SentinelOne Singularity Cloud Security - AI Powered CNAPP
Centralized cloud console has transformed incident response speed and cross-tenant management
What is our primary use case?
My main use case for SentinelOne Singularity Cloud Security is managing security incidents for the various companies we provide support to. A quick and specific example of a type of incident I have handled thanks to SentinelOne Singularity Cloud Security is that we have various consoles for various customers, and we receive everything in a single console. We get an email, we open it, we analyze the case and then we intervene based on the severity of the situation.
What is most valuable?
Since SentinelOne Singularity Cloud Security integrated it with Purple AI, it really works well and is an excellent software. In my opinion, the best features offered by SentinelOne Singularity Cloud Security are having everything centralized in one console and the fact that it is cloud-based, so you do not have to install a management server directly at the customer's site.
I find the aspects of this centralized management most useful in my daily work to be the ease of monitoring and the speed it has in responding. Even if there are critical cases, it already intervenes using AI. We analyze and then we see whether what it did was actually appropriate, based on the customers' feedback—for example, if it blocked something in the software, something that might not be known, maybe developed directly by the company itself—and we proceed to create exclusions to avoid it happening again.
In incident management, SentinelOne Singularity Cloud Security has had a positive impact on my organization and it is really good compared to other competitors. I definitely think it is one of the best software products I have ever tried. Operational efficiency has significantly improved since we adopted SentinelOne Singularity Cloud Security.
The unified platform of SentinelOne Singularity Cloud Security has helped simplify my security operations significantly and has reduced confusion and silos between teams. Since it is a unified console, I do not need to log in every time to each customer's account. At the beginning, we clicked on the tenant, went to the tenant's address, and entered the username and password for each customer to open it. Instead, now we have the entire customer list, so we just need to select to already be inside the tenant.
What needs improvement?
In my opinion, there is not much to improve with SentinelOne Singularity Cloud Security as it is really good software. SentinelOne Singularity Cloud Security already gives you all the data you need and also a preliminary analysis, so it is really very fast to work with this console.
For how long have I used the solution?
I have been using SentinelOne Singularity Cloud Security for two years.
What do I think about the stability of the solution?
SentinelOne Singularity Cloud Security is stable in my experience.
What do I think about the scalability of the solution?
I rate the scalability of SentinelOne Singularity Cloud Security in my environment as definitely excellent.
How are customer service and support?
In my experience, SentinelOne Singularity Cloud Security's customer support is fast and efficient.
Which solution did I use previously and why did I switch?
At the beginning, we used Trend Micro as a different solution, but Trend Micro's response times are really slow.
How was the initial setup?
I did not evaluate anything else before choosing SentinelOne Singularity Cloud Security. Honestly, I think time is the most fundamental thing we have achieved as a return on investment.
What about the implementation team?
I do not know the specifics of how we have implemented SentinelOne Singularity Cloud Security in our organization. We use the cloud that SentinelOne provides us, and based on the tenant, there are various customers and each customer has its own tenant. They have tenants in common and we can see all the customers in the same tenant with our credentials, which have specific permissions.
What was our ROI?
Honestly, I think time is the most fundamental thing we have achieved as a return on investment. I cannot give an exact time estimate on how much time I save on average each week or each month since I started using SentinelOne Singularity Cloud Security, but compared with other vendors, I definitely think we save at least about ten minutes per case.
What's my experience with pricing, setup cost, and licensing?
I have not personally dealt with pricing, setup costs, and licensing because in the end I only work on the console and do not do the installations.
Which other solutions did I evaluate?
I did not evaluate anything else before choosing SentinelOne Singularity Cloud Security.
What other advice do I have?
I am really satisfied with SentinelOne Singularity Cloud Security and do not have anything else to add regarding the features or any other characteristic that I find particularly useful or interesting in the platform.
My advice to other people who are considering using SentinelOne Singularity Cloud Security is that compared to other vendors, it is very fast to act and intervenes almost immediately automatically. This saves you a lot of time and any incidents are self-managed directly by the console. It already performs a preliminary intervention. Then, as an analyst, you go there, finish the analysis and determine whether something is a threat or not. If it rings an alarm bell, you talk to the client and then you adjust things in the console to decide whether to create an exclusion for the case or not. You are already instantly protected.
I do use the Purple AI feature for threat investigations, and its impact on understanding the root causes of security incidents is definitely significant. Purple AI works really well. Since it is an AI that has been trained and it is actually a recent feature, sometimes you have to spend some time there to understand the case better, but so far, I have seen that it works really well.
It definitely speeds things up a lot for my team to have out-of-the-box integrations that unify the various aspects of cloud security. I would rate this review a ten out of ten.
Sentinel One Simplifies Cloud Security with Real-Time Monitoring and Clear Dashboards
When it comes to performance, having a few more customizable options would be useful and would help make it more user-friendly.
Also, it can be more intelligent with some product enhancements.
Centralized Cloud Visibility and Real-Time Threat Detection with SentinelOne Singularity
Centralized risk insights have improved cloud visibility and simplify multi-cloud remediation
What is our primary use case?
We use SentinelOne Singularity Cloud Security to continuously assess AWS environments for security risk. It helps detect configuration issues, prioritize critical findings, and provides practical remediation guidance, allowing us to resolve exposures before they become security incidents.
SentinelOne Singularity Cloud Security is part of our daily cloud security workflow and gives us centralized visibility across cloud resources while simplifying risk management.
What is most valuable?
The risk prioritization feature of SentinelOne Singularity Cloud Security has definitely made a difference in our daily workflow. Compared to some other cloud security tools we have used, SentinelOne does a better job of prioritizing risk based on potential impact instead of simply listing every finding with the same level of importance. This helps us focus on the issues that require immediate attention rather than spending time triaging low-risk alerts. In practice, it has reduced the amount of manual work effort needed to review findings.
It makes it easier to decide what should be remediated first with SentinelOne Singularity Cloud Security, especially in large cloud environments where the number of alerts can grow quickly. We still validate critical findings before making changes, but overall, it has made our remediation process more efficient and helped the team respond faster.
SentinelOne Singularity Cloud Security has improved our security visibility, reduced the manual effort, accelerated the remediation process, and strengthened compliance across cloud environments.
Since using SentinelOne Singularity Cloud Security, we have reduced the time spent identifying cloud misconfigurations, improved remediation efficiency, and achieved better compliance readiness through continuous monitoring.
What needs improvement?
For how long have I used the solution?
What do I think about the stability of the solution?
What do I think about the scalability of the solution?
How are customer service and support?
Which solution did I use previously and why did I switch?
How was the initial setup?
What was our ROI?
What's my experience with pricing, setup cost, and licensing?
Which other solutions did I evaluate?
What other advice do I have?
Which deployment model are you using for this solution?
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Unified cloud security has strengthened posture and now prioritizes critical misconfigurations
What is our primary use case?
SentinelOne Singularity Cloud Security primary use cases are centered on protecting cloud-native infrastructure, applications, workloads, and data. It combines multiple cloud security capabilities into a unified cloud-native application platform. Multiple use cases include Cloud Security Posture Management, Cloud Workload Protection, Containers and Kubernetes security, Cloud Infrastructure Entitlement Management, Data Security Posture Management, and Cloud Threat Detection and Response.
In my day-to-day work, I use SentinelOne Singularity Cloud Security primarily to monitor cloud posture and workload security. A recent example was when it identified a high-risk IAM misconfiguration in our cloud environment. I investigated the findings and remediated the exposure. I also remediated the permission before it could be misused. The platform's unified visibility and prioritized risk scoring helped me resolve the issue quickly and strengthen our cloud security posture.
What is most valuable?
Standout features include Cloud Security Posture Management, Cloud Workload Protections, Attack Path Analysis, Cloud Security, Data Security, and AI-powered investigation in which I use Purple AI to automate investigation, correlate cloud, endpoint, and identity telemetry, summarize incidents, and reduce alerts. It also has a unified security platform that brings together cloud, endpoint, and identity security in a single console with a shared data model. This simplifies operations and enables faster incident response.
The feature that has made the biggest difference is Cloud Security Posture Management. In my day-to-day work, it continuously monitors our cloud environment for security misconfigurations, such as overly permissive IAM roles, publicly exposed storage buckets, or missing security controls. Instead of manually reviewing cloud configurations, I receive prioritized alerts that highlight the most critical risks in the management console, and this helps me focus on remediating issues that could have the greatest security impact. I reduce manual effort and improve our overall cloud security posture.
SentinelOne Singularity Cloud Security has improved our organization's cloud security by giving us centralized visibility across cloud assets, workloads, identities, and configurations. It helps us detect misconfigurations, prioritize critical risks, and monitor threats in real time. As a result, I have reduced manual security reviews, fixed threats faster, and strengthened our overall cloud security posture. The unified platform also simplifies security operations by consolidating multiple cloud security capabilities into a single console, improving both efficiency and compliance.
What needs improvement?
SentinelOne Singularity Cloud Security is a strong platform, but there are a few areas where it could improve. I would like to see more customizable dashboards and reporting so different teams can focus on the metrics most relevant to them. The initial setup and policy tuning could also be simplified, especially for organizations with complex multi-cloud environments. Additionally, expanding integrations with third-party security and DevOps tools would make it even easier to fit into existing workflows.
A few additional improvements would further enhance the platform. The user interface could be made more intuitive, especially for first-time users, by simplifying navigation and making key findings easier to locate. The documentation is comprehensive, but more step-by-step implementation guides, best practices, and real-world deployment examples would help administrators get up to speed more quickly. From a support perspective, faster response times for complex issues and a larger library of troubleshooting articles and knowledge base content would improve the overall customer experience.
For how long have I used the solution?
I have been working in my current field for the last six years.
What do I think about the stability of the solution?
I have not experienced stability issues.
What do I think about the scalability of the solution?
I have not experienced scalability issues.
How are customer service and support?
I have not experienced issues with customer service.
How was the initial setup?
The initial setup and policy tuning could be simplified, especially for organizations with complex multi-cloud environments.
What other advice do I have?
I would start with a clear understanding of your cloud environments and security goals before deployment. Make sure cloud accounts are properly integrated, and spend time tuning policies and risk thresholds during the initial rollout to reduce unnecessary alerts. It is important to involve both your cloud and security teams, so remediation workflows are well-defined. I rate this product an 8 out of 10.
Clear Cloud Visibility with SentinelOne Singularity Cloud Security
When it comes to the user interface, navigating through alerts and insights feels straightforward and not complicated at all. It also helps bring parts of our security operations together and integrates seamlessly with the security tools we already use.
.
At the heart of the Singularity Platform is Singularity Cloud Security
Improved cloud threat detection and response has strengthened our security posture
What is our primary use case?
The main use cases for SentinelOne Singularity Cloud Security are protecting workloads and applications by improving threat detection, visibility, and response. We rely on it most for the monitoring of cloud environments, identifying security risks, detecting suspicious activity, and helping our security team respond quickly to potential threats.
What is most valuable?
The best features of SentinelOne Singularity Cloud Security are its threat detection capabilities, real-time visibility across cloud environments, and automated response features. The ability to identify suspicious activity, quickly provide context around risk, and help security teams to investigate and remediate threats efficiently stand out the most. The centralized visibility and integrations with the broader security operations also make it easier to manage cloud security from a single platform.
The integration with our broader security operations helped to streamline workflows by bringing cloud security insights into our existing security tools and processes. This integration reduces the need to manually correlate data from multiple sources, speeds up investigations, and gives our team better context when responding to alerts. This saves time during incident triage and helps security analysts prioritize and address threats more efficiently.
SentinelOne Singularity Cloud Security has improved our organization's security visibility and response capability by giving our team better insights into cloud risk and suspicious activity. A major benefit has been faster threat investigations and response. Our security teams can quickly understand the context of alerts and take action. It has also helped reduce manual efforts, improve consistency in security operations, and strengthen our overall cloud security posture.
Since using SentinelOne Singularity Cloud Security, we have seen improvements in how quickly our team can identify, investigate, and respond to potential threats. Better visibility and automated security insights have helped reduce manual investigation time and improve the efficiency of our response process. While we do not have specific metrics to share, the overall impact has been faster triage, better prioritization of risk, and a more proactive approach to cloud security.
Its AI capability provides valuable support for governance and security by helping teams to identify risk, prioritize threats, and make faster security decisions. The AI-driven insights improve visibility across cloud environments and help to reduce the manual efforts required for monitoring and investigations.
Overall, the AI capability is accurate and reliable. The AI-generated insights generally help to prioritize real risks, reduce alert fatigue, and provide useful context for investigations.
What needs improvement?
SentinelOne Singularity Cloud Security is a strong platform, but there are areas where it could be improved. Adding more flexible customization options for alerts, more advanced reporting and dashboards, and deeper integration with a wider range of cloud and security tools would make the platform even more valuable.
While there is room for improvement in areas such as customization, reporting, and integration, it has been a reliable solution that has positively impacted our cloud security.
For how long have I used the solution?
I have been working for the last five years.
What other advice do I have?
My advice would be to clearly understand your cloud security requirements and take the time to plan the deployment and integration with your existing security tools. Make use of the platform's automation, threat detection, and visibility features to get the most value. I rate this solution an eight out of ten.
Faster Misconfiguration Detection with an Easy Purple AI Integration
Since it is a thirdparty tool, integration with especially cloud-native environment and payment is a big challenge to our clients. Most of our cloud native client would prefer to use cloud native-CWPP like config and have the billing charged once.
Unified security platform has strengthened endpoint, cloud, and ransomware protection
What is our primary use case?
My primary use case is EDR, PDP, and additional features like the AI-SIM, and I'm also using it for ransomware protection which takes care of the lateral movement part. I'm now extending that usage for cloud workload protection as well, and I'm looking at trying to detect misconfigurations or vulnerabilities in that space. I'm also trying to explore a few things around multi-cloud and how that can help us protect our workloads in those spaces.
What is most valuable?
The quality of the product in terms of reliability and what it offers is exceptional. It actually delivers on what it says it does. I think SentinelOne Singularity Cloud Security is a leader, and the product is built with an incredible amount of robustness. The protection that it's meant to offer is what we are actually getting.
SentinelOne Singularity Cloud Security wins out because the partner that we have and the support that we get from the SentinelOne Singularity Cloud Security team in the country makes it quite seamless for me.
I'm using SentinelOne Singularity Cloud Security, especially on the log aggregation side, as the point where logs from my other security products and tools are flowing in. I found that pulling logs into SentinelOne Singularity Cloud Security through the established integration methods that it supports was not very complex. We were able to achieve that with the team's help fairly quickly.
What needs improvement?
There are some other features that probably could be done quite well for SentinelOne Singularity Cloud Security. Some of the features like the AI-SIM, for example, should be promoted more and should be enhanced a little bit more, so I don't have to worry about the SOC part of the operation being done by a third party. SentinelOne Singularity Cloud Security should be able to leverage this far more easily. Those are areas where SentinelOne Singularity Cloud Security can do better. They also have features where you're able to do a lot of log retention. If I'm getting the logs to be retained for a year and if the log aggregation is going to be working very effectively, then I think they should be able to build on this data that they're collecting and there should be a lot more security offerings and analytics that they should be able to do.
The unified platform experience with SentinelOne Singularity Cloud Security is not fully realized yet. There are still other products that I have which are sitting in here. The moment this one and the architecting behind this can come forward and guide us, I think there are still some more steps we need to take before we can achieve the unified experience. It is consolidating, but it's not reached that level yet.
At the moment on the MTTR side with SentinelOne Singularity Cloud Security, it can actually have an impact after I get to the next level of integration and consolidation. Right now, my team is having to work through multiple products before they can make decisions.
For how long have I used the solution?
We started using SentinelOne Singularity Cloud Security about four years ago, and we've gradually gone from endpoint protection to the other modules.
What do I think about the stability of the solution?
Over the last few months, I don't think there was any incident that needed any escalation. It has been running quite reliably.
What do I think about the scalability of the solution?
The scalability part is built into the stability I mentioned. If I'm going to add new workloads, then by default, this is something that's thought of and added in. I have not faced a challenge there.
How are customer service and support?
The partner that we have and the support that we get from the SentinelOne Singularity Cloud Security team in the country makes it quite seamless.
Which solution did I use previously and why did I switch?
The one that we looked at and maybe spent a little bit more time on was Sophos. They have a new XDR solution, and we have been looking to see how that sits in or how that compares with this. We didn't look at or explore directly competing products like Fortinet or others, but I haven't explored that much. However, Sophos did come up with a good pitch.
How was the initial setup?
We have made purchases from the AWS Marketplace. This was done through the AWS Marketplace because we switched the entire purchase through the AWS Marketplace.
What about the implementation team?
We are trying to get ourselves to be a bit more mature on using that.
What was our ROI?
For security with SentinelOne Singularity Cloud Security, it's hard to calculate ROI, but if one needs to do a mathematical exercise, you can find ROI because we're still in business. I would say that I don't think I've identified the right way to look at the benefits on this front. Apart from the fact that this is an operational requirement, it's mandatory for compliance and security. Without this, we really cannot operate.
What's my experience with pricing, setup cost, and licensing?
It's somewhat on the expensive side for SentinelOne Singularity Cloud Security, but looking at where the value is and looking at the long-term relationship and how the pricing is evolving, I think right now pricing is probably at a decent value for me.
What other advice do I have?
We also just recently made the use of Purple AI a little bit more extensive.
We are using SentinelOne Singularity Cloud Security, but it tends to be more for forensics or going back to analyze things. It's not real-time or runtime, but tends to be more after an incident.
I don't think SentinelOne Singularity Cloud Security is a leader in that respect. I don't think I've seen any product that's actually doing that perfectly. I'm not sure about that. My team is probably just looking into it, but I don't know the details about that one either. We don't have an extensive deployment of containers. Some of these features I would need to check with my SOC team who have been given the AI-SIM part to look at and see what benefits they have. But some of these questions are also asking me to check with them whether they really use these features correctly or only minimally.
At the moment, one of my objectives is not to save on time. My KPI that I have is to detect and prevent. If the tools are doing their job, then they just need to make sure that something was detected, it was handled, and there's no risk to the organization. So far, we have not had to deal with any downtime because of security. My overall rating for this product is 8.