Sign in Agent Mode
Categories
Your Saved List Become a Channel Partner Sell in AWS Marketplace Amazon Web Services Home Help

Reviews from AWS customer

18 AWS reviews

External reviews

308 reviews
from and

External reviews are not included in the AWS star rating for the product.


4-star reviews ( Show all reviews )

    Retail

Great cross-surface visibility with SentinelOne Singularity

  • August 28, 2023
  • Review provided by G2

What do you like best about the product?
In one place you have a great overview of all the malicious or suspicious activity across you endpoints and virtual machines/containers. The detection and prevention rules are doing great job and no major changes are requered.
What do you dislike about the product?
We had some issues with our MacBooks in the past, for example not all the DNS request are logged/monitored. Device management is working fine for external mass storage devices but not with built-in card readers on Macs as well.
What problems is the product solving and how is that benefiting you?
To protect our fleet from viruses, trojans, warms and etc. To have a good overview of the processes running locally and the network activity. To disable external devices and to prevent data leakages.


    Tim Hayes

Lightweight, ready to go out of the box, and simple to use

  • August 28, 2023
  • Review provided by PeerSpot

What is our primary use case?

We primarily use the solution as an antivirus and also as a network control with built-in policies regarding device control.

How has it helped my organization?

The product is a lighter client. Our previous solution ran heavy on the workstations and caused performance issues. This is lightweight and doesn't take up system resources.

What is most valuable?

You can use the solution right out of the box. It's ready to go with baseline policies and is good to use without any changes. It's only gotten better since we've added custom rules.

It's simple to use and intuitive. It gives you good visibility and shows what is going on.

The product works well with other SentinelOne solutions and third-party tools. It's pretty seamless. They make it pretty easy to integrate with other products and you can pull data pretty easily from the other solutions.

The solution's ability to ingest and correlate across our security solutions is excellent. It has allowed us to blend data from another product we own.

It's helped us consolidate our other security solutions.

The product provides network and asset visibility. The Ranger piece is probably one of the best items. We have other solutions for asset management, yet none is never 100%. With Ranger, we really get that visibility we need. Having Ranger built into one client and being easy to use has been perfect. It helps us prevent vulnerable devices from being compromised. We've discovered a few assets within our organization we were not managing fully and Ranger has helped us secure our environment just that little bit more.

There are fewer complaints from users when scans are running. The previous solution just used up so many resources. This product runs seamlessly in the background and we know it's running since we get triggers on alerts that are legitimate catches. SentinelOne does a good job at detecting. It's reduced our alerts by 25%.

The product has helped to free up our staff for other projects and tasks. It's freed around 50% of their time.

It's reduced our company's mean time to detect by 40% or more. It's also drastically improved the mean time to respond. We don't have to worry about false positives. We know when we get an alert that it's legitimate, and we need to act on it. That's improved by about 40% to 50%

What needs improvement?

The biggest thing for me in terms of improvements is the online console. There are frequent updates, and sometimes we'll get a little agitated getting signed in. However, on the product itself, I would not recommend any changes.

For how long have I used the solution?

I've used the solution for a little over a year.

What do I think about the stability of the solution?

The solution is very stable. Our old solution required babysitting to make sure everything was running correctly.

What do I think about the scalability of the solution?

Pretty much everybody in the company uses the solution. We have 1,300 deployed agents and ten administrators.

The solution is absolutely scalable.

How are customer service and support?

I have not had to use technical support.

Which solution did I use previously and why did I switch?

We previously used Sophos. The biggest reason for the switch to SentinelOne was the system resources that were used. Whenever it would kick in, I would get tickets related to machine performance.

How was the initial setup?

The console is on the cloud, however, the devices are on-premises. The initial setup was very straightforward. Overall, it was fairly quick. We had more trouble getting the older product uninstalled than SentinelOne installed. We did the implementation slowly based on the business requirements. We deployed it over the course of a month.

The company does a good job with training and keeping its documentation up to date.

It does not require much maintenance. Every now and then we might have one or two false positives.

What was our ROI?

We've seen a great ROI on the product. Obviously, we're still within our contract. That said, we've definitely seen a ROI. We've had a couple of incidents where something wouldn't have been detected previously.

What's my experience with pricing, setup cost, and licensing?

The solution is fairly priced for what you get.

What other advice do I have?

We're a customer and end-user.

They do an excellent job at remaining innovative - including with their detection engines and everything involved in their product. They are doing an excellent job compared to everyone else.

SentinelOne has not been around for many years - yet the product is ahead of its time.

With any solution, I'd advise doing a proof of concept first. After that, I would not shy away from fully deploying this solution.

I'd rate the solution eight out of ten. The only thing that would improve the product is reducing the online console updates.


    Jon C.

Great Single Point of glass for real time alerting and investigation

  • August 24, 2023
  • Review provided by G2

What do you like best about the product?
I love the timeline feature when performing an investigation
What do you dislike about the product?
In our Azure Virutal Desktop, the Extenion needs to be re-installed when the VMs are updated.
What problems is the product solving and how is that benefiting you?
Helps to give us real time alerts, so we can remediate and resolve an issue immediately. Also gives us amazing visbilty into our cloud enviorment where we have the most growth.


    Computer & Network Security

Best XDR solution I've used

  • August 23, 2023
  • Review provided by G2

What do you like best about the product?
I've been using SentinelOne Singularity XDR solution for the past 4 months, and I can already see the difference between this and our previous XDR solution. SentinelOne is much more robust and has been gathering and reporting us a lot of alerts on the endpoints. Extremely satisfied.
What do you dislike about the product?
Considering the fact that it alerts a lot more considerably, there is a requirement of fine tuning a lot of it. One can't just install this and let it do the work on its own. Also, it can be a little pricey for some organizations.
What problems is the product solving and how is that benefiting you?
A lot of it is based on the amount of endpoints that we have in our organization. We have about 10,000 employees all over the world, at in order to manage a large organization like this, SentineOne XDR has helped me and my team to maintain the security posture and work on the areas that require attention.


    Corey M.

SentinelOne is the best anti-malware out there

  • August 23, 2023
  • Review provided by G2

What do you like best about the product?
The ease of use is what I like a lot. The platform it self gives very little false postitive incident alerts and I have full cofidence that it's protecting the endpoints that we have it installed on.
What do you dislike about the product?
The network firewall took a while to set up and doesn't work how I would except it to. We blocked all network traffic when a rule was deleted, there was no warrning that it was going to happen.
What problems is the product solving and how is that benefiting you?
Protecting the endpoints is the biggest. There is little worry that our devices that have it installed will be compromised. We are confident that it will protect our devices.


    Manufacturing

Sentinel One Singularity

  • August 23, 2023
  • Review provided by G2

What do you like best about the product?
Great product - for our organization the prevention and detection mechanisms have enabled greated efficiencies in response and managing the attacks across endpoints.
What do you dislike about the product?
There nothing i dislike about Sentinel One platform.
What problems is the product solving and how is that benefiting you?
Prevention and Detection far outweigh response for obvious reasons - it has allowed us to focus on those areas.


    Jay L.

Very powerful end point protection feature sets including file roll back, threat hunting, etc...

  • August 23, 2023
  • Review provided by G2

What do you like best about the product?
We especially like this end-point protection that comes with the feature that we can roll back files even in case of a ransomware attack. This can be a lifesaver to get back files during a ransomware attack in case not covered by backup software. In addition, S1 has been a lightweight software with powerful protection against anything it scanned. The cloud portal also has a lot of info for reports, thread hunting, etc...
What do you dislike about the product?
There were quite a bit troubles with the VSS occupying 100% space instead of the default 10% on a few agent versions. Some of our VMs went out of space due to this issue and we had to apply manual fixes for each affected server. It took a while for this issue to be fixed. There was an agent software claim that would fix the issue, but in fact, it didn't. The VSS space issue was completely resolved after two or three software releases since the problematic one.
What problems is the product solving and how is that benefiting you?
SentineOne is a strong end-point protection that can provide day-to-day protections for end-user workstations and servers.
SentineOne provided us extra protection against ransomware attacks where some up-to-date data may be without backup.
SentineOne provided us a centralized management portal where we can find everything we need from managing end-points to visibility of threats, reports, etc...


    Corey Murillo

Helps reduce our threat detection time, response time, and improve our security

  • August 22, 2023
  • Review from a verified AWS customer

What is our primary use case?

We use SentinelOne Singularity Complete to manage incidents that come in. 

How has it helped my organization?

We wanted a solution that could help protect all of our endpoints. SentinelOne Singularity Complete is on all of our servers, and all of our endpoints, to protect against threats to the university.

SentinelOne Singularity Complete has aided our organization by offering a centralized platform for comprehensive visibility. It has enabled us to conveniently monitor all threats and manage our devices through the antivirus, all within a single interface.

SentinelOne Singularity Complete has certainly reduced the number of alerts over the past two years in my experience. We receive very few alerts now, which is excellent.

It has helped us free up our time to focus on other tasks. The solution is very helpful for configuring various exclusions. This ensures that the alerts we do receive, which are false positives, will not pester us in the future. This definitely provides us with more freedom and time to work on other matters.

Singularity Complete has helped reduce our MTTD and our MTTR, which is now just a few minutes after detection.

It has helped our organization save costs.

Singularity has certainly reduced the risk for our organization. With its installation across all endpoints and servers, we are confident that it will effectively protect us against malware or intrusions attempting to breach our environment.

What is most valuable?

I find the application inventory feature to be extremely useful. We utilize GreenMile for MAC management, and it's not as straightforward to locate the inventory of the applications installed on our computers. As a result, I have been using the application inventory feature more frequently to accurately identify the programs installed on each machine.

What needs improvement?

One aspect to consider is the SentinelOne network firewall they have in place. I believe they implemented it approximately a year ago. Initially, we faced challenges during the setup phase, which consumed a considerable amount of time. Although the SentinelOne firewall seems to offer potential benefits, in reality, it hasn't proven to be very helpful. While the idea behind it appears promising, I think SentinelOne should consider removing it.

For how long have I used the solution?

I have been using SentinelOne Singularity Complete for almost two years.

What do I think about the stability of the solution?

Singularity Complete is stable and I have not seen any downtime.

What do I think about the scalability of the solution?

We don't possess as many endpoints in comparison to, I suppose, other companies and universities. However, I believe that if we were to double them today, scaling Singularity Complete would become quite effortless.

How are customer service and support?

The times I've contacted customer support, it has been really good. There was only one instance when the support was very poor. However, after my concern was escalated to a supervisor or someone on the management team, my issue was resolved. So, I believe that was the only occurrence out of numerous customer interactions.

How would you rate customer service and support?

Positive

Which solution did I use previously and why did I switch?

We previously used ESET. 

What other advice do I have?

I would rate SentinelOne Singularity Complete a nine out of ten.

We currently only have a couple of integrations with Singularity Complete. I believe there is potential for more integration. As of now, we have only installed two apps that integrate with Singularity Complete.

No maintenance is required from our end.

SentinelOne is excellent as a strategic security partner. There have been numerous advancements, and since I began using the platform two years ago, they have undergone substantial changes. They have introduced many new features, and I have witnessed significant company growth over the past two years.

I suggest examining the various features available in SentinelOne's complete version. We have experienced numerous advantages with it. Often, when SentinelOne introduces new features, we don't notice them until they are fully developed. It's beneficial to explore some of the new features that are in beta. This allows us to experiment with them and assess how they can enhance our environment.

Which deployment model are you using for this solution?

Public Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Amazon Web Services (AWS)


    Eddie Drachenberg

Provides peace of mind and is good at ingesting data and correlating

  • August 22, 2023
  • Review provided by PeerSpot

What is our primary use case?

We need to provide a form of antivirus for our cybersecurity insurance. The new term now is EDR or endpoint detection response. I tested out several vendors including CrowdStrike, SentinelOne, and Cisco. SentinelOne definitely stood out. My use case is pretty for much protecting all of my end-user devices and all of my servers on-premise and in our virtual environment.

How has it helped my organization?

We were trying to solve for visibility and license management. We used to use other products, and licensing became an issue. We would have issues where clients would not really be connected all the time. They would just randomly lose connection. And that was with McAfee.

ESET was another one that we used in the past, and we just kept running the issues with the physical server. So having a cloud-managed EDR solution, the agent-based, cloud-managed solution, has worked very well for a few years now at multiple companies. It's the first thing I bought when I came to my new company.

What is most valuable?

I really like Ranger. I like the deep dive of Ranger in an incident section. Diving into each incident and being able to see complete visibility of when the action was taken against something that it deemed a threat is valuable. Using those incidents in Ranger is definitely up there on my list of favorite features. I have multiple locations all across the globe. Being able to separate my devices, per location, is super helpful.

It's good at ingesting data and correlating. It has zero issues with ingesting data with the agents installed. I've had no issues with that. Being able to go through and create exclusions for specific types of data, like SQL has been really tough in our environment. Being able to just go through and customize those exclusions and working with the support team is great. We also have Vigilance, which is another SOC that they offer. That's a fantastic service.

Everywhere I have an agent, it sees everything, and it does so when I deep dive into a threat or a proposed threat. It does pick out host names, and IP addresses, and it just gives you a really clear picture where you can read it.

I like that Ranger requires no new agents or hardware. Anytime you can keep it lightweight enough. If you add a function and you only pay for your yearly fee for an extra function without making changes in your environment, that's huge.

I love the reporting. The reporting definitely helps me see the entire network and find what open ports are out there. I can work with my network team to get those things closed, which is fantastic. I like the ease of looking at the graphs and the reports.

The solution has helped reduce our alerts. Instead of waiting on a monthly basis and then executing a plan, I'm able to keep up with it all throughout and day to day. That granular control has left me very impressed.

It gives me peace of mind. My staff isn't really using it. I know I have 24/7 eyes on it.

It has helped me reduce my mean time to detect. I would be lost without the tool. It definitely helps me figure things out really quickly. I can figure out the whole story very quickly.

It helps with my mean time to respond. It definitely helps with that. I get an alert in my email immediately, which lets me just know that something happened to my environment. That's something that I previously did not have in my old tool set.

What needs improvement?

I do want to see Vigilance reach out with that Identity. I don't have Identity, however, it's a very good tool. There is another tool that I use called Purple Knight that does very similar things. I'd like to see adding Vigilance to the visibility of Identity.

One thing I don't like is the exportable report. They're not as useful as I'd hoped they would be. I always feel like I have to finagle them a little bit before I can present them to the executive board. The reporting needs to be beefed up a bit more. Everything feels a little lacking. They're trying to keep it simple, yet it is a little oversimplified.

I really wish it could be an app on my phone. If I could open up an app on my phone and get all the alerts or look at my environment and see the health real quick, that would be ideal. It doesn't have to be a full feature.

I'd like the ability to have text alerts, for example, if something gets quarantined.

The website, if you are trying to figure out what all the products are, it's kind of busy. I don't know what all the products are. The marketing is a little tough to follow.

For how long have I used the solution?

I've been using the solution for three years.

What do I think about the stability of the solution?

I haven't experienced any stability issues.

What do I think about the scalability of the solution?

The solution is extremely scalable. It's super easy to push out to thousands of clients if you really need to. I haven't had any issues. It scales very well.

How are customer service and support?

Usually, technical support is very good. They are very knowledgeable. It's usually 24 hours for a response. I've had a couple of phone conversations with them. Right now, we're going basically through email. They give me a ton of information. They're open to working with my third-party MSP. Right now, the MSP brought up a concern about a very specific function that needs a little bit more tending to in the exclusion arena.

How would you rate customer service and support?

Positive

Which solution did I use previously and why did I switch?

We had Defender at this company before.

How was the initial setup?

I was involved in the initial setup.

The deployment is very straightforward. It's super easy to just download your agent, and you get your site token, you install, and you push it out. We use the PDQ at my last company. Here, we use SCCM. We push it out with the MSI, with the site token pre-installed. I see it on my dashboard. It's easy.

My last deployment was handled by myself.

The solution does not require any maintenance anymore. It used to be kind of a headache to go through and have to update the agent. And just to remember to do it. Now I get the email. It tells me there's a new agent out there. I go read up on what the changes are, which is great. Then I go in there and set up the auto-install on the agents, and it just hits them on the schedule. You only have to really pay attention to it once in a blue moon when a new agent is installed or there's a general release.

What about the implementation team?

I installed the solution myself.

What's my experience with pricing, setup cost, and licensing?

I can pay, for my environment, between $30,000 and $40,000 a year, and that's a pretty good deal.

What other advice do I have?

I'm a customer and end-user.

I haven't really done any third-party tools. I've looked into their Identity tool which is one of the newer offerings that they have. It's a very nice offering. It is rather expensive. That said, it is very nice to be able to see Active Directory all in one pane of glass. Honestly, the hardest thing about my job as a security professional is having all these different tools so the more I can see everything in one area, the better it is.

The quality and maturity are important. The company is relatively new in the space, however, they are pretty mature in the market and pretty well-respected.

SentinelOne is a great strategic partner. I can't see myself doing security without them at this point. They are one of the backbones of my security platform. They were the first pieces even before I bought Cisco Duo or Meraki.

I'm excited to see where this will be in the next ten years. I can just see this platform just going crazy. I would love to see maybe a little bit more focus. We have to deal with a lot of sensitive equipment that run specific jobs and I love how SentinelOne, and specifically Ranger, is very passive in its ability. It complements our OT. I would love to see some way of getting away from the super expensive platforms of Tenable and bringing in some of these functions that Tenable offers from a scanning platform fully into SentinelOne in the future.

I'd rate the solution nine out of ten.

This is a best-in-breed solution. If you're looking at anything in comparison, do your due diligence, do proof of concept between whatever companies you're looking into. However, SentinelOne is the best-in-breed.


    User:753949

Saves us time and cost, and is easy to upgrade

  • August 21, 2023
  • Review provided by PeerSpot

What is our primary use case?

We utilize SentinelOne Singularity for endpoint malware protection and to gain visibility into threats across the network.

How has it helped my organization?

SentinelOne Singularity has the potential to ingest and correlate data across our security solutions.

Ranger provides network and asset visibility.

Ranger saves us time by not having to make changes to our hardware and systems.

Ranger helps prevent vulnerable devices from being compromised.

SentinelOne Singularity assisted our organization by saving deployment time and decreasing the volume of support calls.

Singularity helps reduce the number of alerts.

Singularity has helped our staff free up around 15 minutes of their time to focus on other projects.

It has reduced our MTTD.

It has helped our organization save costs through time savings.

What is most valuable?

The most valuable features include the agent installation and update processes.

What needs improvement?

The UI appears to be flat, and I wish to have the ability to customize it with features and buttons that are tailored to our needs.

For how long have I used the solution?

I have been using SentinelOne Singularity Complete for seven months.

What do I think about the stability of the solution?

SentinelOne Singularity is stable. We have not experienced any crashes or downtime.

What do I think about the scalability of the solution?

SentinelOne Singularity scaled easily in terms of deployment. We haven't experienced any performance issues, whether it's installed on a higher-end machine or a low-end machine. SentinelOne Singularity has been excellent.

Which solution did I use previously and why did I switch?

We faced issues with our previous endpoint solution, Panda Adaptive Defense 360. SentinelOne Singularity seemed to be a more reliable and easier-to-manage alternative. Panda Adaptive Defense 360 caused significant downtime during deployments and updates.

How was the initial setup?

The initial setup was straightforward. The deployment required three people.

What about the implementation team?

The implementation was completed in-house.

Which other solutions did I evaluate?

We assessed McAfee, Trend Micro, and BlackBerry. We opted for SentinelOne Singularity due to its smaller footprint and more efficient software that uses fewer resources.

What other advice do I have?

I rate SentinelOne Singularity a nine out of ten.

SentinelOne Singularity is a mature product.

Maintenance is necessary only when we are periodically carrying out updates.

Having a vendor like SentinelOne is crucial for a solid security strategy, as we aim for a product that seamlessly caters to both the IT department and end users. We intend to avoid exacerbating issues more than resolving them. Therefore, I believe SentinelOne is a suitable solution for us – easy to deploy and maintain on a daily basis.

I suggest trying out SentinelOne Singularity and comparing it to more traditional security vendors. SentinelOne Singularity offers a slightly distinct approach, but it's an effective method.