Try our new research platform with insights from 80,000+ expert users

Cisco XDR vs SentinelOne Singularity Complete comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cisco XDR
Ranking in Extended Detection and Response (XDR)
14th
Average Rating
8.4
Reviews Sentiment
6.3
Number of Reviews
8
Ranking in other categories
No ranking in other categories
SentinelOne Singularity Com...
Ranking in Extended Detection and Response (XDR)
5th
Average Rating
8.8
Reviews Sentiment
7.2
Number of Reviews
203
Ranking in other categories
Endpoint Protection Platform (EPP) (3rd), Anti-Malware Tools (3rd), Endpoint Detection and Response (EDR) (3rd), AI Observability (4th)
 

Mindshare comparison

As of December 2025, in the Extended Detection and Response (XDR) category, the mindshare of Cisco XDR is 2.0%, up from 0.9% compared to the previous year. The mindshare of SentinelOne Singularity Complete is 5.8%, up from 5.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Extended Detection and Response (XDR) Market Share Distribution
ProductMarket Share (%)
SentinelOne Singularity Complete5.8%
Cisco XDR2.0%
Other92.2%
Extended Detection and Response (XDR)
 

Featured Reviews

Joseph Houghes - PeerSpot reviewer
Cloud Architect at Pure Storage
flexible reporting and analytics boost data-driven security responses
The feature I appreciate the most about Cisco XDR is the flexibility for a user to be able to create their own reporting and dashboards. I would say I got to stop beta testing myself. I am testing what can be customized the most with it. Being able to ingest all the analytics and make it something that's either meaningful to them or to their own leadership is a big plus. It's not just what the product is at launch; you have the ability to customize and make it useful to your business to actually get real, purposeful information out of just a swamp of data. The features of Cisco XDR have actually benefited the organization significantly by allowing us to do the outputs of specific data and even filtered subsets of the data. We can do the same reporting but only deliver in either reports or dashboards the information about the systems that a specific team is responsible for, or the larger teams that multiple departments or IT silos roll up into. We're basically able to just modify the filters and have the same reports in the same dashboards where it's all the same; 99% of the work is the same.
Daniel Giacomelli - PeerSpot reviewer
Security and Compliance at a outsourcing company with 1,001-5,000 employees
Strengthens cross-platform threat response while supporting audit compliance and log integration
The analytics and reporting can be a bit overwhelming. I love the dashboards, but I find that I need to better understand PowerQuery—specifically when to turn it on and off and its limitations. It's similar to SharePoint in that regard. As a former SharePoint instructor, I know it like the back of my hand. The best thing about SharePoint is that it can do whatever you want; the worst part is also that it can do whatever you want. You really need to know what you want before diving in. Most people usually have a good idea of what they need. SharePoint offers a lot out of the box, but you can customize it further if you wish. However, customization often requires hiring someone, which can be risky since you never know if it will work as intended. On the other hand, PowerQuery can help bridge some of those gaps within Singularity. The challenge arises when you want to incorporate what you've done into dashboards and charts, as there are limitations. For instance, I want more clickable drill-down options that allow me to filter on specific sections of the data, but that's currently not possible. It’s not to say that improvements won’t come in the future; it's just that it feels a bit early at this stage. Additionally, I find some navigation features frustrating, like the back button in certain contexts. For example, if you open PowerQuery from a chart, it doesn't open in a new window or tab. Clicking the back button takes you all the way back to the previous state, causing you to lose whatever progress you made. However, I'm actively providing this feedback to my partner, Pro Circular, through whom we access SentinelOne. They take our input seriously, and I've been sharing my observations. They have their own views but are addressing the issues I raise. It's good to see that suggestions occasionally lead to updates and improvements.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"One of my favorite features of Cisco XDR is the automation tool, which saves a lot of time because we can craft these automations and workflows."
"Cisco XDR is built primarily for enterprise endpoint security, integrated onto endpoints with logs integrated into SIEM, and it is used for security investigations, malware impact investigation, and tracking particular security incidents through integration of different logs, where endpoint logs are very important, providing detail about processes run by potential malware and any call-outs made to command and control."
"The features of Cisco XDR benefit my company since time is money. When outages happen and when a customer can't reach the internet, they get agitated. Therefore, the quicker we can mitigate an issue, our customers get happier in a quicker fashion."
"Technical support from Cisco is good and very helpful."
"Cisco XDR offers threat intelligence and links with the Firewall."
"The feature I appreciate the most about Cisco XDR is the flexibility for a user to be able to create their own reporting and dashboards, ingest all the analytics, and make it something meaningful to their business to actually get real, purposeful information out of just a swamp of data."
"My advice for other organizations considering Cisco XDR is that it offers proactive security measures that are really very helpful."
"The feature I appreciate the most about Cisco XDR is the reliability."
"Its ability to interact with other third-party tools has been great for us. It can work through APIs and partners and integrate well."
"The overall product quality is good."
"The process visualization, automated response, and snapshotting are valuable. The integration and automation possibilities are also valuable."
"SentinelOne has improved the overall security posture of the firm without creating a lot of hassle for our end users. Everything is a bit more secure. We think Singularity Complete has helped us reduce our organizational risks."
"It recently stopped a ransomware attack at one of my clients, proving its reliability."
"I've seen a lot of improvements and simplifications, and Google SecOps has recently moved into Gartner's as the highest one for visionaries."
"The ability to get queries by pressing the "tab" button is a plus for SentinelOne."
"The most valuble feature of SentinelOne Singularity Complete is the recovery and zero-day detection."
 

Cons

"They need to provide better pricing and bundle XDR licenses with products like Meraki solutions or Firepower Threat Defense."
"One area that needs improvement is the limited visibility due to the licensing structure. For more visibility, customers need the advantage or premier licensing, which involves additional costs."
"Cisco XDR can be improved by addressing the upfront cost. Everything matters for us since we're small, mom and pop, so every dollar counts."
"The licensing of Cisco XDR is a bit complicated. The cost can depend on what it is, and the process can be a little complicated."
"They need to provide better pricing and bundle XDR licenses with products like Meraki solutions or Firepower Threat Defense."
"I would say I got to stop beta testing myself."
"Regarding the pricing aspect of Cisco XDR, I think the price is a bit expensive."
"Cisco XDR can be improved by addressing the upfront cost."
"The most difficult part of using Singularity Complete is logging in, as they often update the management console."
"Set up is very labor-intensive."
"Sometimes, support can be lacking. We would like to have more interactive sessions, which are not currently available."
"It is an expensive product."
"It would help if they could get all the relevant threat information, the related events, in one place. Currently, we need to go to a number of places and do research. If they could have it all in one place, that would help investigations."
"SentinelOne can continue to make the presentation of relevant and timely data to the analysts as succinct and clear as possible. It will allow analysts to execute remediation or resolution with the least amount of clicks."
"An area for improvement in SentinelOne is the search feature. You can't go beyond twenty thousand events, which ruins the task because it isn't enough when you're doing your investigation."
"The biggest thing for me in terms of improvements is the online console. There are frequent updates, and sometimes we'll get a little agitated getting signed in."
 

Pricing and Cost Advice

"The licensing of Cisco XDR is a bit complicated. The cost can depend on what it is, and the process can be a little complicated."
"We are on a subscription model by choice. Therefore, we are paying a premium for the flexibility. We would have huge cost savings if we committed to a three-year buy-in. So, it's more expensive than the other solutions that we were looking at, but we have the flexibility of a subscription model. I think the pricing is fair. For example, if we had a three-year tie-in SentinelOne versus Cylance or one of the others, there is not that much difference in pricing. There might be a few euro or dollars here and there, but it's negligible."
"At this time it is only a trial. After the trial period, I am going to purchase two licenses from SentinelOne."
"The license is per user."
"I rate Singularity Complete four out of 10 for affordability. SentinelOne costs more than traditional antivirus solutions, but we get more out of it. It hasn't saved us any money, but it's an EDR solution, so we get a lot of value from it."
"SentinelOne is more affordable than some competing products, and it's not overly expensive for what you're getting."
"The licensing is comparable to other solutions in the market. The pricing is competitive."
"While the cost of SentinelOne Singularity Complete might seem high at first glance, it's important to consider the value it offers."
"SentinelOne Singularity Complete is expensive, but we must be willing to pay for it if we want a high level of protection."
report
Use our free recommendation engine to learn which Extended Detection and Response (XDR) solutions are best for your needs.
879,310 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
11%
Manufacturing Company
10%
Government
9%
University
7%
Computer Software Company
17%
Manufacturing Company
9%
Financial Services Firm
7%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business3
Midsize Enterprise4
Large Enterprise2
By reviewers
Company SizeCount
Small Business87
Midsize Enterprise44
Large Enterprise77
 

Questions from the Community

What is your experience regarding pricing and costs for Cisco XDR?
My experience with pricing, setup costs, and licensing has been intriguing. I used to work for a Cisco partner, and I still have friends there with whom I discuss comparisons regarding some hardwar...
What needs improvement with Cisco XDR?
To improve Cisco XDR, I can't think of anything super meaningful because a couple of features I'm interested in are actually ones that integrate with Duo, but that's not widely used. I'm fine with ...
What is your primary use case for Cisco XDR?
My primary use case for Cisco XDR is log review from devices, and then doing analytics for quicker responses in the future to security incidents.
Cortex XDR by Palo Alto vs. Sentinel One
Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. The ability to reverse damage caused by ransomware with minimal interruptions to...
Which is better - SentinelOne or Darktrace?
Which solution is better depends on which is more suitable specifically for your company. Darktrace, for example, is meant for smaller to medium-sized businesses. It is also a good option for organ...
 

Also Known As

No data available
Sentinel Labs, SentinelOne Singularity
 

Interactive Demo

Demo not available
 

Overview

 

Sample Customers

Information Not Available
Havas, Flex, Estee Lauder, McKesson, Norfolk Southern, JetBlue, Norwegian airlines, TGI Friday, AVX, Fim Bank
Find out what your peers are saying about Cisco XDR vs. SentinelOne Singularity Complete and other solutions. Updated: December 2025.
879,310 professionals have used our research since 2012.