SentinelOne Singularity Cloud Security - AI Powered CNAPP

SentinelOne Singularity Cloud Security primary use cases are centered on protecting cloud-native infrastructure, applications, workloads, and data. It combines multiple cloud security capabilities into a unified cloud-native application platform. Multiple use cases include Cloud Security Posture Management, Cloud Workload Protection, Containers and Kubernetes security, Cloud Infrastructure Entitlement Management, Data Security Posture Management, and Cloud Threat Detection and Response.

In my day-to-day work, I use SentinelOne Singularity Cloud Security primarily to monitor cloud posture and workload security. A recent example was when it identified a high-risk IAM misconfiguration in our cloud environment. I investigated the findings and remediated the exposure. I also remediated the permission before it could be misused. The platform's unified visibility and prioritized risk scoring helped me resolve the issue quickly and strengthen our cloud security posture.

Standout features include Cloud Security Posture Management, Cloud Workload Protections, Attack Path Analysis, Cloud Security, Data Security, and AI-powered investigation in which I use Purple AI to automate investigation, correlate cloud, endpoint, and identity telemetry, summarize incidents, and reduce alerts. It also has a unified security platform that brings together cloud, endpoint, and identity security in a single console with a shared data model. This simplifies operations and enables faster incident response.

The feature that has made the biggest difference is Cloud Security Posture Management. In my day-to-day work, it continuously monitors our cloud environment for security misconfigurations, such as overly permissive IAM roles, publicly exposed storage buckets, or missing security controls. Instead of manually reviewing cloud configurations, I receive prioritized alerts that highlight the most critical risks in the management console, and this helps me focus on remediating issues that could have the greatest security impact. I reduce manual effort and improve our overall cloud security posture.

SentinelOne Singularity Cloud Security has improved our organization's cloud security by giving us centralized visibility across cloud assets, workloads, identities, and configurations. It helps us detect misconfigurations, prioritize critical risks, and monitor threats in real time. As a result, I have reduced manual security reviews, fixed threats faster, and strengthened our overall cloud security posture. The unified platform also simplifies security operations by consolidating multiple cloud security capabilities into a single console, improving both efficiency and compliance.

SentinelOne Singularity Cloud Security is a strong platform, but there are a few areas where it could improve. I would like to see more customizable dashboards and reporting so different teams can focus on the metrics most relevant to them. The initial setup and policy tuning could also be simplified, especially for organizations with complex multi-cloud environments. Additionally, expanding integrations with third-party security and DevOps tools would make it even easier to fit into existing workflows.

A few additional improvements would further enhance the platform. The user interface could be made more intuitive, especially for first-time users, by simplifying navigation and making key findings easier to locate. The documentation is comprehensive, but more step-by-step implementation guides, best practices, and real-world deployment examples would help administrators get up to speed more quickly. From a support perspective, faster response times for complex issues and a larger library of troubleshooting articles and knowledge base content would improve the overall customer experience.

I have been working in my current field for the last six years.

I have not experienced stability issues.

I have not experienced scalability issues.

I have not experienced issues with customer service.

The initial setup and policy tuning could be simplified, especially for organizations with complex multi-cloud environments.

I would start with a clear understanding of your cloud environments and security goals before deployment. Make sure cloud accounts are properly integrated, and spend time tuning policies and risk thresholds during the initial rollout to reduce unnecessary alerts. It is important to involve both your cloud and security teams, so remediation workflows are well-defined. I rate this product an 8 out of 10.

The main use cases for SentinelOne Singularity Cloud Security are protecting workloads and applications by improving threat detection, visibility, and response. We rely on it most for the monitoring of cloud environments, identifying security risks, detecting suspicious activity, and helping our security team respond quickly to potential threats.

The best features of SentinelOne Singularity Cloud Security are its threat detection capabilities, real-time visibility across cloud environments, and automated response features. The ability to identify suspicious activity, quickly provide context around risk, and help security teams to investigate and remediate threats efficiently stand out the most. The centralized visibility and integrations with the broader security operations also make it easier to manage cloud security from a single platform.

The integration with our broader security operations helped to streamline workflows by bringing cloud security insights into our existing security tools and processes. This integration reduces the need to manually correlate data from multiple sources, speeds up investigations, and gives our team better context when responding to alerts. This saves time during incident triage and helps security analysts prioritize and address threats more efficiently.

SentinelOne Singularity Cloud Security has improved our organization's security visibility and response capability by giving our team better insights into cloud risk and suspicious activity. A major benefit has been faster threat investigations and response. Our security teams can quickly understand the context of alerts and take action. It has also helped reduce manual efforts, improve consistency in security operations, and strengthen our overall cloud security posture.

Since using SentinelOne Singularity Cloud Security, we have seen improvements in how quickly our team can identify, investigate, and respond to potential threats. Better visibility and automated security insights have helped reduce manual investigation time and improve the efficiency of our response process. While we do not have specific metrics to share, the overall impact has been faster triage, better prioritization of risk, and a more proactive approach to cloud security.

Its AI capability provides valuable support for governance and security by helping teams to identify risk, prioritize threats, and make faster security decisions. The AI-driven insights improve visibility across cloud environments and help to reduce the manual efforts required for monitoring and investigations.

Overall, the AI capability is accurate and reliable. The AI-generated insights generally help to prioritize real risks, reduce alert fatigue, and provide useful context for investigations.

SentinelOne Singularity Cloud Security is a strong platform, but there are areas where it could be improved. Adding more flexible customization options for alerts, more advanced reporting and dashboards, and deeper integration with a wider range of cloud and security tools would make the platform even more valuable.

While there is room for improvement in areas such as customization, reporting, and integration, it has been a reliable solution that has positively impacted our cloud security.

I have been working for the last five years.

My advice would be to clearly understand your cloud security requirements and take the time to plan the deployment and integration with your existing security tools. Make use of the platform's automation, threat detection, and visibility features to get the most value. I rate this solution an eight out of ten.

Our primary use case for SentinelOne Singularity Cloud Security is protecting cloud workloads and servers by continuously monitoring for threat detection, malicious activity, and providing automated response capabilities. We use it to provide visibility across our cloud environment, strengthen our security posture, and reduce the time required to investigate and remediate security incidents.

The best features of SentinelOne Singularity Cloud Security are its real-time threat detection, behavioral AI-based analytics, automated response capabilities, and comprehensive visibility across cloud workloads. The centralized management console makes it easier to investigate alerts, while the detailed telemetry helps speed up incident analysis and remediation. Overall, it provides good visibility with minimal operational work.

SentinelOne Singularity Cloud Security has improved our organization's overall security posture by providing better visibility into cloud workloads and faster threat detection. It has reduced the time needed to investigate security alerts, enabled quicker incident response, and helped our security team manage cloud risk more efficiently. Overall, it has increased confidence in the security of our cloud environment while reducing manual effort.

SentinelOne Singularity Cloud Security could be improved by providing more customizable reporting and dashboards, reducing false positives in certain scenarios, and offering deeper investigation with third-party security and IT management tools. More built-in guidance for alert investigation and remediation would also help teams resolve incidents more efficiently, especially those with smaller security teams.

Overall, SentinelOne Singularity Cloud Security is a strong security platform, but continued improvement in user experience, reporting flexibility, and integration capabilities would make it even more effective. Enhancing documentation, providing more advanced customization options, and adding more automation around routine security tasks would help organizations get more value from the platform.

I have been using SentinelOne Singularity Cloud Security for approximately one year.

We previously used a different security solution and switched to SentinelOne Singularity Cloud Security because we were looking for stronger behavior-based threat detection, faster response capabilities, better visibility, and a more centralized management experience. SentinelOne Singularity Cloud Security's AI-driven approach and automated response features provide better protection against unknown threats compared to our previous solution.

We have seen a positive return on investment, mainly through improved efficiencies in our security operations. SentinelOne Singularity Cloud Security has helped reduce the time required for threat investigation and response by providing automated detection, detailed context, and centralized visibility. While we do not track exact financial savings, the platform has helped reduce the workload involved in monitoring and analyzing security events, allowing the team to spend more time on high-value security activities.

Our experience with SentinelOne Singularity Cloud Security pricing, setup cost, and licensing has been generally positive. The licensing model is straightforward, and the value provided by the platform's threat detection, visibility, and automated response capabilities justifies the investment. The initial setup requires proper planning and configuration to align policies with the environment, but the deployment process is manageable. Clear documentation and support resources help reduce implementation challenges.

We evaluated other security solutions before choosing SentinelOne Singularity Cloud Security, including alternatives such as Microsoft Defender for Cloud, CrowdStrike Falcon, and other cloud security platforms. We selected SentinelOne Singularity Cloud Security because of its strong AI-driven detection, behavioral analysis capabilities, automated response features, and centralized visibility, which aligned well with our security requirements.

My advice to others looking into using SentinelOne Singularity Cloud Security would be to clearly define your security requirements and evaluate how SentinelOne Singularity Cloud Security fits into your existing environment before deployment. Take advantage of AI-based protection, automation features, and centralized visibility, but also spend time on proper configuration, policy tuning, and integration with your existing security tools. Organizations should also plan for user training and regular review of alerts and reports to get maximum value from the platform. I would rate this product an 8 out of 10.

We have been working with SentinelOne Singularity Cloud Security for four years.

The runtime protection of SentinelOne Singularity Cloud Security compares favorably to other solutions I have used in the past. The concept is not signature-based antivirus. Most traditional antiviruses work with a signature base, having a database of viruses or threats updated daily. However, next-generation solutions such as SentinelOne Singularity Cloud Security and Sophos use a non-signature-based approach that is dependent on AI and behavior analysis. It is a behavioral EDR or MDR that supports XDR technology. XDR's concept is to exchange data between other components through the network, and it is excellent because SentinelOne Singularity Cloud Security and Sophos are leaders in this area according to Gartner.

The unified platform experience with SentinelOne Singularity Cloud Security has helped us streamline our security operations. We have implemented multiple layers of security as part of our security journey over the past five years.

The only aspect of SentinelOne Singularity Cloud Security that requires improvement is the response time of the support team. The support response is not optimal.

We have been working with SentinelOne Singularity Cloud Security for four years.

The response time of the support team is not the best. Based on my experience, I rate the support as a six or seven.

We also evaluated Trend Micro products and were working with ESET before migrating to SentinelOne Singularity Cloud Security four years ago. Before ESET, our group was working with different EDRs or antivirus solutions. The concept of EDR was not common five or six years ago, so we migrated from traditional antivirus to next-generation EDR.

During the implementation of SentinelOne Singularity Cloud Security, I faced challenges. We were evaluating SentinelOne Singularity Cloud Security, Sophos, Kaspersky, and another Japanese brand for our EDR and MDR evaluation.

SentinelOne Singularity Cloud Security is a cloud-based solution, not on-premises. Currently, we are working with our workload on Azure, but it is a SaaS technology hosted on SentinelOne Singularity Cloud Security's cloud infrastructure, not on Azure or AWS.

SentinelOne Singularity Cloud Security integrates well with other third-party tools. The antivirus is integrated with SOC solutions, and we are working with IBM QRadar. It works well because once a detection happens, any virus or threat directly shares the incident with the SOC and sends emails or opens tickets through ServiceNow or the ticketing system.

The impact of Drift Detection on our organization's ability to detect unexpected processes is direct. Any threat or incident directly integrates with QRadar and is sent to the SOC team. The SOC team then sends emails to the concerned people in any area, application, infrastructure, or networking to manage or solve the problem and close the ticket.

I have utilized the Advanced SIEM capabilities of SentinelOne Singularity Cloud Security, and it is easy to manage. We are subscribed with an MDR team that manages all of that and sends information directly to us to solve any problem or incident. I rate this product an 8 overall.