SentinelOne Singularity Endpoint Complete for Security Hub Extended

What do you like best about the product?

The GUI is easy to use, and the tools are efficient. I also like the flexibility to customize policies, including allowing or blocking specific file types and other categories. Another plus is that permissions can be divided easily based on hierarchy.

What do you dislike about the product?

Sometimes support is delayed, and for P1 issues we sometimes need help ASAP. If an AI agent, chat agent, or KB article could at least help in the meantime, that would make a difference. Even a single email with clear communication on how much time it will take, along with an ETA, would be helpful.

What problems is the product solving and how is that benefiting you?

Protecting our machines from attacks and ensuring our clients’ data is safe. It also helps our clients feel secure when using software and email, knowing that even on bad days their data will still be protected.

What do you like best about the product?

The automated remediation and 1-click ransomware rollback are unmatched. Having the agent kill malicious processes, isolate the endpoint, and revert encrypted files on its own—even when offline—eliminates hours of manual incident triage and machine reimaging. Storyline also stitches attack events together clearly, making root-cause analysis fast and painless.

What do you dislike about the product?

Initial onboarding requires disciplined policy tuning, as benign administrative scripts and developer utilities can trigger false positives until exclusions are properly configured. Agent version upgrades across large fleets also require careful scheduling to avoid unexpected reboot prompts.

What problems is the product solving and how is that benefiting you?

It replaced our legacy antivirus with proactive, real-time behavioral protection. It drastically lowers our mean time to respond (MTTR) and stops ransomware before lateral movement occurs, giving our lean team reliable 24/7 endpoint defense without dragging down endpoint performance.

What do you like best about the product?

I like the detection rules and event search. The initial setup was so easy.

What do you dislike about the product?

I find that SentinelOne Singularity Endpoint uses a lot of resources during a full disk scan.

What problems is the product solving and how is that benefiting you?

I use SentinelOne Singularity Endpoint to detect threats and take action accordingly.

What do you like best about the product?

Supports multiple operating system versions, including legacy. This was the only reason for us to replace our previous EDR to SentinelOne that was able to be deployed on legacy OS

What do you dislike about the product?

We're experiencing major issues with SentinelOne that includes heavy impact on endpoint performance with high CPU usage and agents that stop reporting to the management console. Support were unable to resolve these issues.

What problems is the product solving and how is that benefiting you?

The only issue that it solves for us is the ability to run EDR on legacy operating systems, primarily older versions of Windows 10 which we still have in our organization.

What do you like best about the product?

The Sentinelone interface is user-friendly. Its detection capabilities are built into the agent itself, and the one-click rollback feature is very useful.

What do you dislike about the product?

Wherever a system has a full drive and very high utilization, the agent disables itself. There are also a few false positives that require manual intervention.

What problems is the product solving and how is that benefiting you?

SentinelOne Singularity Endpoint helps us protect our endpoints from malware, ransomware, and other advanced cyber threats with real-time detection, behavioral analysis, and automated threat response. It has also reduced our overall operational workload by automating routine security tasks, cutting down on manual intervention, and making endpoint monitoring and incident investigation more straightforward. As a result, our security posture has improved, we can respond to threats faster, downtime is reduced, and our IT and security teams are able to focus on other critical tasks.

What do you like best about the product?

Ease of use, a strong management platform, solid endpoint performance, and a high level of protection—S1 is a top-tier, complete solution for any company looking to improve team productivity and automation without sacrificing protection.

What do you dislike about the product?

The uninstall process is easy, and the console reporting could be better. Overall, S1 is a strong, mature solution. Year after year, they have improved both the platform and the agent.

What problems is the product solving and how is that benefiting you?

XDR, device inventory, endpoint vulnerability detection, and protection for roaming laptops, since S1 doesn’t need an active internet connection. I also like the AI usage and the ability to ingest logs from third parties such as M365 and Fortinet.

What do you like best about the product?

I really appreciate being able to deploy and manage endpoint protection in a way that fits smoothly into our existing IT management processes. It’s extremely valuable to have a security platform that supports proactive monitoring and helps cut down on manual intervention, so our team can stay on top of issues without constantly needing to step in.

What do you dislike about the product?

I’d also like to see continued improvements to reporting, policy management, and integration with RMM platforms to make day-to-day administration more efficient. Simplifying certain workflows and offering more intuitive, at-a-glance visibility across managed environments would be especially beneficial for IT teams and managed service providers.

What problems is the product solving and how is that benefiting you?

For our managed IT services, this platform helps us take a more standardized approach to protecting customer workstations and servers. It also fits well with our remote monitoring and management strategy, since it lets us keep an eye on overall system health while still prioritizing security.

What do you like best about the product?

Ease of deployment and great at protection from Ransomware. Very easy to install SentinelOne endpoint on machines in the workplace. We have had complete protection from Ransomware and other threats since using it.

What do you dislike about the product?

One of the things I dislike about using SentinelOne Endpoint is that from the user side of things, there are very little options. You have to manage everything from the web GUI.

What problems is the product solving and how is that benefiting you?

SentinelOne Endpoint is solving the problem of Ransomware in the workplace. That benefits me/my employer in that we don't have to worry about being infected and possibly dealing with paying a ransom or restoring from a backup.

What do you like best about the product?

I like SentinelOne Singularity Endpoint's automated threat detection. I use it to automate scripts on lab computers. Setup was very easy, and everything is working perfectly.

What do you dislike about the product?

Everything like

What problems is the product solving and how is that benefiting you?

I use SentinelOne Singularity Endpoint to address CVEs and solve security issues for my lab network.

What do you like best about the product?

What I liked most was being able to check what happened when SentinelOne detected or blocked something on my machine. As a QA engineer, I was often testing different applications and running scripts, so occasionally an alert would come up because of something I was working on. It was helpful to be able to look into it and understand what caused it. I also found the interface fairly easy to use once I got familiar with it.

What do you dislike about the product?

The main downside for me was that some alerts were not very easy to understand at first. Since I’m not a security specialist, sometimes I had to spend extra time figuring out why something had been detected and whether it was actually a problem or just related to the testing I was doing.

What problems is the product solving and how is that benefiting you?

It helped keep the work machine protected and made it easier to understand when something unusual happened. In QA I was constantly testing applications and running different scripts, so occasionally something would get flagged. Being able to check what caused it was useful and saved some time when troubleshooting.