SentinelOne Wayfinder Threat Detection and Response Reviews

SentinelOne Wayfinder Threat Detection and Response is primarily used for threat detections, proactive threat hunting, and incident response. It helps identify advanced threats, correlate security events, and investigate incidents more quickly, reducing risk and improving security posture.

SentinelOne Wayfinder Threat Detection and Response was used during a threat hunting exercise to identify unusual endpoint behavior and investigate suspicious activity that was not initially classified as malicious. Its correlation capabilities and detailed telemetry helped quickly validate the findings, determine the scope of activity, and take appropriate remediation action before any significant impact occurred.

SentinelOne Wayfinder Threat Detection and Response is used in a hybrid environment where the management platform is delivered as a cloud-based SaaS solution while it monitors and protects endpoints, on-premise infrastructure, and cloud workloads.

The standout features of SentinelOne Wayfinder Threat Detection and Response are proactive threat hunting, AI-powered threat detection, continuous 24/7 monitoring, expert-led incident response, and comprehensive visibility across the environment.

Proactive threat hunting capability has had the biggest impact. It helps detect suspicious behavior early and provides enough context to speed up investigations, allowing my team to respond faster and spend less time on manual analysis.

SentinelOne Wayfinder Threat Detection and Response has positively impacted the organization by providing faster detection and investigation of threats, improved analyst productivity, and reduced manual effort through AI-assisted threat hunting and event correlation.

Faster investigation, reduced manual analysis, and improved analyst productivity have been observed since using SentinelOne Wayfinder Threat Detection and Response. Its AI-assisted threat hunting and event correlation help identify high-priority threats more quickly, allowing my team to respond sooner and reduce the risk of incidents escalating.

More flexible reporting and dashboard customization would be beneficial in SentinelOne Wayfinder Threat Detection and Response. Enhanced documentation for advanced threat hunting features would also help new users become productive more quickly.

Additional improvements would include more customizable reporting, additional native integration paths for investigation, AI-guided investigations, and remediation workflows.

SentinelOne Wayfinder Threat Detection and Response has been used for one year and six months for security needs.

SentinelOne Wayfinder Threat Detection and Response is stable.

SentinelOne Wayfinder Threat Detection and Response has demonstrated excellent scalability. Coverage has been able to expand to more endpoints and users without affecting performance or increasing management complexity. This cloud-based platform has enabled seamless scaling.

Customer support for SentinelOne Wayfinder Threat Detection and Response is excellent.

Experience with customer support has been positive. The team is responsive, knowledgeable, and provides effective assistance during troubleshooting, deployment, and security investigations.

A clear return on investment has been realized from SentinelOne Wayfinder Threat Detection and Response. The solution has reduced the manual workload associated with monitoring and incident triage, improved analyst productivity, and enabled faster detection and response.

Pricing for SentinelOne Wayfinder Threat Detection and Response is competitive for an enterprise-grade threat detection and response solution. Licensing is easy to manage, deployment was straightforward, and the operational benefits from improved detections and reduced manual efforts have made the investment worthwhile.

SentinelOne Wayfinder Threat Detection and Response delivers strong AI-assisted threat hunting, excellent visibility into attacker activity, and significantly speeds up investigations and incident response. It has improved team efficacy and overall security posture. A higher rating was not given because more customizable reports and broader native integrations with third-party security tools would be beneficial. This product is rated nine out of ten.

AI capabilities of SentinelOne Wayfinder Threat Detection and Response are well-governed and secure. They provide accurate threat detections and investigation support while maintaining administrator oversight through policy, audit logs, and role-based access control, providing confidence in the platform's automated decisions.

AI of SentinelOne Wayfinder Threat Detection and Response has been accurate and consistent. It reliably detects suspicious activity, provides meaningful context for investigation, and helps prioritize real threats while keeping false positives relatively low.

For organizations looking to implement SentinelOne Wayfinder Threat Detection and Response, starting with a clear deployment plan, integrating it with existing security tools, and training your team to use its threat hunting and investigation capabilities is advised. SentinelOne Wayfinder Threat Detection and Response provides strong value for organizations looking to improve visibility.

A strong working relationship with SentinelOne has been established.

Integration of SentinelOne Vigilance with existing security operations was straightforward. SentinelOne Vigilance worked well with existing security tools and SOC workflow, requiring minimal changes while improving visibility and response efficiency.

SentinelOne Vigilance has improved the efficiency of incident response. Its continuous monitoring and expert analyst support enable faster validation, investigation, and containment of threats, reducing manual efforts and allowing my team to focus on higher-priority security activities.

SentinelOne Vigilance has facilitated my team's focus on strategic initiatives by handling 24/7 monitoring and initial incident analysis, reducing day-to-day operational workload and enabling focus on strategic projects such as threat hunting, security improvement, and risk reduction rather than routine alert management.

Approximately 50 to 60% improvement in incident response time for critical events has been realized due to the Vigilance response service, which has significantly reduced the manual effort required for triage and initial investigations.

Support provided by SentinelOne Vigilance's team of breach responders and security researchers has been knowledgeable and responsive. Their expertise helps validate and respond to threats more quickly, improves the quality of incident investigations, and reduces the workload on internal security team, strengthening overall security operations.

Annotation and insights provided by SentinelOne Vigilance analysts on detected threats are clear and actionable, helping quickly understand the severity and context of a threat. Their recommendations improve decision-making, reduce investigation time, and enable faster, more confident incident response.

Impact of 24/7 monitoring by SentinelOne Vigilance on the organization's overall security operations has been significant. The biggest benefit has been continuous coverage, ensuring faster detection and response to potential threats, even when internal team is unavailable. This has reduced manual monitoring, improved incident response efficiency, and provided greater confidence that critical security events will be addressed promptly.

The main use case for SentinelOne Wayfinder Threat Detection and Response is to detect advanced threats and automate incident response in case of any specific abnormalities across the environment, as well as to enable rapid proactive response if any threat is occurring. These are the main use cases we have focused on.

One scenario involves an attacker gaining access through a phishing email when an employee mistakenly clicks on it and quietly installs a script that runs at an odd time. For example, a PowerShell script might run at night when the employee won't notice. We expect SentinelOne Wayfinder Threat Detection and Response to observe this activity, find the abnormality, and immediately isolate that specific machine or environment.

Automated incident response is another way this tool can help us greatly. For example, when laptops get infected with ransomware, the SentinelOne agents installed on the laptops will find abnormal encryption or unknown processes modifying files. The agents will then isolate that device from the network and terminate the malicious process. The most important aspect is that SentinelOne Wayfinder Threat Detection and Response should not affect the laptop or device performance. The agent should be able to monitor everything and proactively isolate and stop attacks without compromising device performance.

The best features of SentinelOne Wayfinder Threat Detection and Response are obviously the AI-powered threat detection, which is the most sophisticated I have seen with any other tool. I also noticed that it does not affect the performance of the device, which is something great. I do not know how they have developed it, but it is really impressive. Additionally, I noticed deep visibility into the environment where we can track everything. If something is found, we can easily track it and get a bird's eye view of the overall attack visibility.

The visibility feature allows us to easily provide root cause analysis to the respective people, which helps in faster incident investigation.

We have seen great outcomes with SentinelOne Wayfinder Threat Detection and Response. First, we conducted a pilot proof of concept and noticed that SentinelOne Wayfinder Threat Detection and Response is very fast. Within a small amount of time, it is able to detect everything and protect the environment. The mean time to detection has been reduced drastically.

For example, with other tools, when a phishing email comes in and an attack starts, we learn about these details later and cannot take a proactive approach. With SentinelOne Wayfinder Threat Detection and Response, the tool monitors registry changes and any suspicious executable files continuously. In our pilot use case, within five minutes it reported one suspicious activity involving high encryption from a phishing email. This is something amazing considering all the other tools in the market.

The response capability is great. Earlier, we would learn about phishing and threats after two to three days. After conducting the proof of concept, we found that within hours we are notified about threats.

From an area of improvement, I understood that SentinelOne should add more training in the form of an academy where people can learn more about the tool and gain understanding of advanced features. This would allow people to log in to the academy, learn, and implement these features. Additionally, the dashboard can be improved significantly.

Overall, I felt SentinelOne Wayfinder Threat Detection and Response is a great tool. Dashboard improvement is required along with training. They should also tune some of the reduced false positive alarms, which is common for all tools.

In the current field, I have been working for more than twelve years.

Accuracy is pretty good but obviously it needs improvement. There are some false positives, but overall it is great.

I conducted a comparison with Defender. We are currently using Defender, and compared to Defender, SentinelOne Wayfinder Threat Detection and Response is an amazing tool and uses AI. SentinelOne Wayfinder Threat Detection and Response is better than all the other tools. The proactive approach and very early detection are standout features. Defender takes one to two days to find suspicious activity, but SentinelOne Wayfinder Threat Detection and Response finds threats in one to two hours instead. This is something amazing. Overall, SentinelOne Wayfinder Threat Detection and Response is a great tool and highly recommended for everyone.

The previous solution was Microsoft Defender, which we are currently using. The reason we tried to switch is because after conducting the proof of concept, our analysis showed that SentinelOne Wayfinder Threat Detection and Response has more AI capability in detecting threats in a very short period of time. We also implemented some automated responses. Overall, we found that SentinelOne Wayfinder Threat Detection and Response is better.

The setup is pretty easy since it is cloud-based.

We have started onboarding the tool. We conducted a proof of concept, and the leadership is currently negotiating pricing with the SentinelOne Wayfinder Threat Detection and Response team. Currently there is no return on investment yet.

The pricing discussion is still ongoing. I heard that the pricing is on the higher side. However, when we consider the features provided, it justifies the pricing. The pricing is a bit expensive, but it is justified by the features that SentinelOne Wayfinder Threat Detection and Response is providing.

I would definitely recommend SentinelOne Wayfinder Threat Detection and Response for everyone. I would definitely recommend SentinelOne Wayfinder Threat Detection and Response to all organizations that are leaning towards the AI-driven approach and want to make use of artificial intelligence. The overall review rating for this product is nine out of ten.

I primarily use SentinelOne Wayfinder Threat Detection and Response for endpoint protection including real-time threat detection, automated response to malware and ransomware, and continuous monitoring of endpoint activity to prevent breaches.

Day to day, I focus on analyzing alerts, investigating suspicious activities, and ensuring that endpoints remain secure.

Recently, SentinelOne alerted me to unusual behavior on an endpoint that indicated a potential ransomware attack. Using SentinelOne Wayfinder Threat Detection and Response's real-time threat detection and automated response, I was able to isolate the affected device quickly, stopping the ransomware from spreading. After that, I used Wayfinder threat detection and response to perform a deeper investigation, correlating threat intelligence and analyzing the attack pattern.

Beyond incident response, I use SentinelOne Wayfinder Threat Detection and Response proactively to enhance our overall security posture. This includes regularly tuning detection rules to reduce false positives, conducting threat hunting exercises to uncover hidden threats, and integrating SentinelOne Wayfinder Threat Detection and Response with other security tools for a comprehensive defense strategy.

The feature I rely on most often is SentinelOne Wayfinder Threat Detection and Response's real-time threat detection and automated response. This stands out because it allows me to quickly identify and contain threats as they happen, minimizing the risk of damage or spread.

The best features I find most valuable for SentinelOne Wayfinder Threat Detection and Response are real-time threat detection and automated response, behavioral AI-based detection, endpoint visibility and continuous monitoring, integration capabilities, and reporting and analytics. For Wayfinder Threat Detection and Response, I benefit from advanced threat hunting capabilities, threat intelligence correlation, incident investigation tools, and automated workflows and response orchestration.

SentinelOne Wayfinder Threat Detection and Response has had a significant positive impact on my organization by enhancing our overall security posture and incident response capabilities. It has reduced the time to detect and contain threats. The automated response feature with the integration and scalability, along with Wayfinder's advanced threat hunting and investigation tools, have improved our ability to uncover hidden threats and understand attack patterns.

Since implementing SentinelOne Wayfinder Threat Detection and Response, I have observed several measurable improvements, including faster response time, reduction in security incidents, improved detection accuracy, increased operational efficiency, and enhanced visibility and reporting.

SentinelOne Wayfinder Threat Detection and Response is a powerful platform, but there are a few areas where improvement could enhance its effectiveness, including user interface enhancement, integration expansion, advanced AI tuning, and incident response playbooks with training and documentation.

SentinelOne Wayfinder Threat Detection and Response is robust, but specific pain points that stand out are complexity for new users, alert overload, customization limits, performance on large environments, and support response times.

My experience with pricing, setup cost, and licensing of SentinelOne Wayfinder Threat Detection and Response has been generally positive and straightforward. The combination of cost-effectiveness and ease of setup has been beneficial.

I rate SentinelOne Wayfinder Threat Detection and Response at eight out of ten. I chose this rating because SentinelOne is a very strong and effective platform overall, but there are a few areas that could be improved, including user interface, alert overload, customization of playbooks, performance delays, and support response times.

Regarding SentinelOne Wayfinder Threat Detection and Response AI capabilities, its governance and security are generally strong but could benefit from further enhancements. The AI models are well-designed to detect sophisticated threats with high accuracy. Governance controls are in place to monitor the AI decision-making processes. However, there is room to improve in providing more granular user control and customizable AI behavior.

The integration of SentinelOne Vigilance with my existing security operations has been generally smooth and effective. The process and my experience include initial setup, integration with SIEM, visibility and threat correlation, response automation, collaboration, and challenges.

SentinelOne Vigilance is quite efficient at resolving security incidents. I assess it through incident detection and evaluation time, response timeframes, resolution impact, expert support, efficiency metrics, and continuous improvement.

I have two years of working experience in the cybersecurity field.

SentinelOne Wayfinder Threat Detection and Response is very stable. Based on my experience, the platform runs reliably with minimal downtime or disruptions.

SentinelOne Wayfinder Threat Detection and Response demonstrates strong scalability with no significant issues.

My impression of the SentinelOne Vigilance team support is very positive. Their breach responders and security researchers bring deep expertise that significantly enhances our security operations in several ways, including expert incident analysis, proactive threat hunting, rapid response guidance, knowledge sharing, confidence, and assurance.

The 24/7 monitoring by SentinelOne Vigilance has a profound positive impact on our overall security operations, including continuous threat detection, rapid incident response, reduced operational stress, improved compliance and reporting, and proactive threat hunting.

Before choosing SentinelOne Wayfinder Threat Detection and Response, I evaluated several other options to ensure I selected the best fit for our security needs.

My advice for others looking to use SentinelOne Wayfinder Threat Detection and Response would be to leverage the digital forensics feature fully. Take advantage of the support team. Evaluate your scalability needs upfront. Consider the ease of integration.

I am using the digital forensics feature provided by SentinelOne Wayfinder Threat Detection and Response. The features have been very helpful in our incident investigation, including detailed evidence collection, timeline reconstruction, root cause analysis, support for compliance, and improved response coordination.

I rate this product at eight out of ten.

SentinelOne Wayfinder Threat Detection and Response is mainly used for Active Directory and configuration changes, which is the primary reason for adoption.

The biggest benefit of SentinelOne Wayfinder Threat Detection and Response is the Active Directory module. Active Directory is a neglected area where people configure it and start using it without proper oversight. When someone touches it, the system pops up an alert, notifying about the changes. This is crucial because customers can get admin access and be hacked at the admin level using Active Directory, which is a serious security risk. This is how I sell and promote it.

The annotations and insights from SentinelOne Wayfinder Threat Detection and Response do not influence decision-making in my experience. It functions as more than a break-fix service because it alerts us and then we fix things, but it has not contributed to any decisions at any organization I work with.

The product is not 100% complete. The monitoring, alerting, and reports are adequate enough to sell but have room for improvement. The product works well, but it does not show enough value to the customer. Eventually, when customers need to save money, they may say they do not see anything happening with this solution and cancel it. SentinelOne has an opportunity to make the product more valuable from the customer's perspective. Technically, I have no complaints, but from a customer perspective, it lacks value.

SentinelOne could improve monitoring, alerting, and reporting by providing better reports and better alerting with executive summary reports that could be more polished. We can then create a schedule to send these to customers.

The installation process could be more fluid and easier. People need a learning curve to install the product, and simplification would be beneficial.

Configuration and Active Directory integrations with SentinelOne Wayfinder Threat Detection and Response are the biggest challenges during deployment. This is where the complexity is most apparent.

I have been working with SentinelOne Wayfinder Threat Detection and Response for three or four years, and I have been in the MSP environment for more than 25 years.

SentinelOne Wayfinder Threat Detection and Response is in good shape and is 99% reliable.

When deployed, SentinelOne Wayfinder Threat Detection and Response is very easy to scale.

I do not believe SentinelOne's customer service is good. They do not meet their SLA commitments. You need to chase after them for responses. Although I am in a good position today and do not need them frequently, when I do need support, it takes longer than expected in every case I have dealt with.

I am not working with anything similar to SentinelOne Wayfinder Threat Detection and Response.

I am working with SentinelOne, and my experience is quite extensive as I manage various aspects of the product. I work with SentinelOne Control, Complete, and various add-ons including the orchestration module and remote operations.

The product is good, but it does not show enough value to the customer. I think the price for SentinelOne Wayfinder Threat Detection and Response represents fair value. My assessment of the digital forensics services provided was good.

SentinelOne Wayfinder Threat Detection and Response serves as my organization's main solution for advanced threat detection, endpoint security, threat hunting, and automated incident response, focusing on endpoint detection and response, also known as EDR, with behavioral AI-based threat detection and real-time security visibility.

In my daily work, security teams investigate suspicious endpoint behavior and isolate infected devices before malware spreads using SentinelOne Wayfinder Threat Detection and Response for endpoint detection and response.

Another key use case is incident response automation, which we also use for threat hunting and investigation.

SentinelOne Wayfinder Threat Detection and Response includes AI-powered threat detection, which uses behavioral AI to detect malicious activity and unknown threats, and it also facilitates threat hunting and investigation, providing deep visibility into endpoint events and attack chains.

Behavioral AI and deep visibility into endpoint events help my security team by enabling us to detect ransomware encryption behavior even without known signatures, while the SOC team can trace attacker activity across multiple endpoints, making our daily work more efficient.

Additionally, SentinelOne Wayfinder Threat Detection and Response offers autonomous response capabilities, automatically responding to threats by isolating endpoints or killing a malicious process, such as isolating an infected endpoint after ransomware detection, along with real-time visibility for continuous monitoring of endpoint activity and threat posture.

SentinelOne Wayfinder Threat Detection and Response positively impacts our organization by automating threat isolation to reduce malware spread across the environment, enabling faster threat detection, reducing ransomware and malware risk, and lessening manual investigation effort.

SentinelOne Wayfinder Threat Detection and Response can be improved particularly in alert optimization, report flexibility, and simplifying advanced policy management.

Improvements that could make my team's workflow smoother include optimizing large alert volumes, enhancing reporting customization, and recognizing that advanced threat hunting may require skilled analysts.

Areas for improvement include advanced threat hunting requiring skilled analysts, complex advanced policy tuning, optimization for large alert volumes, and the need for reporting customization.

I have been using SentinelOne Wayfinder Threat Detection and Response for three years.

SentinelOne Wayfinder Threat Detection and Response received a customer service rating of five.

I recommend SentinelOne Wayfinder Threat Detection and Response for organizations seeking AI-driven endpoint protection, EDR, and automated threat response capabilities, as it is a strong choice for those looking for advanced endpoint security and threat detection.

SentinelOne Wayfinder Threat Detection and Response is a modern and reliable platform, especially valuable for organizations looking to enhance protections, reduce manual SOC workload, and gain faster insight into endpoint threats and attack activities. Overall, it is a scalable and effective endpoint security solution that improves threat detection, incident response, and operational security efficiency through AI-driven automation and visibility.

Regarding governance and security, SentinelOne Wayfinder Threat Detection and Response supports these areas by providing centralized endpoint protection, policy management, threat visibility, compliance support, and automated incident response across our organization.

SentinelOne Wayfinder Threat Detection and Response's AI capabilities, particularly its accuracy and reliability, come from its AI-driven behavioral analysis that provides real-time threat detection, which helps reduce false positives while improving detection of advanced and unknown threats, such as detecting suspicious PowerShell execution behavior even without known malware signatures.

In our organization, we deploy SentinelOne Wayfinder Threat Detection and Response to detect ransomware activity, suspicious PowerShell execution, credential misuse, and lateral movement attempts.

I rate this solution nine out of ten.

My experience includes working with SentinelOne Wayfinder Threat Detection and Response MDR for four plus years. Regarding the capabilities of SentinelOne Wayfinder Threat Detection and Response MDR or Threat Detection and Response, I have experience with all of the above.

Among the features I find most valuable in SentinelOne Wayfinder Threat Detection and Response are the rollback feature and the use of AI and machine learning to assist with threat detection and remediation. The MDR is a good solution.

Using SentinelOne Vigilance has contributed to my team's focus on strategic initiatives. Basically, it's a foundation for all our solutions because we're a security-first organization.

There is always room for continuous improvement for SentinelOne Wayfinder Threat Detection and Response. Continuing their use of AI and machine learning to cut down noise, to reduce false positives and to provide more detailed remediation actions would be beneficial. In terms of their current offerings, it's good.

My experience includes working with SentinelOne Wayfinder Threat Detection and Response MDR for four plus years.

I would rate their technical support around seven out of ten. I don't deal with it on a daily basis, but certainly our engineers work closely with the SentinelOne team, and they've all been trained up by the SentinelOne team along with the SentinelOne certifications and activities that they have access to. I haven't heard any of our engineers complain about the technical support from SentinelOne.

When it comes to response time, I don't deal with that side of the technical team, so I can't give a definitive assessment either way. However, from our engineers, there hasn't seemed to be any concerns with their technical support.

My experience with the deployment of SentinelOne Wayfinder Threat Detection and Response was that it was straightforward. Our engineers are all certified and trained, so it's very straightforward.

We did it by ourselves with our team. We are a reseller partner of SentinelOne, so we have engineers that we have certified and trained up in the product along with SentinelOne as a part of our partnership. We can do it for our customers.

I have seen a return on investment because it's a solution that works. It protects our customers' environments well. The return on investment is having a tool that's not overly expensive but provides peace of mind and a good, secure solution.

Regarding the pricing of SentinelOne Wayfinder Threat Detection and Response, in comparison to others, it's absolutely reasonable.

SentinelOne Wayfinder Threat Detection and Response has some good competition out there, but certainly for us, in our investigations, there's been nothing to make us change. Nothing out of the ordinary or nothing jumping out at us from another solution wanting to make us want to change.

SentinelOne Wayfinder Threat Detection and Response is a foundation for all our solutions because we're a security-first organization.

My impression of the annotation and insights provided by SentinelOne Vigilance analysts on detected threats looks good. From our use of it, it's worked really well. It's a very comprehensive tool that we use as our basis for our MSP solutions.

I would describe the integration process of SentinelOne Vigilance with our existing security operations as well-integrated with other solutions, providing good visibility. It's easy to manage, monitor and keeps us across everything that's happening in our environment and our customer environments.

I can assess the impact of 24/7 monitoring by SentinelOne Vigilance on my organization's overall security operations by stating that it's an important piece of what we do, and it adds to our capability. It means that we're not relying on just our team. It's a tool that helps our team do their job.

Regarding the need to use the malware analysis feature, I'm not certain off the top of my head. As for using the digital forensics features provided by this solution, I believe so, but I'm not on the engineering or technical side of it. I'm not running it day to day.

I would rate SentinelOne Wayfinder Threat Detection and Response as an eight or a nine, with my overall rating being nine out of ten. From what I've been told by the engineers and our use of the solution as a basis for our managed service offerings, we've had no issues with it, and it's easy to deploy and manage.

Regarding additional features I would like to see in the future to make it closer to ten, I don't have specific suggestions. It's a good solution. When thinking about automation, AI capabilities, machine learning, and remediation actions, I would say all of the above would be beneficial.

SentinelOne Wayfinder Threat Detection and Response's main use case is to detect any suspicious activity, investigate it, and respond accordingly to security threats by monitoring across our clients' endpoints and the whole environment in real-time.

In using SentinelOne Wayfinder Threat Detection and Response to respond quickly, the response is not totally automated; we use a combination of both automated and manual response actions, with automated capabilities for predefined actions such as killing malicious processes, while critical incidents still require manual investigation.

One of the best features SentinelOne Wayfinder Threat Detection and Response offers is the Purple AI and behavioral detection capability, which is superior to traditional EDRs that rely solely on signatures.

I frequently use the Purple AI feature for in-depth analysis and if I receive any suspicious alerts; it helps by summarizing the whole alert without diving deep into it, making my work easier.

SentinelOne Wayfinder Threat Detection and Response positively impacts our organization by improving threat visibility and reducing investigation time, enabling us to identify suspicious activities faster due to AI capabilities.

Technically, using Purple AI has helped reduce incident response time and manual workload for analysts, making investigations faster.

SentinelOne Wayfinder Threat Detection and Response can improve by addressing lag issues in the UI and dashboard performance, especially during heavy investigations when alerts are high.

Overall, I rate the integration features of SentinelOne Wayfinder Threat Detection and Response around eight to nine because they support a wide range of security tools; I do not see any major improvements needed otherwise.

I have been working in my current field for around two years and nine months.

Most of the time, SentinelOne Wayfinder Threat Detection and Response is stable, but there are instances where it becomes laggy when many alerts are detected.

SentinelOne Wayfinder Threat Detection and Response is mostly stable, though it can be laggy with many alerts.

The scalability of SentinelOne Wayfinder Threat Detection and Response is quite good, as it works well in enterprise environments without major performance issues.

The scalability of SentinelOne Wayfinder Threat Detection and Response is pretty good, as it handles security device integration and endpoint increases efficiently without major performance issues.

I have not found any major issues with customer support; the team is responsive and helpful during troubleshooting, and their documentation is very useful for understanding the platform better.

I have not encountered any significant issues with customer support; they provide excellent documentation and knowledge to help analysts.

We previously used Defender and CrowdStrike, but SentinelOne Wayfinder Threat Detection and Response stood out due to its AI-driven threat detection and behavioral analysis.

I can say that we see a return on investment with SentinelOne Wayfinder Threat Detection and Response, as it has reduced incident response time and manual workloads for analysts, thanks to AI.

My advice for others considering SentinelOne Wayfinder Threat Detection and Response is that it is a good tool with strong AI capabilities that can significantly reduce incident response times for analysts, especially in environments with large endpoint infrastructures. I rate this solution an eight overall.

We have been using SentinelOne Singularity MDR for threat hunting and correlation, particularly when we identify if some kind of IOCs has been detected or if processes are found malicious. We then analyze it across the entire network for similar behaviors in other systems or processes. Accordingly, we curate responses, which can involve isolating those systems or conducting further investigation through back-end analysis, digging into command line consoles, or deleting files. This is the primary use case I can think of.

When discussing features in SentinelOne Singularity MDR, I find integration with third-party solutions and APIs very valuable because it eases management and response processes. With a robust library, it is easier to manage integrations with other technologies, such as the Check Point sandboxes, which we have found very useful.

In terms of minimizing false positives and delivering accurate detections, I have observed that the false positive rate in SentinelOne Singularity MDR is considerably lower compared to other solutions we have evaluated, thanks to the exceptions or policy changes that allow modifications to baseline policies hardcoded within the solution.

Regarding threat hunting capabilities, I assess that the threat hunting capability in SentinelOne Singularity MDR is quite good because their EDR collects extensive telemetry data, and the backend search engine processes this data quickly. This speed is crucial for our large-level customers who have around 50,000 inputs and multiple gigabytes of data daily. Therefore, threat hunting becomes easier due to the significant amount of telemetry data gathered and the fast processing time when firing queries.

The main benefits that clients receive from SentinelOne Singularity MDR, from an operational perspective, include ease of deployment, where the installation process across various operating systems and different hardware configurations goes smoothly with minimal impact on end users. It is important that end users have a smooth experience during deployment. Besides the navigation issue I mentioned, policy configurations and other processes are straightforward, similar to a plug-and-play setup that is easy to manage. Furthermore, the detection rate is very good compared to other solutions, and as previously mentioned, the false positive rate is low, making the workload for the SOC team much easier after implementing SentinelOne Singularity MDR at our customers.

I would like to improve the dashboard in SentinelOne Singularity MDR, as it could be much better, along with the reporting structure. The granularity of policies and ease of policy management from the console could be made better, while my experience from a feature standpoint has been good overall.

Regarding summary reports provided from SentinelOne Singularity MDR, I find the reporting structure could be much better in terms of granularity. Additionally, for C-suite executives, there can be more non-technical content that provides a bird's eye view of organizational risk posture, rather than just detailed technical analyses. This high-level perspective on the organization's risk would be highly beneficial at the management level.

I have been with SentinelOne Singularity MDR since around December 2020, so it has been one and a half years.

The initial setup for SentinelOne Singularity MDR is simple; there are not many complexities involved unless you encounter unsupported third-party integrations, which can introduce some challenges. However, if you are using compatible data sources, the setup process is generally smooth.

The stability of SentinelOne Singularity MDR deserves a rating of eight.

The scalability rates at nine because they are quite scalable; being a cloud solution means we do not have to worry about scalability issues.

The technical support from SentinelOne Singularity MDR rates at 7.5 out of 10.

The initial setup for SentinelOne Singularity MDR is simple; there are not many complexities involved unless you encounter unsupported third-party integrations, which can introduce some challenges. However, if you are using compatible data sources, the setup process is generally smooth.

I can compare SentinelOne Singularity MDR to CrowdStrike as the main competitor in the market.

When comparing the two vendors, I feel that neither one is clearly better than the other, as both provide their own strong points and necessary features as part of their MDR solutions. Although I have not found significant differences, I do perceive that CrowdStrike has a slight edge regarding support and turnaround time for issue resolution, and they tend to introduce new features more regularly than SentinelOne Singularity MDR.

We currently work with multiple vendors since I work for a cybersecurity solution company, and in the EDR space, we are engaged with CrowdStrike and SentinelOne Singularity MDR.

We work with SentinelOne Singularity MDR as it is similar to SentinelOne Vigilance, and I specifically use Singularity only. I use every module of SentinelOne Singularity MDR, including EDR, NGAV, ASM, and Identity.

I have not specifically worked on the solution's proactivity and branch readiness features to state how they help in preparing for incidents. I have not encountered any use case that has not been covered by SentinelOne Singularity MDR, but since I have not explored the entire range of products they offer and they introduce new features quarterly, I cannot provide specific suggestions at this time.

Pricing for SentinelOne Singularity MDR varies on a case-by-case basis, and I notice that they have flexibility when it comes to pricing. On a scale where one is high and ten is low, I would place it around six.

My overall rating for SentinelOne Singularity MDR is 8 out of 10.

I deal with the MDR.

Some of the most valuable features of the SentinelOne Singularity MDR are its capabilities, and there are areas they can develop further.

My experience with the ability of SentinelOne Singularity MDR to minimize false positives and deliver actionable reports is positive, and I am speaking about SentinelOne Singularity MDR's support for that.

The impact of the threat hunting capabilities on detecting known and emerging threats in real-time is notable, and with the AI, it helps for real-time threat hunting. Their proactive breach readiness features have helped in preparing my team for incidents, and we have dealt with some of the proactive breach readiness features.

I assess the effectiveness of the managed detection and response services in protecting my organization as significant, especially since we did not use an MDR before and just relied on antivirus tools.

I have experience with the Singularity's ability to integrate with third-party services, and my impression is that it does a decent job.

The approximate reduction of the time to respond to incidents has been considerably improved, and it has really helped to reduce that time. We utilize the monthly summary reports provided by their MDR team.

I don't have any concerns about the setup process. It was pretty simple to do aside from setting up site locations within the admin portal, and it took just myself to deploy it. I was the only one involved in the deployment process.

I don't have any comments on the service's ability to provide incident reports and detailed investigation notes and recommendations, although some of my team might.

I rate their support very good, and their threat detection capability positively influences our security operations.

Positive

When we were deciding on SentinelOne Singularity MDR, we evaluated other options. There was a short list of solutions we were comparing it to, and there are clear differences between Field Effect and SentinelOne Singularity MDR.

The initial setup was straightforward and not complex to set up.

The pricing, setup costs, and licensing are similar in price to Field Effect.

The integration with Microsoft 365 for SentinelOne Singularity MDR isn't quite as effective as with Field Effect.

I have experience with SentinelOne Singularity MDR and other MDR solutions, and I would be willing to provide a review for one of the products that I'm familiar with.

We are not utilizing the DFIR, digital forensics and incident response, feature.

I don't have a comment on the hands-on coverage by global MDR analysts.

On a scale of 1-10, I rate SentinelOne Singularity MDR a 10.

Speaking about the use cases for SentinelOne Vigilance, people are usually using these products for protecting their PCs to have a clean environment.

From my reseller and partner perspective, the best features in the products are easy deployment, really small size installation, and an update process. It is a Gartner leader, so there is a lot of innovation in it.

Regarding real-time monitoring features, it is absolutely accurate and automatically handled in most cases if configured correctly.

I am actually able to synthesize machine learning with human experience to manage complex threats in IRs. This is included as part of the back-office strategy that they run through an AI process.

I assess the importance of having 24/7 security coverage provided by SentinelOne Vigilance to be highly needed.

As a customer, I have seen benefits from using it, and I can assure that it is 100% protected against many threats, and it is always in the actual state.

I have observed improvements in Incident Response speeds since integrating SentinelOne Vigilance, as there are far more incidents automatically detected and cleared than before.

Regarding disadvantages of SentinelOne Vigilance, there is no local hub server that I can use to download the updates and signatures only once.

The solution is fully scalable, although the only point for scalability is that if there was local hub support, I could save some data transmission, but otherwise, it is fully capable.

Currently, the lack of a local hub is the only concern that I have faced. I do not have any other issues with the product.

I have been dealing with SentinelOne Vigilance for about a year now. We started testing approximately a year ago.

I find it absolutely stable. I do not have any issues there, and we had it on other systems before, but not on that one.

I would rate the actual technical support from SentinelOne Vigilance a nine.

Positive

In comparison to SentinelOne Vigilance, I was also dealing with Kaspersky.

The deployment is quite easy. If I have the right deployment tools, it is absolutely easy and self-handled.

I have seen some ROI, and my clients are fully satisfied compared with others, especially as it is a subscription on a monthly range, so I can adapt it to my users at any time.

For the overall return on investment, both time and money, I would say it is a full 20.

The pricing, licensing, and setup costs in general are quite affordable.

I am dealing with the complete suite, including the full package of SentinelOne Vigilance, Singularity Identity, and similar products.

The products I mentioned for MDR, for example, ITDR, such as Vigilance, Singularity Identity, I am also dealing with them to some extent.

I am a customer and an integrator partner. I do reselling as through my own direct clients that I support, not on the broad markets.

The specific reason for using it is because of all the handling and the automatic process. There is a lot of automatization, and if configured correctly, you do not need to care about that function.

I would rate SentinelOne Vigilance a nine out of ten.

I am both a reseller and integrator for the products, and my email is becker@medatech.de. I am the managing director.

I can confirm that if SentinelOne Vigilance has any questions or comments regarding my review, they can reach me via email to clarify something. I am interested in being a reference for this vendor.