I feel secure with SentinelOne
What do you like best about the product?
I love being able to sleep at night knowing that SentinelOne has my network and endpoints secured.
What do you dislike about the product?
There are a few False-Positives that I've had troubles figuring out - and there are a few Kiosks that aren't running properly since we installed.
What problems is the product solving and how is that benefiting you?
It stops the RANSOMWARE and other viruses that our previous Anti-virus was not able to detect nor stop.
SentinelOne Singularity is an AI-driven EDR/XDR platform that detects and responds to threats in real time.
What is our primary use case?
Our main use cases are endpoint protection, EDR, and automated threat response for users and servers. We also use it for ransomware protection, threat hunting, and incident investigations. One thing that helped us a lot is the single-agent approach, because we don’t need multiple tools or agents installed on every machine.
It reduces complexity and makes deployment and updates much easier across different entities. The automated isolation of compromised endpoints has also saved a lot of manual effort. Overall, we use it to improve detection, response, and visibility on all endpoints with minimum overhead.
How has it helped my organization?
SentinelOne has had a very positive impact on our security posture. We see threats being stopped in real time without waiting for manual action. This has reduced the stress on our team and lowered the number of incidents we need to handle directly.
The automatic isolation and remediation really helped us shorten response time. The ransomware rollback feature also gives peace of mind, especially in critical environments.
We now have much better visibility into what actually happened during an attack, which helps with investigations and closing gaps. Overall, it has saved us time and improved our confidence against modern threats.
What is most valuable?
The best feature for us is the autonomous response. We don’t have to wait for a security analyst—SentinelOne isolates the device, kills the malicious process, and stops lateral movement automatically. The ransomware rollback capability is also something we really value because it gives confidence that even if something slips through, we can undo the damage.
The visibility and forensic details are excellent; it actually tells a story of what happened instead of just showing alerts. This helps our investigations and audits a lot.
Performance-wise, the agent is lightweight, and deployment was very smooth across different entities. Overall, the combination of prevention + response + forensics in one platform has been the biggest advantage for us.
What needs improvement?
SentinelOne works very well overall, but there are a few areas that could improve. The reporting and dashboards could be more customizable, especially for audit and compliance needs. Sometimes the UI feels a bit complex when you’re trying to drill down quickly.
More built-in analytics and ready-made reports would help a lot. Also, alert tuning could be simpler, because in some cases we still get false positives that require manual review.
It would also be great to see more visibility into identity-related attacks in future releases. Overall, nothing critical, but these improvements would make the platform even stronger.
For how long have I used the solution?
We have been using SentinelOne Singularity Complete for roughly four years in our production environment.
What do I think about the stability of the solution?
It is a very stable solution.
What do I think about the scalability of the solution?
It is a scalable solution. Everyone is using this solution in our organization, with almost 2000 users. It's mandatory for us to install this EDR solution on all the inputs.
How are customer service and support?
Customer support has been generally good for us, and most questions are handled properly. The platform is stable, so we don’t need support very often. For normal issues, the response time is fine.
However, for complex cases—especially agent-related problems—we sometimes need remote assistance, and that level of support is not included in the basic subscription. In those situations, the resolution can take longer. Overall, support is helpful but could improve in advanced troubleshooting.
How would you rate customer service and support?
Which solution did I use previously and why did I switch?
Yes, we previously used Trend Micro. We switched to SentinelOne because we wanted stronger detection capabilities, faster automated response, and better visibility into advanced threats. SentinelOne’s AI-based approach and single-agent design were important factors for us, along with the ability to automatically isolate and remediate incidents without relying completely on manual action.
How was the initial setup?
The initial setup was straightforward. We use the SaaS model, cloud-based solution, and console on cloud, so it's very straightforward. I rate the setup a 4.8 out of five, and I would give it a five if they added application control.
What was our ROI?
Yes, we have seen clear ROI after moving to SentinelOne. The biggest saving has been the reduction in manual investigation and remediation time. Since most incidents are handled automatically, our team spends less time reacting and more time on proactive work.
We also avoided several potential ransomware impacts, which in itself protects us from large financial and operational losses. The single agent and tool consolidation also reduced the need for multiple products and maintenance efforts.
Overall, the time saved, lower incident impact, and improved security confidence clearly justified the investment.
What's my experience with pricing, setup cost, and licensing?
Pricing is okay and costs almost the same as Trend Micro. We have a partnership with SentinelOne, and it costs about $30 to $35 per user per year.
Which other solutions did I evaluate?
We also evaluated Malwarebytes and CrowdStrike before choosing SentinelOne. Malwarebytes was simple to use but it didn’t provide the same level of autonomous response or forensic depth that we needed. CrowdStrike was strong in detection, but overall SentinelOne offered better rollback, a single-agent approach, and more automation.
In the end, SentinelOne gave us a more complete platform for prevention, response, and investigation rather than just detection. The balance of features, automation, and usability was the main reason we selected it.
What other advice do I have?
I rate this solution a ten out of ten. SentinelOne is the next-generation EDR solution. Once it is installed, no action is required from the end user. It's machine learning and AI integrated, and 95% of threats are blocked. It's a great product.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)
Great Security Product
What do you like best about the product?
The confidence that SentinelOne gives me that my customers' endpoints are protected. The ease of configuration and deployment. The fact that we seldom need support. The level of information that is provided if there is a detection.
What do you dislike about the product?
From time to time we have had issues uninstalling the SentinelOne agent. On (very) few occasions, the agent has not uninstalled properly and then it's quite a hassle to remove if that happens.
What problems is the product solving and how is that benefiting you?
SentinelOne has helped our company better and more efficiently protect our customers' critical systems. Also, it has given us better visibility into security vulnerabilities, threats, and events across our customers' sites.
One of the best realtime EDR
What do you like best about the product?
The automated real time detection and blocking of malicious files and commands. It helps to do the deep analysis of the logs and helps to get a detailed traffic analysis.
What do you dislike about the product?
There is nothing as such now as it is a great EDR.
What problems is the product solving and how is that benefiting you?
It helps to do a deep analysis of the logs in the endpoints and helps to find out the detailed activity happening in the edr. It detects threats in a dynamic and static way and helpts to mitigate them. It helps to personalize the tool according to the client needs.
Powerful EDR security solution
What do you like best about the product?
Sentinelone is very powerful solution for endpoint protection and response. It provides good features for managing the endpoints and threat detection/protection. Cloud based interface is good and interactive, also the installation agents are lightweight which didn't consume large space on hosts.
What do you dislike about the product?
As like all EDRs users can face false positive issue but it can be minimised with proper fine tuning the alerts as per environment. Also reporting feature can be improved in Sentinelone.
What problems is the product solving and how is that benefiting you?
Sentinelone provides lots of benefits as it will protect organization endpoints from various threats. Dashboard is attractive and easy to understand for users. Multiple customers can be manageable on the one console. Not much problems observed with Sentinelone till now.
SentinelOne
What do you like best about the product?
The part I prefer is the Artificial Intelligence of the application
What do you dislike about the product?
I received a lot of false positive threat
What problems is the product solving and how is that benefiting you?
Protecting the computers in our network
Recommendations to others considering the product:
I really feel safe knowing SentinelOne is protecting our network
Best Security Software
What do you like best about the product?
Sentinel one is considered as the best endpoint security software for enterprises and it simplifies every organization's security solutions like an endpoint anti-virus and anti-malware.Very effective software. Helps to resolve system threats and attacks. Frequent scan in the background to detect virus.
What do you dislike about the product?
There is nothing I dislike about SentinelOne so far. Works as expected for the enterprise requirements. More and More updates are expected from SentinelOne to protect any threats in the future
What problems is the product solving and how is that benefiting you?
SentinelOne keeps my enterprise environment and system secure by providing complete end-to-end security. It provides the status of the system(Number of processes, Applications, Services which is running in the system). Protects the system from any external threats.
1)Advanced threat protection
2)Protect from vulnerabilities.
3)Roll-back features
4)Identifying Incidents
Recommendations to others considering the product:
Highly recommended as SentinelOne keeps the enterprise infrastructure safe and secure. Supports the latest Windows version as well and does threat hunting and provides high visibility
Excellent Endpoint Solution!
What do you like best about the product?
Great coverage for all the operating systems that I need for our endpoints and servers (Windows, Mac, and Linux). The solution works well, detects and blocks malware infection attempts promptly.
What do you dislike about the product?
I want to be able to use one solution to cover the mobile devices as well (Android, and iPhone), and also include enterprise features such as MDM and policy manager for my endpoints using a single solution.
What problems is the product solving and how is that benefiting you?
I'm protecting the endpoints and servers in my organization against malware infection attempts, such as Ransomware, Spyware, Rootkits, and information stealers.
AIML based Endpoint Protection leader
What do you like best about the product?
Sentinel one is the best endpoint protection solution as it doesn't depend on any signatures to take action and prevent the attacks, and it can prevent the attacks in offline mode as well. Internet connectivity is not necessary for this solution. Its lightweight agent doesn't consume the machine resources like other Endpoint solutions. Its completely
What do you dislike about the product?
I won't say it is disliked, but it should have few traditional features like USB blocking, HDD encryption,
What problems is the product solving and how is that benefiting you?
Since now most of the users are working from home, so it's not possible to connect the users to the office network and update the Threat signatures. So Sentinel one is the savior here as it doesn't rely on any signatures, and it can prevent attacks on advanced AIML based.
Excellent EDR and Threat Manager
What do you like best about the product?
Simple to use and automate security controls
What do you dislike about the product?
Not able to control how much time a USB device, if blocked, can be allowed
What problems is the product solving and how is that benefiting you?
The time required to manage and solve an incident
