Malwarebytes Teams vs SentinelOne Singularity Endpoint comparison

Malwarebytes Teams vs. SentinelOne Singularity Endpoint

Download the complete report

Helped 916,212 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cortex XDR by Palo Alto Net...

Mindshare comparison

As of October 2026, in the Endpoint Protection Platform (EPP) category, the mindshare of Cortex XDR by Palo Alto Networks is 3.8%, up from 3.7% compared to the previous year. The mindshare of Malwarebytes Teams is 1.5%, down from 2.2% compared to the previous year. The mindshare of SentinelOne Singularity Endpoint is 4.5%, down from 4.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Endpoint Protection Platform (EPP) Mindshare Distribution
Product	Mindshare (%)
SentinelOne Singularity Endpoint	4.5%
Cortex XDR by Palo Alto Networks	3.8%
Malwarebytes Teams	1.5%
Other	90.2%

Endpoint Protection Platform (EPP)

Featured Reviews

ABHISHEK_SINGH

Senior Process Expert at A.P. Moller - Maersk

Gained full visibility and streamlined threat detection through behavior-based insights and AI integration

Initially, we got to have a lot of false positives when we onboarded, but nowadays it's quite smooth. We have fine-tuned our security policies and allowed different levels of policies to get rid of those false positives. Currently, we are getting a fairly good amount of incidents that are not false positives or benign, but actionable items. The process is streamlined. In the initial days, the operations used to get involved in a lot of benign and other activities, but now the process is streamlined. We are leveraging the auto-detection and remediation plans. The operations teams are now more involved in other business roles as well, not just looking into the logs and fetching out what's happening there. They have fixed a lot of things. Initially, they didn't have IAC code drift detection, cloud posture management, or security posture management, but they have those now. They purchased different vendors and did a merger with that. They have now Prisma Cloud that gets integrated and now they are working with Cortex Cloud. Everything that was negative has now been addressed, and the product altogether looks to be in a very better and mature shape now. Currently, it's more or less detecting the workloads with AI-based best practices. Since most organizations are consuming AI agents and other things, we are looking forward to seeing what other feature enhancements Palo Alto can support in that.

Read full review

reviewer2594097

Chief Executive Officer at a wholesaler/distributor with 11-50 employees

Exceptional malware protection with regular updates and behavior-based detection

There are no built-in backups or integrated backup options, which could be an opportunity. The free version is effective, however, the paid version is pricey compared to it. Other customers have mentioned issues with false positives. It lacks enterprise-level management and more enterprise functionality. CrowdStrike and SentinelOne are much more enterprise-grade solutions. Malwarebytes has limited integration with cybersecurity tools and lacks enterprise integrations because it is not an enterprise product.

Read full review

Vaibhav Mahendra Kolhe

Soc Analyst at Softcell Technologies Limited

Automation has reduced alerts and freed the soc team to focus on faster incident response

Regarding mean time to respond, the improvements I see with SentinelOne Singularity Complete are that genuine files also get alerts. We are getting false positives, but we are also getting genuine true positive alerts. The improvement will be deep visibility because as I am using Splunk as a SIEM, I compare deep visibility with Splunk, but deep visibility has limited access with only a 14-day policy to retain logs. The improvement will be in overall policy management. The third point will be the complexity of policies. If we want some endpoints to use only USB or if we need to block USB on some points, the policy management is very complex. The fourth point will be that Mac OS and Linux don't have the rollback policy; that policy is only for Windows. These four points are improvements if SentinelOne Singularity Complete can address them. Data privacy and security when utilizing Purple AI is crucial for SentinelOne Singularity Complete, and SentinelOne Singularity Complete lacks in data security. Data security is very important in this world. In my organization, if we deploy SentinelOne Singularity Complete and we have integrated all the firewalls, all devices, and AWS devices to SentinelOne Singularity Complete, logs will be forwarded to SentinelOne Singularity Complete through SentinelOne Singularity Complete. However, SentinelOne Singularity Complete doesn't have data security solutions such as Forcepoint DLP or 48 layer; SentinelOne Singularity Complete doesn't have that DLP solution. From the data security point of view, SentinelOne Singularity Complete is not good.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"My advice for anybody who is considering Cortex XDR is that it is a complete solution, and has very good features."

"Palo Alto is one of the tech vendors that always provides top-of-the-line products."

"After installing this solution, it identified, blocked, and provided the complete attack chain, which was very helpful."

"The stability of the solution is very good. We have about 100 users on it right now, and we use it twice a week."

"WildFire AI is the best option for this product."

"The stability of this product is very good."

"Cortex XDR features advanced threat detection capabilities."

"Cortex is a very good total solution on the endpoints."

More Cortex XDR by Palo Alto Networks pros

"The solution is very good at scanning."

"It gets the job done, and they are consistently updating it monthly."

"The dashboard actually is good and it is simple."

"The protection is really good with Malwarebytes. It's also user friendly and quite easy to set up."

"We have a small IT team, and being able to manage even a small fleet of devices that are out in the field and being able to respond and remediate really quickly from the cloud-based console has been really helpful for us."

"It is intuitive and easy to use. For the most part, it does a good job of catching things. It is good at stopping stuff. I did a couple of tests with a password cracker. I tried to load that on, and Malwarebytes didn't let me do that, which was pretty good. It has a rollback feature that I haven't seen with any other company. If one of your endpoints are hit with mass ransomware, you could actually roll it back. I watched a demo of them do that, and it was pretty sweet."

"The most valuable features of Malwarebytes are the agents, user experience, efficiency of the findings, and MDR features."

"The most valuable features of Malwarebytes are the EDR and the complete feature set provided."

More Malwarebytes Teams pros

"The best feature of SentinelOne Singularity Complete is that you don't need to configure a lot with it because it provides an unmatched layer of protection out of the box."

"The way SentinelOne works and the way it is set up, I haven't been more impressed by any other product."

"I think that is where SentinelOne Singularity Endpoint stands out; they are doing quite great there, and at the same time, the Purple AI feature is much better."

"SentinelOne Singularity Endpoint has impacted our organization positively, mainly through cost savings compared to other endpoints."

"SentinelOne Singularity Complete has helped customers consolidate their security stack by offering superb threat hunting, excellent incident response, and compliance monitoring in the EDR, with ransomware protection being exceptionally well supported by the Rollback feature."

"It is priced by endpoint device, making it one of the well-priced solutions, as it is not too expensive and is a very good enterprise solution."

"All of the features are valuable. The way that it integrates into management with fault correction capabilities over is especially valuable. Any of the full gamut of the features that it provides are useful to us."

"The solution is overall very good in terms of protecting endpoints and servers from malicious activities, malware, cyber attacks, viruses, worms, and so on."

More SentinelOne Singularity Endpoint pros

Cons

"Fine-tuning the detection policy requires experience because the policy is very complex in Cortex XDR by Palo Alto Networks, and we get high false positive alerts."

"It is a complex solution to implement."

"I don't like that they have different types of licenses. For example, if users select a license, they think they will have all the platforms they need to improve their network or security. But after some time, Palo Alto Networks changed their licensing, and some of the features that, for example, were free at the beginning now have a cost. I think the integration can be improved. For example, a lot of tools are just integrated through APIs."

"Previously, the endpoint would leave the environment, not being on our VPN, essentially unable to interact with the server to upload files. It was unable to retrieve new file verdicts. It was using a thing called "local analysis" to determine if something was a malicious file or not. There was no dynamic analysis."

"The GUI could be improved. It's a little bit cumbersome. It could be more user-friendly."

"Cortex XDR by Palo Alto Networks can improve mobile integration to allow access to the console."

"In some cases, there are too many options for me, and it is a bit too hard to find some settings which I really need to implement."

"I have faced some issues with Cortex XDR by Palo Alto Networks; there is room for improvement in the sense that certain options prevent us from seeing and segregating data."

More Cortex XDR by Palo Alto Networks cons

"Malwarebytes is too simplistic. From a SOC IR perspective, it doesn't give you very much data around it. It doesn't tie things or provide SHA-1 and SHA-256 detection information, which makes it hard to do an additional investigation."

"Every once in a while, it gets clobbered by updates from other places. I don't think this should happen."

"The EPP solution lacks the sophisticated artificial intelligence required for automating reports and letting you know about things in real-time. It stops a suspicious activity in real-time, but it doesn't let you know in real-time. You have to look at a report, and then you find out that something is wrong. You have to manually kick off a scan. With the Advanced EDR solutions, Malwarebytes has the ability to alert you in real-time, but they still don't do automatic remediation or quarantining of devices. That is something that you still have to do manually. So, the endpoint protection piece, which is just like their basic endpoint protection, lacks AI. For the advanced detection and response piece, there is an add-on that comes with it, but it still doesn't go far enough in terms of automatic remediation of viruses. It won't separate that virus from your network if something happens. You have to manually go there and do it."

"There is room for improvement in the way it is deployed, in terms of being able to distribute it. Right now we have to get our hands on a machine to deploy it. It would be nice if there was an easier system."

"They can include advanced scanning and improve reporting. I scan malware on the pen drive. Some more reports need to be added for that. It should also provide better protection because we have a new version of the malware."

"It would be better if updates could be downloaded, and deployed, on-premises to avoid low bandwidth causing issues."

"Malwarebytes should improve its mobile compatibility."

"It's not good in search hunting."

More Malwarebytes Teams cons

"The speed of investigation of the MDR service team must be improved."

"From the data security point of view, SentinelOne Singularity Complete is not good."

"Prior to the purchase and recent changes, experiences with SentinelOne's support and product were not positive."

"We have had some stability issues with SentinelOne due to Windows 10 feature updates; it should be more stable."

"When retrieving results for logs in the AI SIEM of SentinelOne, there is a limitation where I can download up to 10,000 columns at a time, and the same constraint applies to vulnerability data."

"The management console."

"I believe their SLAs could be tighter, but overall it is a good platform."

"When I write that I need a query for AnyDesk blocking, they say again that this is not part of their job."

More SentinelOne Singularity Endpoint cons

Pricing and Cost Advice

"The solution has one subscription for endpoint protection and one subscription for detection and response. The two licenses combined give you the BRO version."

"In terms of the cost Cortex XDR by Palo Alto Networks is very expensive because we are a Mexican company and when you translate dollars to pesos the cost is very high. The solution is very expensive for Mexican companies. I understand that they have international prices, but I do not think it offsets the price enough for many companies in countries, such as Mexico. The amount it is reduced is not a massive percentage."

"I don't have any issues with the pricing. We are satisfied with the price."

"The solution is expensive. It's pricing is on a yearly-basis."

"Our customers have expressed that the price is high."

"This is an expensive solution."

"It's about $55 per license on a yearly basis."

"Cortex XDR's pricing is ok."

More Cortex XDR by Palo Alto Networks pricing and cost advice

"The platform pricing is competitive with other antivirus products."

"The cost may be something in the ballpark of $20-25 a year per computer."

"It is really expensive. We've got between 30 and 40 licenses every year, and for the number of licenses that we have, we're finding that Malwarebytes on average costs between $900 and $1,000 more per year than comparable options. We're paying about $3,300 per year for these licenses. There are no additional costs beyond the standard licensing fee."

"Yearly, it is around $50 per client."

"The price of Malwarebytes is in the middle range compared to other vendors."

"Its cost is around $60 a machine. The cost of the total solution for 250 people is about $8,500 a year. If we add EDR to it, it will bring that cost up to about $15,000. The cost for Carbon Black is about $25,000, which is $10,000 more, but you get all AI functions with it."

"I would say that it's affordable. It costs much less than Sentinel One, CrowdStrike, or anything of that nature. But, at the same time, you are getting what you pay for. So I would say it's one of the best when you're comparing traditional NextGen AVs like Webroot that aren't the best in the bunch."

"We expect to pay $1,000 USD a month, depending on the number of users."

More Malwarebytes Teams pricing and cost advice

"I rate Singularity Complete four out of 10 for affordability. SentinelOne costs more than traditional antivirus solutions, but we get more out of it. It hasn't saved us any money, but it's an EDR solution, so we get a lot of value from it."

"The pricing is reasonable."

"The product's pricing is at par with what you see among major competitors. It's higher than McAfee, yet cheaper than CrowdStrike."

"I can pay, for my environment, between $30,000 and $40,000 a year, and that's a pretty good deal."

"Overall, it was a good experience. It is pretty easy for us to increase the number."

"SentinelOne Singularity Complete is reasonably priced."

"For our use case, the solution is affordable. There are not any hidden fees."

"SentinelOne Singularity Complete is expensive, but we must be willing to pay for it if we want a high level of protection."

More SentinelOne Singularity Endpoint pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Endpoint Protection Platform (EPP) solutions are best for your needs.

See recommendations

916,212 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Comms Service Provider

13%

Outsourcing Company

12%

Construction Company

11%

Manufacturing Company

10%

Comms Service Provider

12%

Financial Services Firm

12%

Construction Company

Manufacturing Company

Outsourcing Company

11%

Manufacturing Company

Computer Software Company

Financial Services Firm

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	48
Midsize Enterprise	21
Large Enterprise	56

By reviewers
Company Size	Count
Small Business	22
Midsize Enterprise	8
Large Enterprise	6

By reviewers
Company Size	Count
Small Business	138
Midsize Enterprise	75
Large Enterprise	98

Questions from the Community

Cortex XDR by Palo Alto vs. Sentinel One

Cortex XDR by Palo Alto vs. SentinelOne SentinelOne offers very detailed specifics with regard to risks or attacks. ...

Comparing CrowdStrike Falcon to Cortex XDR (Palo Alto)

Cortex XDR by Palo Alto vs. CrowdStrike Falcon Both Cortex XDR and Crowd Strike Falcon offer cloud-based solutions th...

How is Cortex XDR compared with Microsoft Defender?

Microsoft Defender for Endpoint is a cloud-delivered endpoint security solution. The tool reduces the attack surface,...

What is your experience regarding pricing and costs for Malwarebytes?

I really hate the automatic rebilling without officially confirming it with me. It's an annoyance and they should at ...

What needs improvement with Malwarebytes?

It takes up too much space when it's trying to run in the background.

What is your primary use case for Malwarebytes?

My primary use case is that it's protecting me against malware.

Which is better - SentinelOne or Darktrace?

Which solution is better depends on which is more suitable specifically for your company. Darktrace, for example, is ...

What is your experience regarding pricing and costs for SentinelOne Singularity?

It is neither too costly, but definitely, it is one of the advantages that SentinelOne is quite adapted towards the p...

What needs improvement with SentinelOne Singularity?

I have encountered an issue related to the alerting mechanism in SentinelOne Singularity Complete. Sometimes I need t...

Microsoft Defender for Endpoint vs Cortex XDR by Palo Alto Networks

Comparisons

Compared 15% of the time

CrowdStrike Falcon vs Cortex XDR by Palo Alto Networks

Compared 4% of the time

Symantec Endpoint Security vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

Cortex XSIAM vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

Trellix Endpoint Security Platform vs Cortex XDR by Palo Alto Networks

Compared 3% of the time

More Cortex XDR by Palo Alto Networks Competitors

Symantec Endpoint Security vs Malwarebytes Teams

Compared 7% of the time

Trellix Endpoint Security Platform vs Malwarebytes Teams

Compared 6% of the time

Microsoft Defender for Endpoint vs Malwarebytes Teams

Compared 6% of the time

CrowdStrike Falcon vs Malwarebytes Teams

Compared 6% of the time

Kaspersky Small Office Security vs Malwarebytes Teams

Compared 2% of the time

More Malwarebytes Teams Competitors

CrowdStrike Falcon vs SentinelOne Singularity Endpoint

Compared 4% of the time

Microsoft Defender for Endpoint vs SentinelOne Singularity Endpoint

Compared 3% of the time

Fortinet FortiEDR vs SentinelOne Singularity Endpoint

Compared 3% of the time

Trellix Endpoint Security Platform vs SentinelOne Singularity Endpoint

Compared 3% of the time

Darktrace vs SentinelOne Singularity Endpoint

Compared 2% of the time

More SentinelOne Singularity Endpoint Competitors

Product Reports

Cortex XDR by Palo Alto Networks

October 2026

Download Cortex XDR by Palo Alto Networks product report

Malwarebytes Teams

Download Malwarebytes Teams product report

SentinelOne Singularity Endpoint

Download SentinelOne Singularity Endpoint product report

Also Known As

Cyvera, Cortex XDR, Palo Alto Networks Traps

No data available

Sentinel Labs, SentinelOne Singularity, Singularity Platform

Overview

Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.

Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.

What are the key features of Cortex XDR?

Advanced Threat Detection: Uses AI and machine learning for proactive threat identification.
Multi-layered Security: Combines various security measures for comprehensive protection.
Endpoint Protection: Safeguards against malware and exploits.
Behavioral Analysis: Monitors suspicious activity for early detection.
Automatic Threat Response: Automates responses to neutralize threats.

What benefits should users expect?

Ease of Use: Simplifies security management with intuitive design.
Resource Efficiency: Minimizes impact on system resources.
Integration Capabilities: Works well with existing security setups.
Reduced Analyst Workload: Automates processes to decrease manual intervention.

Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.

Palo Alto Networks

Malwarebytes Teams provides advanced threat protection and efficient detection and removal capabilities, featuring cloud-based management and robust endpoint security. It operates on Windows and Mac, emphasizing threat interception and the cloud-management interface.

Offering comprehensive protection, Malwarebytes Teams is recognized for its customizable and user-friendly interface. The anti-exploit feature effectively intercepts threats in Office applications, while frequent updates maintain security standards. Efficient scanning, threat response, and rollback features are highly valued, as is its ability to integrate seamlessly into diverse environments. Remote accessibility and cloud management enhance its robust endpoint protection.

What are the key features of Malwarebytes Teams?

Comprehensive Threat Protection: Advanced detection and removal for malware.
Cloud-Based Management: Manage security conveniently from the cloud.
Anti-Exploit Feature: Protects against threats in Office applications.
Efficient Scanning: Quick and effective threat detection.
Threat Response and Rollback: Swift response with rollback capabilities.

What benefits and ROI should users look for?

Enhanced Security: Continuous updates and strong endpoint protection.
Integration Flexibility: Works well with existing environments.
Reporting Capabilities: Offers effective reporting and monitoring.
Remote Accessibility: Manage security from any location.

Malwarebytes Teams is widely implemented in cybersecurity across industries for endpoint security. Organizations deploy it for malware detection, intrusion protection, and compliance scanning, relying on its antivirus capabilities and ransomware rollback. It serves as a secondary tool alongside primary systems to enhance security on both Windows and Mac environments, particularly valued for monitoring usage behaviors without controlling endpoints.

Malwarebytes

SentinelOne Singularity Complete is an advanced endpoint security platform featuring centralized management across multiple locations. It leverages AI-driven behavior detection, threat prioritization, and ransomware rollback for enhanced protection and streamlined operations.

With a focus on endpoint protection, threat detection, and automated response, SentinelOne Singularity Complete provides comprehensive security through AI-powered behavioral analysis and real-time threat detection. The centralized console simplifies management, offering seamless integration and minimal system impact. Its robust reporting capabilities facilitate compliance with audit-ready reports. Lightweight agents operate across diverse environments, improving visibility and performance while curbing manual efforts. To optimize its utility, faster console load times and improved customizability in reports and dashboards are recommended. Users may benefit from smoother integration with IT tools and enhanced policy management flexibility, as well as upgraded agent processes and simplified endpoint deployment. Expanding built-in analytics and refining alert management can further heighten platform efficacy.

What are the key features of SentinelOne Singularity Complete?

AI-Powered Detection: Utilizes advanced AI to identify potential threats based on behavior.
Automatic Remediation: Automatically rectifies detected issues, reducing response times.
Ransomware Rollback: Restores data to previous states if affected by ransomware attacks.
Centralized Dashboards: Provides real-time insights through intuitive dashboards.
Threat Prioritization: Identifies and ranks threats based on potential impact.

What benefits should users look for in reviews?

Integration: Seamlessly connects with security solutions to enhance risk management.
Minimal System Impact: Operates efficiently, preserving system performance.
Enhanced Protection: Delivers robust threat defense through AI-driven technology.
Compliance Support: Offers detailed reporting for audit readiness.
User Convenience: Combines autonomous decision-making with an intuitive interface.

In various industries, SentinelOne Singularity Complete is implemented for endpoint protection and incident management. Companies rely on it for its real-time threat detection and automated response capabilities, ensuring compliance and reduced manual intervention. Its adaptive nature supports diverse environments, enhancing operational efficiency.

SentinelOne

Sample Customers

CBI Health Group, University Honda, VakifBank

Knutson Construction

Havas, Flex, Estee Lauder, McKesson, Norfolk Southern, JetBlue, Norwegian airlines, TGI Friday, AVX, Fim Bank

Malwarebytes Teams vs. SentinelOne Singularity Endpoint