Try our new research platform with insights from 80,000+ expert users

Cisco XDR vs SentinelOne Singularity Complete comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cisco XDR
Ranking in Extended Detection and Response (XDR)
20th
Average Rating
8.8
Reviews Sentiment
7.3
Number of Reviews
6
Ranking in other categories
No ranking in other categories
SentinelOne Singularity Com...
Ranking in Extended Detection and Response (XDR)
3rd
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
201
Ranking in other categories
Endpoint Protection Platform (EPP) (3rd), Anti-Malware Tools (2nd), Endpoint Detection and Response (EDR) (2nd)
 

Mindshare comparison

As of November 2025, in the Extended Detection and Response (XDR) category, the mindshare of Cisco XDR is 2.0%, up from 0.7% compared to the previous year. The mindshare of SentinelOne Singularity Complete is 6.1%, up from 5.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Extended Detection and Response (XDR) Market Share Distribution
ProductMarket Share (%)
SentinelOne Singularity Complete6.1%
Cisco XDR2.0%
Other91.9%
Extended Detection and Response (XDR)
 

Featured Reviews

Joseph Houghes - PeerSpot reviewer
flexible reporting and analytics boost data-driven security responses
The feature I appreciate the most about Cisco XDR is the flexibility for a user to be able to create their own reporting and dashboards. I would say I got to stop beta testing myself. I am testing what can be customized the most with it. Being able to ingest all the analytics and make it something that's either meaningful to them or to their own leadership is a big plus. It's not just what the product is at launch; you have the ability to customize and make it useful to your business to actually get real, purposeful information out of just a swamp of data. The features of Cisco XDR have actually benefited the organization significantly by allowing us to do the outputs of specific data and even filtered subsets of the data. We can do the same reporting but only deliver in either reports or dashboards the information about the systems that a specific team is responsible for, or the larger teams that multiple departments or IT silos roll up into. We're basically able to just modify the filters and have the same reports in the same dashboards where it's all the same; 99% of the work is the same.
Daniel Giacomelli - PeerSpot reviewer
Strengthens cross-platform threat response while supporting audit compliance and log integration
The analytics and reporting can be a bit overwhelming. I love the dashboards, but I find that I need to better understand PowerQuery—specifically when to turn it on and off and its limitations. It's similar to SharePoint in that regard. As a former SharePoint instructor, I know it like the back of my hand. The best thing about SharePoint is that it can do whatever you want; the worst part is also that it can do whatever you want. You really need to know what you want before diving in. Most people usually have a good idea of what they need. SharePoint offers a lot out of the box, but you can customize it further if you wish. However, customization often requires hiring someone, which can be risky since you never know if it will work as intended. On the other hand, PowerQuery can help bridge some of those gaps within Singularity. The challenge arises when you want to incorporate what you've done into dashboards and charts, as there are limitations. For instance, I want more clickable drill-down options that allow me to filter on specific sections of the data, but that's currently not possible. It’s not to say that improvements won’t come in the future; it's just that it feels a bit early at this stage. Additionally, I find some navigation features frustrating, like the back button in certain contexts. For example, if you open PowerQuery from a chart, it doesn't open in a new window or tab. Clicking the back button takes you all the way back to the previous state, causing you to lose whatever progress you made. However, I'm actively providing this feedback to my partner, Pro Circular, through whom we access SentinelOne. They take our input seriously, and I've been sharing my observations. They have their own views but are addressing the issues I raise. It's good to see that suggestions occasionally lead to updates and improvements.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Cisco XDR offers threat intelligence and links with the Firewall."
"Technical support from Cisco is good and very helpful."
"The features of Cisco XDR benefit my company since time is money. When outages happen and when a customer can't reach the internet, they get agitated. Therefore, the quicker we can mitigate an issue, our customers get happier in a quicker fashion."
"The feature I appreciate the most about Cisco XDR is the flexibility for a user to be able to create their own reporting and dashboards, ingest all the analytics, and make it something meaningful to their business to actually get real, purposeful information out of just a swamp of data."
"The feature I appreciate the most about Cisco XDR is the reliability."
"One of my favorite features of Cisco XDR is the automation tool, which saves a lot of time because we can craft these automations and workflows."
"The feature I appreciate the most about Cisco XDR is the reliability."
"Cisco XDR offers threat intelligence and links with the Firewall."
"It has the ability to rollback a ransomware infection instantly and with minimal disruption to the user & provides robust reporting."
"Singularity's rollback feature is one of the primary reasons we bought the product. If there's an attack on the machine, the system can automatically roll back the data and the hard drive of the machine that was attacked."
"We opted for SentinelOne because it gives you visibility and control over all the devices on which you have the agent deployed. That is very valuable because, in the end, all the attacks enter only through one gateway, which is usually a user's computer."
"When we first looked at SentinelOne, we had a very distributed legacy antivirus environment. Through SentinelOne's platform, we were able to consolidate about eight different antiviruses globally, thus saving money and time."
"Its capacity to prevent new threats."
"The platform's ability to easily integrate with various other platforms is highly valuable."
"The most valuable features are forensic investigation and ransomware prevention."
"The management dashboard is the most valuable feature."
 

Cons

"I would say I got to stop beta testing myself."
"The licensing of Cisco XDR is a bit complicated. The cost can depend on what it is, and the process can be a little complicated."
"If we have a list of domains we need to block, such as 4,000 domains, I can only block 100 domains at a time because if I put in more than 100 domains, I hit that 2,000 character max and can't continue with an investigation. Being able to put in all 4,000 domains, without a character limit or observable limit, would make doing those case books a whole lot easier and blocking those domains a whole lot easier too."
"Cisco XDR can be improved by addressing the upfront cost."
"Cisco XDR can be improved by addressing the upfront cost. Everything matters for us since we're small, mom and pop, so every dollar counts."
"My only complaint about Cisco XDR is related to licensing, which is complicated."
"They need to provide better pricing and bundle XDR licenses with products like Meraki solutions or Firepower Threat Defense."
"They need to provide better pricing and bundle XDR licenses with products like Meraki solutions or Firepower Threat Defense."
"There should be Terraform support for console administration. Dynamic tagging would be also useful."
"SentinelOne's performance and the accuracy of its incident filtering could be improved."
"One area for improvement is automated deployment. I use it through a group policy. I put in the PC name, and when the user logs in, if the PC is in that group, it attempts an MSI install through Active Directory via GPO. That seems to play a little havoc and can conflict with manual installs, causing issues where it wants to delete and reinstall the client."
"We did use the Ranger functionality. However, there was some scanning going on and it caused a lot of noise, so we had to disable it."
"Interoperability with other SentinelOne solutions and other third-party tools is an area where you can run into some issues. Because of the way the agent works, there are sometimes things that are blocked or prevented from happening that are not identified as a threat, and therefore, not alerted in the console. Sometimes, we do have to dig through the logs, run tests, and adjust the whitelisting or exclusions to make sure that other applications will run properly."
"I really haven't done enough to really see any improvements."
"If there is a vulnerability that we know about, I search for that vulnerability—for example, Adobe. There are different versions of Adobe, but I'm not able to compile them into one report. I have to create separate reports for those versions."
"In automation, if we could schedule when we run the task and on which systems we want to run the task, it would improve automation."
 

Pricing and Cost Advice

"The licensing of Cisco XDR is a bit complicated. The cost can depend on what it is, and the process can be a little complicated."
"SentinelOne Singularity Complete is a fair price."
"The licensing is convenient, straightforward, and very clear."
"The pricing is reasonable."
"Overall, it was a good experience. It is pretty easy for us to increase the number."
"The cost of Singularity Complete is similar to our previous solution but it comes with additional options such as Kubernetes integration."
"While SentinelOne Singularity Complete carries a higher price tag than some endpoint security solutions, customers find its robust features and return on investment justify the cost."
"SentinelOne is more affordable than some competing products, and it's not overly expensive for what you're getting."
"The pricing is very reasonable."
report
Use our free recommendation engine to learn which Extended Detection and Response (XDR) solutions are best for your needs.
872,837 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
11%
Manufacturing Company
10%
Government
9%
Financial Services Firm
7%
Computer Software Company
18%
Manufacturing Company
8%
Financial Services Firm
7%
Government
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business82
Midsize Enterprise45
Large Enterprise76
 

Questions from the Community

What is your experience regarding pricing and costs for Cisco XDR?
My experience with pricing, setup costs, and licensing has been intriguing. I used to work for a Cisco partner, and I still have friends there with whom I discuss comparisons regarding some hardwar...
What needs improvement with Cisco XDR?
To improve Cisco XDR, I can't think of anything super meaningful because a couple of features I'm interested in are actually ones that integrate with Duo, but that's not widely used. I'm fine with ...
What is your primary use case for Cisco XDR?
My primary use case for Cisco XDR is log review from devices, and then doing analytics for quicker responses in the future to security incidents.
Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. The ability to reverse damage caused by ransomware with minimal interruptions to...
Which is better - SentinelOne or Darktrace?
Which solution is better depends on which is more suitable specifically for your company. Darktrace, for example, is meant for smaller to medium-sized businesses. It is also a good option for organ...
 

Also Known As

No data available
Sentinel Labs, SentinelOne Singularity
 

Interactive Demo

Demo not available
 

Overview

 

Sample Customers

Information Not Available
Havas, Flex, Estee Lauder, McKesson, Norfolk Southern, JetBlue, Norwegian airlines, TGI Friday, AVX, Fim Bank
Find out what your peers are saying about Cisco XDR vs. SentinelOne Singularity Complete and other solutions. Updated: September 2025.
872,837 professionals have used our research since 2012.