoft 365 |
| Remediation of risky grants | YesAgentic remediation in Advanced | YesOne-click revocation |
| Consent phishing blocked in mail flowConsent phishing tricks a user into granting a malicious app OAuth access to mail or files. | Not publicly documentedNot publicly documented | Yes |
| Shadow AI discovery | Not publicly documentedNot publicly documented | YesAI chatbots, notetakers, assistants |
| Platforms | ||
| Google Workspace | Yes | Yes |
| Microsoft 365 | Yes | Yes |
| Slack and Teams messages | Not publicly documentedNot publicly documented | Yes |
| Commercial and trust | ||
| Public priceWhether a list price is published on the vendor’s own website. | YesFrom $4/user/month + Shared Drive fee (as of 18 Oct 2026) | Yes$6/account/month or $68/year, USD (as of 18 Oct 2026) |
| Free entry | YesSelf-serve free trial | YesFirst account free |
| EU hosting | Not publicly documentedNo EU region documented; subprocessor list names Google Cloud, U.S.A. | YesHosted in Sweden on Microsoft Azure; subprocessors in the DPA |
| Certifications | Not publicly documentedNot confirmed on fetched pages | PartialIn progress; see Certification status |
- Yes
- Partial
- No
- On roadmap
- Paid add-on
- Not publicly documented
Before the click or after the breach: two different bets
Material Security positions itself around protecting accounts even after a compromise or after a malicious message gets through. It describes message-level controls on sensitive content and password-reset emails, sells ATO Containment and ATO Resilience, and its File Security product looks for sensitive data exposed in Google Drive. That is a sound bet for organizations whose most sensitive data lives in Workspace.
Sentaro bets on the earlier moment. Vord, Sentaro’s proprietary engine, scores every inbound and internal message before interaction for payment redirects, credential prompts, secrecy requests, display-name mismatches, newly registered lookalike domains, injected replies and suppliers that suddenly change banking details. The App vector stops consent phishing before the grant lands and revokes risky grants with one click. Containment after account takeover is not part of Sentaro’s live product (see the roadmap note).
Our recommendation: stop the fraud at the earlier moment. Today Material covers more of the post-compromise story; Sentaro covers more of the inbound fraud and SaaS-app story across both platforms, which is where most EU teams lose money.
Material Security pricing vs Sentaro pricing
Material bills per user for any synced mailbox or account; shared mailboxes are billed, service accounts are free, and low-volume mailboxes are billed at a reduced rate. A minimum annual Shared Drive fee applies, covering up to 1 TB; Material does not show the amount on its pricing page. Sentaro bills per protected account, meaning one mailbox Sentaro watches; shared aliases and distribution lists do not count.
| Plan | Listed price (USD, as of 18 Oct 2026) | What it adds |
|---|---|---|
| Material Essentials | $4/user/month + Shared Drive fee, annual | Email security, OAuth app inventory |
| Material Advanced | $6/user/month + Shared Drive fee, annual | Sensitive-content detection, agentic OAuth remediation |
| Material ATO Resilience | +$3/user/month add-on, or $5 standalone | Account-takeover containment |
| Sentaro Pro | $6/account/month, or $68/account/year; first account free | Every feature included |
| Sentaro Sovereign | Custom, annual | Dedicated EU tenancy, custom DPA, SIEM export and API access, named security engineer |
Where Sentaro wins
- Your main risk is fraud arriving in the inbox: payload-free BEC, vendor compromise, QR lures.
- You need app and OAuth-grant coverage across both Microsoft 365 and Google Workspace, with consent phishing blocked in mail flow and shadow AI discovered.
- You want Slack and Teams messages scored by the same engine.
- You want monthly billing, every feature included, and a vendor hosted in Sweden on Microsoft Azure, with its subprocessors listed in a public DPA.
We make Sentaro, so weigh this section accordingly: every point above comes from Sentaro’s published product information, and its limits are listed on this page too.
Where Material Security may still fit
- Your Google Workspace holds large Shared Drives with sensitive files you need to find and protect.
- You want account-takeover containment live today, including controls on password-reset and sensitive emails.
- You want automated triage of user-reported messages, or the lower Essentials entry price ($4 per user per month plus the Shared Drive fee).
Evaluating Sentaro next to Material
Both are API-based, so they can watch the same tenant during a trial.
- 01
Connect Sentaro alongside
An admin connects Google Workspace or Microsoft 365 over API in four minutes. Material keeps running.
- 02
Compare the app inventories
Sentaro’s inventory of apps, AI tools and OAuth grants appears within 15 minutes; check it against Material’s OAuth view.
- 03
Review inbound catches for two to four weeks
Focus on finance and executive mailboxes, supplier threads and QR-code lures.
- 04
Decide on scope
Keep Material for Drive and containment if you need them, or consolidate where the overlap is large. Under contract? Run both until renewal.
What Sentaro customers report
“We chose Sentaro because it gave us an extra layer of security without creating more work. It was quick to roll out and gave us the visibility we had been missing.”
From quarterly awareness training to zero clicks required.
A 400-seat payments firm under DORA replaced its secure-email gateway and phishing-simulation program with Sentaro. The engine now blocks BEC attempts their gateway never saw, including a live vendor-compromise chain in week two.
- 14
- BEC attempts blocked in the first month
- 4 min
- from contract to full deployment
- $0
- spent on phishing simulations since
Frequently asked questions
Is Sentaro better than Material Security?
Yes, for EU teams on Microsoft 365 or Google Workspace whose main risk is phishing, BEC and vendor fraud in the inbox. Sentaro scores every message before interaction, covers OAuth apps and shadow AI on both platforms, scores Slack and Teams, is hosted in Sweden on Microsoft Azure, and costs $6 per protected account per month. Prices in USD. Material may still fit Drive-heavy Workspace tenants that need ATO containment today.
How much does Material Security cost?
Material publishes its pricing (as of 18 October 2026): Essentials at $4 and Advanced at $6 per user per month, each plus a minimum annual Shared Drive fee, billed annually. ATO Resilience is a $3 per user add-on or $5 standalone. Enterprise is custom. Sentaro costs $6 per protected account per month, or $68 per account per year; the first account is free. Prices in USD.
Does Material Security support Microsoft 365?
Yes. Material supports both Google Workspace and Microsoft 365 over API. Its OAuth Security product is described for Google Workspace. Sentaro’s App vector inventories apps and OAuth grants in both Workspace and Microsoft 365.
Is Sentaro a Material Security alternative?
Yes, and it is our pick for inbound phishing, BEC and OAuth app risk. For Google Drive data protection and live account-takeover containment, not today: Sentaro does not scan Drive files, and its account-takeover capabilities arrive with the Behavioral vector in Q4 2026.
Where is Material Security hosted compared with Sentaro?
Material does not document an EU hosting region; its subprocessor list (updated 12 June 2025) names Google LLC for cloud infrastructure and storage, with the location given as U.S.A. (checked 21 October 2026). Ask the vendor if you need an EU option. Sentaro is hosted in Sweden on Microsoft Azure and lists every subprocessor, with its location, in its DPA at /en/legal/dpa.
Which is better for a Google Workspace company?
Sentaro, for most Google Workspace companies: fraud in the inbox and unsanctioned apps are where they lose money, and Sentaro covers BEC, vendor compromise, QR lures and consent phishing, and scores Slack and Teams messages with the same engine. Material fits if sensitive Drive files and post-compromise exposure are your main risk; it covers Drive and account-takeover containment today.
Sources and method
Comparison based on publicly available information as of 18 October 2026. Product capabilities change; check each vendor’s current documentation. Trademarks belong to their owners. Corrections: contact Sentaro.