Try our new research platform with insights from 80,000+ expert users

HackerOne vs SentinelOne Singularity Identity comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 28, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Zafran Security
Sponsored
Ranking in Vulnerability Management
18th
Average Rating
9.6
Reviews Sentiment
7.8
Number of Reviews
6
Ranking in other categories
Continuous Threat Exposure Management (CTEM) (3rd)
HackerOne
Ranking in Vulnerability Management
28th
Average Rating
8.6
Reviews Sentiment
6.9
Number of Reviews
6
Ranking in other categories
Application Security Tools (20th), Bug Bounty Platforms (2nd), Penetration Testing Services (2nd), Attack Surface Management (ASM) (12th), AI Observability (13th)
SentinelOne Singularity Ide...
Ranking in Vulnerability Management
22nd
Average Rating
9.0
Reviews Sentiment
7.3
Number of Reviews
22
Ranking in other categories
Advanced Threat Protection (ATP) (14th), Threat Deception Platforms (3rd), Identity Threat Detection and Response (ITDR) (5th)
 

Mindshare comparison

As of December 2025, in the Vulnerability Management category, the mindshare of Zafran Security is 1.1%, up from 0.2% compared to the previous year. The mindshare of HackerOne is 0.6%, up from 0.2% compared to the previous year. The mindshare of SentinelOne Singularity Identity is 0.8%, up from 0.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Vulnerability Management Market Share Distribution
ProductMarket Share (%)
Zafran Security1.1%
SentinelOne Singularity Identity0.8%
HackerOne0.6%
Other97.5%
Vulnerability Management
 

Featured Reviews

Reviewer6233 - PeerSpot reviewer
Works at a healthcare company with 10,001+ employees
Has become an indispensable tool in our cybersecurity arsenal
While Zafran Security is already a powerful tool, there are areas where it could be further improved to provide even greater value. One key area for enhancement is the searching capabilities within its vulnerabilities module. By incorporating the ability to create Boolean searches, users would gain the ability to apply more complex filters and customize their search criteria. This would greatly enhance the precision and efficiency with which security teams can identify and prioritize vulnerabilities. Having such tailored search capabilities would save time and resources by narrowing down vast lists of vulnerabilities to those that meet specific parameters relevant to our unique risk environment. Additionally, integrating more robust reporting and visualization tools would be advantageous. Enhanced dashboards that offer customizable visual representations of risk configurations and threat landscapes would facilitate better communication with stakeholders, making it easier to explain vulnerabilities and the rationale behind certain security measures. This would also aid in demonstrating the improvements and value derived from existing security investments to leadership and non-technical team members.
Ruphus Muita - PeerSpot reviewer
Senior ICT Security Consultant at Applied Principles Limited
Has improved my motivation to submit bugs consistently through fast response and clear filtering
I think HackerOne can be improved by allowing new users to gain access to certain programs that are only open to known, renowned users. Sometimes new users don't receive invites just because they are new, despite potentially being very skilled hackers, so I feel new users should get more chances and opportunities. I am currently satisfied with the rewards, response time, and other aspects of the platform, so I don't have anything else to add about the necessary improvements. I give HackerOne a nine out of ten because if new hackers are given more opportunities, it could be a perfect 10 for me. However, the reason I gave a nine is that I don't have much to complain about; I specifically love the program and don't have many concerns.
MM
Senior Consultant at CGI
We have seen a night and day difference in mean time to detect reduction
Incident response is one of the key areas where the solution has been very useful. Whenever there is an incident, instead of being reactive, the government is now able to quickly gain the data that it needs to see what its end agency is also seeing and partner with them in real-time to look at the same data and to collaborate where needed, empowering the agency to be able to do their job. When it comes to the mean time to detect, we see a night and day difference. When you have an MSP model with visibility across multiple entities, your ability to get a tip, follow up on the tip, and investigate it is night and day. There's no comparison between having visibility and having across-agency visibility. SentinelOne has definitely reduced their mean time to respond. With this visibility, you can now respond. Before, there was no visibility, so we definitely see a big difference. With visibility into endpoint telemetry, SentinelOne does provide useful information to find threat actors and empowers those who are in the business of threat hunting. Prior to this, the alternative was partnering with an agency. going on-site and getting access. Now, being able to do that work remotely in real-time, it's a ninety-day difference in terms of being able to quickly, correctly, quickly respond and partner with the end agencies. That's a definite benefit. As an architect, I'm very curious about how AI takes security the next step forward, what it enables people to do differently, more quickly, or more comprehensively, and how that meets some of the needs today. I think that AI holds a lot of potential, and it can allow analysts to do their job quicker. It can allow them to do their job with more helpful context and, as a result, be able to perform orders of magnitude better than they would have without the tool.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"We are able to see the real risk of a vulnerability on our environment with our security tools."
"Zafran has become an indispensable tool in our cybersecurity arsenal."
"With Zafran Security, it integrates with your security controls, allowing you to take that risk score and reduce it based on the controls in place or increase the risk based on different factors, such as if the issue is internet reachable or if there's an exploit in the wild."
"We saw benefits from Zafran Security almost immediately after deploying it."
"Zafran is an excellent tool."
"Overall, we have seen about eighty-seven percent reduction of the number of vulnerabilities that require urgency to remediate, specifically the number of criticals."
"HackerOne is larger than WebCloud and has a better reputation than BugCloud, which results in a smoother process."
"The fast verification process impacts my motivation significantly because a quick response keeps me motivated, and if I'm going to try and hunt bugs today, I would appreciate a response within the day or at least within a few days."
"It helps me to get new sales, profits, and other benefits."
"HackerOne is larger than WebCloud and has a better reputation than BugCloud, which results in a smoother process."
"Apart from getting all the bug bounty opportunities, we also get the chance to practice in a safe environment, like a demo setup. These features are great for beginners who want to explore bug bounties in the future."
"The most valuable feature of HackerOne is its variety of programs. These programs provide depth into various areas, such as mobile, API, and websites."
"Incident response is one of the key areas where the solution has been very useful. Whenever there is an incident, instead of being reactive, the government is now able to quickly gain the data that it needs to see what its end agency is also seeing and partner with them in real-time to look at the same data and to collaborate where needed, empowering the agency to be able to do their job."
"The AI-based detection, scanning, prevention and mitigation features are the most valuable features."
"Their ability to quickly incorporate our needs into new releases is truly impressive and sets them apart."
"The product's initial setup phase is straightforward."
"The most valuable feature of SentinelOne Singularity Identity is its ability to detect based on behavior rather than just static signatures."
"All the features within the XDR are valuable as a whole for our organization."
"SentinelOne Singularity Identity provides machine learning capabilities for threat detection; among the use cases, I have found static AI, behavioral AI, and dynamic AI to help with malware detection, so there are three types of AI in the Singularity console agent."
"The AI provides a futuristic ML model. That helps a lot when it comes to shifting security approaches and hep better forecast attacks."
 

Cons

"Initially, we were somewhat concerned about the scalability of Zafran due to our large asset count and the substantial amount of information we needed to process."
"The dashboarding and reporting functionality of Zafran Security is an area that definitely could use some improvements."
"I think the ability to have some enhanced reporting capabilities is something they can improve on, as they have good reports but we have asked for some specific reporting enhancements."
"The ability to view the conversation between the triagers and the programs will be really good."
"Everything has become slower on HackerOne. I have noticed that older researchers receive all the private invites while newer ones receive fewer."
"Everything has become slower on HackerOne."
"One issue I've experienced is traffic. Many people try to participate when an opportunity with a bounty of around 1,000-15,000 dollars comes up. In this case, the first person to report the vulnerability gets the bounty. If a second person reports the same vulnerability, they are marked as duplicated instead of receiving some recognition. The second person also invested time finding the issue, so I think this can be improved."
"Response time can be improved. The HackerOne Trust team can be slow to respond sometimes. They're not using AI, which could help reduce the number of duplicate reports."
"Sometimes new users don't receive invites just because they are new, despite potentially being very skilled hackers, so I feel new users should get more chances and opportunities."
"We haven't received the expected support whenever we've had questions."
"To enhance our already strong partnership with SentinelOne, we should focus on improving collaboration."
"Support could be faster. They need a faster response time."
"The UI can be more user-friendly."
"I don't like SentinelOne's reporting tools. Their reports seem fine theoretically, but the issue is the sample size. For example, it will report that there were four incidents, and that equals 25 percent fewer incidents compared to the previous months. It would be a great improvement if I could expand the range to see reports for the last six months, but it's always one month. That would be an easy thing for them to resolve."
"We've brought three critical items to their attention regarding vulnerability management."
"The first-level support has room for improvement."
"Agent connectivity can be improved, as it is one aspect of the product with certain shortcomings."
 

Pricing and Cost Advice

Information not available
"The solution is free."
"The tool is open-source and free for bug bounty hunters."
"Ideally, I would like SentinelOne to lower their prices a little bit."
"SentinelOne Singularity Identity's pricing is cheaper than CrowdStrike and is really good."
"The pricing is a bit high."
"Compared to competitors, it's well-priced for the quality offered, and I don't see anyone surpassing them in that regard."
"The price of SentinelOne Singularity Identity is relatively high, but it offers numerous features and capabilities that make it well worth the investment."
"The price is affordable."
"SentinelOne seemed to offer more while being priced lower than its competitors."
"The cost of SentinelOne Singularity Identity is better than CrowdStrike."
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
879,259 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
11%
Computer Software Company
8%
Manufacturing Company
8%
Outsourcing Company
5%
Computer Software Company
15%
Manufacturing Company
10%
Comms Service Provider
10%
Financial Services Firm
10%
Computer Software Company
12%
Manufacturing Company
8%
Financial Services Firm
7%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business4
Large Enterprise3
By reviewers
Company SizeCount
Small Business4
Midsize Enterprise5
Large Enterprise13
 

Questions from the Community

What is your experience regarding pricing and costs for Zafran Security?
Since we stood Zafran Security up in our private cloud, we handle the maintenance on our side. As we opted not to use...
What needs improvement with Zafran Security?
In terms of areas for improvement, Zafran Security is doing a really great job as a new and emerging company. Oftenti...
What is your primary use case for Zafran Security?
My use cases for Zafran Security revolve around two primary areas. One is around vulnerability management and priorit...
What is your experience regarding pricing and costs for HackerOne?
I have not experienced any costs since I use HackerOne independently, just logging into the site, hunting bugs, and s...
What needs improvement with HackerOne?
I think HackerOne can be improved by allowing new users to gain access to certain programs that are only open to know...
What is your primary use case for HackerOne?
My main use case for HackerOne is mostly for submitting bugs. I get into the programs listed there, find one that is ...
What is your experience regarding pricing and costs for SentinelOne Singularity Identity?
I have no visibility into pricing, setup costs, or licensing as the government handles these aspects directly with Se...
What needs improvement with SentinelOne Singularity Identity?
Regarding improvements, I believe that API integration in third-party applications could be better. The Singularity t...
What is your primary use case for SentinelOne Singularity Identity?
One of the main use cases I describe is that we face lateral movement in our customer's server side. The customer is ...
 

Also Known As

No data available
HackerOne Assets, HackerOne Pentesting Services, HackerOne Security Assessments, HackerOne Vulnerability Management
No data available
 

Overview

 

Sample Customers

Information Not Available
Anthropic, Crypto.com, General Motors, GitHub, Goldman Sachs, Uber, and the U.S. Department of Defense
Information Not Available
Find out what your peers are saying about HackerOne vs. SentinelOne Singularity Identity and other solutions. Updated: December 2025.
879,259 professionals have used our research since 2012.