SentinelOne Singularity Cloud Security - AI Powered CNAPP

My main use case for SentinelOne Singularity Cloud Security  is to protect our cloud workloads and infrastructure from cyber threats. I use it for continuous monitoring and detection of threats in our cloud environment, automated incident response to mitigate attacks quickly, visibility into the cloud security posture, and meeting compliance structures while protecting workloads across multiple cloud platforms.

SentinelOne Singularity Cloud Security  provides automated threat detection and response capabilities. SentinelOne played a crucial role in improving our workflow, providing details on incident data after it has been resolved, and it has helped us in cases of suspicious activity.

Recently, SentinelOne Singularity Cloud Security detected a malicious deployment on one of our cloud workloads, indicating a potential ransomware attack. The platform's automated response immediately isolated the affected instance, stopping the threat's movement. Its threat detection alerted our security team in real-time, allowing us to quickly investigate and prevent any data exfiltration. This incident demonstrated the tool's significant ability to improve our response time and minimize the impact on our operations.

I chose a rating of nine for SentinelOne Singularity Cloud Security because it delivers strong and reliable protection with its advanced automated threat detection and response capability. It has significantly improved our ability to quickly identify and contain threats in our cloud environment.

My advice to others looking into using SentinelOne Singularity Cloud Security is to integrate its automated detection and response features. I recommend investing time in training your security team, integrating SentinelOne Singularity Cloud Security with your existing security tools, and regularly reviewing and fine-tuning alerts and policies.

SentinelOne Singularity Cloud Security offers a strong balance of automated threat detection and rapid response. Its relatively easy scalability makes it suitable for businesses of various sizes. The platform's integration capabilities are another advantage, allowing it to fit into existing security ecosystems.

I have been using SentinelOne Singularity Cloud Security for about one year.

I found this interview clear and well-structured, which made it easy to share my thoughts. For future interviews, perhaps a bit more room for open-ended feedback could help capture more detailed insights. I gave SentinelOne Singularity Cloud Security a rating of nine.

Cloud security is what I refer to when discussing SentinelOne Singularity Cloud Security . The main use case for SentinelOne Singularity Cloud Security  would be getting the security posture through the CSPM module, understanding how the security posture of the cloud is configured. The second would be the identity piece, understanding from an identity perspective because in the cloud, even in the front end, you see one identity and the roles associated with it. However, in the back end, that identity is mapped to multiple roles, and if it gets compromised, you don't have visibility on how far the attack is or how deep the breach has happened. To have complete visibility of how the identities are mapped within the cloud and what are the misconfigurations and vulnerabilities associated with it, CSPM and CIEM  are the main use cases that I am looking for concerning cloud configuration vulnerabilities and identity perspective.

Regarding the functionality part of SentinelOne Singularity Cloud Security, it is a unified platform. All the different modules which comprise cloud security, such as CSPM, CWPP , and CIEM , are unified and given in a single console which helps because I don't have to log in to different things and then check or do a lineage comparison. In a single console, I get everything. The AI feature is also quite good. The AI detection rate that I have found is much better than the other set of tools that I work on. From a Kubernetes  perspective, it has some good in-depth sidecar-based scanning technologies that I have found to be good. From the reporting perspective, the reports are better. I can easily prioritize my risks based on the reports that are generated from the solution. At the back end, it also has a single data lake, so from the single console and single data lake, I am able to get some good reports. Overall, these are the benefits I would say from the solution perspective that I liked.

SentinelOne Singularity Cloud Security helps me understand the nitty-gritties of my environment. A few of its deployments are agentless, so that helps from the system perspective because it does not utilize any resources. Reporting  is quite better, and it gives an in-depth picture of the overall cloud security posture of my environment. These are the factors that have defined my inclination towards going for SentinelOne Singularity Cloud Security.

SentinelOne Singularity Cloud Security helps reduce MTTR for cloud incidents, especially in the investigation part. My MTTR has reduced because of the AI detection capabilities and the risk prioritization. Because of the AI detection and its integration with third-party solutions for automation of remediations, plus the risk prioritization, I know which risks to address first even if there are one hundred risks. From an operationalized perspective, the agentless part, security prioritization, risk prioritization, and the AI detection have been very beneficial.

The unified platform experience helps to streamline some security operations, so the single console and single data lake at the back end have helped to streamline the operations, and the agentless part has made the operations part quite easier.

The AI detection engine of SentinelOne is quite powerful, and since it works on behavioral patterns rather than signatures, the detection of unknown threats is much better compared to the other solutions.

In my opinion, if you have worked on the SentinelOne platform, then SentinelOne Singularity Cloud Security is easier to manage. However, if you are new to it, understanding the console, the policies, and the integrations takes more time for an administrator. Compared to other solutions, the third-party integrations are currently less compared to other cloud security solutions. They may improve in the future, but as of now, they are less. They have entered the market a couple of years ago from a cloud perspective, so the maturity factor or the support perspective is still not that competitive compared to others. Support also needs to be improved; the ticket closing time or understanding of the issues is much longer, and the understanding of the issues from the support perspective is less.

The technical support is quite immature, so I would rate it as a six.

I have used SentinelOne Singularity Cloud Security since last year.

I would rate the stability for SentinelOne Singularity Cloud Security a seven.

Scalability for SentinelOne Singularity Cloud Security has no issues; it is good. I would rate it a nine, or 9.5 in fact.

I can compare SentinelOne Singularity Cloud Security with Google's Wiz , Palo Alto's Prisma Cloud, and CrowdStrike's Falcon  Cloud. In my opinion, I rate SentinelOne Singularity Cloud Security number two, then Prisma, and then Wiz . I find CrowdStrike somewhat better from SentinelOne Singularity Cloud Security.

The initial setup for SentinelOne Singularity Cloud Security is not that simple, but it is also not that complex. It is somewhere in between. If I understand cloud and if I have worked on the SentinelOne platform, it is easier comparatively. However, if not, then it becomes a tedious task. Since I have worked on SentinelOne before, it was not that complex. However, for someone new, it might be complex if they don't know.

Regarding the pricing model for SentinelOne Singularity Cloud Security, I would rate it a six. I find it to be pretty reasonable money for the product, but it could be a bit cheaper.

I am totally satisfied with the functionality part of SentinelOne Singularity Cloud Security. The functionality is fine. They have some good feature sets. If you look at it from an individual perspective, it gives good reports and a good index of what my cloud posture is. From the agentless perspective, I have less overhead. From an operationalized perspective and from a security perspective, that is good.

Purple AI  is very good; it is natural language, so I can easily ask questions and get those answers. I don't have to write some heavy codes or do some XML programming at the back end. With simple queries, I get all the results that are expected. My overall review rating for SentinelOne Singularity Cloud Security is eight.