Endpoint protection has improved threat response and incident rollback across thousands of devices
What is our primary use case?
My use cases for SentinelOne Singularity Complete are mainly for endpoint security to detect, prevent, and respond to cyber threats in real time. SentinelOne Singularity Complete serves as the first use case for endpoint security.
Our organization does not have the Ranger functionality because our customer does not require it.
We have integrated SentinelOne Singularity Complete with Shuffle SOAR technology, which is a most powerful tool.
Our organization is an MSSP provider with 10+ customers for whom we are providing security. We have 8,000 endpoints installed for our customers, and we are a 24/7 team providing security to our clients.
We have applied the protect policy and take basic analysis, which takes a couple of minutes before we raise the alert.
Regarding Purple AI, we are using it to identify the IOC. We have limited access to Purple AI, but we are using it for threat hunting purposes to find the IOCs.
What is most valuable?
What I like the most about SentinelOne Singularity Complete is the rollback capability for Windows systems. The TAC team and VSS rollback are the two features I appreciate most about SentinelOne Singularity Complete.
The response of the TAC team is very good. If SentinelOne Singularity Complete did not have a TAC team or support team, I would say it would be very lacking. When we get stuck anywhere, whether in any admin task or any threat hunting or investigation path, they are very helpful because there is a human voice on the other side helping us.
What needs improvement?
What I dislike about SentinelOne Singularity Complete is the high number of false positive alerts we get because our client sends us mail within one week stating that the CPU is highly utilized and resource consumption is high.
Regarding data privacy and security when using Purple AI, I can say that security-wise, it is good, though anyone can exploit that one.
For how long have I used the solution?
I have been using SentinelOne Singularity Complete for two years.
What do I think about the stability of the solution?
Stability-wise, SentinelOne Singularity Complete is very good. It runs continuously, and if our endpoint is online, it will protect our endpoint 100 percent.
What do I think about the scalability of the solution?
Regarding scalability, I heard that one of our competitor organizations deploys 15,000-plus endpoints for their customers. Scalability-wise, SentinelOne Singularity Complete is very good in that 15,000-plus endpoints are managed on one management console, which is double of our organization's deployment.
How are customer service and support?
I have contacted the technical support or customer support, and this is the most significant reason we are using SentinelOne Singularity Complete. They are very helpful because there is a human voice on the other side helping us.
If you compare with CrowdStrike, our organization has shifted to SentinelOne Singularity Complete only because of that TAC team or support team.
Which solution did I use previously and why did I switch?
We are using CrowdStrike, and in CrowdStrike, we are using Charlotte AI. If we raise a ticket on the community portal, within one or two hours, we get a reply from the team, and they are very helpful and can also come to the call. However, with CrowdStrike, I do not prefer it from my perspective as compared to SentinelOne Singularity Complete.
How was the initial setup?
For the initial deployment of SentinelOne Singularity Complete, I can say that it is very easy. We just need to create one tenant for the SentinelOne Singularity Complete platform. SentinelOne Singularity Complete setup is very easy.
What about the implementation team?
Maintenance is not actually required from my end because we are an MSSP provider, so no maintenance is necessary.
What was our ROI?
I can say that when an alert comes, we already have the protect policy and protect mode. After applying the protect policy, everything is taken care of by SentinelOne Singularity Complete.
What's my experience with pricing, setup cost, and licensing?
I do not have knowledge about the pricing for SentinelOne Singularity Complete because our sales team handles that. SentinelOne Singularity Complete is very valuable to me.
Which other solutions did I evaluate?
I would give SentinelOne Singularity Complete a rating of 10 out of 10 because you can compare it with CrowdStrike, and I can say that SentinelOne Singularity Complete is top tier.
What other advice do I have?
We are managing 7,000 to 8,000 endpoints for clients, and the setup is very easy. I have given SentinelOne Singularity Complete an overall review rating of 10 out of 10.
Which deployment model are you using for this solution?
On-premises
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Log analysis has become faster and more accurate, enabling precise threat detection
What is our primary use case?
My use case for the solution is scientific research involving legacy software on older OS versions for complex overflows.
What is most valuable?
The best features of Singularity Platform are AI-powered autonomous threat detection and extended detection and response, along with cloud workload protection.
Regarding the real-time personalization features, I find that it helps me in detection. It assists me to find detections and furthermore evaluate the detections. It helps me a lot because it is completely beneficial, showing fewer alerts than competitors. In other competitors, alerts are excessive, but here the alerts are fewer rather than too many. It is much more useful for me compared to other products.
The real-time monitoring capabilities are much faster. I would say that it is significantly faster in decision making. In my previous experience with other log analysis tools, whether paid or free, the processing time was excessive, but here the processing time is very minimal and I get what I need very quickly.
What needs improvement?
Regarding areas for improvement in Singularity Platform, I would say the data security posture and control over sensitive information could be enhanced. If the control were more robust, then it would be better. For instance, when I analyze a log using Singularity Platform, the logs I see are clear, but if they were more descriptive, it would be much better. For example, when I find a log suspicious, if it automatically points out that a particular point in the log at a specific timing or frame is looking malicious, it would be easier for me. I would not have to go through many logs to find this information.
For how long have I used the solution?
I have been using Singularity Platform, which refers to SentinelOne, for a few months, approximately five to six months.
What do I think about the stability of the solution?
Regarding stability, I have not encountered any downtime. Depending on my system where I use it, I have seen that even with less RAM, it does not lag. In other SIEM tools, they give lags and glitches, but I have not found any bugs. It is working well.
For stability, I would rate it a nine out of ten.
What do I think about the scalability of the solution?
Singularity Platform is scalable. On scalability, I would rate it between eight and 8.5.
How are customer service and support?
For technical support, I have not needed any technical support until now, so I cannot answer clearly. However, I hope it will be nice because if the application is working so well, why would I need technical support? I think if I need technical support, it will be good.
How would you rate customer service and support?
Which solution did I use previously and why did I switch?
I have tested Splunk Enterprise edition and the paid editions, and I have also tested Wazuh. I have tried some paid tools, but I have found that Singularity Platform is far better than others. As a log analyst and SOC analyst, I find it better than others.
How was the initial setup?
The deployment is easier. When I compare it with other SIEM tools, it is much easier. There are not too many settings I have to adjust. For example, with Splunk, it takes too many settings to set up on AWS, but here it does not require too many settings and it does its work well.
What about the implementation team?
Initially, we used two people, and then we expanded to three people using it.
What was our ROI?
If I estimate how much time it has saved me, I would say it has saved almost 30 to 40 percent of time compared to other tools.
What's my experience with pricing, setup cost, and licensing?
In terms of pricing, I will say that it is worth it for me. Living in India, it is natural for us to prefer things a little cheaper, but whatever the price is, it is worth it. However, as a SIEM tool, if it were priced less, many more people could explore it.
What other advice do I have?
Regarding the fraud detection feature, I did not use it until now, but I have explored the features of fraud detection.
In fraud detection, the logs which are generated and captured are much clearer, meaning clarity is very good in respect to other platforms. I found that the clarity is very good. It also minimizes false positives, which is critical in some situations. Furthermore, the method is top-performing with a wide range of data sets and evaluation matrices.
Maintenance is necessary with Singularity Platform, as artificial intelligence is implemented, so it is 100 percent needed. It depends on the user and the application totally, but the maintenance is needed.
My feedback is that I will surely recommend it. I have already recommended it to many of my colleagues and I will continue to do so in the future. If it is giving us benefits, then why would I not recommend it? I would give a rating of 10 out of 10 for recommendation.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)
S1: Easy to Use and Great at Catching Things
What do you like best about the product?
S1 has been pretty decent at catching things and it is pretty easy to use. I like the fact that I get plenty of details and that we get quick alerts.
What do you dislike about the product?
It catches normal IT admin tools still no matter what we whitelist. It gets annoying but we continue to live and ignore the alert. It is predictable so we know it is false.
What problems is the product solving and how is that benefiting you?
It is quick and reliable and not calling a ton of false positives or missing legit threats keeping is safe and secure in today's dangerous environment.
Strong - Reliable Endpoint Protection with Automation
What do you like best about the product?
The best thing is how quickly it detects and blocks the threats without any manual work , agent is very light and doesn't slow down the system and it has very reliable real time threat monitoring. Another great part is Storyline, which shows the chain of events in a simple way
What do you dislike about the product?
Just a little complicated if you are new to the platform and some advanced options are hidden for the extra licensing which will increase the cost , and no readymade templates , customization is not easy
What problems is the product solving and how is that benefiting you?
helps us detect threats early and responds automatically which saves a lot of time and energy and also isolates the infected device and kill any harmful processes and rolls back the changes as well, which will reduce the impact of any attack
Innovative Features That Set Sentinel One Apart
What do you like best about the product?
Sentinel One has made significant progress and introduced a range of new features, setting itself apart from other solutions in the EDR space. Customer support has been great throughout the deployment process and after implementation. The ease of use can use some improvement as the UI can be convoluted making everyday use a bit complicated.
What do you dislike about the product?
Sentinel One's user interface is quite complicated and not very intuitive. Additionally, the agent often leads to noticeable performance problems on endpoints and tends to produce a large number of false positives.
What problems is the product solving and how is that benefiting you?
Endpoint detection, combined with their managed detection and response service, has been beneficial for us. The S1 team handles and triages the large volume of alerts generated by the tool, which enables us to concentrate on other projects and our daily responsibilities.
Outstanding Security Solution with Seamless Compliance
What do you like best about the product?
SentinelOne was the only player in the market willing to sign a business associate agreement and ensure HIPAA compliance. I also appreciate the really great price they offer considering these features. SentinelOne Singularity was willing to work with us despite our smaller size and heightened compliance requirements, whereas some other companies wouldn't even quote us given our limited number of users. I found the initial setup to be very easy.
What do you dislike about the product?
None, we love it.
What problems is the product solving and how is that benefiting you?
I use SentinelOne Singularity to fulfill compliance requirements, protect endpoints and our network. It offers great pricing and signed a business associate agreement. They were one of the only vendors in the space that would sign a BAA and for HIPAA compliance, and one of the only vendors willing to quote us despite our small size.
Effortless to Use with an Informative, Well-Designed Dashboard
What do you like best about the product?
Easy to use, well-designed, and informative dashboard.
What do you dislike about the product?
I don't have any particular dislikes, though I do think certain areas could definitely be improved.
What problems is the product solving and how is that benefiting you?
The product has done an excellent job of securing all our endpoints, delivering impressive results.
Autonomous AI Response and Ransomware Rollback Are Game-Changers
What do you like best about the product?
Autonomous ai response , ransomeare rollback storyline
What do you dislike about the product?
There’s really nothing to dislike about this product, although I do find the pricing to be a bit on the higher side.
What problems is the product solving and how is that benefiting you?
This platform offers a single dashboard to manage all endpoints and servers, making it easy to monitor everything in one place. Its storyline analysis feature is helpful, and I haven't experienced any system lag. The tool also consolidates various functions and includes ransomware rollback, which adds an extra layer of security.
