SentinelOne Singularity Platform

My main purpose is to have protection for all my endpoint devices. I would like a unified solution which can reduce my operational cost and ensure my risk is less compared to other things. The primary use case is that I want to have my entire server and endpoint security solutions covered. I want to consolidate to ensure my maintenance and operational cost are streamlined in a better way.

This solution has really very good capabilities across the endpoint devices. It has real capabilities to ensure my endpoint device coverage across my organization. It can correlate my various threats so that it gives me clear detailed information across my entire enterprise landscape.

It is enabling my security solutions from my servers, Linux, Windows security, all at various touchpoints. It gives my all my laptop devices and everything the entire range of security purpose.

It prevents my vulnerable devices without any confirmation and without being compromised. The network and asset visibility has real visibility because it can see various types of devices connecting to my network.

It has reduced the MTTR significantly, at least 40 to 50 percent.

When coming into the picture with AI, I think it has to enhance the time to respond and can increase in that way. Time to respond is a delay that should be improved. Documentation also should be in a better way. As a customer, the price is also high for me.

It is not easy for engineers or for any new engineers, highly trained people would be better. For L2 engineers, it is not that easy for them.

I have already shared on LinkedIn the solutions what I am offering. I am using the endpoint security and all the protection platforms. I am using SentinelOne Singularity Endpoint Go and SentinelOne Singularity Endpoint Cloud also and also SentinelOne Singularity Endpoint Identity. It is almost two years that I have been a customer.

Stability is very good.

It is highly scalable.

In terms of my solution, the return on investment is better. I am able to get my staff reduced in that way. If the cost also can be decreased, then I will be happy.

I have already shared on LinkedIn the solutions what I am offering. I have shifted to another company which is called Wysely Digital. Microsoft Defender is another alternative that exists as an EDR.

I am currently using SentinelOne Singularity Endpoint Go, SentinelOne Singularity Endpoint Cloud, and SentinelOne Singularity Endpoint Identity. It has eliminated all false positives that are generated. This has helped my staff to focus on other purposes. The cost price point at one hundred dollars or higher is a consideration. I would rate this solution an eight out of ten. It is on-premises deployment. For this review, I would give this solution an overall rating of eight.

My main use case for SentinelOne Singularity Endpoint involves EDR, deep visibility, and threat hunting.

For EDR or threat hunting in my day-to-day work, I use SentinelOne Singularity Endpoint primarily for incident management and for daily threat hunting, where I run queries, XDR queries, EDR, and power queries for hunting.

In addition to my main use cases, I also use SentinelOne Singularity Endpoint for application management, inventory management, and identity management for all users, along with vulnerability recommendation and vulnerability development management.

SentinelOne Singularity Endpoint offers excellent features that include threat visibility, deep visibility, and threat hunting.

What stands out to me with SentinelOne Singularity Endpoint's threat visibility and threat hunting features is that deep visibility gives us a 360-degree angle view of cloud, endpoint, identity, and network data to assess any possible threat hunting or risky activities, which is a good feature.

SentinelOne Singularity Endpoint has positively impacted my organization with its Purple AI feature.

Purple AI has made a positive impact by saving time because it provides a summary glimpse of the incident, allowing me to get an overview of what happened, and then I can check the particular identity or asset, which helps in checking everything in the incident or particular device or organization.

SentinelOne Singularity Endpoint has helped me see the connections between different security events or alerts, and it integrates easily.

Singularity Endpoint has completed my security solutions; during the six pillars of zero trust architecture, I can implement all pillars—identity, application, endpoints, infrastructure, network, and cloud—through the Singularity platform.

Singularity Complete has helped reduce false positive alerts; by creating star rules or alert rules for valid files allowed in the network, we are getting fewer incidents from the beginning.

Singularity Endpoint has freed up my staff for other projects and tasks, saving us one to two days per week to focus on other things.

It has reduced the mean time to respond, MTTR, by shrinking the incident response and forensic science analysis cycles from hours to seconds.

SentinelOne Singularity Endpoint can be improved by implementing more XDR in the network connections and connectivity.

Regarding needed improvements, the device connectivity management feature is very good and is working effortlessly and connecting well, though if we could improve some Purple AI features such as providing direct results to queries, that would be a valuable enhancement.

I have been using SentinelOne Singularity Endpoint for two years.

SentinelOne Singularity Endpoint is stable.

Its scalability is impressive as it delivers horizontal scalability to a single agent and supports SaaS services, on-premises, and hybrid environments.

Customer support is good, and the service is good.

We previously used Microsoft Defender XDR, but we have SentinelOne Singularity Endpoint as a backup EDR solution.

When we previously used Microsoft Defender XDR, the setup has been stable.

I do not have any metrics regarding return on investment, as I am part of the group and did not implement it.

I am part of the group but do not have hands-on experience with the pricing, setup cost, and licensing.

Before choosing SentinelOne Singularity Endpoint, we did not evaluate any other options; one customer provided feedback indicating they use SentinelOne Singularity Endpoint, so we decided to go with it.

My company acts as a service provider, MSSP, in our relationship with this vendor. I would rate this review a 9 overall.

We are using SentinelOne Singularity Endpoint as an EDR currently in our organization, and we are mapping the hash values into it so that the endpoint detection and response system will block all the corresponding prefix regarding that hash value. We also use it for USB blocking, such as blocking USB on particular devices or on the whole network.

From the administrative perspective, I appreciate the best features of SentinelOne Singularity Endpoint because we can block each and every traffic based on the hash value. We can manually check for this, and we have the AI feature to scan the vulnerability type and migrate that framework vulnerabilities. Additionally, we have the whole privilege to manually control the device, such as the endpoint, so we can close the running application or uninstall the applications that are malicious.

SentinelOne Singularity Endpoint is very good in terms of time-saving, as no other task is getting hampered by installing it. Initially, when we install it on a particular endpoint, it scans all over the machine, and the user may feel that the machine is a bit slow. However, after the scanning is completed, the machine comes to the top factory stage, so the user has not faced any issues with the software.

The key benefits I have seen from using SentinelOne Singularity Endpoint include that agent installation is pretty easy. We just need to run the EXE file and paste the key. After deployment, it works by scanning everything in the background, creating logs in SentinelOne and also in the client console app if it fails at anything. We have not encountered any malicious attacks, such as ransomware, and I feel that SentinelOne is working very well by patching it in the background.

I would like to see improvements in SentinelOne Singularity Endpoint where if the user agent is deployed on a particular machine, the user only sees the logs, and the rest are deleted, while the quarantine part is done by the console itself. Users should be given permissions to block or use the application as needed.

In terms of features, I would like to see that if I need to deploy software in my environment with an endpoint EDR installed, I could use SentinelOne for that. It would be perfect for the software part, such as deploying an EXE file remotely to all employees so that it gets installed on every endpoint.

I have been working with SentinelOne Singularity Endpoint for about two and a half years or more.

As for the stability of SentinelOne Singularity Endpoint, I do not have any negative thoughts. It was pretty clean and had a nice installation.

I have not had any scalability issues with SentinelOne. We have deployed it in both 64-bit and 32-bit architectures, and both are working fine. We also received troubleshooting steps such as running commands in the command prompt or PowerShell to ensure its installation.

I evaluate customer service and technical support of SentinelOne as adequate. We are not proactively calling them since our server management team is responsible for crashes or other issues and they bring in SentinelOne team when necessary.

I have worked on Kaspersky EDR solutions and also SentinelOne Singularity Endpoint. We are deploying Deep Security from Trend Micro for the servers. For endpoint protection, I see SentinelOne as the perfect solution, and for the server, I feel that Deep Security from Trend Micro is working fine as I have seen various organizations using it.

In my previous organization, they were using Kaspersky EDR solutions, so I did not switch from Kaspersky to SentinelOne. Instead, Deep Security is being installed in our servers here.

The initial setup of SentinelOne Singularity Endpoint was straightforward, and there were no issues with it.

We are not in a partnership with SentinelOne. We are just the end-users of the solution. SentinelOne has provided us with the EDR solution installed on our own servers, and if any updates need to be made, the vendor has to come and install them manually.

SentinelOne is indeed very highly regarded in the industry and is seen as a supreme solution. This is a significant advantage for us in our organization.

I am not certain how to answer if SentinelOne Singularity Endpoint has helped to consolidate our security solutions.

At the moment, I do not use SentinelOne Singularity Endpoint's Ranger functionality for network and asset visibility, and I am not aware of it, so there are no issues.

SentinelOne Singularity Endpoint has helped to reduce alerts because we have predefined the hash values, and the mitigation part is done by automation itself.

Currently, I am just in the deployment phase, and the administrator part is handled by another team, so I do not have specific data points on how much the alerts it has helped to reduce.

SentinelOne Singularity Endpoint has indeed helped us to reduce our organization's mean time to detect, as the major vulnerabilities have already been patched by it, and we are not facing any downtime or related issues.

As far as I know, regarding mean time to respond metrics, the alerts are getting in the queue itself, but I am not the right person to answer this at this time.

I am utilizing Purple AI, but I feel that it is not available in our infrastructure since we have offloaded SentinelOne only on our servers and not from the vendor.

Based on my experience with SentinelOne, I recommend that it should be available for home users as well, and I believe they are using SentinelOne for Azure cloud services, which is pretty good. I would rate this review as an eight out of ten.

My usual use cases for SentinelOne Singularity Endpoint are to manage and deploy it on the endpoints across my organization. I also use it for automations, which represents my primary use case.

I use SentinelOne Singularity Endpoint mostly with my EDR. I am not heavily focused on cloud at this time as I am still in the development and learning phase of cloud deployment and cloud telemetry collection. Seeing alerts on a single pane of glass and resolving incidents has helped me significantly. It provides a better ecosystem with the AI team and all the capabilities already included.

The EDR feature of SentinelOne Singularity Endpoint and their detection features are excellent. They perform very well at endpoint detection and resolution. Their automated response capability is equally strong. There is also granular control over endpoint detection policies, which is valuable.

I have integrated SentinelOne Singularity Endpoint with Splunk, and the ingestion and correlation of logs and telemetry from endpoints is strong. It provides a good perspective on what exactly happened. This really helps me as a SOC analyst to investigate what has occurred on an endpoint if there is malware or a malfunction on that particular endpoint.

SentinelOne Singularity Endpoint has reduced the overhead of my alerts with the enhanced telemetry provided. I do not have a precise count, but it has had a significant impact. I estimate that I experience approximately twenty to thirty percent less alert overhead as they are automatically enriched and resolved.

SentinelOne Singularity Endpoint has helped reduce my team's time in analyzing alerts and determining what is wrong with endpoints. It also makes investigations easier without disrupting users. Mean time to detect and mean time to respond are metrics where I cannot provide exact numbers, but I can say that SentinelOne Singularity Endpoint has had a noticeable positive impact, making detection and response much faster than the very manual and tedious process we had before.

The positive benefits from using SentinelOne Singularity Endpoint include reduced effort required to interact with users during critical investigations. It has provided automation capabilities and advanced telemetry from endpoints to investigate any issues that arise. My team interacts less directly with users, so the impact to user business is minimized when cyber incidents occur and investigations are needed.

They could still work on optimizing their agent. Additionally, they do not appear to provide a free trial. If they could provide a free trial for one or two endpoints, it would be a better option for testing.

I worked with SentinelOne Singularity Endpoint at Infosys for two years and have continued using it recently, for a total of approximately three years.

SentinelOne Singularity Endpoint is reliable and stable. It does not create many issues.

I measure the stability and reliability of SentinelOne Singularity Endpoint based on how well it detects threats and how stably it performs in user environments. I do not want an EDR tool or agent to consume excessive resources from the endpoint. SentinelOne Singularity Endpoint manages this well. It would be better if it were more optimized, but overall it performs well.

SentinelOne Singularity Endpoint is scalable and easy to scale. We simply deploy it and it scales itself.

Scaling out might be a concern, but I have not had a need to scale down, so this has not been an issue.

I am not currently in touch with technical support for SentinelOne Singularity Endpoint as I am in the early deployment phase and am learning and brushing up on the platform myself. My peers have had interactions with technical support, and they have reported that it is excellent. Technical support is overall very strong, and though I do not have direct contact with them, the feedback I have received has been positive.

I previously used Quick Heal Endpoint and Quick Heal EPS, which were not sufficient for our advanced threat protection needs. We switched to SentinelOne Singularity Endpoint because of these limitations.

SentinelOne Singularity Endpoint is fairly straightforward to set up and has an intuitive user interface. A clear vision of your security policies is necessary, and a phased rollout is recommended. You cannot roll out the solution to everyone at once as it might impact many people simultaneously. A phased approach with policies tailored to your organization works best.

The cost of SentinelOne Singularity Endpoint is reasonable and appropriate for the features it provides. It is not too expensive or cumbersome. However, it would be beneficial if they could provide a free trial at some point.

I was considering Trend Micro Vision One as an alternative option, but SentinelOne Singularity Endpoint stood out.

I was evaluating Trend Micro Vision One and determined that SentinelOne Singularity Endpoint was the better option for my use case with one of my particular clients. As a consultant at a service-based firm, my role is to advise organizations on what will suit them best. For that particular client, this was the optimal choice, though other clients might benefit from different options. SentinelOne Singularity Endpoint was one of my top considerations for endpoint security along with Microsoft Defender for Endpoint for Windows-only environments.

SentinelOne Singularity Endpoint is a SaaS-based platform that I deployed on-premises. I would rate this solution a ten out of ten.

I typically use SentinelOne Singularity Endpoint for endpoint detection, including EDR and EPP, to secure my endpoints.

A specific example of how I use SentinelOne Singularity Endpoint to secure my endpoints is that it provides AI-powered threat detection that will be very profitable for us. If any malware behaves suspiciously, behavioral analytics will notify us, and it can stop zero-day threats and fileless malware, saving our system from the threat.

The main use case for SentinelOne Singularity Endpoint is to secure my endpoints.

SentinelOne Singularity Endpoint has positively impacted my organization by saving many systems because we have more than 100 systems that are very critical to monitor individually, and it helps secure all our systems.

Managing and securing those systems with SentinelOne Singularity Endpoint means it provides real-time monitoring and threat analysis for each system, which is very helpful for us.

Singularity Complete helped free up my staff for other projects and tasks by saving the costs of two employees after implementing this solution.

The best features that SentinelOne Singularity Endpoint offers are real-time monitoring, process visibility, attack timelines, root cause analysis, threat hunting, and MITRE ATT&CK mapping, which is the best feature.

Real-time monitoring and process visibility from SentinelOne Singularity Endpoint help me in my day-to-day work because if any malware files are downloaded, it will take real-time action on them. Additionally, there is a rollback plan, allowing us to easily revert to the malware-affected system, which is a very beneficial feature available in the system.

SentinelOne Singularity Endpoint can be improved by ensuring that all our endpoints are completely secure and risk-free. If anything happens, a rollback plan will be there so that we can easily revert everything.

I have been using SentinelOne Singularity Endpoint for the last six months.

SentinelOne Singularity Endpoint is stable.

The scalability of SentinelOne Singularity Endpoint is good.

The customer support for SentinelOne Singularity Endpoint is very good.

On a scale of 1 to 10, I would rate the customer support for SentinelOne Singularity Endpoint a 10 out of 10.

I did not use any other solution before using SentinelOne Singularity Endpoint, as I started using it directly.

I have seen a return on investment with SentinelOne Singularity Endpoint as it saves a lot of time and reduces our employee costs.

I did not evaluate any other options before choosing SentinelOne Singularity Endpoint.

Singularity Complete has helped reduce alerts because my system currently has no threats, so I am getting very low alerts.

SentinelOne Singularity Endpoint has helped reduce my organization's Mean Time to Detect by about two to three hours per day.

The solution has helped reduce my organization's Mean Time to Respond by five hours.

If you want to secure your endpoint, you can go for SentinelOne Singularity Endpoint; it is a very good product that you can use. I would rate this product a 10 out of 10.

My main use cases for SentinelOne Singularity Endpoint are endpoint detection and response, real-time threat prevention, and incident investigations. It helps us protect laptops, desktops, and servers from malware, ransomware, and other advanced threats while providing centralized visibility into endpoints and their activity. I also use its automated remediation capabilities to quickly isolate infected devices, roll back ransomware where applicable, and reduce the manual response effort.

I can provide a specific example of how my team used SentinelOne Singularity Endpoint in a real situation. We received an alert from SentinelOne Singularity Endpoint indicating suspicious PowerShell activity on an employee's laptop. The platform correlated the behavior with a malicious Office document that had launched the script attempting to download additional payloads. SentinelOne automatically killed the malicious process, quarantined the file, and isolated the endpoint from the network to prevent lateral movement. Using the process timeline, the security team quickly identified the root cause, confirmed that no other endpoints were affected, removed the malicious document, and returned the device to service. The entire incident was contained within minutes without any ransomware encryption or data loss.

I have many use cases for SentinelOne Singularity Endpoint.

Since deploying SentinelOne Singularity Endpoint, I have seen faster threat detection and response, better visibility across our endpoints, and less time spent investigating security incidents. The automated containment and remediation features have reduced manual work for our security teams, and the centralized console has made it easier to monitor endpoint health and respond to threats.

I have seen faster detection with better context. Keeping our most critical security incidents in mind, the biggest improvement has been reduced investigation time thanks to the storyline features and automated remediation, allowing analysts to focus on the higher-priority security alerts.

The best features SentinelOne Singularity Endpoint offers that stand out to me the most are its behavioral AI detection, automated response capabilities, and detailed incident visibility. The storyline features, in particular, give a response timeline, while the process storyline makes it much easier to investigate the incident and understand exactly what happened.

SentinelOne Singularity Endpoint has behavioral AI detection, automated remediation and ransomware rollback, network isolations, storyline technology, threat hunting, remote response, and centralized management as the main features.

SentinelOne Singularity Endpoint can be improved in some areas. The management console can be complex for new users, and some advanced features require a learning curve to use effectively. Organizations with large environments may also want more flexible reporting and dashboard customization. While false positives are generally low, behavioral detection can still require analyst review and tuning to reduce unnecessary alerts.

I would like to see more customizable dashboards for executive reporting, simpler policy management and reduced false positives, faster support response times, deeper native integrations, more granular permissions, and easier onboarding and training.

I have been working in my current field for the last one year.

I have been using SentinelOne Singularity Endpoint for one year.

SentinelOne Singularity Endpoint is generally stable and reliable.

SentinelOne Singularity Endpoint has good scalability, ranging from small deployments to large enterprise environments. The cloud-based management model makes it easier to onboard, manage, and monitor large numbers of endpoints without needing additional backend infrastructure.

Customer support for SentinelOne is generally good, with knowledgeable technical teams and useful resources for troubleshooting and deployment questions.

I previously used another endpoint security solution and switched to SentinelOne Singularity Endpoint because I needed stronger behavior detection, faster incident response, and better automations. The previous solution provided basic endpoint protection.

I have seen a return on investment from SentinelOne Singularity Endpoint. The main value has come from reducing manual security operations, improved incident response time, and consolidating multiple endpoint security tools into one platform.

My experience with pricing, setup cost, and licensing is that the licensing model was relatively straightforward and cost-effective compared to my past solutions.

Before choosing SentinelOne Singularity Endpoint, I evaluated several endpoint security solutions including Microsoft Defender for Endpoint and CrowdStrike.

My advice to others looking into using SentinelOne Singularity Endpoint would be to clearly define your security goals and how SentinelOne Singularity Endpoint would fit into your existing security operations and deployment. I would rate this product a 9 out of 10.