SentinelOne Singularity Complete Reviews

Name: SentinelOne Singularity Complete
Brand: SentinelOne
Rating: 4 (176 reviews)

Vendor: SentinelOne

4.4 out of 5

176 reviews
98% willing to recommend

3,108 followers

Post review

What is SentinelOne Singularity Complete?UNIXBusinessApplication
Price:

SentinelOne is a leading comprehensive enterprise-level autonomous security solution that is very popular in today’s marketplace. SentinelOne will ensure that today’s aggressive dynamic enterprises are able to defend themselves more rapidly, at any scale, and with improved precision, by providing comprehensive, thorough security across the entire organizational threat surface.

Get the SentinelOne Singularity Complete Buyer's Guide and find out what your peers are saying about SentinelOne Singularity Complete, Microsoft Defender for Endpoint, CrowdStrike Falcon and more!

SentinelOne Singularity Complete is the #1 ranked solution in XDR Security products, #2 ranked solution in endpoint security software, #2 ranked solution in top Anti-Malware Tools, and #2 ranked solution in EDR tools. PeerSpot users give SentinelOne Singularity Complete an average rating of 8.8 out of 10. SentinelOne Singularity Complete is most commonly compared to Microsoft Defender for Endpoint: SentinelOne Singularity Complete vs Microsoft Defender for Endpoint. SentinelOne Singularity Complete is popular among the large enterprise segment, accounting for 46% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 18% of all views.

Buyer's Guide

SentinelOne Singularity Complete

March 2024

Get the report

Helped 767,319 peers since 2012

Featured reviews

Eddie Drachenberg

Global Network and Infrastructure Manager at Bettcher Industries

Aug 22, 2023

I really like Ranger. I like the deep dive of Ranger in an incident section. Diving into each incident and being able to see complete visibility of when the action was taken against something that it deemed a threat is valuable. Using those incidents in Ranger is definitely up there on my list of favorite features. I have multiple locations all across the globe. Being able to separate my devices, per location, is super helpful. It's good at ingesting data and correlating. It has zero issues with ingesting data with the agents installed. I've had no issues with that. Being able to go through and create exclusions for specific types of data, like SQL has been really tough in our environment. Being able to just go through and customize those exclusions and working with the support team is great. We also have Vigilance, which is another SOC that they offer. That's a fantastic service. Everywhere I have an agent, it sees everything, and it does so when I deep dive into a threat or a proposed threat. It does pick out host names, and IP addresses, and it just gives you a really clear picture where you can read it. I like that Ranger requires no new agents or hardware. Anytime you can keep it lightweight enough. If you add a function and you only pay for your yearly fee for an extra function without making changes in your environment, that's huge. I love the reporting. The reporting definitely helps me see the entire network and find what open ports are out there. I can work with my network team to get those things closed, which is fantastic. I like the ease of looking at the graphs and the reports. The solution has helped reduce our alerts. Instead of waiting on a monthly basis and then executing a plan, I'm able to keep up with it all throughout and day to day. That granular control has left me very impressed. It gives me peace of mind. My staff isn't really using it. I know I have 24/7 eyes on it. It has helped me reduce my mean time to detect. I would be lost without the tool. It definitely helps me figure things out really quickly. I can figure out the whole story very quickly. It helps with my mean time to respond. It definitely helps with that. I get an alert in my email immediately, which lets me just know that something happened to my environment. That's something that I previously did not have in my old tool set.

Read full review

Brian Fulmer

IT Manager at American Incorporated

Aug 28, 2022

SentinelOne's managed detection response service Vigilance Respond is convenient for companies like ours with small IT teams. If something happens on the weekend, SentinelOne steps in and resolves the issue. It's a false positive 97% of the time, but at least they're resolved instead of hanging around for us to find on Monday. We have the Ranger feature for network scans, allowing us to pick up any new devices that show up on a network. That was especially useful for us when we shifted to working from home. If two or more agents are in a remote network, they will scan the network and give you an inventory of the MAC addresses and device types they see. This is handy when you have a small office or someone working from home. We do not allow employees to bring their own devices, but people are plugging their company computers into their home network, exposing them to risks. The ability to report on connections in remote networks is handy.

Read full review

Austin Estrada

Cybersecurity Analyst at Brady Corporation

Aug 23, 2023

Prior to having SentinelOne, we had CrowdStrike, which is a similar product. We decided to make the switch to SentinelOne because the biggest problem was that the previous endpoint detection response software we had did not support what we call legacy endpoints. Anything prior to Windows 7 was not supported by CrowdStrike. Being a manufacturing firm, we have quite a few old devices. That was one of the big things that sold us. SentinelOne also had significantly more competitive pricing than CrowdStrike, but the ability to protect older endpoints was the main motivating factor for us to make this switch. We have been able to consolidate our security solutions. We had a handful of different solutions. SentinelOne Ranger scans for things. We used to have a product that did that, and we got rid of that. For deep visibility, we used to have a piece of software on each machine for historical data and events and things of that nature. We were able to get rid of that. Having an antivirus is also not really necessary because it is a next-generation AI-based antivirus. It does antivirus tasks, and it reduces the need for our traditional antivirus such as Kaspersky, Symantec, McAfee, etc. We were able to get rid of those as well, which is a good thing. We have turned on the Ranger functionality. It is used for asset discovery, but only within a certain range and only if there are a certain number of machines. The way our settings are, if we have a cluster of five machines around it, it will essentially send out a signal and try to find the one without it. If we have five machines in our organization, it will look to see which one does not have SentinelOne around it. It can be helpful to find machines that were not deployed properly. It can also be helpful to find machines that were deployed by malicious actors and things of that nature. It also helps us to identify machines that have SentinelOne but are not responding right now. It is a pretty big deal that Ranger requires no new agents, hardware, or network changes. We have deployed SentinelOne completely. There is probably no machine in our network that does not have it unless it has a very specific use case. Ranger helps us find those if they do exist. If need be, there is a setting within Ranger for deploying SentinelOne through Ranger. We have it turned off, but it is still useful. It is something we could use one day. We typically use Ranger for vulnerability and not necessarily for the prevention of vulnerabilities, but it does give us a good idea of what is out there. For example, there is someone who is trying to do something malicious. It will heartbeat that, and it will see what is happening around that. If it sees, for example, command and control or something like that, it will identify it. It might quarantine it or turn your machine off to stop things. Singularity Complete has helped to reduce alerts. One of the things we struggle with over time is trying to identify what is and what is not a real threat. It did take some tuning, but we went from having to investigate every little thing to being able to say, "Okay. This is a false positive. We know this. We have had this in our environment. We can exclude that." That frees up time for other things, so we can spend time focusing on malicious or bad things happening in our environment. We can work on projects and do some of the actual engineering. Singularity Complete has helped free up our staff for other projects and tasks. We do not have to sit there and constantly monitor, which means that we can go ahead and do other things. We have a vulnerability scanner that we can use to start patching and tackling some of those vulnerabilities. We have our SIEM that we need to monitor for events and activities as well. We have network logs that should be gone through more. Because we have something that takes care of our endpoints, we can look at the focus of our business and do things there instead of having to worry about each machine individually. The biggest thing that SentinelOne does is that it is constantly looking at our environment and other environments as a baseline of what should be happening or what could be happening. If something does not match the specific idea of what should be happening, it detects that and blocks that. If it is not sure what to do exactly, it quarantines a file or a folder or something like that until we have a chance to look at it. That is better than something getting through and causing damage before we can do anything about it. As long as a machine is connected to the network, it is pretty instant, but depending on what it is doing, it might take a little bit. There are some functions within it that do take a little more time to work. For example, the remediate and rollback functions do take time to work, but if it sees something as malicious, it will kill and quarantine that within a fraction of a second. Singularity Complete has helped reduce our organizational risk. There is the part where it kills and quarantines things that are happening on machines, but there is also an element of visibility. Being able to see what we have gives us a better idea of what risks we have. From an inventory standpoint, everything is synced the second we deploy the image machine. Through that, we are able to see what is running on them, what they have installed, and things of that nature. We get a more holistic idea of what we actually have so that we know what to protect.

Read full review

SentinelOne Singularity Complete market share

Product category:

As of March 2024, the market share of SentinelOne Singularity Complete in the Endpoint Detection and Response (EDR) category stands at 7.5%, marking a decrease of 31.2% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Endpoint Detection and Response (EDR)

Key learnings from peers

Last updated Apr 10, 2024

Valuable Features

SentinelOne Singularity Complete is highly valued by users for its advanced features, including zero-day detection, AI-powered threat management, and autonomous platform capabilities.

The solution offers deep visibility, real-time detection, and effective protection against various threats, malware, and cyber attacks. Users appreciate the easy navigation, and lightweight nature of the platform, which minimizes disruption to machine performance. SentinelOne's remediation and rollback features enable quick response to threats, while its endpoint detection and non-reliance on signatures ensure comprehensive security.

The platform integrates well with other security vendors, supports various operating systems, and provides features like file-less monitoring, remote script orchestration, and Ranger for IoT defense.

Room for Improvement

SentinelOne Singularity Complete users suggest various improvements, including the addition of features such as DNS filtering, application control, granular firewall, patch management, encryption, and DLP. Some reviews state that documentation, compatibility, search functionality, data retention, resource usage during scans, and threat analysis, could be enhanced.

Introducing an affordable on-premises solution for government institutions and better integration with other security tools and platforms like Active Directory and antivirus solutions would be beneficial.

Expanding the product range to include Android and iPhone and upgrading the CASB tool are also recommended. Further development of automation, machine learning, and AI capabilities is desired. Removing the minimum license requirement for the cloud-based product would make the solution more accessible to a wider range of customers.

ROI

The users have reported a positive return on investment (ROI) from using SentinelOne Singularity Complete. They mention that the ROI can be enhanced by using more licenses under a multi-cloud solution and that the product has good XDR capabilities and can integrate with various security components. The ROI is seen immediately after the stabilization phase and configuration according to customer needs. Users also highlight that the ROI is high and varies depending on the contract, with some rating it five out of five. They compare it favorably to other products like Microsoft Defender ATP, stating that SentinelOne is ahead in terms of features and independent of licensing schemes. Some users have already experienced a 100% ROI within a few months. Furthermore, the low CapEX is mentioned due to the cloud-based nature of the product. Users also mention the value of having dashboard data on cloud usage and better control over purchasing decisions. The ability of SentinelOne to reduce the need for analysts and prevent security incidents is highlighted, saving costs associated with incidents and potential loss of business. Overall, users believe that SentinelOne provides a great return on investment and offers significant advantages compared to other solutions.

Pricing

SentinelOne Singularity Complete offers flexible pricing tailored to individual business needs. Setup costs may vary based on the complexity of implementation. The pricing model encompasses subscription-based options, with rates typically ranging from a few hundred to several thousand dollars per year per endpoint, depending on features and deployment scale.

"The tool's price is reasonable."
"SentinelOne Singularity Complete's price point is excessive compared to the functionality it provides."
"The pricing for SentinelOne Singularity Complete is competitive."

Popular Use Cases

The primary use case of SentinelOne Singularity Complete is as an endpoint protection and detection solution for cybersecurity. It is used extensively by clients and customers for EDR purposes, including detecting and mitigating malware threats. The solution covers all endpoints, including servers, and provides security controls. It also offers features such as ransomware protection, threat management, and antivirus capabilities. SentinelOne is used by various organizations, including resellers, distributors, system integrators, and solution providers, to protect against cyber attacks and ensure network security. Additionally, it is utilized for incident management, firewall implementation, and device control. The solution is flexible, with options for both on-premises and cloud deployment, and it offers API capabilities for enhanced cybersecurity protection.

Service and Support

The customer service and support of SentinelOne Singularity Complete have received positive feedback from users. Users have mentioned that the technical support is great, helpful, and responsive. They have found the support team to be quick in resolving bugs and providing workarounds. Some users have also praised the documentation provided by SentinelOne. However, there have been a few complaints about slow response times and the lack of online sessions for technical assistance.

Deployment

The initial setup for SentinelOne Singularity Complete is described as easy, straightforward, simple, and convenient by the reviewers. They mention that the deployment of the solution can be done in minutes or within a day, depending on the size of the network. The reviewers also highlight that the setup process does not require complex or difficult procedures. One reviewer rates the ease of implementation as ten out of ten, while another rates it a five out of five. They mention that the solution is easy to install, deploy, and manage, and that it has low maintenance requirements. Some reviewers mention that the setup process involves downloading and installing the agent, while others mention deploying it through policies or using a URL.

Scalability

The solution of SentinelOne Singularity Complete is highly scalable and can accommodate a large number of users. Users have reported that the scalability is great, very good, highly scalable, and better than other tools. The solution can be easily scaled and can handle thousands of users and servers. It is used by organizations with varying numbers of users, ranging from 10 to 10,000. Users have mentioned plans to increase usage as their organizations grow. The scalability is considered not a problem and the solution can work across different platforms. Users have also praised the flexibility and ease of scaling. Some users have mentioned the need to purchase additional licenses for scaling purposes.

Stability

The solution of SentinelOne Singularity Complete is consistently described as stable and reliable by the reviewers. They emphasize that the product does not crash, freeze, or have bugs or glitches. The stability is praised for different scales of clients, ranging from small to large. However, some reviewers mention initial issues that have been resolved, and a few mention occasional lag or slower search functionality. Overall, the solution is considered stable and reliable, with ratings ranging from nine out of ten to five out of five.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our SentinelOne Singularity Complete Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Computer Software Company

18%

Manufacturing Company

Comms Service Provider

Government

Financial Services Firm

Educational Organization

Retailer

Construction Company

Healthcare Company

University

Real Estate/Law Firm

Insurance Company

Non Profit

Wholesaler/Distributor

Energy/Utilities Company

Media Company

Legal Firm

Performing Arts

Outsourcing Company

Hospitality Company

Recreational Facilities/Services Company

Transportation Company

Consumer Goods Company

Pharma/Biotech Company

Logistics Company

Aerospace/Defense Firm

Compare SentinelOne Singularity Complete with alternative products

Learn more about SentinelOne Singularity Complete

SentinelOne makes keeping your infrastructure safe and secure easy and affordable. They offer several tiered levels of security and varied payment options. SentinelOne works well with Linux, Windows, and MacOS, and can successfully support legacy infrastructures as well as the newer popular environments, including the latest operating systems. The single pane of glass management will save time and money by reducing manpower and ensuring comprehensive security protection of all your endpoints locally and worldwide.

SentinelOne offers intensive training and support to meet every organization’s unique business needs.

SentinelOne's levels of services and support include, but are not limited to:

SentinelOne GO is a guided 90-day onboarding service to ensure successful deployment and success. It assists with the deployment planning and overview, initial user setup, and product overviews. It provides ongoing training and advisory meetings, ensuring that everything is set up correctly and that your team understands the appropriate protocols to ensure success.

SentinelOne offers multi-tiered support based on your organizational needs from small business to enterprise, using their Designed Technical Account Management (TAM). They have support for every business level: Standard, Enterprise, and Enterprise Pro. SentinelOne is always available to ensure that you and your organization work together to minimize the risk of downtime and any threat exposure.

Threat Hunting & Response Services

Support for threat hunting and response include Watch Tower, Watch Tower Pro, Vigilance Respond, and Vigilance Respond Pro. Each of these services builds on the other, progressively adding features based on your organizational needs.

Watch Tower: This is the entry-level plan and includes: Active campaign hunting and cyber crime alerts and course correction for potential threats, access to the Monthly Hunting & Intelligence Digest.

Watch Tower Pro: Includes everything in WatchTower and customized threat hunting for all current & historical threats, unlimited access to Signal Hunting Library of Pre-Built Queries, Incident-Based Triage and Hunting, continuous customer service, followup and reporting, a Security Assessment, and quarterly Cadence meetings.

Vigilance Respond: Includes all of the features of Watch Tower in addition to a security assessment and Cadence meetings, which are on-demand. Provides the features of Watch Tower Pro in addition to 24x7x365 monitoring, triage, and response.

Vigilance Respond Pro: Includes all of the features of the above options, including a security assessment and quarterly cadence meeting as well as a complete digital forensic investigation and malware analysis.

Reviews from Real Users

Jeff D. who is an Operations Manager at Proton Dealership IT, tells us that "The detection rate for Sentinel One has been excellent and we have been able to resolve many potential threats with zero client impact. The ability to deploy via our RMM allows us to quickly secure new clients and provides peace of mind."

"The most valuable feature varies from client to client but having absolute clarity of what happened and the autonomous actions of SentinelOne are what most people find the most assuring." relates Rae J., Director IR and MDR at a tech services company.

SentinelOne Singularity Complete was previously known as Sentinel Labs, SentinelOne Singularity.