Hunters vs SentinelOne Singularity Endpoint comparison

Hunters and SentinelOne are both solutions in the Security Information and Event Management (SIEM) category. Hunters is ranked #37 with an average rating of 8.0, while SentinelOne is ranked #6 with an average rating of 8.8. Additionally, 100% of Hunters users are willing to recommend the solution, compared to 98% of SentinelOne users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Apr 9, 2026

SentinelOne Singularity Complete and Hunters compete in cybersecurity with threat detection and response. Hunters seems to have an advantage in features, while SentinelOne is preferred for pricing and support.

Features: SentinelOne Singularity Complete provides autonomous security with AI-driven threat detection, response across endpoints, and robust security capabilities. Hunters offers advanced data correlation, automated threat remediation, and enhanced contextual insights.

Ease of Deployment and Customer Service: SentinelOne offers streamlined deployment and robust support with an intuitive setup. Hunters provides efficient deployment and proactive, tailored customer service during onboarding.

Pricing and ROI: SentinelOne Singularity Complete has competitive pricing and substantial ROI with comprehensive endpoint protection. Hunters, while priced higher, offers significant ROI through advanced threat analytics and detection capabilities.

To learn more, read our detailed Security Information and Event Management (SIEM) Report (Updated: March 2026).

Buyer's Guide

Security Information and Event Management (SIEM)

March 2026

Download the complete report

Helped 886,426 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

VikramSingh8

Security Delivery Manager at Accenture

Advanced detectors streamline threat monitoring with many use cases

Hunter support is functional yet not exceptional. Their support engineers could be more advanced and faster in providing solutions. Their turnaround time could improve to match other tools. When feedback is provided, they consider it and indicate if it is in the development stage. They commit to fixing bugs and developing the module or feature, however, take quite a lot of time. I would rate their customer support as needing improvement. Another area needing improvement is integration capabilities, as they are not yet fully compatible. Users still have to rely on third-party software or integration tools. Furthermore, they should incorporate more GenAI capabilities, a current buzzword, and enable predictive use cases. Their tools should be capable of reading the environment, making adaptations, and automatically tweaking settings as per client or environmental needs, similar to capabilities provided by other SIEM tools.

Read full review

Vaibhav Mahendra Kolhe

Soc Analyst at Softcell Technologies Limited

Automation has reduced alerts and freed the soc team to focus on faster incident response

Regarding mean time to respond, the improvements I see with SentinelOne Singularity Complete are that genuine files also get alerts. We are getting false positives, but we are also getting genuine true positive alerts. The improvement will be deep visibility because as I am using Splunk as a SIEM, I compare deep visibility with Splunk, but deep visibility has limited access with only a 14-day policy to retain logs. The improvement will be in overall policy management. The third point will be the complexity of policies. If we want some endpoints to use only USB or if we need to block USB on some points, the policy management is very complex. The fourth point will be that Mac OS and Linux don't have the rollback policy; that policy is only for Windows. These four points are improvements if SentinelOne Singularity Complete can address them. Data privacy and security when utilizing Purple AI is crucial for SentinelOne Singularity Complete, and SentinelOne Singularity Complete lacks in data security. Data security is very important in this world. In my organization, if we deploy SentinelOne Singularity Complete and we have integrated all the firewalls, all devices, and AWS devices to SentinelOne Singularity Complete, logs will be forwarded to SentinelOne Singularity Complete through SentinelOne Singularity Complete. However, SentinelOne Singularity Complete doesn't have data security solutions such as Forcepoint DLP or 48 layer; SentinelOne Singularity Complete doesn't have that DLP solution. From the data security point of view, SentinelOne Singularity Complete is not good.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The live terminal is probably the best thing ever. It gives you the access to get straight onto any machine."

"The best feature of Cortex XDR by Palo Alto Networks is that it collects logs from different sections such as the endpoint, the network, and the cloud, making it easy to investigate alerts, collect some of the investigation packages related to the infected machines, and provide live response."

"It has a higher cost than other solutions, like CrowdStrike or Microsoft’s EDR tools, but it reduces the cost of our operations because it’s a new generation antivirus tool."

"Cortex XDR features advanced threat detection capabilities."

"They have a new GUI which is just fantastic."

"Palo Alto is one of the tech vendors that always provides top-of-the-line products."

"The solution allows us to make investigations. Other XDR solutions also provide similar capabilities but for investigation, Cortex XDR is better."

"My advice for others looking into using Cortex is that it is very easy to use and very useful for the customer environment, whether it's a public or private one."

More Cortex XDR by Palo Alto Networks pros

"Hunter proactively provides a set of five to six hundred use cases, categorized based on cloud use cases, endpoint use cases, parameter use cases, and malicious use cases."

"Other SIEM tools base their license cost on the volume of data processed, often charging by how much TB or GB data is processed. Hunter, however, charges based on the number of data sources and the number of data entities integrated, which saves money."

"SentinelOne Singularity Complete has behavior-based AI that detects alerts that are not predefined without relying on predefined rules, detecting zero-day attacks or any behavioral changes in the baseline of the user or any suspicious anomalies through AI-based threat detection only."

"In incidents, SentinelOne's remediation is excellent; we can immediately see if the threat type is dynamic or static."

"The most valuable feature is the automatic remediation."

"The product is a lighter client. Our previous solution ran heavy on the workstation and caused performance issues."

"All of the features are valuable. The way that it integrates into management with fault correction capabilities over is especially valuable. Any of the full gamut of the features that it provides are useful to us."

"Singularity Platform's best features are its scheduled reports and its automated end-of-day business capabilities, which allow any activities that occur projected or expected to come in overnight without manual intervention."

"The deep visibility and the ability to perform security investigations and assess our endpoint security posture are the most valuable features."

"Ransomware blocking is a better feature in SentinelOne Singularity."

More SentinelOne Singularity Endpoint pros

Cons

"The technical support is not very good. I find the process difficult."

"Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth."

"Technology evolves every day, so it would be nice if it gets more secure. It can also have more integration with other platforms."

"While using Cortex, I noticed some aspects that could be improved, such as increasing the synchronization speed between XDR and Xnor."

"They've been having some issues with updating their endpoint agents, and it has been quite frustrating."

"As an improvement, I would like to see enhanced connection speeds."

"It takes time to scan the servers and devices."

"The MAC agent is not as robust feature-wise as the PC version."

More Cortex XDR by Palo Alto Networks cons

"Hunter support is functional yet not exceptional. Their support engineers could be more advanced and faster in providing solutions."

"Hunter support is functional yet not exceptional."

"There aren't enough reporting capabilities for decision-makers."

"They should train their own people so that they can train us better. The theory is good."

"The filtering features of the application management console could be improved."

"The UI appears to be flat, and I wish to have the ability to customize it with features and buttons that are tailored to our needs."

"If it had a little bit more granularity in the roles and responsibilities matrix, that would help."

"The overall integration functionality for this solution could be improved."

"I would like to improve the reports because they are not so customizable and we would like more info from them."

"If they can extend their product further on the DLP side of it so that I don't have to have another agent run exclusively for DLP production, that would be ideal."

More SentinelOne Singularity Endpoint cons

Pricing and Cost Advice

"It has a yearly renewal."

"It is cost-effective compared to similar solutions. It fits for the small businesses through to the big businesses."

"The pricing is okay, although direct support can be expensive."

"It's about $55 per license on a yearly basis."

"The price of the solution could be reduced. I have customers that have voiced that the solution is good for the value but if I want to sell more of the solution the price reduction would help."

"If one wishes to work with another team or large number of users at a future point, he must purchase a license for them."

"Cortex XDR by Palo Alto Networks is quite an expensive solution."

"The tool's price is moderate."

More Cortex XDR by Palo Alto Networks pricing and cost advice

Information not available

"SentinelOne Singularity Complete is a fair price."

"The larger count you have, the deeper discount you will receive in your contract."

"SentinelOne Singularity Complete meets all enterprise requirements and is priced accordingly."

"SentinelOne Singularity Complete can be expensive for the SMB market but is suitable for enterprise-level organizations."

"The price is fair for what we are getting."

"SentinelOne is significantly less expensive than CrowdStrike. I recently did a price comparison between CrowdStrike and SentinelOne to determine where we are going for the next three years. CrowdStrike is 200% to 300% the cost."

"The pricing is on the higher end, making it less suitable for small or medium-sized businesses and perhaps not the ideal fit for the public sector where budget constraints may be more pronounced."

"Overall, it was a good experience. It is pretty easy for us to increase the number."

More SentinelOne Singularity Endpoint pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.

See recommendations

886,426 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Construction Company

13%

Financial Services Firm

13%

Manufacturing Company

Comms Service Provider

Financial Services Firm

10%

Computer Software Company

Construction Company

Non Profit

Computer Software Company

11%

Manufacturing Company

Financial Services Firm

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	44
Midsize Enterprise	20
Large Enterprise	48

No data available

By reviewers
Company Size	Count
Small Business	105
Midsize Enterprise	51
Large Enterprise	79

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

See all answers

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

See all answers

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

See all answers

What needs improvement with Hunters?

Hunter support is functional yet not exceptional. Their support engineers could be more advanced and faster in provid...

See all answers

What is your primary use case for Hunters?

Hunter is a very new SIEM in the market. It is definitely a broad market for us as they are trying to establish a new...

See all answers

What advice do you have for others considering Hunters?

Their knowledge base is good. When starting with Hunter, ensure you have one or two sessions to understand navigation...

See all answers

Which is better - SentinelOne or Darktrace?

Which solution is better depends on which is more suitable specifically for your company. Darktrace, for example, is ...

See all answers

What do you like most about SentinelOne Singularity?

The Ranger feature is valuable.

See all answers

What is your experience regarding pricing and costs for SentinelOne Singularity?

It is neither too costly, but definitely, it is one of the advantages that SentinelOne is quite adapted towards the p...

See all answers

Comparisons

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Compared 8% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Symantec Endpoint Security vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

Trellix Endpoint Security Platform vs Cortex XDR by Palo Alto Networks

Compared 2% of the time

More Cortex XDR by Palo Alto Networks Competitors

Anomali vs Hunters

Compared 16% of the time

Huntress Managed SIEM vs Hunters

Compared 14% of the time

Anvilogic vs Hunters

Compared 13% of the time

Cynet vs Hunters

Compared 9% of the time

Panther vs Hunters

Compared 8% of the time

More Hunters Competitors

CrowdStrike Falcon vs SentinelOne Singularity Endpoint

Compared 5% of the time

Fortinet FortiEDR vs SentinelOne Singularity Endpoint

Compared 4% of the time

Microsoft Defender for Endpoint vs SentinelOne Singularity Endpoint

Compared 3% of the time

Huntress Managed EDR vs SentinelOne Singularity Endpoint

Compared 3% of the time

Trellix Endpoint Security Platform vs SentinelOne Singularity Endpoint

Compared 2% of the time

More SentinelOne Singularity Endpoint Competitors

Product Reports

Buyer's Guide

Cortex XDR by Palo Alto Networks

April 2026

Download Cortex XDR by Palo Alto Networks product report

Buyer's Guide

Security Information and Event Management (SIEM)

March 2026

Download Hunters product report

Buyer's Guide

SentinelOne Singularity Endpoint

March 2026

Download SentinelOne Singularity Endpoint product report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

Hunters.AI

Sentinel Labs, SentinelOne Singularity, Singularity Platform

Interactive Demo

Demo not available

Palo Alto Networks

Hunters

Demo not available

SentinelOne

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

Hunters Security Operations Platform is a Human-Driven, AI-Powered SIEM alternative that revolutionize the way SOCs operate. Hunters automates the entire TDIR process, replacing repetitive human work with machine-powered detection, enrichment, correlation, prioritization and investigation, freeing analysts to proactively protect their organizations. Hunters utilizes an open security data lake architecture, ensuring complete and cost effective coverage of the entire security stack.

Hunters

SentinelOne Singularity Complete is an advanced endpoint security platform featuring centralized management across multiple locations. It leverages AI-driven behavior detection, threat prioritization, and ransomware rollback for enhanced protection and streamlined operations.

With a focus on endpoint protection, threat detection, and automated response, SentinelOne Singularity Complete provides comprehensive security through AI-powered behavioral analysis and real-time threat detection. The centralized console simplifies management, offering seamless integration and minimal system impact. Its robust reporting capabilities facilitate compliance with audit-ready reports. Lightweight agents operate across diverse environments, improving visibility and performance while curbing manual efforts. To optimize its utility, faster console load times and improved customizability in reports and dashboards are recommended. Users may benefit from smoother integration with IT tools and enhanced policy management flexibility, as well as upgraded agent processes and simplified endpoint deployment. Expanding built-in analytics and refining alert management can further heighten platform efficacy.

What are the key features of SentinelOne Singularity Complete?

AI-Powered Detection: Utilizes advanced AI to identify potential threats based on behavior.
Automatic Remediation: Automatically rectifies detected issues, reducing response times.
Ransomware Rollback: Restores data to previous states if affected by ransomware attacks.
Centralized Dashboards: Provides real-time insights through intuitive dashboards.
Threat Prioritization: Identifies and ranks threats based on potential impact.

What benefits should users look for in reviews?

Integration: Seamlessly connects with security solutions to enhance risk management.
Minimal System Impact: Operates efficiently, preserving system performance.
Enhanced Protection: Delivers robust threat defense through AI-driven technology.
Compliance Support: Offers detailed reporting for audit readiness.
User Convenience: Combines autonomous decision-making with an intuitive interface.

In various industries, SentinelOne Singularity Complete is implemented for endpoint protection and incident management. Companies rely on it for its real-time threat detection and automated response capabilities, ensuring compliance and reduced manual intervention. Its adaptive nature supports diverse environments, enhancing operational efficiency.

SentinelOne

Sample Customers

CBI Health Group, University Honda, VakifBank

We're happy to support organizations like Booking.com, ChargePoint, Yext, Red Ventures and Cimpress who leverage Hunters SOC Platform to transform their security teams' operations.

Havas, Flex, Estee Lauder, McKesson, Norfolk Southern, JetBlue, Norwegian airlines, TGI Friday, AVX, Fim Bank

Buyer's Guide

Security Information and Event Management (SIEM)

March 2026

Download Free Report

Find out what your peers are saying about Splunk, Wazuh, IBM and others in Security Information and Event Management (SIEM). Updated: March 2026.

DOWNLOAD NOW

886,426 professionals have used our research since 2012.

See our list of best Security Information and Event Management (SIEM) vendors and best Extended Detection and Response (XDR) vendors.

We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.