CompassOne by Blackpoint Cyber vs SentinelOne Singularity Endpoint comparison

CompassOne by Blackpoint Cyber vs. SentinelOne Singularity Endpoint

Download the complete report

Helped 915,341 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Mindshare comparison

As of October 2026, in the Endpoint Detection and Response (EDR) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.7%, down from 3.9% compared to the previous year. The mindshare of CompassOne by Blackpoint Cyber is 0.8%, up from 0.4% compared to the previous year. The mindshare of SentinelOne Singularity Endpoint is 5.2%, down from 5.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Detection and Response (EDR) Mindshare Distribution
Product	Mindshare (%)
SentinelOne Singularity Endpoint	5.2%
Cortex XDR by Palo Alto Networks	3.7%
CompassOne by Blackpoint Cyber	0.8%
Other	90.3%

Endpoint Detection and Response (EDR)

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

Gary Herbstman

Owner at Byte Solutions Inc.

Experienced reduced alert fatigue with streamlined notifications

We use Blackpoint Cyber MDR for our higher-end clients who need a higher level of control over security We get a deeper look into security related events that are otherwise difficult find and analyze. Security operations does a good job of weeding out the noise. I appreciate that there are…

Read full review

Vaibhav Mahendra Kolhe

Soc Analyst at Softcell Technologies Limited

Automation has reduced alerts and freed the soc team to focus on faster incident response

Regarding mean time to respond, the improvements I see with SentinelOne Singularity Complete are that genuine files also get alerts. We are getting false positives, but we are also getting genuine true positive alerts. The improvement will be deep visibility because as I am using Splunk as a SIEM, I compare deep visibility with Splunk, but deep visibility has limited access with only a 14-day policy to retain logs. The improvement will be in overall policy management. The third point will be the complexity of policies. If we want some endpoints to use only USB or if we need to block USB on some points, the policy management is very complex. The fourth point will be that Mac OS and Linux don't have the rollback policy; that policy is only for Windows. These four points are improvements if SentinelOne Singularity Complete can address them. Data privacy and security when utilizing Purple AI is crucial for SentinelOne Singularity Complete, and SentinelOne Singularity Complete lacks in data security. Data security is very important in this world. In my organization, if we deploy SentinelOne Singularity Complete and we have integrated all the firewalls, all devices, and AWS devices to SentinelOne Singularity Complete, logs will be forwarded to SentinelOne Singularity Complete through SentinelOne Singularity Complete. However, SentinelOne Singularity Complete doesn't have data security solutions such as Forcepoint DLP or 48 layer; SentinelOne Singularity Complete doesn't have that DLP solution. From the data security point of view, SentinelOne Singularity Complete is not good.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The normal protection was really effective, and we detected situations that if we didn't have Cortex XDR by Palo Alto Networks, it's highly likely that we would have been affected, but it protected the infrastructure."

"I like the centralized console and the predictive analysis it does of malware. It is very stable and also scalable."

"Implementing Cortex XDR by Palo Alto Networks has had a significant impact on my security analyst workload because it becomes much easier."

"The most valuable feature is that you can select remote access of any machine for sandboxing."

"The product's initial setup phase is very easy."

"It can automatically correlate events and logs, which is very helpful for an IT administrator. It can correlate different kinds of malware activities over a network, agent, or host system. You do not need to do it manually. It is a good feature. It is also a user-friendly solution. We have deployed it on the cloud because our space does not provide any flexibility for on-premises deployment, but Palo Alto has added some flexibility to install it on-premises. It must be like the same Cortex XDR agent for all the VPN services, web filtering services, and everything else."

"Cortex XDR by Palo Alto Networks has helped us a lot with securing the whole environment and the whole IT structure, giving us full knowledge of what is happening on the client and enabling us to take action right away from a single point for managing security operations on the hosts."

"The one feature of Palo Alto Networks Traps that our organization finds most valuable is the App ID service."

More Cortex XDR by Palo Alto Networks pros

"The solution also watches over Microsoft 365 and keeps a copy of logs."

"I appreciate that there are people behind the scenes sorting out valuable alerts from those that are not, so I only get alerts when they are real."

"On a scale from one to ten, I would rate the overall solution as a ten."

"The solution is all encompassing and can incorporate email monitoring."

"Their SOC is phenomenal in not monitoring and responding and taking action."

"On my end, the most valuable feature of this solution is that I can install it and forget about it. After that, their SOC team takes over and they only call me when there's a problem."

"We love the API. We use it to generate robust reporting, and we also developed tools to perform agent actions remotely without needing to provide all IT staff with console access."

"The most valuable feature is the ability to drill down into individual sequences of processes."

"Overall, the time saved, lower incident impact, and improved security confidence clearly justified the investment."

"Sentinel One has improved our organization by protecting the environment we are working in."

"The most valuable aspect, in any scenario, was the rollback feature."

"SentinelOne is a stable solution."

"For endpoint protection, I see SentinelOne as the perfect solution, and for the server, I feel that Deep Security from Trend Micro is working fine as I have seen various organizations using it."

"The security aspect is the most valuable feature for me."

More SentinelOne Singularity Endpoint pros

Cons

"The tool needs to be improved in terms of integration and interface."

"It should support more mobile operating systems. That is one of the cons of their infrastructure right now."

"If he is using a smaller company, he can depend on some other tools because Cortex XDR by Palo Alto Networks is a bit expensive."

"There are some false positives."

"There is a severe gap in functionality between Windows, Linux, and Mac versions. For example all folder restriction settings are Windows only. Traps 5.0+ does not have SAML / LDAP integration."

"Currently, if you use Palo Alto endpoint protection as the only solution it's very complicated to remove pre-existing threats."

"This is a very costly product."

"It would be good if they could make an exception for applications. Sometimes, it can be a bit of a challenge to make exceptions for certain applications that have been used as rogue."

More Cortex XDR by Palo Alto Networks cons

"The feature we keep asking for is a vulnerability scan."

"The interface could be more intuitive."

"The interface could be more intuitive. More transparency is needed in the interface as a lot of details are hidden behind the scenes, making them difficult or impossible to access."

"While I am very satisfied with the service, supporting additional platforms, particularly Linux support, would be a beneficial improvement."

"The solution does not tie into other EDR products like CyberArk or CrowdStrike but that might be more useful."

"Some texts seem to report items as normal too quickly."

"SentinelOne's performance and the accuracy of its incident filtering could be improved."

"The price is a bit high. They should make their pricing model more affordable."

"SentinelOne's phishing feature could be improved."

"The process of uninstalling and reinstalling older agent updates needs improvement."

"We have had cases where Singularity Complete has caused applications to malfunction."

"In terms of improvement areas for SentinelOne Singularity Endpoint, I think there are a couple of features that are improving, particularly the dashboard such as creating a multi-function dashboard."

"It's fine. It's correcting all the EFC files with a virus. All the achievements, maximum EFC files. Many EFC files will be flagged as a virus. Some virus databases need to be updated. The model is good at finding many EFC files. The trouble is it needs to be updated."

"The dashboards can be improved, and their dashboarding functionality needs to be better. The way the dashboards look is not really impactful or meaningful."

More SentinelOne Singularity Endpoint cons

Pricing and Cost Advice

"Cortex XDR's pricing is ok."

"I don't like that they have different types of licenses."

"It's way too expensive, but security is expensive. You pay for your licensing, and then you pay for someone to monitor the stuff."

"Cortex XDR’s pricing is very reasonable."

"The price of the product is not very economical."

"The pricing seems fair, and I do like the licensing model. You use wherever they are, and it is elastic."

"The tool's price is moderate."

"We didn't have to pay any additional fee for the cloud instance. It just came with the renewal, which was nice."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"The pricing is reasonable."

"The pricing is in line with other products."

"The solution is a bit cheaper than CrowdStrike Falcon Pro and more expensive than smaller solutions. Still, it has a pretty reasonable price point, as I appreciate the flexibility SentinelOne Singularity Complete offers."

"My understanding is that we did a pretty good deal on SentinelOne. A part of that is because we were their customers very early on, and we also use their products a lot. We are interested in the new products that come out. We go to their demos, and we go to their events. We do save a lot of money. It is not cheap, but it is worth it. We spend a lot of money on a lot of things, and most of them do not do as much as SentinelOne."

"The per-seat cost is low, but you have to commit to a certain number of licenses for a year."

"The pricing is very reasonable."

"The price of Singularity Complete compared to some of its competitors is competitive."

"The license is paid annually and is competitive."

"SentinelOne Singularity Complete can be expensive for the SMB market but is suitable for enterprise-level organizations."

"I don't deal with the cost side of things, but the licensing, as far as endpoints go, is a pretty straightforward and simple process."

More SentinelOne Singularity Endpoint pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Detection and Response (EDR) solutions are best for your needs.

See recommendations

915,341 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Outsourcing Company

12%

Comms Service Provider

12%

Construction Company

11%

Manufacturing Company

10%

Outsourcing Company

Computer Software Company

Financial Services Firm

Comms Service Provider

Outsourcing Company

11%

Manufacturing Company

Computer Software Company

Financial Services Firm

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	47
Midsize Enterprise	21
Large Enterprise	55

No data available

By reviewers
Company Size	Count
Small Business	138
Midsize Enterprise	75
Large Enterprise	98

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

What is your experience regarding pricing and costs for Blackpoint Cyber MDR?

The pricing is great considering what we are receiving.

What needs improvement with Blackpoint Cyber MDR?

While I am very satisfied with the service, supporting additional platforms, particularly Linux support, would be a b...

What is your primary use case for Blackpoint Cyber MDR?

The solution serves as a baseline security offering. We have implemented it for every client that we do business with.

Which is better - SentinelOne or Darktrace?

Which solution is better depends on which is more suitable specifically for your company. Darktrace, for example, is ...

What is your experience regarding pricing and costs for SentinelOne Singularity?

It is neither too costly, but definitely, it is one of the advantages that SentinelOne is quite adapted towards the p...

What needs improvement with SentinelOne Singularity?

I have encountered an issue related to the alerting mechanism in SentinelOne Singularity Complete. Sometimes I need t...

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Comparisons

Compared 15% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

Symantec Endpoint Security vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

Trellix Endpoint Security Platform vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

More Cortex XDR by Palo Alto Networks Competitors

Adlumin Security Operations vs CompassOne by Blackpoint Cyber

Compared 7% of the time

ConnectWise SIEM vs CompassOne by Blackpoint Cyber

Compared 6% of the time

Huntress Managed EDR vs CompassOne by Blackpoint Cyber

Compared 6% of the time

LevelBlue Managed Detection and Response vs CompassOne by Blackpoint Cyber

Compared 6% of the time

SentinelOne Wayfinder Threat Detection and Response vs CompassOne by Blackpoint Cyber

Compared 4% of the time

More CompassOne by Blackpoint Cyber Competitors

CrowdStrike Falcon vs SentinelOne Singularity Endpoint

Compared 4% of the time

Fortinet FortiEDR vs SentinelOne Singularity Endpoint

Compared 3% of the time

Microsoft Defender for Endpoint vs SentinelOne Singularity Endpoint

Compared 3% of the time

Trellix Endpoint Security Platform vs SentinelOne Singularity Endpoint

Compared 3% of the time

Darktrace vs SentinelOne Singularity Endpoint

Compared 2% of the time

More SentinelOne Singularity Endpoint Competitors

Product Reports

Cortex XDR by Palo Alto Networks

October 2026

Download Cortex XDR by Palo Alto Networks product report

Managed Detection and Response (MDR)

Download CompassOne by Blackpoint Cyber product report

SentinelOne Singularity Endpoint

Download SentinelOne Singularity Endpoint product report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

Blackpoint Cyber Managed Detection + Response, Blackpoint Cyber Managed Detection and Response

Sentinel Labs, SentinelOne Singularity, Singularity Platform

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

CompassOne by Blackpoint Cyber delivers comprehensive MDR capabilities, offering SLA-driven alert notifications, in-depth network discovery, and Microsoft 365 log preservation. Its SOC team efficiently manages monitoring tasks, ensuring genuine threats are prioritized and distractions minimized.

CompassOne enhances cybersecurity by offering email monitoring, app control, and effective threat identification, preventing incidents like a compromised device affecting corporate networks. While prompt in threat reporting, a need exists for detailed analysis and vulnerability scanning. Users seek integration with platforms such as CyberArk and CrowdStrike and support for Linux systems. The platform strengthens security through alert monitoring, virus prevention, account takeover prevention, and establishing a security baseline for both organizational and lab environments, with up to half of an organization's staff utilizing it and expansion plans in progress.

What are the key features of CompassOne?

SLA Notifications: Provides timely alerts to ensure swift threat response.
Network Discovery: Offers detailed insight into local networks.
Microsoft 365 Log Preservation: Maintains extensive records for compliance.
Email Monitoring and App Control: Detects and blocks suspicious activities efficiently.
Threat Prioritization: Minimizes distractions by focusing on genuine threats.

What benefits should users expect from CompassOne?

Efficient Monitoring: Relieves teams by offloading monitoring tasks to expert SOC teams.
Threat Mitigation: Protects against device compromise and secures networks.
Comprehensive Security: Extends capabilities through email and application vigilance.
Strategic Deployment: Adaptable for both enterprise and lab environments.

In sectors where security monitoring is crucial, CompassOne is implemented to observe computers, servers, and Office 365 environments, mitigating risks thoughtfully and efficiently. Companies engage its robust MDR functionalities to fend off viruses and account breaches while leveraging its security implementation services for a foundational security setup.

Blackpoint Cyber

SentinelOne Singularity Complete is an advanced endpoint security platform featuring centralized management across multiple locations. It leverages AI-driven behavior detection, threat prioritization, and ransomware rollback for enhanced protection and streamlined operations.

With a focus on endpoint protection, threat detection, and automated response, SentinelOne Singularity Complete provides comprehensive security through AI-powered behavioral analysis and real-time threat detection. The centralized console simplifies management, offering seamless integration and minimal system impact. Its robust reporting capabilities facilitate compliance with audit-ready reports. Lightweight agents operate across diverse environments, improving visibility and performance while curbing manual efforts. To optimize its utility, faster console load times and improved customizability in reports and dashboards are recommended. Users may benefit from smoother integration with IT tools and enhanced policy management flexibility, as well as upgraded agent processes and simplified endpoint deployment. Expanding built-in analytics and refining alert management can further heighten platform efficacy.

What are the key features of SentinelOne Singularity Complete?

AI-Powered Detection: Utilizes advanced AI to identify potential threats based on behavior.
Automatic Remediation: Automatically rectifies detected issues, reducing response times.
Ransomware Rollback: Restores data to previous states if affected by ransomware attacks.
Centralized Dashboards: Provides real-time insights through intuitive dashboards.
Threat Prioritization: Identifies and ranks threats based on potential impact.

What benefits should users look for in reviews?

Integration: Seamlessly connects with security solutions to enhance risk management.
Minimal System Impact: Operates efficiently, preserving system performance.
Enhanced Protection: Delivers robust threat defense through AI-driven technology.
Compliance Support: Offers detailed reporting for audit readiness.
User Convenience: Combines autonomous decision-making with an intuitive interface.

In various industries, SentinelOne Singularity Complete is implemented for endpoint protection and incident management. Companies rely on it for its real-time threat detection and automated response capabilities, ensuring compliance and reduced manual intervention. Its adaptive nature supports diverse environments, enhancing operational efficiency.

SentinelOne

Sample Customers

CBI Health Group, University Honda, VakifBank

CoreRecon, Peerless Tech Solutions, Lorien Health

Havas, Flex, Estee Lauder, McKesson, Norfolk Southern, JetBlue, Norwegian airlines, TGI Friday, AVX, Fim Bank

CompassOne by Blackpoint Cyber vs. SentinelOne Singularity Endpoint